Fixed price · human reviewed · client-estate starting point
£395 Client-Estate Machine Trust Baseline
Map representative machine/action paths, customer authority, operating surfaces and evidence — then establish which client estates should enter recurring Machine Trust.
THE BASELINE CREATES THE STARTING RECORD.
MACHINE TRUST KEEPS IT CURRENT.
Secure payment is handled through EcoCitizenz TrustOps. You review the fixed £395 scope before completing payment.
£395 Client-Estate Machine Trust Baseline
A bounded review of the disclosed client estate
One MSP operating entity. The audit maps the disclosed estate at topology level and examines detailed action paths in up to five representative customer environments. The report states the sample used and does not extrapolate beyond it.
What you provide
- A structured intake, normally about 45 minutes of your team’s time.
- Written answers from the people who operate the AI, automation and MCP/API surfaces.
- Relevant screenshots and exports. Do not send credentials, secrets or unrestricted customer data.
Deliverables
Exactly what you receive
- 01An executive summary written for management and customer conversations.
- 02An MSP/customer topology showing the operating entity, customer environments and machine pathways in scope.
- 03An inventory of disclosed AI agents and consequential automation, with operator, platform and customer reach.
- 04An MCP/API surface inventory and actor-to-surface-to-customer map.
- 05A consequential action map classified as READ, WRITE or HIGH-IMPACT–ADMIN.
- 06Identity, customer-authority, evidence, revocation and record-freshness findings.
- 07Prioritised, vendor-neutral recommendations that are implementable without ECZ-ID.
- 08An ECZ-ID applicability statement, including where ECZ-ID is not required.
- 09An evidence appendix and reusable structured findings register.
- 10Written follow-up Q&A on the findings and recommendation sequence.
Assessment
What the Baseline examines
Machine identity and accountable operator.
Customer attribution and the authority behind each sampled action path.
MCP/API surfaces and READ, WRITE or HIGH-IMPACT–ADMIN capability.
Evidence references, revocation and the freshness of the record.
Human review
A named EcoCitizenz auditor reviews the intake and evidence, applies the published method, writes the findings and answers follow-up questions.
After the Baseline
Move the right client estates into recurring Machine Trust
01
Choose participating clients.
02
Confirm Customer Authority.
03
Activate Machine Trust Core or Machine Trust Assured.
04
Maintain lifecycle and current state.
05
Issue recurring Evidence Packs and re-checks.
Scope notes
A clear boundary around the fixed work
- Not a compliance certification, legal opinion, penetration test, vulnerability scan or AI-safety evaluation.
- No credentials, installed tooling or network access are required.
- Recommendations do not include implementation work or continuous monitoring.
- The delivery schedule is agreed during intake; no public day-count SLA is promised.
The audit produces findings, classifications and priorities. It does not produce a score or a grade, and it is not a compliance certification, a penetration test or a legal opinion.
£395 Client-Estate Machine Trust Baseline