Scoping is where shared understanding becomes a defined plan. By the end of this phase, both parties know exactly what work will be performed, what the client will contribute, what the commercial arrangement will be, and whether SafeCode Consulting is the right fit for the engagement. There is an explicit off-ramp here — if a different path makes more sense, that conversation happens now, before commitments are made.

A good scope is not just a list of deliverables. It is a shared understanding between SafeCode and the client about what the engagement is designed to accomplish, what each party will contribute, where the boundaries of the work lie, and what a successful outcome looks like. Scoping exists to produce that shared understanding before any further commitments are made.

This phase begins with the findings from Discovery & Diagnosis and translates them into a concrete plan — the work to be performed, the client inputs required, the expected outputs, the timeline, and the commercial structure. Scoping itself is conducted under the initial consulting agreement on a time basis, consistent with its exploratory nature.

Scoping concludes with a proposal and Statement of Work for the phases that follow. The commercial structure for the Solution phase and beyond is defined here: fixed-price for well-bounded scopes, time-based for evolving or ongoing work, supplemental staffing for programs that need embedded technical capability, or an advisory retainer for programs that need periodic access to senior expertise without a full-time commitment. The nature of any post-delivery Support is agreed at the same time.

That proposal is a decision point, not a formality. If the right answer is a modified scope, a different commercial structure, a referral to a better-suited supplier, or no engagement at all, that conversation happens here — before expectations have been set that cannot easily be revised. This off-ramp is not a failure of the process. It is the process working correctly.

How this phase varies:

• For well-defined, bounded engagements — a specific analysis, a certification readiness assessment, a requirements review — Scoping may be brief, resulting directly in a fixed-price proposal.
• For complex or recovery engagements, Scoping may itself involve some preliminary technical work to bound the problem before a reliable scope can be defined.
• For supplemental staffing arrangements, Scoping focuses on role definition, technical environment, and integration with the client's existing team rather than a deliverable-by-deliverable plan.
• For advisory retainers, Scoping establishes availability, response expectations, areas of focus, and the conditions under which a separate project engagement might be warranted.