Confidential · Tender TU-202606-100447 · Draft, Updated Until Submission · Forvis Mazars × TPO Management Services

Confidential · Response to Tender TU-202606-100447

Digital Manpower Augmentation

A Master Services Agreement response for IT digital skills, staff augmentation, specialist consulting, project delivery support and managed workforce services. A talent pool that connects strategy to execution, where every professional is augmented by an AI delivery platform.

Staff augmentation when you need people. Fixed price when you buy outcomes. One governed framework for both.
×
Contents

How this response is structured

Six chapters, answering the SOW in the Authority's own order and language.
1.The Mandate: what the Authority is establishing, and our reading of it
2.The Position: a talent pool that connects strategy to execution, augmented by AI
3.The Operating Model: all six commercial models answered, hybrid recommended
4.Talent and Mobilization: capability areas, seniority framework, controlled lifecycle
5.Governance and Compliance: cadence, KPI alignment, security, employment compliance
6.Commercial Framework: rate card, packages, ceiling, programme and submission
How to read this deck

A compliance-first response, structured around the SOW

Every section of the SOW has a home here. Every commitment is one we already operate.
What is in here

Structure, commitments, numbers

  • A direct answer to each of the six commercial models, with the exact response elements listed in SOW §9.1.
  • A role and seniority catalogue, mobilization SLAs, and replacement terms we are ready to contract.
  • KPI commitments written against the Authority's own Performance Evaluation Certificate.
  • A commercial framework in AED with a hard annual ceiling and no minimum volume commitment.
Our principles

How we answered

  • Terms and conditions of the RFP are accepted without exception; we do not negotiate in a tender response.
  • We only propose delivery patterns we run ourselves today, including the platform this portal runs on.
  • Where the SOW asks for a recommendation, we recommend and explain the trade-offs behind it.
  • No cost component is ever charged twice, under any model or combination of models.
01
The Mandate
The Mandate · What the Authority is establishing

A governed framework, activated Work Order by Work Order

The MSA authorizes nothing by itself. Every engagement starts with an approved Work Order, by design.

The Authority is procuring a governed framework: commercial models, rate cards, onboarding controls, security requirements and performance obligations that turn future resource needs into controlled, auditable call-offs.

The framework

What the MSA establishes

  • Six commercial models: Cost Plus, FTE / Fixed Monthly, T&M, Fixed Price, MSP (optional) and Rate Card / Hybrid.
  • A pre-approved rate card and transparent cost-plus schedules for fast, controlled call-off.
  • Work Orders, Resource Orders, Task Orders and Service Schedules as the only mobilization mechanism.
  • Initial term of 12 months with options to extend.
The environment

Where it operates

  • Government-controlled, security-sensitive, on-premises first.
  • Delivery onsite at Authority premises in Abu Dhabi by default; remote or hybrid only with explicit written approval.
  • The vendor acts as a controlled extension of the Authority IT function while carrying full employment administration.
  • Variable demand: embedded resources, short-term specialists, project deliverables, urgent replacement capacity.
The Mandate · Our reading

The SOW is a design brief, and it asks for judgment

"Bidders shall not only submit rates. Bidders shall recommend the most suitable operating model." We take the Authority at its word.
What good looks like

The Authority's acceptance criteria

  • MSA terms, rate cards, commercial models and governance approved by the Authority.
  • Mobilization only under approved Work Orders; billing only after completed screening, security and onboarding.
  • Timesheets, attendance, deliverables and monthly reports approved per the MSA.
  • Replacement, offboarding, knowledge transfer and access revocation completed, with no open critical issues.
Our answer in one line

What we recommend

  • Spine: Rate Card / Hybrid MSA with controlled Work Orders, so call-off is fast and pre-priced.
  • People (staff augmentation): FTE for stable seats, T&M for variable demand, Cost Plus open-book for scarce or Authority-nominated profiles.
  • Outcomes (fixed price): Fixed Price packages with a discovery-first doctrine, plus productized accelerators.
  • MSP: an optional tower, priced and KPI-gated, activated only by Work Order.

One framework, absorbing both worlds.

Long-term embedded capacity and outcome-based delivery live under the same governance, the same reporting and the same ceiling, so the Authority chooses the model at each Work Order.

