The Standing Verdict
The same audit, re-run every quarter as a dated diff: what regressed, what is new, what is still open, what shipped.
12-month term. Only available to clients who have bought an audit.
The problem it solves
The audit was true on the day it landed. Six months and two hundred commits later, nobody knows which findings came back.
Who buys it: Anyone who has bought an audit. Not sold to anyone else, ever.
What lands
- A quarterly re-run against the same repositories, delivered as a dated diff rather than a fresh report — so the second one takes ten minutes to read instead of two hours.
- Regressions flagged explicitly against the previous verdict.
- One written escalation per quarter on whatever is most likely to hurt you next.
What this is not
- No new engagement scope, and no implementation.
- Not a monitoring service. It is a quarterly re-audit — between quarters, nobody is watching.
Who shouldn't buy it: Anyone who has not had the first audit. There is nothing to diff against.
The guarantee
Four separate re-audits would cost considerably more than the annual term. If a quarter is missed, that quarter is not payable.
Why me
The auditor already produces dated, diffable findings across the full taxonomy. The diff is the product the tooling was always going to make possible.
Questions people actually ask
Why is this not sold on its own?
A diff needs something to diff against. Without the baseline audit it is just a more expensive first audit.