Engagement mode

Urgent Security Support

Establish the facts, reduce immediate exposure, and restore a controlled technical path.

Restore control

Stabilize the situation and establish a controlled path forward.

Foldspan first confirms whether a safe and useful role exists. If it does, the work establishes what is known, what must stop or change, which evidence matters, who has authority, and what recovery path can proceed safely.

Establish the facts

Build one reliable picture of the problem.

Reconcile architecture, telemetry, prior findings, technical claims, and the current operating state without accepting sensitive evidence through public intake.

Reduce exposure

Sequence safe containment and mitigation.

Clarify authority, identify actions that reduce consequence, and protect the recovery or investigation path.

Restore the path

Move from urgent action to controlled ownership.

Establish the design, validation, recovery, specialist transfer, and closure records required for a safe handoff.

Work begins after authority, fit, conflicts, safety, secure handling, insurance, competence, capacity, and communications are confirmed.

Use urgent support when consequence is rising and the technical path is unclear.

A brief, high-level description is enough for fit and routing. Sensitive material moves through a protected channel after authority and secure handling are confirmed.

An AI system is behaving in a way the team cannot safely explain or contain.

Agent authority, model behavior, tool use, sensitive data, identity, or provider dependencies have created exposure or blocked a critical action.

Clear roles

Experienced technical direction without blurred authority.

Foldspan establishes the technical picture, challenges weak assumptions, directs approved technical work, and defines the recovery or handoff record. Counsel retains legal authority; forensic specialists retain forensic ownership; your leaders retain production and risk decisions.

Private intake

Provide the sponsor, high-level situation, city when travel may be needed, and timing. Do not send credentials, logs, system details, regulated data, incident evidence, confidential identities, or privileged material through the website or ordinary email.