Plan penetration tests with evidence at each stage.
Recent revisions are kept. Restoring one creates a new revision.