Agent Operations
Rules of Engagement
Also: RoE
The agreed ground rules for an authorized security test: allowed techniques, data limits, stop conditions and who to contact.
In more detail
Rules of engagement turn permission into practical limits. A short document usually states allowed and forbidden techniques, testing hours, which data may be touched, what to do on reaching a real credential or unexpected asset (normally stop and report), the contact person, and how evidence is stored.