$for(css)$ $endfor$ $for(header-includes)$ $header-includes$ $endfor$ $-- Cover is built from METADATA, never from the body. The report Markdown must $-- not carry its own cover block (see README — "The metadata contract"). $if(client)$
$if(logo)$$endif$
SnowOps

$if(eyebrow)$$eyebrow$$else$Cloud Posture Discovery Audit$endif$

$if(title)$$title$$else$Cloud Posture Discovery Audit$endif$

Prepared for $client$

$if(sample)$
Illustrative sample — not a real environment

Every organisation name, identifier, count and finding in this document is synthetic, created to show the shape of the deliverable. It is not any client's posture, and nothing here was collected from a real tenant.

$endif$
$if(scope)$
Scope
$scope$
$endif$ $if(date)$
Report date
$date$
$endif$ $if(auditor)$
Auditor
$auditor$
$endif$ $if(access)$
Access held
$access$
$endif$ $if(runid)$
Run ID
$runid$
$endif$ $if(window)$
Audit window
$window$
$endif$

Read-only by contract. This assessment held Reader + Security Reader access only — no write permission and no key-listing. Nothing in the environment was changed. The credential was time-boxed and federated, no secrets left the tenant, and the run is logged immutably. This report was reviewed by a human before delivery.

$if(confidential)$ Confidential — prepared for $client$ $endif$
$endif$ $body$