How an engagement runs

How a forward deployed engagement runs

A forward deployed engagement runs in five phases: discovery inside the environment, a prototype against real data, deployment to production, productizing what turned out to be reusable, and scaling back so the customer's own team runs it. The first three are what everyone plans. The fourth is what turns one customer's work into a product. The fifth is the one that gets skipped, and skipping it is the difference between a deployment and a dependency. AWS describes a similar three-phase shape for its partner programme, ending with the partner working independently.

Key takeaways

  • Five phases: discover in the environment, prototype on real data, deploy to production, productize what repeats, scale back to the customer's team.
  • Discovery does not finish. It runs alongside building, because building is what surfaces the next question.
  • AWS's partner model follows the same arc, moving from embedded support to helping the partner scale to the partner working independently.
  • Phase five needs a date in the contract at signature. An engagement whose ending is decided later does not have one.

An engagement that works has a shape. Here it is, and the honest note about which parts get skipped.

Phase one: discovery inside the environment

Not a discovery call. Sitting with the people who will use the thing, in the place they work, looking at the systems that exist.

The reason this cannot happen from outside is the reason the role exists. A description of a process is a description of the process somebody believes exists. The real one has exceptions, a spreadsheet somebody maintains by hand, and a step everyone skips on Fridays.

Discovery does not end when this phase does. It runs through the whole engagement, because building is what surfaces the next question. Discovery inside the customer environment covers the technique.

What comes out of it: a written statement of what the system must do, what correct looks like, and which single outcome the first release moves. If that document does not exist, later phases have nothing to check against.

Phase two: prototype against real data

Something working, on the customer's actual data, early. Not a mockup, and not a demo on a curated slice.

The reason for haste here is diagnostic rather than commercial. What breaks when you try to ship something small in week one tells you more about the engagement than any planning document: the data is dirtier than described, the API times out under real load, the permission model does not distinguish two roles the business treats as different. What a forward deployed engineer ships in week one covers this.

The trap: a prototype that impresses people and cannot be hardened. If the prototype's shortcuts are load-bearing, you have built the thing that will be pointed at in month four when somebody asks why production is late.

Phase three: deploy to production

The unglamorous phase, and the one that decides the outcome. Change advisory board, security review, penetration test, data protection assessment, release window, and the finance approval for the data access nobody mentioned.

Engineers arriving from product companies underestimate this consistently. The code was ready in week five and the system went live in week fourteen, and none of the intervening time was engineering.

Plan it from day one. Ask in week one what has to be true for a change to reach production, who signs, and how long each signature historically takes. That answer sets the schedule more than the build does.

What comes out of it: the system running, for real users, with monitoring somebody watches and a rollback path somebody has tested.

Phase four: productize what repeats

This is where an embedded function becomes a business rather than a cost.

Somebody has to look at what was built and ask which parts generalise. The pattern in the industry, described from both the investor and the product side, is a rough custom solution first and a reusable capability second: a16z's Marc Andrusko frames the failure of skipping it as thousands of bespoke deployments nobody can maintain or upgrade.

The discipline is a stop rule. First Round Review states it well: expand scope when the work creates reusable value, and stop when the next iteration will only ever serve this one customer.

The AWS partner programme names the artefacts this phase should produce: reusable delivery harnesses including domain ontologies, evaluation frameworks and capability registries.

The productization loop covers the cadence and who owns it.

Phase five: scale back

The customer's own team runs the system and the embedded engineers leave.

This is the phase that gets skipped, and it does not get skipped by decision. It gets skipped by drift: there is always one more improvement, the customer would rather you kept operating it, and both sides find the arrangement comfortable.

AWS named customer self-sufficiency after the engagement as a design goal of its own programme, and its partner model ends with the partner team working independently. That is the right shape.

What it requires: a handover date in the contract at signature, a named person on the customer's side who will own the system, that person involved from phase three rather than introduced at the end, and a handover artefact that is a runbook and a test suite rather than a slide deck. Handover and exit covers it properly.

