For each completed OSWP-style scenario, what minimum evidence class should appear in the professional report besides narrative steps?

For each completed OSWP-style scenario, the professional report should include screenshot evidence of key recovery and of proof retrieval for that scenario besides narrative steps. A stock photo of any access point purchased online is not scenario evidence. A one-line claim that keys were obtained with no artifacts is insufficient. Neighboring café Wi-Fi passwords captured outside the exam VPN are out of scope and unethical. Exam caveat: evidence must be the candidate's own authorized attempt and clearly tied to the scenario identifiers expected by graders. Operational check: capture recovery and proof-retrieval screenshots per scenario into the report appendix, label them, and ensure the narrative references those artifacts so a civic peer reviewer could follow the path. For municipal and campus engagements, keep the finding language tied to authorized scope, name the building or SSID class affected, and state the residual risk to residents or staff if the rejected option had been chosen. Re-validate after the next change window that the selected control still matches inventory, monitoring, and RoE abort criteria used by the city wireless program. Document the decision in the municipal engagement notes so the next assessor inherits both the technical rationale and the civic constraints that shaped it.