Skip to content

HOW WE WORK

The whole process, in writing.

We have no case studies yet, so this page carries the weight they would. Everything here is a commitment you can hold us to: what you receive, when, and what happens when something goes wrong.

THE FRAMEWORK

Innovate. Build. Deliver.

Three phases, not three departments. The same people carry the work from the first conversation to the handover, and every phase ends with something written down.

  1. 01

    INNOVATE

    Weeks 1–3

    We refuse to quote until we understand the problem.

    Discovery and architecture. We talk to the people who will use the system, the people who will operate it, and the person who gets blamed if it breaks. Then we write down what we found, what we propose, and what we are not solving.

    • Problem framing document
    • Solution architecture
    • Technology decision record, naming the options we rejected and why
    • Fixed scope and estimate
    • Risk register
  2. 02

    BUILD

    Two-week cadence

    Working software, not status reports.

    A staging URL by day fourteen, then a shippable increment every fortnight. You see the work running rather than described, early enough that changing direction is still cheap.

    • Staging URL by day 14
    • A shippable increment every fortnight
    • Automated tests and CI on every merge
    • A live demo each sprint
    • A burn-down you can see
  3. 03

    DELIVER

    Launch and beyond

    The handover is the product.

    Production deployment and the operational knowledge to run it without us. If the only way to keep the system alive is to keep paying us, we have failed at this phase.

    • Production deployment and infrastructure as code
    • Runbooks and monitoring
    • Full knowledge transfer to your team
    • Optional managed support SLA
    • A codebase your next engineer can read

WHAT YOU RECEIVE

Artifacts, not status updates.

Every phase ends with something you can read, argue with, and hand to someone else. These documents are yours to keep — including if you decide not to work with us.

Want to see the quality before you commit? Ask for a redacted architecture decision record from a past project and we will send one. info@genrocktechnologies.com

ENGAGEMENT MODELS

Three ways to work with us.

The choice is not about price. It is about who carries the uncertainty, and how much of it there actually is.

Genuinely unsure which fits? Take a fixed-scope discovery first. Two weeks, fixed price, and at the end you choose the model on evidence rather than instinct — with the documents in your hands either way.

ENGINEERING STANDARDS

Gates, not guidelines.

A standard nobody enforces is a preference, and preferences erode under deadline. Everything below runs automatically and fails the build when it is breached. This website is the worked example — every gate listed here runs on the repository that produced the page you are reading.

Before a commit lands

  • ESLint with --fix and Prettier run on staged files
  • TypeScript compiles with no errors (tsc --noEmit)

On every pull request

  • Typecheck, lint and production build
  • Playwright suite against the production build, on desktop and mobile
  • Lighthouse CI, median of three runs, against a failing budget
  • Worker bundle size reported against the 3 MiB platform cap

Before anything deploys

  • Both the quality and bundle-size jobs must pass first
  • Deploy runs only on the main branch, never from a pull request

The budget that fails the build

Accessibility
100
Best practices
100
SEO
100
Performance
95 minimum
Largest contentful paint
2500 ms
Cumulative layout shift
0.03
Total blocking time
200 ms
JavaScript
215 KB
CSS
25 KB
Fonts
92 KB
Total page weight
500 KB
Third-party scripts
zero

Types and structure

  • TypeScript strict mode, plus noUncheckedIndexedAccess, noImplicitOverride, noUnusedLocals and noUnusedParameters
  • No any and no @ts-ignore reaches the main branch
  • Server Components by default; a client boundary has to justify itself in a comment
  • Every colour, size and spacing value resolves to a design token -- no hardcoded hex anywhere in a component

Security baseline

  • Content-Security-Policy, with no third-party script origins permitted
  • Strict-Transport-Security with preload
  • X-Frame-Options: DENY and X-Content-Type-Options: nosniff
  • Referrer-Policy and Permissions-Policy set explicitly

The test suite

Runs against the production build on every pull request, on a desktop and a mobile viewport. Each spec below is a file in the repository.

What we will not quote is a coverage percentage or an OWASP ASVS level. The right floor differs between a marketing site and a payments system, and so does the right security baseline. Both are set in writing at the start of an engagement, in the same decision record as the architecture, and then enforced in CI the way the suite above is enforced here.

