Process

1. Intake and scope definition
2. Constraint mapping and system baseline
3. Decision path design and trade-off review
4. Client execution with oversight, or hands-on implementation when access allows
5. Verification, controls, and stabilization

1. Intake and scope definition
2. Evidence collection and chain of custody
3. System mapping and dependency analysis
4. Hypothesis formation and validation
5. Findings and recommendations

Exit conditions

• Investigation report, system map, and risk register are delivered.
• Decision owner confirms disposition of findings and the next action.

1. Confirm problem statement and constraints
2. Design options and trade-offs
3. Select decision path and stop conditions
4. Execute or oversee intervention
5. Verify outcomes and stabilize

Exit conditions

• Selected decision path is implemented or formally handed off.
• Stop conditions, controls, and responsible owner are documented.

1. Baseline assessment
2. Scenario framing
3. Sequencing and structure
4. Risk and resilience review
5. Strategy package delivery

Exit conditions

• Strategy memo and sequenced roadmap are delivered.
• Governance owners and review cadence are agreed.

1. Discovery and assessment
2. Remediation plan
3. Implementation and change control
4. Validation and verification
5. Handover and governance

Exit conditions

• Remediation scope is implemented or handed off with a change-control owner.
• Runbooks, validation results, and operating controls are documented.

1. Asset inventory and baseline
2. Stewardship plan and escalation paths
3. Ongoing oversight and reporting
4. Periodic reassessment

Exit conditions

• Stewardship cadence, escalation paths, and reporting responsibilities are agreed.
• Retainer scope is renewed, revised, or explicitly closed at review.