Honestly none of that is a pen test under almost anybodys understanding of the word. If the request wasn't specific, you may be able to get away with arguing t

Honestly none of that is a pen test under almost anybodys understanding of the word. If the request wasn't specific, you may be able to get away with arguing that way in a court, who knows. When you tell the director it is not true, author a document that says otherwise, and then document the whole thing on the internet, by that point it is a lie not embilishment, and I'd be worried about fraud myself.