exploratory-test-charter

Exploratory Test Charter Skill

Exploratory testing finds the bugs scripts don't — but only when it's chartered: a clear mission, a defined

area, and a timebox, so it's purposeful and you can report what was covered. This skill writes session-based

charters that point skilled testing at the riskiest areas, with the tactics and oracles to know when something

is wrong.

Working from a brief

Given "explore the new checkout flow", write the charters anyway — infer the risk areas, useful tactics,

and oracles, labelling assumptions. Prioritise by risk. Never hand back a question instead of charters.

Required Inputs

Ask for these only if they aren't already provided (else infer and label):

• The target — the feature/area and what it does.
• Risk & concerns — what's new/changed, what's complex, and where failure would hurt most.
• Context — users, platforms, data, and integrations involved.
• Time available — to size and prioritise the sessions.

Output Format

Exploratory Testing Charters: [feature]

Risk overview — the few areas most worth exploring and why (new, complex, high-impact, historically buggy).

Charters — one per focused session (Session-Based Test Management style):

> Charter: Explore [area] using [tactics/data] to discover [information about risk].

> - Areas / things to cover: the specific surfaces, flows, inputs, states.

> - Test ideas & tactics: how to probe it — boundary values, interruptions, bad data, concurrency, navigation, roles/permissions, network conditions, etc.

> - Oracles (how you'll know it's wrong): the spec, consistency, comparable products, user expectations, "would a user be annoyed?".

> - Timebox: ~60–90 min (short/long), priority.

> - Data / setup needed.

Provide 3–6 charters, prioritised by risk.

Reporting — what to capture per session: bugs found, areas covered vs. not, new risks/questions, and follow-up charters.

Quality Checks

• [ ] Each charter has a clear mission (explore X to discover Y about risk Z) — not "test the app"
• [ ] Charters are prioritised by risk, with the rationale stated
• [ ] Test ideas/tactics are concrete (boundaries, interruptions, bad data, roles…), not generic
• [ ] Oracles are named so the tester can recognise a problem
• [ ] Sessions are timeboxed and sized to the available time
• [ ] A lightweight reporting structure (coverage + findings) is included

Anti-Patterns

• [ ] Do not write "explore the feature" with no mission, areas, or oracles — that's aimless clicking
• [ ] Do not skip prioritisation — explore the riskiest areas first
• [ ] Do not turn charters into scripted step-by-step cases — exploration needs freedom within focus
• [ ] Do not omit oracles — without them a tester can't tell right from wrong
• [ ] Do not leave sessions open-ended — timebox them so coverage is accountable

Based On

Session-Based Test Management (exploratory testing) — chartered, risk-prioritised, timeboxed sessions with explicit tactics and oracles.