Core guarantees
- Determinism: same input, byte-identical output.
- Traceability: claims map to path + hash + line.
- Explicit unknowns: blind spots are first-class outputs.
- Drift governance: score and gap regressions are CI-guarded.
Trust and method
SOT Navigator is built for decision-grade output under time pressure. The credibility model is simple: deterministic generation, evidence-linked claims, and explicit limits.
Principal-led delivery
Outcomes are fixed-scope artifact packs, not open-ended consulting hours.
Optional calls are for decision alignment, not to justify undocumented findings.
Teams can re-run and verify outputs against the published method and artifact contracts.
Scope qualification
| Primary buyer | Active trigger | Decision window | Fit signal |
|---|---|---|---|
| M&A diligence teams | Acquisition, investment, or technical diligence cycle | 2 to 30 days | Need independent, board-facing risk evidence |
| Security/GRC lead | SOC2/PCI/ISO/NIST/GDPR evidence pressure | 2 to 45 days | Needs deterministic traceability for audit preparation |
| CTO or VP Engineering | Board request, incident aftermath, or governance reset | 7 to 45 days | Needs decision-ready risk baseline across critical repos |
Public proof chain