9, 10 and 11. Two readiness checks and three formal gates. The week-two readiness check confirms a verified inventory, named process owner, current baseline, approved data path, initial risk class, acceptance measures and external delivery owner. It assembles evidence; it does not authorize continuation.
The day-30 formal gate can authorize one bounded validation or delivery path after that inventory, owner, baseline, data, risk and acceptance evidence is recorded. It does not require a live or production workflow. The week-six readiness check then asks whether representative approved cases have been exercised in controlled validation, explicitly not production, with documented quality, cost, review, failure and access evidence.
The day-60 formal gate decides whether the workflow enters bounded production using evaluation results, controls, an exercised runbook draft, a rollback path and operating-owner evidence. The day-90 formal gate accepts, accepts with a dated condition, redesigns or stops operation, then funds, defers, rejects or investigates the next-quarter portfolio. Each gate has a written consequence. We covered what tends to slip through them in our record of what actually ships in the first ninety days.
12. Who does the work. Named people and their hours. "A senior engineer" is not a name. If the plan says the provider will bring in delivery capacity, the plan says who, for how many hours a week, starting when. This is where the difference between an advisor and an operator becomes visible on paper, and it is a question worth settling before you sign rather than in month two.
And the exit. What you keep, where it lives, and what happens on the last day. Repo access, credentials, a runbook, and the name of the person inside your team who owns the thing after the engagement ends. An AI system with no internal owner is an outage waiting for a quarter with no retainer in it.
That is the whole template. Twelve lines, one page, five days.