Receipts

For leaders who want the paperwork

Every client gets a monthly snapshot they can review or hand to an auditor. Here is the shape of what we report — your real numbers fill in once we’re working together.

Report 01rolling 30 days

Change log

Every change, approved and reversible — with who, what, and when

Report 02regular cadence

Test restores

Backups proven by actually restoring them, not just running them

Report 03on a rhythm

Patch windows

What was patched, when, and what’s scheduled next

Report 04each quarter

Access reviews

Who can reach what — confirmed current, least privilege intact

Inside the binder · Redacted specimens

Four real shapes of proof — and what each one tells you about us

Adjectives are cheap; artifacts take discipline. Every specimen below is generalized from real engineering and incident work for Connecticut firms — names, addresses, and identifiers stripped, exact clocks and guardrails intact.

From your chair · CFO & underwriter lens

A green backup light is an opinion — a timed restore is a fact

Most providers paste a dashboard screenshot showing a backup job ran. Notice Run A on this receipt: when temporary scratch-disk permissions drifted from 0700, our runner refused to pull a single byte of encrypted client data and halted cold at 0.0 seconds.

Two minutes later, with isolated permissions locked, Run B decrypted, verified SHA-256 integrity, restored all 76 database tables in 6 minutes 33 seconds, proved five relational checks, and wiped the clean-room volume completely bare.

What this reveals about Reboot

We refuse to fake a passing drill or spill sensitive archives onto loose scratch storage.
You get the real stopwatch clock before an insurer or ransomware event tests it for you.

REBOOT · CONTINUITY VERIFICATION RECEIPT

Clean-Room Stopwatch Restore & Cryptographic Proof

PROVEN · 5/5 CHECKSDOC: RBT-DR-SPECIMEN-01

Attempt	Gate / Phase	Measured Clock	Disposition
Run A · 03:12 EDT	Scratch volume permission preflight (expected `0700`, saw `0755`)	00m 00.0s	ABORTED SAFE · 0 B PULLED
Run B · 03:14 EDT	Object-locked archive pull + SHA-256 verification + KMS decrypt (578 MB)	01m 48.2s	DIGEST MATCH
Run B · Restore	Isolated engine load — 76 relational tables, constraints & indexes	04m 44.8s	6m 33s TOTAL RTO
Run B · Teardown	5/5 row-count & ledger parity queries green → cryptographic scratch wipe	+00m 11.4s	0 BYTES RETAINED

Archive SHA-2569f4c8b2e…REDACTED…71d0a4e3

Immutable Lock30-Day Object Lock (Compliance)

Clean-Room PostureIsolated scratch · Destroyed post-check

Scope boundary: Proves archive integrity, decryption custody, and clean database engine recovery for client REDACTED-FIRM as of drill timestamp; paired on a regular cadence with application-level login checks.

From your chair · Plant manager & owner lens

When moving to the cloud at the worst moment seems impossible — we engineer the bridge

A Connecticut manufacturer running a 20-year-old ERP on aging IBM Power / AIX hardware asked if we could get them backed by the cloud under hardware duress — with ~30 hardcoded floor PCs and nine shipping/impact printers wired to one 20-year-old LAN IP.

Instead of pushing a reckless seven-figure ERP replacement, we upgraded on-prem reliability, proved cross-generation bootable Cloud IBM Power DR, and built a Proxy-ARP firewall takeover: if the local server drops, the firewall claims its exact LAN IP over an encrypted tunnel so nothing on the plant floor even knows the building’s server died. Even the ERP vendor’s senior AIX engineer was impressed enough to personally approve offline DR activation keys.

Bonus stewardship on the same floor

Traced physical rack cables + ARP tables to prove zero serial ports were live — saving $18K–$25K on an unnecessary vendor module.
Uncovered ~200 silent backup failures on an engineering share and rescued 145,000+ unbacked structural CAD drawings.

REBOOT · PLANT CONTINUITY ARCHITECTURE BRIEF

IBM Power / AIX Legacy ERP · Zero-Touch Cloud DR Cutover

DRILLED LIVE · 0 FLOOR TOUCHDOC: RBT-MFG-SPECIMEN-02

Recovery Posture	Target Cutover	Endpoint Touch	Verified Drill Notes
Cold Cloud Boot (Object-Locked S3)	~60–95 min	0 PCs / 0 printers	Cross-generation Power8 → Cloud Power boot proven (384 automated checks)
Warm Standby (Pre-staged LPAR)	~15–30 min	0 PCs / 0 printers	Single scripted cutover with automatic dead-man revert if tunnel drops

Cost-avoidance note: Saved $950K–$2.6M forced ERP migration under duress + $18K–$25K unneeded serial forms add-on after physical rack audit.

