<a id="ch-12"></a>

## Chapter 12 — The report is not a completed change

<!-- open-cyber-academy:lesson-figures:start ch-12 -->
### Lesson map

Lesson 12. Map, example, EX058.

```mermaid
flowchart TD
  A["Note the place and the kind"] --> B["Tell Inês the same day"]
  B --> C{"Does the file show the secret replaced?"}
  C -->|No| D["Keep the report, not a completion"]
  C -->|Yes| E["That completion is not written"]
```

A same-day report asks for a change. It is not the change.

### Logical drawing

```text
record
    where the sticky note was
    that it is a password
    not the password
report
    Inês, the same day
not in the file
    the new secret
    removal of the note
    a date for the change
```
<!-- open-cyber-academy:lesson-figures:end ch-12 -->

### Learning outcomes

After this chapter, you should be able to:

1. Keep the report of the sticky note.
2. Keep the password itself unwritten.
3. Leave the replacement unfinished in the file.

### 12.1 Telling Inês starts the fix. The file does not finish it.

If Leo finds a password on a sticky note, he records the place and the kind of secret, not the characters, and tells Inês the same day so it can be changed. The worked example says he reports the note. The staff summary lists that sticky note among the three findings. What the book never shows is the replacement: no new secret, no statement that the paper is gone, and no date for the change. The place itself is not printed, so a later page cannot invent "the circulation desk" or any other spot. A classmate who writes the password "just this once" spreads the secret the rule was written to stop. A classmate who writes "already changed" closes an action the file left open. The report stands. The completion does not.

### 12.2 Worked example

| What someone cites | What the file holds | Decision |
|---|---|---|
| Place and kind | The recording rule | Keep both, without the secret |
| Report to Inês | The worked example | Keep the report |
| A replaced password | Not shown | Leave it open |
| A named location | Not printed | Refuse |

> **Synthetic case.** No password characters and no room name are added.

### Errors and limits

An open change is still an open change. The report does not become a failure because the replacement is undated.

### Apply

- **EX058 — Already changed?** Leo reported a sticky-note password by place and kind, not by value. The summary lists the finding. May the leaving note say the password was written down and has already been changed? *Rubric:* 3 = no; the password stays unwritten; the place stays unnamed; the report stays; the replacement is not shown; do not invent a date;; 2 = the report stays and the change stays open;; 1 = one limit;; 0 = none.

<!-- open-cyber-academy:chapter-navigation:start ch-12 -->
### Continue studying — lesson 12 (chapter 12 of 20)

[← Chapter 11](#ch-11) · [Course chapter index](../SUBJECTS.md) · [Chapter 13 →](#ch-13)

Continue to the next authored lesson.
<!-- open-cyber-academy:chapter-navigation:end -->

## Worked answers

<a id="answer-ex058"></a>
**EX058.** No. The password stays unwritten and the place stays unnamed. The report to Inês stays. The replacement is not shown.
