Discovery Audit — Delivery Runbook
Everything one person needs to run a full Clearfork Discovery Audit end-to-end — from first call to signed implementation SOW — without having to ask how.
How to use this runbook
This page is both a reference and a working tool. Read the phases top to bottom the first time. When you run a real audit, name the engagement up top and tick boxes as you go — your progress is saved on this device automatically, so you can close the tab and come back.
Learn the flow
Five phases, run broad → narrow: executives, then department heads, then frontline.
Work the checklists
Each phase has a tickable checklist. Aim to finish a phase before moving on.
Grab the templates
Every script and worksheet has a copy button — paste into your notes, Airtable, or deck.
Method source: brief/CLEARFORK-DISCOVERY-AUDIT-METHOD-V1.md. Research backing: brief/DISCOVERY-AUDIT-RESEARCH-BRIEF.md & sources/SOURCE-NOTES.md.
The 3-week timeline
Default cadence. Compress or stretch to fit the client, but keep the order.
| When | Phase | You're doing | You walk away with |
|---|---|---|---|
| Before wk 1 | 0 · Qualify & Intake | Triage call (BANT); send intake worksheet as homework | Go/no-go; populated intake |
| Wk 1 | 1 · Kickoff & Outcome Framing | Executive workshop | Outcome Statement + baselines + scope |
| Wk 1–2 | 2 · Department & Workflow Inventory | Department-head interviews | Department map; workflow inventory; deep-dive shortlist |
| Wk 2 | 3 · Deep-Dive Mapping | Frontline interviews + observation | Current-state maps; atomic decomposition |
| Wk 2–3 | 4 · Classify, Score & Govern | Internal synthesis + client validation | Classification matrix; scores; governance kit |
| Wk 3 | 5 · Roadmap, Readout & SOW | Readout workshop | Roadmap; deliverable; draft SOW; decision |
Qualify & Intake
Kickoff & Outcome Framing
Department & Workflow Inventory
Deep-Dive Mapping & Atomic Decomposition
Classify, Score & Govern
See Classification, Scoring rubric, and Governance kit below for the full reference.
Roadmap, Readout & SOW Conversion
Readout run-of-show (~60–90 min)
| 1. Recap outcomes & baselines | 5 min |
| 2. Current-state findings + reality gaps | 15 min |
| 3. Classification overview (the six classes) | 10 min |
| 4. The roadmap — Now / Next / Later | 20 min |
| 5. First builds + ROI | 15 min |
| 6. Governance + adoption plan | 10 min |
| 7. Decision: proceed on first builds? | 10 min |
The six-way classification
For every atom, decide how it should be done. Run the tree in order. Approval-gated is an overlay — it stacks on top of any class, it isn't a competing bucket.
Oversight tiers
| Tier | What it means | Use when |
|---|---|---|
| HITL — human-in-the-loop | Human approves before execution | High-consequence, irreversible, regulated |
| HOTL — human-on-the-loop | Acts autonomously; human monitors & can intervene | Faster, reversible, lower-risk work |
| Auto | Full autonomy | Low-risk, high-volume, reversible, well-bounded only |
Opportunity scoring rubric
Prioritize which opportunities to pursue. RICE base, extended for an automation/AI audit. Score each factor 1–5.
| Factor | 1 | 3 | 5 | Direction |
|---|---|---|---|---|
| Impact | Negligible | Team-level gain | Moves a top outcome | Higher = better |
| Confidence | Guess | Some evidence | Proven | Higher = better |
| Speed-to-proof | 6+ months | ~1 month | Days | Higher = better |
| Effort | Hours | 1–2 weeks | Months / cross-system | Higher = more (denominator) |
| Risk | Trivial, reversible | Recoverable | Irreversible / regulated | Higher = more (denominator) |
| Adoption friction | Invisible to users | New step to learn | Strong resistance | Higher = more (denominator) |
Governance starter kit
SMB-sized, delivered to the client. Backbone is NIST AI RMF (Govern / Map / Measure / Manage); oversight logic follows the EU AI Act's "scale oversight to risk & autonomy."
AI / automation registry
A maintained sheet: what AI/automation, what data it touches, what rules, who owns it. Reviewed quarterly. This is the anti-sprawl control.
Acceptable-use (one page)
Specific rules, not aspirations: e.g. "no client PII into ungoverned tools"; "AI-drafted external comms human-reviewed before send." Plus an approved-tools list.
One accountable owner
A named person, plus a designated "stop-build authority" who can halt a deployment.
Quarterly review
A standing check: what's in the registry, what's working, what to retire. Agentic items governed as first-class identities (own auth, least privilege, logging).
Per-priority governance row
| Field | What to record |
|---|---|
| Risk tier | Low / Med / High (blast radius × reversibility × regulatory exposure) |
| Oversight model | HITL / HOTL / Auto — must match the risk tier |
| Approval gate | Who approves before execution, for which actions |
| Data handling | What data it touches; PII/financial/confidential? residency/retention |
| Guardrails (if AI/agentic) | Least privilege; downstream authorization; scoped credentials; stopping conditions; sandbox |
| Audit logging | What's logged (identity, action, params, data, outcome); retention |
| Failure & rollback | What happens if wrong; how to undo |
| Owner / stop authority | Named accountable person; who can halt it |
Templates & scripts
Click Copy on any block and paste it into your notes, Airtable, or deck. These mirror the markdown templates in the project folder.
CLEARFORK DISCOVERY AUDIT — TRIAGE CALL (15–20 min)
Goal: confirm fit before investing time. Disqualify or advance.
1. NEED — "What made you reach out now? What's the pain or the goal?"
2. OUTCOME— "If this works, what changes for the business in 6–12 months?"
3. AUTHORITY — "Who would own acting on the findings? Who signs off on
changes and budget?"
