Section 1

Map the routine flow

Section 2

Make the handoff visible

Section 3

Mark the boundary

Section 4

Test without sensitive data

Decision record

Close the loop