From your chair · Managing partner & CPA lens

Speed when closings are on the line — restraint when client files are privileged

A Connecticut law firm’s real-estate closing emails were suddenly quarantined by a lender’s gateway because an outside web agency’s WordPress server was silently serving browser exploit code across all 57 public pages. We didn’t even hold the website contract — we jumped in anyway.

In 48 minutes, we decoded the payload, sanitized 3,543 internal links, and stood up a clean static clone; within 3 hours 29 minutes, we verified all 11 Microsoft 365 mail records byte-for-byte and cut production DNS over with zero email downtime. And when regulated firms need mailbox forensics, we scope exposure via metadata with zero client message bodies read.

What this reveals about Reboot

We never say “not our contract” while your firm’s domain reputation is burning on a closing day.
We treat attorney-client privilege and 26 CFR §301.7216 tax confidentiality as engineering constraints, not afterthoughts.

REBOOT · INCIDENT CONTAINMENT & CUSTODY LOG

Out-of-Scope Domain Rescue & Zero-Body Forensic Scope

CONTAINED · 0 DOWNTIMEDOC: RBT-IR-SPECIMEN-03

Clock	Containment / Forensic Milestone	Verified Outcome
T + 00m	Lender email quarantine alert received; obfuscated script found on 57/57 agency-hosted pages	0 FIRM PC FOOTHOLDS
T + 48m	Malicious payload stripped; 3,543 internal refs verified (0 broken); clean edge clone live	48m CLEAN CLONE
T + 3h 29m	11/11 M365 MX, SPF, DKIM & DMARC records matched byte-for-byte; DNSSEC + MTA-STS enabled	0 MAIL DROPPED
Forensic Sweep	Regulated mailbox egress audit + native Purview hold + 18-write tenant lockdown	0 BODIES / PDFs READ

Managed Fleet ImpactDNS filter blocked C2 · 0 infections

Confidentiality PostureMetadata-only · Temp role stripped

Vendor Hygiene Fix3rd-party Global Admin demoted

Privilege & §7216 discipline: Scoped header and attachment counts without opening client correspondence or downloading regulated PDFs; temporary elevation revoked immediately post-hold.

From your chair · Partner, CPA & compliance lens

We never hand you a template that lets you sign an untrue sentence

Fill-in-the-blank WISP templates are dangerous: if you sign IRS Form W-12 Line 11 or a cyber renewal claiming controls nobody turned on, that binder becomes Exhibit A against you. Our compliance pipeline physically blocks document generation if any claimed control lacks dated proof on disk.

And look at Row 04: instead of holding permanent keys to your kingdom, we mail the Managing Principal a blank hardware FIDO2 key in a tamper-evident sleeve. You set the PIN live. Reboot holds zero standing Global Admin roles, zero knowledge of your PIN, and watches the emergency account every five minutes across three independent channels.

What this reveals about Reboot

Every promise in your binder points to a real, hashed configuration export.
You stay sovereign over your tenant from Day 1 — we earn retention by service, never lock-in.

REBOOT · EVIDENCE-GATED WISP & CUSTODY RECORD

Control Commitment Matrix & Zero-Knowledge Break-Glass Seal

LINTER ENFORCEDDOC: RBT-GOV-SPECIMEN-04

Control Claim	Backing Artifact Required	Gate State
Phishing-resistant MFA enforced on all users; legacy auth blocked	CA-Policy-Export.json (sha256: 4a19…c82f)	VERIFIED LIVE
External mailbox auto-forwarding disabled at tenant transport layer	RemoteDomain-Audit.json (sha256: 88e1…19b4)	VERIFIED LIVE
Unverified template claim (example: quarterly tabletop not yet logged)	Missing artifact → moved to Dated Action Plan	RENDER BLOCKED
Client-sovereign FIDO2 hardware break-glass key in fireproof custody	Tamper sleeve #REDACTED · 5-min 3-channel watch	0 STANDING MSP GA

Standing MSP Global Admins0 (JIT elevation only)

Break-Glass PIN CustodyClient-set live · 0 MSP knowledge

Canary Watch CadenceEvery 5 min · Voice + SMS + Mail

What this document is / is not: Verifies technical control state and custody boundaries as of export date; operational readiness evidence — not legal advice or a statutory safe-harbor determination.

After the 48-minute emergency website rescue

“You jumped on and turned that around faster than anyone I’ve seen in the industry, in any industry… The way that we got the website back up and running in the time frame that we did spoke volumes to me about our relationship, and your capabilities as well. So it just makes me comfortable.”

— Managing Principal · Connecticut law firm (recorded review call · client name held by default)

Curious where your own receipts stand?

Run our 90-second browser-local readiness check before your next renewal or audit.

Run the readiness check →

Request a conversation →Run 90-second readiness check Book a time