A11y Audit + HELiX components + HELiXiR AI + REA governance — installed as one coupled operating model. Limited annual slots, capacity-gated.
$250,000–$600,000 Approximately six months · combined cap with 20% combination discount
A four-quadrant diagram with A11y Audit / HELiX / HELiXiR / REA at each corner, threaded by a single "operating model" ribbon connecting them. The ribbon shows the audit log running through every quadrant. Reads as "the integration is the deliverable."You inherited (or recognized) the moment when four pressures landed on the same OKR:
When all four are live, none of the smaller engagement shapes work. An accessibility audit alone leaves you with a roadmap and no governance to implement against. A design-system audit alone leaves you with a roadmap and no agent surface that knows about the components. An MCP server alone leaves you with a tool catalog and no audit trail. A REA install alone leaves you with policy and no product-engineering work to govern.
You need the four installed as one operating model — shared MSA, shared sequencing, shared audit substrate, shared phase boundaries. Not four engagements stitched together. One engagement with four SOW lines under one combined cap with a 20% combination discount.
None of BST’s competitors own all four layers. Accessibility audit shops, design-system consultancies, AI-governance firms, and MCP-server builders each cover one. The Full Stack is the only engagement on the market that couples all four under a single small senior team with the BST track record across each layer.
The Full Stack engagement explicitly delivers HELiXiR-shaped documentation across all four product layers. HELiX components ship with markdown-first specifications and machine-readable Custom Element Manifest data, queryable by your agents through HELiXiR’s progressive-discovery MCP surface. REA’s policy file, hook chain, and subagent roster are themselves agent-readable. A11y findings are structured to be both human-readable (the auditor’s narrative) and agent-consumable (CSV + Linear-importable JSON + CEM-resolved file:line citations). Competitors deliver four PDF reports and a Confluence page. BST delivers an operating model that humans operate and agents can read.
A11y Audit + HELiX + HELiXiR + REA — installed under one combined cap with a 20% combination discount. The integration is the deliverable.
Scored audit of the consuming product against WCAG 2.1 AA floor + AAA-bucket-shippable items; remediation roadmap (CSV + PDF + Linear-importable JSON); WCAG 2.1 ACR; Section 508 ACR; VPAT 2.5; AAA token preset; closeout re-audit measures the delta. The audit is the proof; the delta is the deliverable.
Token mapping (W3C DTCG → Style Dictionary → CSS custom properties); framework adapters for your consuming stacks; three or more template/page migrations onto HELiX components; Storybook documentation; per-component accessibility test fixtures. Anchored on HELiX, our open-source healthcare component library shipping at WCAG 2.1 AA, with an AAA-shippable bucket as the engineering floor.
HELiXiR MCP server registered as a downstream of REA's gateway; CEM regeneration wired into HELiX CI; meta-tool surface tuned to your team's actual usage pattern; code-mode sandbox for multi-component composition; 30-day post-handoff support window. HELiXiR-driven agent suggestions log to the audit substrate.
`.rea/policy.yaml` configured to your regulatory profile (`client-healthcare`, `client-financial`); commit-msg + pre-push + blocked-paths hook chain wired to your git workflow and CI; MCP gateway aggregating downstream MCP servers; audit log substrate (local JSONL escalating to Postgres / SOC2-mirrored at scale); subagent roster authored against your specific work shape; HALT runbook your security team can invoke.
An a11y-specific eval gate hook (axe-core run, AAA bucket-shippable check, regression detection) wired into REA's pre-push chain; commit-message attribution policy enforced; HELiXiR-driven agent suggestions logged to the audit substrate; quarterly HALT rehearsal scheduled.
Every artifact (runbook, policy file, component spec, audit finding, HALT procedure) is delivered in a shape both your team and their AI agents can consume. Markdown-first, frontmatter-tagged for RAG, CEM-resolved for component lookup, audit-log-queryable. Not a PDF report archived to SharePoint and forgotten by Q+1.
Four readouts over the engagement window; board-readable, mapped to risk register, OCR exposure profile, AAA conformance, design-system adoption, agent-activity audit.
Scoped at engagement closeout; combines A11y quarterly cadence + REA quarterly delta + HELiX maintenance window. Separate SOW; not auto-renewed.
Deliverable Governance substrate live before any product work
Even when REA is the smaller line item, it gates everything else — including BST's own work in your repo. Installing REA last would mean BST does its work outside the governance you just bought.
Deliverable Baseline scored against WCAG 2.1 AA + AAA-bucket-shippable
Baseline against the consuming product *before* any HELiX-driven adoption work lands. The audit's value is the *delta* between baseline and post-engagement state. Contaminated baseline = contaminated delta.
Deliverable Tokens mapped; templates migrated; AAA-shippable bucket live
HELiX adoption work happens under REA's governance. This is what moves the AAA-shippable scores. Token mapping, framework adapters, template/page migrations, Storybook, per-component a11y fixtures.
Deliverable HELiXiR MCP server registered through REA's gateway
HELiXiR consumes HELiX's CEM; can't register meaningfully until HELiX has a working regen pipeline. HELiXiR registers through REA's gateway, not raw `.mcp.json`.
Deliverable Delta measured; Year-2 retainer scoped
Measures the delta. First quarterly re-audit is part of closeout; subsequent quarters are the Year-2 retainer. The re-audit is the proof; the delta is the deliverable.
Engagement model Combined cap with bundled discount
Bundle discount available when combined with related engagements.
Indicative combined-cap range, post-discount. Lower bound ($250K): single-property mid-market healthcare client with a tightly-scoped HELiX adoption (three template migrations, single brand). Upper bound ($600K): healthcare-network IDN with multi-brand AAA token pipeline, 8+ template migrations, hybrid consuming stacks, and quarterly cadence built into closeout. Combined cap is composed: REA install cap + A11y Audit cap + HELiX adoption cap + HELiXiR registration cap, then × 0.80 for the 20% combination discount. Phase boundaries are the points at which cap renegotiation is permitted.
Anchor pricing reflects typical engagement ranges. Actual fees are scoped per engagement under time-and-materials with a not-to-exceed cap. Pricing shown does not constitute a binding offer.
Limited annual slots, capacity-gated. Engagement intake is descriptive, not a contractual commitment.
When only the accessibility pressure is live (or when REA + HELiXiR aren't yet on the radar). The A11y Audit baseline is one phase inside the Full Stack; the stand-alone family is the smaller-combination starting point.
When the four-pressure profile centers on PHI and AI compliance posture. The Compliance Review can run as a discovery phase inside the Full Stack or as a stand-alone engagement.
Approximately six months. Four products. One combined cap with a 20% combination discount. 60-minute scoping conversation books a longer-than-usual qualifying call with a principal.
