Method — Evidence First

Define object, limits, authority, and stop/escalation conditions.

Record the state before intervention.

Identify realistic operational alternatives.

What can be preserved or obtained?

What can be lost?

What changes will the operator introduce?

What are the evidentiary and operational consequences?

Can the prior evidentiary state realistically be reconstructed?

Choose according to the observed state and consequences.

Record what was done and why.