A11y Audit + HELiX components + HELiXiR AI + REA governance — installed as one coupled operating model. A large, sequenced, senior-led engagement.
$250,000–$600,000 Approximately six months · combined cap with 20% combination discount
A four-quadrant diagram with A11y Audit / HELiX / HELiXiR / REA at each corner, threaded by a single "operating model" ribbon connecting them. The ribbon shows the audit log running through every quadrant. Reads as "the integration is the deliverable."You inherited (or recognized) the moment when four pressures landed on the same OKR:
When all four are live, none of the smaller engagement shapes work. An accessibility audit alone leaves you with a roadmap and no governance to implement against. A design-system audit alone leaves you with a roadmap and no agent surface that knows about the components. An MCP server alone leaves you with a tool catalog and no audit trail. A REA install alone leaves you with policy and no product-engineering work to govern.
You need the four installed as one operating model — shared MSA, shared sequencing, shared audit substrate, shared phase boundaries. Not four engagements stitched together. One engagement with four SOW lines under one combined cap with a 20% combination discount.
These four layers are usually bought separately — an accessibility audit, a design-system engagement, an AI-governance install, and an MCP-server build, each from a different vendor, each with its own sequencing and its own artifacts. The Full Stack couples all four under one MSA, one sequence, and one audit substrate. The value is in the coupling, not in any single layer.
The engagement delivers HELiXiR-shaped documentation across all four product layers. HELiX components ship with markdown-first specifications and machine-readable Custom Element Manifest data, queryable by your agents through HELiXiR’s progressive-discovery MCP surface. REA’s policy file, hook chain, and subagent roster are themselves agent-readable. A11y findings are structured to be both human-readable (the auditor’s narrative) and agent-consumable (CSV + Linear-importable JSON + CEM-resolved file:line citations). The output is an operating model your team operates and your agents can read — not four separate reports filed and forgotten.
A11y Audit + HELiX + HELiXiR + REA — installed under one combined cap with a 20% combination discount. The integration is the deliverable.
Scored audit of the consuming product against WCAG 2.2 AA floor + AAA-bucket-shippable items; remediation roadmap (CSV + PDF + Linear-importable JSON); WCAG 2.2 ACR; Section 508 ACR; VPAT 2.5; AAA token preset; closeout re-audit measures the delta. The audit is the proof; the delta is the deliverable.
Token mapping (W3C DTCG → Style Dictionary → CSS custom properties); framework adapters for your consuming stacks; three or more template/page migrations onto HELiX components; Storybook documentation; per-component accessibility test fixtures. Anchored on HELiX, our open-source healthcare component library built to WCAG 2.2 AA, with an AAA-shippable bucket as the engineering floor.
HELiXiR MCP server registered as a downstream of REA's gateway; CEM regeneration wired into HELiX CI; meta-tool surface tuned to your team's actual usage pattern; code-mode sandbox for multi-component composition; 30-day post-handoff support window. HELiXiR-driven agent suggestions log to the audit substrate.
`.rea/policy.yaml` configured to your regulatory profile (`client-healthcare`, `client-financial`); commit-msg + pre-push + blocked-paths hook chain wired to your git workflow and CI; MCP gateway aggregating downstream MCP servers; audit log substrate (local JSONL escalating to Postgres / SOC2-mirrored at scale); subagent roster authored against your specific work shape; HALT runbook your security team can invoke.
An a11y-specific eval gate hook (axe-core run, AAA bucket-shippable check, regression detection) wired into REA's pre-push chain; commit-message attribution policy enforced; HELiXiR-driven agent suggestions logged to the audit substrate; quarterly HALT rehearsal scheduled.
Every artifact (runbook, policy file, component spec, audit finding, HALT procedure) is delivered in a shape both your team and their AI agents can consume. Markdown-first, frontmatter-tagged for RAG, CEM-resolved for component lookup, audit-log-queryable. Not a PDF report archived to SharePoint and forgotten by Q+1.
Four readouts over the engagement window; board-readable, mapped to risk register, OCR exposure profile, AAA conformance, design-system adoption, agent-activity audit.
Scoped at engagement closeout; combines A11y quarterly cadence + REA quarterly delta + HELiX maintenance window. Separate SOW; not auto-renewed.
Deliverable Governance substrate live before any product work
Even when REA is the smaller line item, it gates everything else — including BST's own work in your repo. Installing REA last would mean BST does its work outside the governance you just bought.
Deliverable Baseline scored against WCAG 2.2 AA + AAA-bucket-shippable
Baseline against the consuming product *before* any HELiX-driven adoption work lands. The audit's value is the *delta* between baseline and post-engagement state. Contaminated baseline = contaminated delta.
Deliverable Tokens mapped; templates migrated; AAA-shippable bucket live
HELiX adoption work happens under REA's governance. This is what moves the AAA-shippable scores. Token mapping, framework adapters, template/page migrations, Storybook, per-component a11y fixtures.
Deliverable HELiXiR MCP server registered through REA's gateway
HELiXiR consumes HELiX's CEM; can't register meaningfully until HELiX has a working regen pipeline. HELiXiR registers through REA's gateway, not raw `.mcp.json`.
Deliverable Delta measured; Year-2 retainer scoped
Measures the delta. First quarterly re-audit is part of closeout; subsequent quarters are the Year-2 retainer. The re-audit is the proof; the delta is the deliverable.
Engagement model Combined cap with bundled discount
Bundle discount available when combined with related engagements.
Indicative combined-cap range, post-discount. Lower bound ($250K): a single-brand, tightly-scoped HELiX-adoption configuration (three template migrations, single brand). Upper bound ($600K): a multi-brand configuration with a full AAA token pipeline, a larger template-migration surface (8+), hybrid consuming stacks, and quarterly closeout cadence. Combined cap is composed: REA install cap + A11y Audit cap + HELiX adoption cap + HELiXiR registration cap, then × 0.80 for the 20% combination discount. Phase boundaries are the points at which cap renegotiation is permitted.
Anchor pricing reflects typical engagement ranges. Actual fees are scoped per engagement under time-and-materials with a not-to-exceed cap. Pricing shown does not constitute a binding offer.
A large, sequenced, senior-led engagement. Intake is descriptive, not a contractual commitment.
When only the accessibility pressure is live (or when REA + HELiXiR aren't yet on the radar). The A11y Audit baseline is one phase inside the Full Stack; the stand-alone family is the smaller-combination starting point.
When the four-pressure profile centers on PHI and AI compliance posture. The Compliance Review can run as a discovery phase inside the Full Stack or as a stand-alone engagement.
Approximately six months. Four products. One combined cap with a 20% combination discount. 60-minute scoping conversation books a longer-than-usual qualifying call with a principal.
