Security Surface Checks - passive, risk-ranked, with the mis-runs named
by opaland
Run the six passive security checks a QA engineer can own - auth boundaries, IDOR, error handling, user enumeration, headers, ZAP baseline - each as a protocol with its fixture requirement and its well-known way of being run wrong, so a check that tests nothing stops looking like a pass.