Platforms, Programs, and Assets

The hierarchy

• Platform — where the program lives: a bug bounty platform, a VDP, a private engagement. One record per source of work.
• Program — a scope of testing published by an organization: the rules, the rewards, the boundary.
• Asset — one concrete thing you are testing: admin.example.com, an API endpoint, an Android app, a source checkout.

You rarely test a "program" directly. Work happens on assets, so that is where observations, components, and suggestions live.