Northwind Grants (Demo) · Software assurance

Overview

Your audit results and the ongoing engineering intelligence tracking the value of your software spend.

01 · Assess

Full assessment delivered — independence 39/100.

02 · Recommend

Recommendation: transition to in-house with a costed exit.

03 · ActIn progress

Bringing delivery in-house; safety net first, then modernization.

04 · OverseeIn progress

Ongoing engineering-intelligence subscription (this dashboard).

Ongoing subscription

39/ 100

Independence

You couldn’t build, deploy or recover without your vendor.

Software you can run yourself

11%

8 of 71 critical components

Automated test coverage

9 files

0 frontend · 0 E2E on 380K lines

AI leverage

1.95M

tokens / feature · 58% AI-authored

Engineering intelligence

Delivery is speeding up

Lead time (hrs)

Lead time down to 26h · 9 deploys/wkDORA

AI leverage

AI $ / week

3.4 loops to merge · $738.80/wkAI loops

Assurance

Evidence, not opinion

Critical
The backend can't be built or deployed without vendor registries: 63 private vantage/* packages plus @vantage npm.
composer.vantagedigital.com: 63 vantage/* packages
Critical
9 backend test files and zero frontend/E2E tests protect 380K lines; CI runs only a typecheck.
backend tests: 9
High
Plaintext AWS access keys (prod + staging S3) and a default admin password were committed to the repo.
2 AWS access keys in source
High
No IaC, backup/DR, or monitoring for RDS, Elasticsearch, StarRocks or Kafka.
no Terraform/CloudFormation

AI jobs

Loops · tokens · outcome