The first week is reading, not writing
Handing an application to a new team and expecting features in week one is how regressions start. We spend the first week on repository layout, deployment pipeline, test coverage, data model and the parts of the system that carry money or personal data. The output of that week is a written map of what exists and what we think is fragile. You get that document whether or not the engagement continues, so the audit has value even if you walk away.





