How to red-team an LLM application: scope, frameworks (OWASP, NIST), metrics (ASR, false refusals), open-source scanners and a reporting template. Defensive use only.