## Findings

- **{{Severity}}** ({{WSTG-INPV-13}}): {{module}} / {{category: auth | bulk | expensive | websocket | unauth-expensive | pagination}}: {{endpoint pattern}} has no {{throttle/quota/cap}}. Evidence: `{{file}}:{{line}}`. Required action: add {{specific middleware / cap / queue}}.
- {{...}}

## Open Questions

- {{omit when none}}