Action Points:
- Pentest findings — Share the complete API vulnerability list in one go during the first phase, rather than incrementally.
- Design/Story queries — Raise any design or user story concerns immediately upon story assignment, not at the end of the sprint.
- Blockers — Connect with the respective POC immediately when a blocker is identified — don't wait for DSM.
- Upfront design — Establish clear requirements and design before development begins on SSP to avoid technical debt and rework.