Most validation protocols start from the last project's template, not a requirement. Start at the URS, trace every test, and the gaps stop hiding.