02
The Position
The Position · The augmented manpower thesis

Digital manpower should arrive augmented

The tender is called Digital Manpower Augmentation. We deliver it literally: every person mobilized comes with an AI delivery platform behind them.
The market default

What staffing vendors field

  • A CV that matches keywords, mobilized alone.
  • Productivity bounded by the individual: their templates, their memory, their habits.
  • Knowledge leaves when the person leaves.
  • Quality depends on who you happened to get.
What we field

Augmented professionals

  • Every professional ships with our AI delivery platform behind them: accelerators, structured methods, reusable assets.
  • Output is versioned, reviewed and documented by default, so knowledge stays with the Authority.
  • Replacements inherit the full working context: history, decisions and assets.
  • A single hire arrives with the platform's accelerators and assets from day one.

Strategy to execution, without the usual gap.

Because the same pool spans advisory, architecture and engineering, the person who frames the target operating model can be backed, same week, by the people who build it. The work moves without a handoff between firms.

The Position · The audit mindset

Your control regime is our native discipline

Open-book costing, evidence-based billing, approval trails, segregation of duties: the SOW describes how an audit firm already works.
Audit DNA

What it means in delivery

  • Every figure traceable to evidence: timesheets, acceptance records, cost build-ups.
  • Working-paper discipline: decisions, assumptions and exceptions documented as we go.
  • Independence culture: we tell you when a Work Order should not be Fixed Price, or when a cheaper model fits better.
  • Long-cycle trust: audit relationships renew for decades because the controls hold up, engagement after engagement.
Mapped to the SOW

Where it lands in this MSA

  • Cost Plus §5.1: open-book is our default posture on every engagement. Every line marked actual, provisioned, amortized, one-time or fee-included.
  • Governance §8: the monthly report is a controls artefact: resources, pipeline, risks, SLA performance, financial consumption.
  • Invoicing §11: invoices only against approved Work Orders, approved timesheets, accepted deliverables. This matches our own internal control standards.
  • KPIs: we accept being scored on your certificate, category by category.
The Position · Productized services

Bespoke solutions that combine product and services

Under an outcome-based delivery model: fixed boxes, published prices, acceptance criteria, and product assets the Authority keeps.

Beyond seats and days, we productize recurring needs into packages with a defined outcome and a fixed price. Each package is a Fixed Price Work Order the moment you sign it, and each leaves a reusable product asset behind.

Accelerators

Mission Portal Accelerator

A secured, password-gated portal for any Authority mission: documents, decks, analytics, collaboration. Deployed in weeks, reusable across programmes. This response portal is one.

Delivery packages

Augmented Delivery Pod

A named three-person pod (designer, architect, engineer) wired into the platform, sold as a fixed 12-week box. Scope floats inside the box; the price does not.

Assessments

Fixed-scope assessments

Target Operating Model and Data Quality assessments with fixed prices, fixed timelines and fixed acceptance criteria. Ideal first Work Orders: small, dated, measurable.

Why this matters to the Authority.

Productized services convert vendor effort into Authority capability. Each engagement leaves you with assets: portals, playbooks, pipelines and documentation that remain yours after the Work Order closes.

The Position · Live demonstration

This portal is a working sample of augmented delivery

A working product, built by the augmented workflow we are proposing to supply.

This response, the deck you are reading, the documents behind it and the portal serving them were produced by our own professionals working with BOB, our internal AI platform, in days rather than weeks. The same leverage mobilizes for your Work Orders.

What you are looking at

Built as a product

  • Secured portal: server-side login, domain allow-list, analytics, structured content surfaces.
  • The full tender dataroom converted to structured, queryable documents.
  • Deck, response documents and commercial model generated from one governed content spine.
How it was produced

The augmented workflow

  • Content structured as versioned modules, tracked and searchable.
  • Every change reviewed and tracked: pull requests, history, accountability.
  • AI agents draft; our professionals direct, review and approve.
  • This is the delivery model each augmented professional brings to your premises.
03
The Operating Model
The Operating Model · Two modes, one framework

Staff augmentation for people. Fixed price for outcomes. One MSA for both.

