Test a clean activation path
Create a fresh account, add one safe site, connect only the data you can verify, run a baseline, and reach the first affected URL. Record friction, unclear language, and the first moment the product becomes useful.
Test permission and plan boundaries
Open locked pages, attempt direct actions, and confirm that restricted runs do not call providers. Repeat key work as owner, admin, member, and viewer when those roles are in scope.
Test recovery
Interrupt a crawl, disconnect an integration, retry a failed tool, revisit skipped onboarding, reset a password, and open an older saved thread. The expected state and recovery action should remain clear.
Send actionable feedback
Include page, device class, viewport, browser, local time, steps, expected result, actual result, and a screenshot when helpful. Remove private customer data and all credentials.