Agent WranglersRules of engagement Required
Log every request
Record every request the agent sends and every reply it gets, with the time.
How to do it
Send the agent's traffic through a recording proxy, or log it in the test script. Keep the log with the report. It proves what was done, and it lets the owner match the test to their own logs.
How to check
Send 10 known requests through the agent. The log holds 10 entries, each with the time, the request and the reply. Every finding in the report links to the requests that prove it.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers security testing playbook: https://agentwranglers.se/playbook/adversarial-testing/rules-of-engagement/log-every-request.