01 Organization and decision authority Who owns the business result, who can authorize the build, and what environment is involved?
Name * Business email * Organization * Your role * Industry * Organization size * Select employee range 1–10 11–50 51–200 201–1,000 1,001–5,000 5,000+ Primary operating geography Your decision authority * Select authority Final budget and production authority Executive sponsor; another party signs System or department owner with approved budget Technical evaluator / recommender Researching without current authority Who else must approve architecture, security, budget, and production release? *
03 Production, integration, security, and recovery boundary What the system may touch, how available it must be, and how failure must be contained.
Integration access * Select access state Approved owners and sandbox access exist Owners identified; access not yet approved Vendor / IT approval required No sandbox or non-production access Unknown API / event availability * Select interface state Documented supported APIs / webhooks Partial APIs with material gaps Files, email, or database access only UI-only system / RPA likely Custom interface required Unknown Data sensitivity * Select highest classification Public or non-sensitive business data Internal confidential information Customer or employee personal data Financial or payment data Health or highly sensitive personal data Government / export-controlled / critical infrastructure Unknown — classification required Human approval requirement * Select control state Automation may complete within bounded policy Human approval before consequential action Dual approval / separation of duties Human review after action Varies by risk, value, or exception Not yet defined Target environment * Select environment Client cloud account Client on-premises / private network SaaS / managed platform Hybrid environment Ghost Atlas-managed where approved Not yet determined Availability target * Select service expectation Business-hours convenience Business-critical during defined hours 24/7 operational service Near-real-time safety or revenue dependency Batch deadline / recovery window Not yet measured Internal accountable owner * Select ownership state Named business and technical owners Business owner named; technical owner pending Technical owner named; business owner pending Shared ownership is disputed No operating owner identified Recovery expectation * Select recovery state Manual fallback is acceptable Replay / retry without data loss Automated failover required Rollback within a defined window Safety stop and human takeover Not yet defined Security, privacy, and compliance requirements * Known technical and organizational constraints *
04 Finish state, service ownership, investment, and acceptance What must become observably true and who will operate and accept it.
Required operating result * Success measures and current baseline * Acceptance authority and evidence * Approved or realistic investment * Select investment range $750–$5,000 $5,000–$15,000 $15,000–$50,000 $50,000–$150,000 $150,000–$250,000 $250,000–$500,000 $500,000+ $3,000–$25,000/month $25,000–$100,000+/month Budget not yet authorized Decision urgency * Select urgency Active production incident Decision within 30 days Decision within 90 days Decision within 6 months 6–12 months Exploratory / no authorized date Required production date * Post-release coverage * Select operating model Client team owns after handoff Warranty-period stabilization only Scheduled maintenance and stewardship Managed business-hours operations 24/7 coverage may be required Not yet determined Additional context or public links Website
Submission boundary This assessment is a request for engineering review—not a contract, security assessment, architecture approval, guarantee, or authorization to access systems. Findings require evidence and an accepted engagement.
I authorize Atlas Automation Systems to use this information to evaluate and respond to the assessment. I confirm that I have not included passwords, tokens, production secrets, regulated records, source code, security vulnerabilities, or third-party IP I cannot disclose.