Pentest Workflow 2.1

Persist the operator scope declaration and target inventory. Start in eni-solo-direct-v4: take the fastest high-signal inventory, fingerprint, trust-map, and broad template-driven validation route at the highest intensity recorded in the task ledger, then move immediately into deep manual reproduction of the strongest hypotheses. Combine OWASP WSTG/ASVS coverage, Nuclei-style breadth, and proxy/browser depth. Treat scanner output as a hypothesis until reproduced. Continue through evidence, impact, root cause, remediation, re-test, and delivery; use the smallest connected detail pack for each confirmed class.