Action Points:

• Pentest findings — Share the complete API vulnerability list in one go during the first phase, rather than incrementally.
• Design/Story queries — Raise any design or user story concerns immediately upon story assignment, not at the end of the sprint.
• Blockers — Connect with the respective POC immediately when a blocker is identified — don't wait for DSM.
• Upfront design — Establish clear requirements and design before development begins on SSP to avoid technical debt and rework.