# Project Evidence Record — <Project Title>

> Template from paulturnercyber.com. Copy one record per project.
> Every statement below should be checkable by someone who was not present.

| Field | Value |
|---|---|
| Project ID | `kebab-case-id` |
| Category | Cloud & Identity / SOC & IR / Network & Systems / OT & Industrial / Governance & Evidence / Secure Web & Small Business |
| Status | Completed · In Progress · Planned · Research |
| Simulation? | Yes / No. If yes, describe what is fictional. |
| Started | YYYY-MM (only once work actually starts) |
| Completed | YYYY-MM (only once results and evidence exist) |

## 1. Objective
What risk does this project reduce, or what capability does it demonstrate? One or two sentences.

## 2. Environment
Where the work runs: hardware, accounts, networks. Confirm isolation from production and third parties.

## 3. Architecture
Describe the design, and link a diagram (`/evidence/<id>/architecture.png`). Use sanitized addressing.

## 4. Tools
List each tool with its version.

## 5. Configuration (sanitized)
```text
Paste only sanitized excerpts. Remove secrets, keys, tokens, account IDs, ARNs,
real public IPs, usernames, and personal data. Use RFC 1918 / RFC 5737 addresses.
```

## 6. Implementation steps
1. …
2. …

## 7. Test procedure
Write this **before** testing. State the expected result for each test.

| # | Test | Expected result |
|---|---|---|
| 1 | | |

## 8. Results
What actually happened, including failures and partial results. Do not round up.

| # | Observed result | Pass / Fail | Evidence reference |
|---|---|---|---|
| 1 | | | E-1 |

## 9. Evidence artifacts
| Ref | Artifact | Location | Sanitized? |
|---|---|---|---|
| E-1 | Screenshot / export / log excerpt / report | link | Yes |

## 10. Lessons learned
What would you change? What surprised you?

## 11. Mapping
- NIST SP 800-53 Rev. 5 controls:
- NIST CSF 2.0 outcomes:
- Competencies demonstrated:
- Relevant role families (for example SOC analyst, cloud security engineer):

## 12. Repository
Public repository URL, or "None". Never use a placeholder link.

---
**Status rule:** a record may be marked *Completed* only when sections 8 and 9 contain real results and at least one published artifact.