Skip to content
The offering

The Network Change Assurance Sprint

A two-week paid assessment that shows you exactly how a bad change would reach your production network today — and what it would take to stop it.

Stage 01

The Assessment

Two weeks · fixed price

The assessment stands alone. It is not a sales document with a proposal attached. If the recommendation is “your process is sound, spend your money elsewhere,” that is what it will say.

Source-of-truth reconciliation

A documented comparison of your inventory of record against what is actually running. Every discrepancy listed and categorised.

Change-path map

How a change actually travels from request to production today — including the steps that are informal, undocumented, or done by one person.

Failure-mode analysis

The specific ways a bad change reaches production undetected, ranked by likelihood and blast radius.

Prioritised backlog

Every gap, sized and ordered by risk reduced per unit of effort.

Written recommendation

What to do, in what order — usable with or without OperiProof.

Stage 02

The Implementation

Two to six weeks · fixed scope

Taken only if the assessment justifies it, and only for one workflow at a time. We deliberately start with change validation, configuration compliance, or provisioning — never a platform rewrite.

WORKFLOW

One production workflow automated end to end

PRE-CHANGE

Validation that runs before anything touches the network

POST-CHANGE

Verification that proves the intended outcome

ROLLBACK

A tested rollback path, not a documented intention

CI

A pipeline your team owns and can run without us

RUNBOOKS

Written for your engineers, not for us

THE EVIDENCE BUNDLE

A cryptographically signed, machine-readable record of every change, with a human-readable report generated from it. This is the artefact you hand to your own leadership, your auditor, or your funding agency.

Stage 03 · optional

The Assurance Retainer

Monthly

Ongoing operation and extension of the pipeline, new workflows added as agreed, and evidence bundles produced for every change.

Fixed price, not hourly

You are buying a defined outcome, not time. Where a brownfield estate is genuinely unknown, the assessment is quoted time-and-materials with a hard ceiling, and converts to fixed scope once the unknowns are mapped. Pricing is scoped and quoted before work starts — ask on the first call.

See it work

The fifteen-minute demo

An emulated topology driven by CI that catches a deliberately broken change and produces the evidence bundle. It uses no client data and runs on a laptop.

It shows a failure being caught, not a success passing. A demo that only ever goes green proves nothing about the gate — and the gate is the product.

Ask to see the demo
change-gate · run #1184
$ operiproof gate --change CR-4471
build topology (containerlab) ......... ok
render intent → candidate config ..... ok
diff review (human gate) ............. approved
offline reachability (batfish) ....... fail
vlan-412 → transit vrf leak
CHANGE BLOCKED · production untouched
emit evidence-bundle v1 .............. signed
sha256 8f3a1c…c21  ·  key OP-2026-01
What we do not do

Stated plainly, because the boundaries are the credibility.

No outside plant

No trenching, splicing, cabling or construction.

No managed services

No 24/7 on-call, no NOC, no help desk.

No autonomous remediation

Nothing changes production without a human approving the specific change.

No platform rewrites

We start with one workflow.

No vendor lock-in

If the right answer is a tool you can run yourself, that is what we will say.