4. BUDGET — "Have you set aside budget for the diagnosis AND for the
work that follows?"
5. TIMELINE — "What's the timeline pressure?"
FIT CHECK (advance only if all true):
[ ] There is an executive sponsor who can authorize change
[ ] There is a repeatable workflow to map (not pre-product)
[ ] They want a diagnosis, not just a specific tool installed
[ ] There is genuine intent to act on findings
DISQUALIFY / RESCOPE if: regulated high-risk AI core use (scope up),
no sponsor, throwaway intent, or no repeatable workflow.
CLEARFORK — EXECUTIVE KICKOFF (60–90 min). Discovery, not solutioning.
1. "Describe the business in one paragraph — what you sell, to whom,
how you make money."
2. "What are the 1–3 outcomes you most want to move in the next year?"
(revenue, margin, capacity, speed, quality, risk, owner-dependency)
3. "How would we measure each? What's the number TODAY?" <-- baseline
4. "Where do you THINK the biggest friction is? Where does work pile
up or break?"
5. "Where is the business dangerously dependent on one person?"
6. "What have you already tried with automation or AI? What happened?"
7. "What's off-limits — anything we should not touch or automate for
trust, legal, or cultural reasons?"
8. "Who are the right department heads and frontline operators to talk to?"
OUTPUT:
- Outcome Statement (one line): "________ from ___ to ___ by ______."
- In-scope departments: ____________________
- Success metrics + today's baselines: ____________________
- No-go zones: ____________________
- Reality gaps to check against frontline: ____________________
CLEARFORK — DEPARTMENT-HEAD INTERVIEW (45–60 min). SIPOC altitude.
1. "What is your team responsible for? What are the main jobs you deliver?"
2. "Walk me through your major workflows, start to finish, at a HIGH level."
(capture each as one inventory row, 5–7 steps)
3. Per workflow: "How often does it run? How many people touch it?
Roughly how long? How often does it go wrong or get redone?"
4. "Which systems/tools and which data does it use? Where does info get
re-keyed or copy-pasted?"
5. "Which eats the most time, causes the most errors, or frustrates
customers most?"
6. "Which depend heavily on one specific person's knowledge?"
7. "If one workflow got dramatically easier, which would change your
team's life?"
CAPTURE: Workflow Inventory rows + Department Map.
THEN: shortlist 3–6 deep-dive candidates (frequency × pain × outcome link).
CLEARFORK — FRONTLINE / OBSERVATION (per workflow). Watch real work.
1. "Show me how you ACTUALLY do this, start to finish, with a real
example open."
2. Per step: "What triggers this? What exactly do you do? Which
system/screen? What do you need in hand? What do you produce?
Who gets it next?"
3. "Where do you wait? Where does it bounce back? What do you fix or chase?"
4. "What's the annoying part you'd never admit in a meeting — the
workaround, the spreadsheet, the sticky note?"
5. "What do you DECIDE here — is it a rule, or judgment?" (-> class)
6. "If this were wrong, how bad is it and how easily fixed?" (-> risk)
7. "How do you know it's done right?" (-> verifiability)
THEN: build current-state map WITH rework/waits/handoffs; decompose
into atoms; validate the map back to the operator before leaving.
ATOM: ____________________ (trigger -> action -> output) - Trigger: what starts it - Action: what is done - Inputs / data: sources; where re-keyed - Output: what's produced; who consumes it - Decision type: rule-based | judgment | generative - Frequency / volume: per day/week/month - Time per run + rework: cycle time; % redone - Reversibility: easy-undo .......... irreversible - Blast radius if wrong: trivial ............ severe (money/legal/safety/PII) - Regulatory exposure: none ............... regulated - Data readiness: quality/availability/lineage of needed data - Verifiability: can correctness be checked easily? - Owner dependency: anyone ............. one specific person - Adoption friction: low ................ high
ID | Workflow name | Dept | Purpose/output | High-level steps (5–7) | Trigger | Freq/volume | People | Time/run | Rework rate | Systems & data | 1-person dependency (L/M/H) | Pain (1–5) | Outcome link | Deep-dive? (Y/N/Maybe) | Notes
Atom | Decision type | Reversibility | Blast radius | Reg. | Data readiness | Verifiability | CLASS (human/deterministic/AI-assisted/agentic/do-not-automate) | Approval-gated? (overlay) | Oversight (HITL/HOTL/Auto) | Rationale SCORING: Opportunity | Impact | Confidence | Speed | Effort | Risk | Adoption | SCORE = (Impact x Confidence x Speed) / (Effort x Risk x Adoption) | Class | ROI estimate (client's own numbers)
Priority | Opportunity | Now/Next/Later | Class | Oversight | Expected impact + ROI line | Effort | Risk tier | OWNER | DUE DATE Rule: every row MUST have an owner and a due date. No exceptions. That single discipline is what stops the report becoming shelfware.
CLEARFORK — IMPLEMENTATION SOW (draft from First Builds) 1. Background / outcome being pursued (from the Outcome Statement) 2. Scope — the first 1–3 builds, by workflow/atom 3. Deliverables — what we will produce 4. Acceptance criteria — how "done & working" is judged (proof metric) 5. Approach — class & oversight model per build (HITL/HOTL/Auto) 6. Timeline & milestones 7. Responsibilities — Clearfork vs client 8. Governance — guardrails, owner, stop authority, logging 9. Price & terms 10. Decision: proceed / adjust / pause Conversion ritual: end the readout with first builds, owners, and ROI on screen, and ask for the proceed decision.
Full long-form versions live in the project folder: templates/discovery-audit-intake-worksheet.md, workflow-inventory-template.md, deep-dive-process-map-template.md, opportunity-scoring-rubric.md, final-client-deliverable-outline.md.