READINESS DESK / MK-RR-01 / FOUNDING SCOPE

Independent launch review独立上线评审

Before your AI agent gets more authority, find the expensive surprises.在赋予 AI 代理更多权限前,先找出代价高昂的意外。

A fixed-scope, evidence-based review for small teams moving one tool-using AI workflow toward production.面向小团队的一次固定范围、基于证据的评审,帮助一个可调用工具的 AI 工作流走向生产环境。

No production credentials required无需提供生产凭证Artifacts you choose to provide仅评审你主动提供的材料One-time · no retainer一次性 · 无长期顾问费

OUTPUT / DECISION EVIDENCE

A launch decision you can explain—not a vague security score.得到可以解释的上线决策,而不是模糊的安全分数。

01

Authority + data map权限与数据地图

A concise view of what the workflow can read, change, send, spend, delete, and disclose.清晰梳理工作流可以读取、修改、发送、支出、删除和披露的内容。

02

20-control scorecard20 项控制评分卡

A launch-oriented review across authority, boundaries, evidence, recovery, and testing.围绕权限、边界、证据、恢复和测试进行面向上线决策的评审。

03

Prioritized action plan优先行动计划

The most important fixes sequenced by exposure, effort, and verification path.依据风险暴露、实施成本与验证路径排序最重要的改进。

04

Decision readout决策解读

A plain-language walkthrough of findings, unknowns, and the conditions for a safer launch.用清晰语言解读发现、未知项以及更安全上线所需条件。

METHOD / FOUR MOVES

Bound the system. Test the claims. Prioritize the controls.界定系统。验证主张。排序控制措施。

  1. 01
    Scope范围

    Agree on one workflow, its decision, connected tools, data classes, and evidence available.明确一个工作流及其决策、连接工具、数据类别和可用证据。

  2. 02
    Inspect检查

    Review architecture, prompts and policies you choose to share, test evidence, and operating controls.评审你选择提供的架构、提示词与策略、测试证据和运行控制。

  3. 03
    Challenge质询

    Stress assumptions around approval, prompt injection, retries, privilege, evidence, and recovery.质询审批、提示注入、重试、权限、证据与恢复方面的假设。

  4. 04
    Decide决策

    Return a risk-ranked action plan and explicit conditions for launch, limited launch, or pause.交付按风险排序的行动计划,以及上线、有限上线或暂停的明确条件。

SERVICE PATH / USD

Decide, fix, and verify—without buying an open-ended engagement.决策、修复、验证,无需购买边界不明的长期项目。

Start at the stage you need. Every engagement is bounded in writing before payment or access is requested.从你需要的阶段开始。付款或请求访问权限前,每项服务都会书面界定范围。

01 / DECIDE
Fixed scope固定范围US$950

Readiness Review上线评审

Map authority, test the available evidence, rank the risks, and return an explicit launch decision for one workflow.梳理权限、验证现有证据、排序风险,并为一个工作流给出明确的上线决策。

One workflow · up to 3 connected tools一个工作流 · 最多 3 个连接工具Request this scope申请此服务范围
02 / FIX
Starting at起价US$3,500

Priority Control Sprint优先控制实施冲刺

Implement a tightly scoped set of agreed controls—such as approvals, authority boundaries, evidence capture, or recovery paths.实施一组边界清晰、双方确认的控制措施,例如审批、权限边界、证据留存或恢复路径。

Written scope after evidence review评审证据后书面确认范围Request this scope申请此服务范围
03 / VERIFY
Fixed scope固定范围US$650

Launch Verification Retest上线验证复测

Retest the agreed high-priority controls, update the evidence record, and return a revised launch decision.复测双方确认的高优先级控制,更新证据记录,并给出修订后的上线决策。

One previously reviewed workflow一个已完成前期评审的工作流Request this scope申请此服务范围

Implementation pricing depends on the agreed controls and system access. Third-party fees, penetration testing, legal opinions, and compliance certification are not included.实施价格取决于双方确认的控制措施与系统访问范围。不包含第三方费用、渗透测试、法律意见或合规认证。

FIT / BOUNDARIES

Built for a narrow decision, not an imaginary certification.服务于一个清晰决策,而不是虚构的认证。

A good fit适合

  • A prototype or pilot gaining tool access即将获得工具权限的原型或试点
  • A small team without a repeatable launch review尚无可重复上线评审流程的小团队
  • A concrete go, limited-go, or pause decision需要做出上线、有限上线或暂停的具体决策

Not included不包含

  • Penetration testing or exploit development渗透测试或漏洞利用开发
  • Legal or regulatory compliance determinations法律或监管合规结论
  • Certification, warranty, or a guarantee of safety认证、担保或安全保证

INQUIRY / NO PAYMENT YET

Describe the decision—not your secrets.描述你要做的决策,而不是你的秘密。

Send a minimal inquiry. If the review fits, you receive a written scope, evidence list, timing, and payment path. No work or payment starts from this form.发送最少必要信息。如适合评审,你会收到书面范围、证据清单、时间和付款方式。本表单不会直接启动工作或付款。

What can this workflow do?这个工作流可以做什么?

Do not include passwords, API keys, customer data, confidential prompts, or production logs.请勿填写密码、API Key、客户数据、机密提示词或生产日志。

FRAMEWORKS / PRIMARY SOURCES

The review uses public risk and security guidance as a baseline, then narrows it to the actual authority and evidence of the selected workflow.评审以公开风险与安全指南为基础,再结合所选工作流的实际权限与证据缩小范围。