Helix Hub — 30‑day paid pilot (binary go/no‑go)

Pilot structure

• Duration: 30 days
• Price: $15k to $30k
• Scope: 1 workspace, 1 project, 1 runner lane, 2 to 3 real decision runs

Week 0 setup (2–3 days)

Inputs you provide

• IdP owner for SSO
• Storage owner for S3 or MinIO
• Platform owner for runner environment
• Two reviewers who will approve

Define numbers up front

• Time to proof link after job submit: target under 10 minutes
• Approval rule: two‑person approval
• Retention: target 1 to 7 years, plus whether legal hold is required

Week 1 trust baseline

• Bring up Hub (hosted or self‑managed)
• Configure workspace and RBAC
• Deploy one runner agent
• Run deterministic smoke job
• Offline verify by a second party
• Generate first audit export artifact

Week 2 decision #1 end‑to‑end

• Submit job through remote lane
• Review approval surface
• Approve and mint approval receipt
• Export bundle and verify offline

Week 3 decisions #2 and #3 + workflow integration

• Run remaining decisions
• Add CI integration: verify‑bundle check
• Demonstrate external reviewer flow: proof link with least privilege + offline verifier

Week 4 procurement‑ready package + conversion

Deliver a DecisionOps evidence package:

• Approved bundles + approval receipts
• Time‑window audit export + export digest
• Verifier runbook: 30‑second verify
• Posture summary: RBAC, retention, keys, enforcement mode

Binary go/no‑go gates

• G1: Offline verify passes for all pilot decisions (no manual patching)
• G2: Approval receipt binds to bundle core digest and policy digest (immutable)
• G3: Audit export answers “who approved what, when, against which policy digest”
• G4: Runner executes policy‑pinned jobs and includes backend fingerprint
• G5: Proof link sharing uses least privilege (no shared admin token shortcut)
• G6: API idempotency proven; upload‑by‑digest never overwrites different bytes

If any gate fails, you do not buy.