pentesting documentation

Label Kioptrix findings by evidence status rather than scanner output alone. Use the transition record to retain prior reasoning, define what changes a status and distinguish demonstrated impact from untested consequences.