Critical assumption map
What must remain true for the technical conclusion to hold.
Architecture, interfaces, critical dependencies and failure scenarios—organised around the next decision.
What must remain true for the technical conclusion to hold.
Where normal subsystem behaviour creates a system-level risk.
Which test can most usefully change the decision—and why.