Model controls
Make flexibility a property of the operating system, not a contract adjective.
Every model can create lock-in if source, authority, access, technical context, or supplier knowledge becomes provider-only. The controls should be present from the first day and tested before the client needs to change the arrangement.
- Client-held work record
- Source, product context, architecture, decisions, delivery and acceptance evidence, risks, environments, runbooks, incidents, suppliers, and open obligations remain current in approved client systems.
- Explicit substitution path
- The model defines how a specialist, leader, team, provider, subcontractor, location, or operating responsibility can change, including verification, access, knowledge, and stakeholder communication.
- Whole-life supplier control
- Entities, people, locations, accounts, privileges, devices, data paths, intellectual property, obligations, financial and operating evidence, review dates, and revocation owners remain visible.
- Executable end state
- The engagement covers open-work transfer, knowledge confirmation, source and asset return, access removal, data treatment, support and recovery handover, supplier closure, and remaining obligations.