Technical audit
Ranked findings and 90-day plan
| Rank | Finding | Risk | Cost to fix | When |
|---|---|---|---|---|
| 01 | Production database has no tested restore. Backups exist; nobody has restored one. | Critical | 2 days | Week 1 |
| 02 | LLM feature has no evaluation set. Prompt changes ship untested. | High | 4 days | Weeks 1 to 2 |
| 03 | Secrets committed to the repository history; keys still live. | High | 1 day | Week 1 |
| 04 | One engineer holds every deploy. No runbook, no second person. | Medium | 3 days | Weeks 3 to 4 |
| 05 | No-code tool at its row limit; exports silently truncate. | Medium | Scoped separately | Month 2 |
90-day plan
- Weeks 1 to 2Restore drill, rotate keys, write the first eval set.
- Weeks 3 to 6Deploy runbook, second deployer, monitoring on the model feature.
- Weeks 7 to 12Decide build, buy or wait on the no-code replacement, with a budget.