## Chapter 10 — The policy review has no recorded result ### Lesson map Lesson 10. Map, example, EX056. ```mermaid flowchart TD A["The note allows a policy review"] --> B["The note forbids trying passwords"] B --> C{"Is a pass or a fail filed?"} C -->|No| D["Leave the result blank"] C -->|Yes| E["That grade is not among the findings"] ``` Permission to look is not a grade, and it is not permission to guess. ### Logical drawing ```text allowed read the e-book password-policy page forbidden try passwords staff findings sticky note, expiry calendar, warning advice no policy pass and no policy fail ``` ### Learning outcomes After this chapter, you should be able to: 1. Keep the policy review inside the signed note. 2. Keep password guessing outside it. 3. Leave the review without a pass or a fail. ### 10.1 An allowed look is not a score. The signed note lets Leo review whether the e-book account page uses a strong password policy. The same note forbids trying passwords. When he writes the staff summary, the three earlier findings are the sticky note, the expiry calendar, and the advice not to click through certificate warnings. A policy grade is not one of them. No minimum length, no lifetime, and no screenshot of the page is in the file. A classmate who marks the policy "strong" is filling a blank. A classmate who tries a member password "to see" has left the note. Leo may say the review was permitted. He may not say how it came out. ### 10.2 Worked example | What someone cites | What the file holds | Decision | |---|---|---| | Review the password policy | Inside the note | Keep the permission | | Try passwords | Outside the note | Keep the ban | | Three findings in the summary | No policy grade | Leave the grade unwritten | | "The policy passed." | Not recorded | Refuse | > **Synthetic case.** No minimum length is invented for the e-book page. ### Errors and limits A blank grade is still a blank. It is not a quiet pass and not a quiet fail. ### Apply - **EX056 — Did the policy pass?** Leo was allowed to review the e-book password policy and forbidden to try passwords. The staff summary lists three findings and no policy grade. What result do you record? *Rubric:* 3 = no pass and no fail is in the file; the review stays allowed; trying passwords stays forbidden; do not invent a length or a screenshot;; 2 = the grade stays blank;; 1 = one boundary;; 0 = none. ### Continue studying — lesson 10 (chapter 10 of 20) [← Chapter 09](#ch-09) · [Course chapter index](../SUBJECTS.md) · [Chapter 11 →](#ch-11) Continue to the next authored lesson. ## Worked answers **EX056.** No pass and no fail is recorded. Looking at the policy page stays allowed. Trying passwords stays forbidden. Do not invent a length.