# Asset readiness checklist

A ScopeForge planning template. Completing this checklist does not authorize a scan or replace proof of control.

## Asset record

- Name:
- Owner and contact:
- Kind (application, API, repository, or service):
- Canonical target:
- Environment:
- Review date:

## Define the boundary

- [ ] Confirm your organization controls this asset.
- [ ] Record who authorized the proposed security work.
- [ ] Identify third-party services and excluded targets.
- [ ] Define the permitted activity, timing, and limits.
- [ ] Identify sensitive data that must not enter evidence artifacts.

## Register and verify

- [ ] Register the asset in the workspace.
- [ ] Follow the verification instructions shown on its detail page.
- [ ] Confirm the application reports successful verification.
- [ ] Review the controls and availability of the intended workflow.

Proof of control and permission to execute are separate. Registering an asset does not start a scan.

## Next action

- Action:
- Responsible person:
- Due date: