Methodology
Security work with a visible chain of reasoning.
Blackpine uses a consistent engagement sequence so scope, evidence, technical conclusions, and remediation decisions can be inspected by the people responsible for acting on them.
Sequence
Seven control points.
The sequence is deliberately simple. The depth changes with the engagement; the need for authority, evidence, limitations, and ownership does not.
0101 / AuthorityConfirm who can authorize the work, which systems are in scope, and what Blackpine is permitted to do.
0202 / ObjectiveDefine the decision, incident question, or assurance need the engagement must support.
0303 / EvidenceIdentify the minimum configuration, logs, interviews, artefacts, and access needed to answer that question.
0404 / AnalysisTrace control paths, test agreed assumptions, and separate observed evidence from interpretation.
0505 / FindingsWrite findings around consequence, affected systems, supporting evidence, and limitations.
0606 / RemediationPut changes in an order that reflects exposure, dependency, ownership, and practical effort.
0707 / VerificationWhere included, verify that the material change has actually altered the condition that created the finding.
Scope is part of the method.
Blackpine does not treat a broad security question as permission for unrestricted testing. Active techniques, production access, sensitive evidence, and third-party systems are agreed explicitly.