The Authority chooses the mode per Work Order. Governance, reporting, security and the annual ceiling stay identical either way.
MODE A · STAFF AUGMENTATION T&M · daily and hourly rates against approved timesheets FTE / Fixed Monthly · dedicated seats, all-inclusive rate Cost Plus open-book · scarce or nominated specialists MODE B · MANAGED OUTCOMES Fixed Price Work Orders · scope, milestones, acceptance Delivery packages · pods, portals, assessments Outcome-based · you pay for accepted results APPROVED WORK ORDER scope · model · rates · security no work, no billing without it ONE GOVERNANCE · Weekly, monthly, quarterly reviews · Monthly management report · KPI scoring on your certificate · Security and access controls · Evidence-based invoicing · Annual ceiling, AED 12,643,680 · No minimum volume commitment · No duplicate charging, ever · Full artefact ownership retained
The Operating Model · SOW §5 and §9.1

All six commercial models, answered as asked

The SOW's Commercial Response Template, row by row. Full detail in Volume II of the response documents.
ModelWhat the Authority asked forOur answer
Cost Plus Open-book cost build-up: salary, statutory costs, benefits, margin, exclusions, total monthly cost Full open-book template, single 18% management fee on the approved cost base, every line marked by nature, evidence on request
FTE / Fixed Monthly Role, seniority, fixed monthly rate, included benefits, minimum term, replacement terms, notice period Six-band catalogue, all-inclusive monthly rates, 3-month minimum term, 30-day notice, replacement in 15 business days with interim cover in 5
T&M Hourly rate, daily rate, minimum billing unit, approval process, cap, timesheet method Published hourly and daily rates, half-day minimum unit, weekly timesheets with monthly approval, optional per-WO monthly cap
Fixed Price Scope, deliverables, milestones, payment triggers, assumptions, exclusions, acceptance criteria Discovery-first doctrine, package catalogue with published prices, milestone payments on acceptance, delay remedy mechanism included
MSP (optional) Managed spend definition, MSP fee, governance scope, reporting, no duplicate charging, supplier management Tiered fee, 6% / 5% / 4% by managed spend, S / M / L service packages, KPI-gated continuation, fee capped inside the MSA ceiling
Rate Card / Hybrid Role bands, rate validity, escalation cap, call-off process, hybrid charging rules Recommended spine. Six bands in AED, rates firm for the initial term, call-off in days via Work Orders, hybrid rules with a no-duplicate-charging guarantee
The Operating Model · Staff augmentation in detail

Cost Plus for transparency, FTE for predictability

Two staff-augmentation instruments, both evidence-based, both interview-approved by the Authority before anyone mobilizes.
Cost Plus · SOW §5.1

Open book with a single management fee

  • Approved salary or resource cost, plus statutory costs, benefits and approved pass-throughs at actual.
  • A single 18% management fee on the approved cost base. Nothing else is margin-bearing.
  • Monthly breakdown: salary, statutory, benefits, visa and permits, insurance, leave and gratuity provisions, one-time costs, fee.
  • Each line marked: actual, provisioned, amortized, one-time, reimbursable or fee-included.
  • Preferred for rare skills, Authority-nominated resources and long embedded roles.
FTE / Fixed Monthly · SOW §5.2

Dedicated seats, all-inclusive rates

  • Catalogue across six bands, Junior to Advisory, each with defined skills, certifications and mobilization timelines.
  • Monthly rate includes employment, mobilization, payroll, WPS, benefits, administration and vendor management.
  • Minimum term 3 months. Notice 30 days. Mobilization 2 to 6 weeks depending on seniority and visa status.
  • Replacement in 15 business days, interim cover in 5, at no additional cost when the cause is ours.
  • Leave coverage planned per seat; no billing for absence beyond approved leave.
The Operating Model · Fixed price in detail

Fixed Price with a discovery-first doctrine

We only sign Fixed Price on defined scope. When scope is fuzzy, a two-week Discovery Sprint defines it, then we commit.
PackageModePrice (AED)What the Authority buys
Work Order Discovery Sprint Fixed Price · 2 weeks 88,000 Scope boundaries, deliverables, milestones, acceptance criteria and risks, producing a signable Fixed Price Work Order or a clean no-go
Augmented Delivery Pod · Quarter Fixed Price · 12 weeks 1,260,000 Named three-person pod (designer, architect, engineer) with platform leverage; scope floats inside the box, price does not; evidence-gated increment accepted under Work Order criteria
Mission Portal Accelerator Productized service 315,000 A secured mission portal: auth, analytics, documents, deck and collaboration surfaces on managed infrastructure, reusable across programmes
Target Operating Model Assessment Fixed Price · 18 days 106,000 Structured operating-model review: interviews, evidence pack, gap analysis, roadmap accepted against fixed criteria
Data Quality Assessment Fixed Price · 30 days 126,000 Data quality baseline on agreed sub-scopes: profiling, lineage, controls and a prioritized remediation backlog

Delay remedy included, as the SOW requires.

