How a Build Works

One protocol. Scoped on entry, applied as the system reveals itself. Every engagement runs through the same lifecycle, priced phase by phase.

The Lifecycle

01

Discovery & Risk Mapping

Define the product, users, critical workflows, data, permissions, irreversible actions, and failure boundaries.

PrerequisitesStakeholder availability. Access to the process being built.
OutputScope. User and data model. Risk and failure map.
Duration1-2 weeks
02

Prototype & Architecture

Create the core UX, system model, database shape, API boundaries, and deployment plan.

PrerequisitesPhase 01 accepted. Decisions on tradeoffs and constraints.
OutputWorking prototype. Architecture. Deployment plan.
Duration1-3 weeks
03

Build & Verify

Implement the application in small auditable slices. Test permissions, data persistence, edge cases, mobile UX, and failure states.

PrerequisitesApproved architecture. Access to required integrations.
OutputProduction-grade slices. Tests for permissions and failure states.
Duration3-10 weeks
04

Launch & Harden

Deploy to production, configure monitoring, document recovery paths, and tighten security boundaries.

PrerequisitesAccepted build. Production environment and access.
OutputProduction deploy. Monitoring. Recovery and security runbooks.
Duration1-2 weeks
05

Iterate

Improve based on real usage, bug reports, operational friction, and new requirements.

PrerequisitesA live system with real users or operations.
OutputPrioritized changes. Fixes. New capability.
DurationOngoing

Modes of Work

These are not standalone services. They are applied within the lifecycle.

Scope is not selected on entry. It is determined during Discovery & Risk Mapping.

Most builds touch all three. The work determines what is required.

build --product

Web applications, software platforms, internal tools, and mobile apps. Built in small auditable slices, with permissions, data persistence, and failure states tested as we go.

Constraint: Scope is defined before we build. Changes are explicit, not absorbed silently.

integrate --systems

Backend APIs, third-party integrations, webhooks, auth flows, and automation. Designed for retries, idempotency, and partial outages rather than the happy path.

Constraint: Third-party systems change and fail. We design for that, not around it.

harden --policy fail-closed

Threat modeling, permission boundaries, audit trails, monitoring, and failure-mode testing. The security-first angle that runs through every build, not a separate phase.

Constraint: Security is built in from the first slice. It cannot be bolted on at the end.

Cadence

Small auditable slices

Work ships in pieces you can review and revert, not one undifferentiated push at the end.

Working software every week

Progress is a deployed slice you can click through, not a status report.

Changes are explicit

Scope changes are written down, priced, and agreed before they enter the build. Nothing is absorbed silently.

A direct line to the builder

One-person lab. No account managers, no relay. The engineer building your system answers the messages.

Week One

The first engagement starts with Discovery, not with code. By the end of week one you have four things in hand.

01

Discovery call

Walk the system: users, critical workflows, data, integrations, and the actions that cannot be undone.

02

Risk map

What can fail, what must never happen, and where the failure boundaries sit. Written down, not implied.

03

Written scope

Deliverables and failure boundaries for the first phase, in writing. What is in, what is out, what is deferred.

04

Fixed price for the phase

The phase is priced before it starts. No open meter. You approve the next phase only when this one is accepted.

Questions

How much does a build cost?
Discovery fixes the price per phase, so you approve a number before work starts. Typical full builds land between $10k and $50k+, depending on scope, integrations, and failure boundaries. Read the cost breakdown
How long does a build take?
Discovery runs 1-2 weeks. Most full builds ship in 6-16 weeks end to end. Timelines are set per phase during Discovery, not guessed on entry.
Fixed scope or retainer?
Both. Engagements start as fixed-scope phases with a fixed price. Most clients move to a monthly retainer once the system is live and enters Iterate.
What do you not take on?
Throwaway prototypes with no path to production, and "make it look like X" requests with no real system underneath. If nothing will depend on the software, this protocol is the wrong fit.
Do we own the code?
Yes. The repository, infrastructure configuration, documentation, and runbooks are yours. No lock-in, no licensing back to Norseson.
What happens if we stop after one phase?
You keep everything produced to that point — repo, docs, runbook, risk map. Each phase ends at a clean boundary, so stopping is an exit, not a loss.
Who does the work?
One engineer. The person who scopes the system builds it and answers for it. No handoffs between sales and engineering.

If the lifecycle fits your system, the next step is Discovery.