# Updated via Autotest Editor - 2026-05-25T21:52:11.924Z
# Source of truth: this YAML file

id: core-features-write-analysis_of_new_security_risks
module: core
group: core-features
title: Identify, analyse, and document new security risks introduced by features in this release
description: Identify, analyse, and document new security risks introduced by features in this release
priority: Medium
tags: []
references: []
dependencies:
  - label: Admin Portal
    value: https://pbx.local:4443 (configure via $BASE_URL)
  - label: Repository URL
    value: ${BASE_URL}/downloads or $REPO_URL
  - label: Protocol
    value: HTTPS (admin portal) + optional SSH/CLI
  - label: Credentials
    value: Admin user with sufficient privileges (portal + SSH where needed)
  - label: Test Data
    value: Clean test tenant or lab PBX instance (recommended isolated environment)
preconditions: []
postconditions: []
steps:
  - action: Open admin portal or repository URL in browser context
    expected: ''
  - action: Execute the main verification or configuration action described in the test
    expected: ''
  - action: Capture evidence (screenshot, log, API response)
    expected: ''
  - action: Assert expected outcome
    expected: ''
automation_status: manual
file: tests/core/features.spec.ts
custom_fields:
  original_action: write
  manualReason: Security risk analysis requires expert threat modelling, source code review, and human judgment
automatable:
  - Most UI-driven configuration and verification steps via Playwright
notYet:
  - Security risk analysis requires expert threat modelling, source code review, and human judgment