Each Fixed Price Work Order carries milestone-based payment triggers and a delay remedy for unjustified vendor delays, excluding Authority dependencies, approved scope changes and force majeure. Accountability is priced into every package from the start.

The Operating Model · MSP, optional tower

Managed Service Provider, an optional tower activated by Work Order

If the Authority wants centralized workforce governance across suppliers, the tower is ready. It activates only by Work Order.
Small

Up to AED 5M managed spend

Fee 6% of approved third-party managed spend. Core governance: supplier onboarding, rate compliance, consolidated timesheets and reporting.

Medium

AED 5M to 15M

Fee 5%. Adds SLA monitoring across suppliers, replacement coordination, workforce dashboards and quarterly supplier performance reviews.

Large

Above AED 15M

Fee 4%. Full vendor-management office: demand planning, category strategy, escalation desk and continuous rate benchmarking.

Fee discipline

  • Minimum annual fee AED 630,000; capped at AED 1,680,000 inside the overall MSA ceiling.
  • Managed spend excludes VAT, penalties, hardware, software, approved reimbursable travel and one-time government charges.
  • The MSP fee never duplicates charges already included in direct resource rates.

KPI-gated continuation

  • Measurable thresholds: SLA achievement, response, fulfilment, backlog, availability, reporting quality, satisfaction, compliance.
  • Repeated unjustified failure triggers service credits, corrective plans, suspension or termination of the tower.
  • Continuation is reviewed quarterly against these thresholds.
04
Talent & Mobilization
Talent & Mobilization · SOW §6.1

Ten capability areas, one accountable pool

Every area staffed from the same governed talent pool, so multi-disciplinary Work Orders never mean multi-vendor coordination.

Application Development

Backend, frontend, full stack, low-code, mobile

Quality Engineering

Manual QA, automation, SDET, SIT and UAT support

Integration & DevOps

APIs, middleware, CI/CD, Kubernetes, release support

Data & Analytics

Data engineering, BI, architecture, dashboards, platforms

Business Analysis & Product

Requirements, product ownership, process mapping

Infrastructure & Datacenter

Systems, virtualization, Nutanix, storage, network, DR

Cybersecurity

IAM, SOC, security engineering, vulnerability, GRC

Enterprise Applications

Oracle ERP, Odoo, Microsoft platforms, functional consulting

Design & Documentation

UI/UX, design systems, executive visualization, knowledge bases

Specialist Consulting

Enterprise, solution, security and data architecture advisory

Depth where the Authority signalled it matters.

The SOW names Oracle ERP, Odoo, Nutanix and Microsoft platforms explicitly. Our pool covers each, and our audit heritage adds a rare profile: technologists who can document, evidence and defend what they build in front of any review committee.

Talent & Mobilization · Seniority framework

Six bands, defined in the SOW's own terms

Junior to Expert/Architect as §5.2 requires, plus a partner-level Advisory band for assurance and escalation. Rates in chapter six.
BandTypical rolesMobilizationPreferred models
JuniorDeveloper, QA engineer, support engineer, technical writer2 to 3 weeksT&M / FTE
Mid-LevelFull-stack developer, business analyst, data engineer, UI/UX designer, DevOps engineer2 to 4 weeksT&M / FTE
SeniorSenior engineer, product owner, integration lead, security engineer, BI developer3 to 4 weeksT&M / FTE / Cost Plus
LeadDelivery lead, squad lead, forward-deployed architect, ITSM lead3 to 5 weeksT&M / Cost Plus
Expert / ArchitectEnterprise, solution, data, security and AI architects; specialist consulting4 to 6 weeksT&M / Cost Plus
Advisory (Partner pool)Partner-level assurance, architecture escalation, independent reviewDays, by call-offCall-off days

Every profile, verified before you see it

Technical screening, background verification and security pre-checks complete before CV submission. The Authority interviews, approves, rejects or requests replacement for every proposed resource. No billing before completed onboarding.

Augmentation is included in every band

Accelerators, method assets and platform support come with every band at no rate premium.