COMMUNICATION

How we stay in contact.

Most engagements go wrong in the gaps between conversations, not in the code. So the channels, the hours and the escalation path are agreed at kickoff rather than left to improvise.

CONTRACTS

Paperwork that protects both sides.

We keep the legal structure boring for the same reason we keep the architecture boring: so nobody is surprised later.

A WORKED EXAMPLE

Eight weeks, week by week.

This is illustrative. It is not a past project and the client does not exist. It shows how the framework plays out on a typical fixed-scope build: a customer-facing web application with a small internal admin, replacing a spreadsheet-and-email process.

  1. Week 1Innovate

    Discovery

    Interviews with the people who use the current process, the people who operate it, and the person accountable for it. We read the spreadsheet, the support inbox, and whatever passes for documentation. Output: a draft problem framing document by Friday.

  2. Week 2Innovate

    Architecture and scope

    The solution architecture and the technology decision record. Two options are seriously considered for the data layer and one is rejected in writing. The scope is fixed, the estimate is agreed, and the risk register has four entries — one of which is about a dependency on your side.

  3. Week 3Build

    Foundations

    Repository in your organisation. CI with typecheck, lint and tests on every merge. Infrastructure as code for a staging environment. Nothing user-facing yet, and that is deliberate: the pipeline is proven before anything interesting is built on it.

  4. Week 4Build

    First staging release

    Day fourteen of the build. A staging URL with the first end-to-end flow working: one real user journey, thin but complete. First sprint demo. You can open it on your phone and show someone.

  5. Week 5Build

    Second increment

    The admin side takes shape. A change request arrives — it always does — and is handled as a change: costed, agreed, and added to the SOW, not absorbed silently and paid for in week eight.

  6. Week 6Build

    Third increment

    Remaining flows, edge cases, and the first pass at monitoring and alerting. Second sprint demo. The burn-down says what it says; if it is behind, that conversation happens now rather than in week eight.

  7. Week 7Deliver

    Hardening and handover begins

    Runbooks written. Knowledge-transfer sessions start with your engineers: they ship a small change to staging themselves, with us watching rather than driving. Security headers, backups and access controls reviewed against what the decision record promised.

  8. Week 8Deliver

    Production

    Deployment to production through the same pipeline that has been running since week three. Final knowledge transfer. Handover pack: architecture, decision record, runbooks, and a list of what we would do next — which you are free to do with anyone.

QUESTIONS

About working together.

Can we skip discovery and go straight to building?

On a dedicated-team engagement, yes, if you already have a backlog and an architecture. On a fixed-scope sprint, no. A fixed price on work nobody has understood yet is not an estimate; it is a hope with a decimal point. Discovery is what makes the number honest.

What if we stop after discovery?

You keep everything: the problem framing, the architecture, the decision record, the estimate and the risk register. They are written to be useful independently of who builds the system. Any competent firm can quote against them more accurately than they could have before.

Who actually does the work?

The engineers on your discovery call. We name them before you sign, and they stay on the engagement. If someone has to change, you hear about it from us first, with a handover, not by noticing a new name in the repository.

How do you handle changes mid-project?

As changes. A request is costed, agreed and added to the statement of work before it is built. On a dedicated team it simply enters the backlog and you decide its priority. What we will not do is absorb scope silently and recover the cost somewhere less visible.

What happens if the project is behind?

You know at the sprint demo, not at the deadline. The burn-down is visible throughout. If we are behind, the conversation is about what to cut, what to defer, or what it costs to recover, and it happens as soon as the trend is clear rather than when it is too late to act on.

What does the handover actually include?

Production deployment through the same pipeline used since week one, infrastructure as code, runbooks, monitoring, and working sessions where your engineers ship a change themselves while we watch. The test of a handover is whether your team can build the next feature without us.

View More
GenRock AIOnline

Your virtual GenRock assistant

Hi! 👋 Welcome to GenRock Technologies. I'm GenRock AI, your virtual assistant. I can help you learn about our services, discuss your software requirements, answer common questions, or connect you with our team. How can I help you today?
4:18 AM

By using this chat, you agree that your messages may be processed to provide support.