Proposal — SnowOps Starter / Quick-Win
Prepared for: {{CLIENT}} ({{CLIENT_CONTACT}}) | Date: {{DATE}}
Package: Starter / Quick-Win [QW] | Duration: 2–3 days | Cloud creds required: none
1. What this is
A 2–3 day, fixed-price engagement that drops SnowOps's quality + security gates onto {{CLIENT}}'s existing repositories — proof-of-value with zero new infrastructure and zero cloud credentials. The fastest way to feel the rigor before a Baseline engagement.
2. Deliverables (all real, shipped assets)
- D1 —
.pre-commit-config.yaml: tflint, fmt, checkov, tfsec, gitleaks, trivy, conftest. Blocks bad commits locally. - D2 — PR-blocking GitHub Actions mirroring D1.
- D3 — Conftest/OPA policy bundle for
terraform plan(encryption, tags, no-public-network, allowed regions, cost caps). - C4 — GitOps branching standard + client-repo template.
- R1 — PR template + required-fields validation workflow.
Adopted onto {{ENVS}} repo(s). Guide: docs/client-guides/quickstart-quality-gates.md.
3. Timeline
| Day | Work | Acceptance |
|---|---|---|
| 1 | Install D1 + R1 + C4 template; configure for {{CLIENT}}'s repos | Planted bad commit blocked locally |
| 2 | Wire D2 + D3 into CI; tune the OPA bundle to {{CLIENT}}'s policies | Planted bad PR blocked at GitHub |
| 3 | Walkthrough + handover | Team can run + extend the gates |
4. Commercial
| Fee | {{PROJECT_FEE}} (fixed, one-time) |
| Payment | 100% on delivery acceptance |
Pricing per Y2. Finalize before send.
5. Out of scope / upgrade path
No cloud provisioning, IAM, or evidence — those are the Baseline package the gates protect. Natural upgrade: when {{CLIENT}} wants the hardened cloud, → Baseline proposal.
Governed by the SnowOps MSA + SOW (Y12). Valid 30 days.