Public deliverables need a different standard than internal notes.
Keep the evidence
The public version should still show method, assumptions, and limitations. Removing detail should not remove accountability.
Reduce operational harm
Avoid publishing step-by-step abuse paths or live-target details. Explain the defensive lesson and the controlled setup.
Make the work reusable
Good deliverables leave readers with vocabulary, diagrams, safe examples, and questions they can apply to their own environment.