---
name: impact-assessment
location: .haiku/intents/{intent-slug}/stages/post-exploitation/artifacts/
scope: intent
format: text
required: true
---

# Impact Assessment

Full scope assessment of what an attacker could achieve through each access chain.

## Expected Artifacts

- **Access scope** -- maximum access level achieved and data categories exposed per access chain
- **Lateral movement paths** -- potential pivot paths with required credentials and access levels
- **Privilege escalation** -- starting access, technique used, and resulting access with evidence
- **Data exposure analysis** -- accessible data categorized by sensitivity

## Quality Signals

- Impact assessment documents the full blast radius of each access chain
- At least 3 lateral movement paths are mapped with required credentials
- Privilege escalation paths are documented end-to-end
- All post-exploitation activity stayed within scope
