Review current client facts
Client facts
Loading- 01
- OrganizationNot named
- 02
- MaturityIdea / pre-seed
- 03
- MandateInternal automation
- 04
- Timeframe30-day rollout
- 05
- Risk areas0 selected
- 06
- EngagementAutomation Feasibility Sprint
- 07
- DossierUnsaved local draft
Decision posture
Focused
Automation Feasibility Sprint is proportionate for a narrow workflow if data boundaries and human review stay limited and explicit.
Drafts stay in this browser. Scope rules run locally with no AI or background API call.
02Risk assessment
Mark the exposures that require evidence.
Select only the risks the engagement must investigate. Each selection adds a named artifact, control, discovery question, and visible weight to the recommendation.
A
Risk matrix
Selected rows become binding inputs to the live scope document.
| Include | Exposure | Severity | Evidence artifact | Control direction |
|---|---|---|---|---|
Accuracy drift Quality | 3/5 Moderate | Golden-task evaluation pack with acceptance thresholds. | Require golden tasks, reviewer sampling, drift thresholds, and launch-blocking eval gates. | |
Privacy / data retention Data | 4/5 High | Data handling review covering retention, redaction, and vendor boundaries. | Map prohibited data, retention limits, redaction ownership, and vendor logging boundaries. | |
Security / prompt injection Security | 4/5 High | Abuse-case test plan for prompt injection, tool misuse, and exfiltration paths. | Run prompt-injection abuse cases against tools, retrieval, permissions, and export paths. | |
Regulatory exposure Compliance | 5/5 Critical | Regulatory control map with sign-off owners and evidence requirements. | Name compliance owners, decision rights, evidence artifacts, and external review triggers. | |
Evaluation gaps Evidence | 3/5 Moderate | Measurement plan for offline evals, review sampling, and production monitors. | Define offline eval coverage, production monitors, sample rates, and failure triage SLAs. | |
Model / vendor lock-in Commercial | 2/5 Watch | Vendor portability memo with model fallback and cost-control options. | Document fallback models, switching costs, data portability, and degradation modes. |
Select at least one risk area for assessment.
B
Decision ledger
The recommendation is a fixed sum, shown here in full.
Company stage1Idea / pre-seed
Use case2Internal automation
Timeline130-day rollout
Stack signal0Not supplied
Selected risks00 areas
Total posture score4Focused
Recommended posture
Focused
Automation Feasibility Sprint is proportionate for a narrow workflow if data boundaries and human review stay limited and explicit.
Package rule trace
- Urgent remediation requires a Model Risk Audit.
- Growth, enterprise, score 16+, or regulatory exposure requires Governance + Eval Buildout.
- Score 11+, privacy exposure, or security exposure requires a Model Risk Audit.
- Internal automation at score 7 or below qualifies for the Automation Feasibility Sprint. Selected Automation Feasibility Sprint.
- All remaining valid briefs use the Launch Readiness Sprint.