For the sponsor and the delivery teamImplementation guide
How a workflow moves from a scoped pilot to production: what has to be decided before connecting a source, who owns each step, and what the first ninety days look like when they go well.
- Scoping a first workflow and writing its acceptance criteria
- Source connection order, and what each source unlocks
- Roles: sponsor, workflow owner, entitlement holders, second line
- Change management for a team whose review process is not changing
For model risk management and validationModel-risk documentation pack
The documentation a validation team needs to open a file: what the models are used for, how outputs are constrained to retrieved evidence, how versions are registered and approved, and where the limitations are stated plainly.
- Intended use and explicit statement of limitations
- Model registry: approval status, owner, review date, and what unapproved means
- Evidence grounding — how a claim is tied to a passage, and what happens when it cannot be
- Monitoring, drift and the conditions that block a version from release
For information security, architecture and procurementSecurity review pack
The architecture and control detail a security review asks for, in the order it usually asks: tenancy and data residency, entitlement enforcement, agent identity, logging and retention, and the answers to the questionnaire you were going to send anyway.
- Tenancy, data residency and the boundary your documents never cross
- Entitlement inheritance and enforcement at query time
- Agent identity, least privilege and the limits on tool access
- Audit log contents, retention and export for examination
For whoever has to decide whether it workedEvaluation methodology
How agent output is measured against labelled cases, how thresholds are set with you rather than for you, and how a suite falling below threshold blocks a release. Written so you can run the evaluation yourself and disagree with our reading of it.
- Building a labelled case set from work your team has already reviewed
- What is scored: traceability of figures, completeness, and named exceptions
- Setting a threshold, and what happens at release when a suite fails it
- Reading a result honestly, including where the platform performs worst
EACH PACK IS SENT BY A PERSON, TO A WORK ADDRESS, IN THE VERSION THAT MATCHES YOUR DEPLOYMENT AND REGION