Exploratory testing dies of two diseases: sessions that wander without a mission, and discoveries that evaporate because nobody wrote them down. AI cures both — charters generated from real risk areas before you start, and a note-taker that turns your raw session stream into a debrief while your hands stay on the product.
Tier: Core · Workflow area: Test design & planning
This playbook wraps session-based test management in AI assistance at three points: charter generation from risk inputs, in-session note capture, and debrief synthesis. The touring, the curiosity, and the bug instinct remain irreplaceably yours — the craft is amplified, not delegated.
When NOT to use:
Generate charters from real inputs, not vibes. Feed the risk ranking, recent escapes, and the release diff:
Generate 6 exploratory session charters from this context:
- Risk ranking: [paste pb-06 output]
- Last 3 production escapes: [paste summaries]
- Changed in this release: [paste diff summary]
Format each charter: "Explore <target area> with <resources/personas/data>
to discover <information sought>". 60-90 minute scope each.
Vary the tour type across charters: data-entry abuse, interruption &
resume, permission boundaries, back-button & history, slow-network.
No charter may duplicate coverage the automated regression already has:
[paste suite area list].
A good charter is specific enough to start immediately:
Explore the refund flow with a partially-refunded order and an expiring
session, to discover state-consistency failures when authorization
lapses mid-operation.
Prune and claim. Cut charters that duplicate each other or chase low-value corners; assign owners and timeboxes. You should reject or rewrite at least one — a charter set you accept wholesale is a charter set you didn't read.
Capture the session as a raw stream. Work the charter; dump observations into a running note as they happen — voice-to-text, a side editor, or messages to the assistant. Don't structure while exploring; structure costs attention the product deserves:
14:12 refund partial 30 of 100, then session timeout forced — order shows
"Refunded" badge but ledger shows 70 outstanding?? screenshot 3
14:19 back button after timeout → stale form resubmits, no idempotency key?
14:26 same flow with admin role — fine. member role only.
Synthesize the debrief with the note-taker. End of session, one prompt over the raw stream:
Turn these raw session notes into a debrief:
1. CHARTER — restate; note where the session deviated and why that was
or wasn't justified.
2. BUG CANDIDATES — each with repro steps as bullets, severity guess,
and what evidence exists (screenshot #, timestamp).
3. QUESTIONS — behaviors observed that need a product-owner ruling.
4. COVERAGE — what was toured, what the charter intended but didn't reach.
5. FOLLOW-UP CHARTERS — 2-3, derived from what this session opened up.
Do not upgrade my observations into confirmed bugs. Keep my uncertainty
markers ("??") visible.
Verify before filing. Re-run every bug candidate's repro yourself before it becomes a ticket — the note-taker faithfully preserves your in-flight misreadings too. Then file through your defect flow (pb-22 turns the evidence into filed-quality reports) and bank the follow-up charters for the next session.
With Playwright MCP configured, the assistant can drive a real browser during the session — you direct the tour ("try the refund again with the network throttled") while it executes and snapshots; that variant is developed fully in pb-16.
Save every debrief in one folder and periodically ask the assistant to mine the collection — "what do my last 20 sessions keep finding, and what have I never toured?" — your own exploration history becomes the best charter generator you will ever have.