AcqualyticsAcqualytics
Sign in
Assurance · The signature test

Independence test

Eighteen binary checks run from infrastructure you control. Nobody argues with a count.

285/18
Checks passing
5 of 18 can be performed without the vendor.
Operability score
39/100
Weighted across the ten domains. Below ~45 means the client cannot operate the software independently of the vendor.
Verdict
Vendor-dependent
13 of 18 checks fail — you couldn’t build, deploy or recover this system without your vendor today.

Access

stage
1/3 pass
  • 01

    Clone the repository from a Northwind-controlled account

    Verifies: Source can be cloned from Northwind's own git org — not the vendor's.

    The repo lives at bitbucket.org/vantagedigital — vendor-owned. Northwind can't clone from an org it controls until ownership is transferred.

    fail
  • 02

    composer install resolves all backend packages

    Verifies: The private vantage/* PHP packages install from a client-owned registry.

    63 vantage/* packages resolve only from composer.vantagedigital.com (vendor); composer install fails without vendor access.

    fail
  • 03

    pnpm install resolves all frontend packages

    Verifies: Frontend npm dependencies, including @vantage/*, install cleanly.

    pnpm install succeeds — @vantage/ui and @vantage/state are MIT-licensed and public on npm.

    pass

Build

stage
4/5 pass
  • 04

    Backend passes syntax check (php -l across modules)

    Verifies: PHP source is syntactically valid across all 99 modules.

    php -l passes across all modules — syntax only; a full build still needs the vendor packages in check 02.

    pass
  • 05

    Frontend applications build (nx build)

    Verifies: The customer and admin Next.js apps build to artifacts.

    nx build succeeds for the frontend and admin apps.

    pass
  • 06

    GraphQL codegen runs

    Verifies: GraphQL types generate from the local query files.

    nx graphql-codegen runs and produces the ~25k generated lines.

    pass
  • 07

    TypeScript typecheck passes

    Verifies: The TypeScript projects type-check cleanly.

    Typecheck passes — it is the only gate the vendor CI actually runs (no tests, no lint).

    pass
  • 08

    Docker environment starts and containers report healthy

    Verifies: The full container environment builds and starts locally.

    The CI/CD build image (vantage/sdlc/runner) lives in the vendor's AWS ECR — the environment can't be built without it.

    fail

Data

stage
0/3 pass
  • 09

    Database migrations run to completion

    Verifies: Schema migrations apply against a fresh database.

    migrations:migrate depends on the vendor's vantage/* data framework, which can't be installed (see check 02).

    fail
  • 10

    Schema tooling runs (orm:schema-tool:update)

    Verifies: Doctrine schema tooling updates the database.

    Requires vantage/mezzio-module-doctrine — unavailable without the vendor registry.

    fail
  • 11

    Data installers and patches apply

    Verifies: Seed / reference data and patches load a working dataset.

    Depends on vantage/mezzio-module-data-installer and data-patch — cannot run in-house.

    fail

Run

stage
0/6 pass
  • 12

    Application loads and the login page renders

    Verifies: The app boots and the entry screen renders.

    The backend can't be built or started without the vendor packages, so the app never comes up in a Northwind-only environment.

    fail
  • 13

    Authentication works with test credentials

    Verifies: Login / OTP works using client-held credentials.

    Authentication is entirely vendor code — 16 vantage/* auth & authorization packages — none installable in-house.

    fail
  • 14

    External services reachable (Elasticsearch, StarRocks, Kafka, S3, Stripe)

    Verifies: Integrations connect using Northwind-owned keys.

    S3 runs on vendor AWS and integration configs are undocumented — services aren't reachable from a Northwind-controlled environment.

    fail
  • 15

    Grid data loads (at least one grid returns results)

    Verifies: A primary data grid returns results from the client's stack.

    Grids depend on the running backend plus Elasticsearch/StarRocks — none of which stand up in-house.

    fail
  • 16

    Export works (generate and download CSV/Excel)

    Verifies: Reports / exports render and download.

    Export depends on the running app and vendor S3 — it can't be exercised independently.

    fail
  • 17

    Email sending works (test SMTP)

    Verifies: Email / notifications send via Northwind-owned providers.

    Notification delivery (email/SMS via iContact/Twilio) uses vendor-configured accounts and is undocumented.

    fail

Release

stage
0/1 pass
  • 18

    Full production deployment plan executes in staging

    Verifies: A documented deploy runs end-to-end in a non-production environment.

    No IaC and a vendor-owned pipeline — there is no deployment Northwind can execute or verify.

    fail