Talent & Mobilization · SOW §10

A controlled lifecycle with SLAs at every step

From requirement to offboarding, each stage is gated, evidenced and measured against the Authority's KPI form.
Requirementconfirmed Sourcing &screening CV submitted5 to 10 bd Authorityinterview Securityclearance OnboardingNDA · access Delivery &tracking Replacementif needed Knowledgetransfer Offboardingaccess revoked
CommitmentTargetMaps to Authority KPI
CV submission, standard / scarce roles5 / 10 business daysCVs submitted within SLA ≥95%
Position filled, standard / scarce roles20 / 30 business daysPositions filled within SLA ≥95%
Urgent request, first proposal48 hoursUrgent requests fulfilled ≥90%
Interim cover / permanent replacement5 / 15 business daysReplacement within SLA ≥95%
Offboarding, revocation and documented KT100% before last dayOffboarding and KT 100%
05
Governance & Compliance
Governance & Compliance · SOW §8

A fixed reporting rhythm, agreed up front

Weekly during mobilization, monthly in steady state, quarterly on request, with the management report delivered on the fifth business day of each month.
Weekly · mobilization

Operational reviews

Open requisitions, candidate pipeline, interview status, onboarding progress, blockers. Runs for every new Work Order until steady state is declared.

Monthly · steady state

Service reviews

SLA and KPI performance, attendance and leave, timesheets, replacement status, risks and issues, financial consumption against the ceiling.

Quarterly · on request

Business reviews

Trend analysis, improvement initiatives (at least two per year), rate benchmarking, demand outlook and lessons learned, documented.

The monthly management report, as specified in §8

Active resources · open requisitions · submitted candidates · interview status · mobilization status · attendance and leave · timesheets · replacement status · issues and risks · SLA/KPI performance · Work Order status · financial consumption · security and compliance observations. One document, every month, on the fifth business day.

Governance & Compliance · The Authority's evaluation certificate

Score us on your form. We commit to every category.

Our SLAs are written against the seven categories and weights of the Digital Manpower KPI Evaluation Form, so scoring us is a matter of checking the record.
Evaluation categoryWeightOur operating commitment
1 · Governance & Management10%All governance meetings held, monthly reports on the 5th business day, 100% Work Order compliance, risks reported as they arise
2 · Resource Mobilization20%CVs in 5 to 10 business days, positions filled in 20 to 30, onboarding on schedule, replacement in 15, urgent requests proposed in 48 hours
3 · Resource Performance20%Technical competency verified pre-submission, attendance tracked daily, productivity evidenced in the monthly report, KT documented for every exit
4 · Security & Compliance15%NDA before any access, clearance before onboarding, least privilege enforced, zero-tolerance on violations, offboarding checklist 100%
5 · Commercial & Reporting15%Invoice accuracy 100%, only against approved Work Orders and timesheets, rate card compliance absolute, financial reporting monthly
6 · Continuous Improvement10%At least two improvement initiatives per year, corrective actions closed within agreed dates, lessons learned documented per Work Order
7 · Customer Satisfaction10%Quarterly satisfaction pulse, named engagement leadership accountable for the score, escalation path to partner level in one step
Governance & Compliance · SOW §7

Security defaults and employment compliance

Onsite Abu Dhabi, least privilege, NDA before access. Every benefit and statutory cost is classified before it is invoiced.
Security posture

The §7 defaults, operationalized

  • Delivery onsite at Authority premises in Abu Dhabi; remote, offshore or hybrid only with explicit written approval.
  • NDAs signed before any access to premises, systems, code, data or environments.
  • No personal devices, public repositories, unapproved SaaS or remote-access tools. No exceptions without Authority sign-off.
  • Least-privilege access, revoked immediately on role completion, replacement or termination.
  • Security compliance checklist included in every monthly report.
Employment compliance · §7.1

Benefits, classified up front

  • Included in monthly rate: visa and work permit, Emirates ID, medical insurance, leave salary, gratuity provision, payroll and WPS administration, workmen compensation.
  • Billed at actual, pre-approved: family medical insurance where approved, incoming air ticket.
  • Amortized over 12 months: annual air ticket provision.
  • Held by us: professional indemnity and general third-party liability insurance.
  • No benefit, allowance or statutory cost invoiced unless in the approved schedule or Work Order.
06
Commercial Framework
Commercial Framework · Rate card

One rate card in AED, firm for the initial term

Hourly for fragments, daily for T&M, monthly for dedicated seats. All-inclusive rates quoted onsite Abu Dhabi, with EUR reference figures at 4.20.
BandTypical rolesHourly (AED)Daily (AED)Daily (EUR ref)Monthly FTE (AED)Monthly FTE (EUR ref)
JuniorDeveloper, QA engineer, support engineer, technical writer7405,9001,405118,00028,100
Mid-LevelFull-stack developer, business analyst, data engineer, UI/UX designer, DevOps engineer8456,7501,605135,00032,150
SeniorSenior engineer, product owner, integration lead, security engineer, BI developer1,0008,0001,905160,00038,100
LeadDelivery lead, squad lead, forward-deployed architect, ITSM lead1,1108,8502,105177,00042,150
Expert / ArchitectEnterprise, solution, data, security and AI architects1,26510,1002,405202,00048,100
Advisory (Partner pool)Partner-level assurance, architecture escalation, independent review1,47511,8002,810Call-off daysCall-off days

Reading the card

Monthly FTE assumes 20 billable days, all employment and management costs included. Hourly applies only to T&M fragments under one day, minimum unit half a day; full days bill at the daily rate. EUR figures are indicative references at AED 4.20 per EUR 1.00; invoicing is in AED only.

Rate integrity

Rates are firm for the initial 12-month term, in UAE Dirhams, with no currency or inflation adjustment, as the RFP requires. Any future escalation is capped and negotiated at extension, never applied unilaterally.

Commercial Framework · The envelope

A hard ceiling, no minimum, full payment-term compliance

The Authority gets certainty in both directions: spend can never exceed the ceiling, and nothing is owed for capacity you do not call.
Proposed maximum annual fees AED 12,643,680 Across all Work Orders under the MSA · excluding VAT · Form of Tender figure
Minimum volume commitment AED 0 Pay only for approved Work Orders, approved timesheets and accepted deliverables

RFP terms, accepted without exception

  • Payment within 30 days of correct invoice submission.
  • 10% retention: 5% released at primary handover, 5% after the one-year Defects Liability Period, applied to fixed-price deliverable Work Orders.
  • Advance payment, if any, under 25% and against a bank guarantee.
  • Delay penalty formula acknowledged, capped at 10% of contract value.

Offer validity and integrity

  • Offer valid and binding for 120 days from submission.
  • All figures in UAE Dirhams, stated in figures and words; words prevail.
  • Lump-sum pricing per Work Order under the framework rates.
  • Detailed breakdown (BOQ) provided for every priced package for variation-order transparency.
Commercial Framework · 12-month programme

From signature to steady state in ninety days

The detailed bar chart programme required by the RFP, at executive altitude. Full version in Volume I.
M1M2M3 M4M5M6 M7M8M9 M10M11M12 MSA execution & governance setup Rate card & templates activated Security & onboarding framework First call-offs mobilized Weekly operational reviews Steady-state delivery & call-offs Monthly reports & service reviews Quarterly business reviews Improvement initiatives (≥2 / year) Annual evaluation & renewal gate
Commercial Framework · Submission and next steps

Two sealed volumes, one compliant package

Everything the RFP and Appendix B require, mapped and accounted for. Then a signature, a kickoff, and your first Work Order.
Volume I · Technical

Sealed separately, as instructed

  • Method statement: this operating model, lifecycle and governance.
  • Detailed bar chart programme for the 12-month term.
  • Company profile, valid trade license, authorized signature, power of attorney.
  • Proposed staff organization chart and role catalogue.
  • Sample CVs for priority roles and sourcing evidence.
  • Stamped copy of the RFP.
Volume II · Financial

The Form of Tender governs

  • Form of Tender on letterhead, figure and words, signed and stamped.
  • Rate card, Cost Plus template and package catalogue in AED.
  • Benefits and statutory inclusion/exclusion schedule.
  • MSP and hybrid charging rules with the no-duplicate guarantee.
  • Detailed breakdown (BOQ) for variation orders.

After award: governance live in week one, first Work Order ready in week two.

MSA signature, governance calendar and reporting templates agreed, rate card activated, onboarding framework confirmed with Authority security, and a first call-off or Discovery Sprint issued. The framework is operational within the first month.