How the phases overlap

They are not a waterfall. Discovery runs throughout. Productization starts as soon as the second customer wants something similar. Handover preparation starts at phase three, because a system documented at the end is documented by someone trying to leave.

The sequence that does hold: nothing goes to production before somebody has written down what correct means, and nobody leaves before somebody on the customer's side has run the system unaided.

Where the phases go wrong

Phase one skipped because the customer said they knew what they wanted. The build is fast and solves the described problem rather than the real one.

Phase two stretched into a six-month prototype nobody deploys. The tell is a demo that gets better each month and a production date that does not move closer.

Phase three underestimated. The most common cause of a missed date, and the most predictable.

Phase four never staffed. Nobody owns generalising, so nothing generalises.

Phase five undated. The engagement continues because ending it was never anybody's job.

What goes wrong in forward deployed engagements collects the tells for each.

How we run it

Same five phases, with the specification written to the level our tooling generates from, and an eval suite derived from that specification before the code exists. The suite is what lets phase two move quickly without making phase three worse, and it is the handover artefact that matters most in phase five: your team inherits the checks, not just the code.

Common questions

What are the phases of a forward deployed engagement?

Five. Discovery inside the customer's environment, a prototype against real data, deployment to production, productizing whatever turned out to be reusable, and scaling back so the customer's own team runs the system. Discovery continues throughout rather than finishing, because building surfaces the next question.

Which phase is most often underestimated?

Deployment to production. Change advisory boards, security review, penetration testing, data protection assessment and release windows routinely take longer than the build. Ask in week one what has to be true for a change to reach production, who signs it, and how long each signature historically takes.

Which phase gets skipped?

Scaling back. It is not skipped by decision, it is skipped by drift: there is always one more improvement and both sides find the arrangement comfortable. The fix is structural, a handover date in the contract at signature, plus a named owner on the customer's side involved before the end.

How long should each phase take?

There is no defensible published distribution, and we do not invent one. What should be fixed at signature is the production date and the handover date. Working backwards from those two dates is more useful than adopting somebody else's phase lengths.

What should the handover artefact be?

A runbook and a test suite the customer's team can run, rather than a slide deck or a document describing the architecture. The strongest version is the eval suite derived from the specification, because it lets the inheriting team change the system and still know whether it works.

Does the productization phase apply if there is only one customer?

It applies from the second one. With a single customer there is nothing to generalise across yet, and the useful discipline is keeping the custom layer thin and sitting on shared infrastructure, so that when a second customer arrives the generalising is possible rather than a rewrite.

More in How an engagement runs

The first two weeks of a forward deployed engagement

The first two weeks decide the pace of everything after them. By day ten a working engagement has shipped something small against real data, written down what correct means, and mapped the path a change takes to production. The most common way to lose those two weeks is access: an engineer waiting on repository credentials is the most expensive idle resource in the building. Three things have to exist before day one, and all three are the customer's to provide.

Discovery inside the customer environment

A discovery call gives you what the customer can describe. Being inside the environment gives you what nobody thought to mention, and that second category is where deployments break. Marty Cagan's argument for the embedded model is that it is a product discovery technique rather than a delivery technique: engineers who visit multiple customer sites see the similarities and differences across a market, which is the essence of customer discovery. The practical version is that the environment is the instrument, and you cannot read it from outside.

What a forward deployed engineer ships in week one

A forward deployed engineer should ship something small and working against real data in the first week. Not a mockup and not a demo on a curated slice: one transform, one screen reading live records, one integration returning a real response. The point is diagnostic rather than promotional. What breaks when you try to ship something tiny tells you more about the engagement than any planning document, because it forces contact with the data, the permissions and the release path all at once.

Handover and exit from a forward deployed engagement

The ending of a forward deployed engagement has to be designed at the start, with a date in the contract at signature. An engagement whose conclusion is decided later does not have one: it drifts, because there is always one more improvement and both sides find the arrangement comfortable. AWS named customer self-sufficiency after the engagement as a design goal of its own programme, and its partner model ends with the partner team working independently. The test of a handover is not whether documents were delivered. It is whether the customer's own engineer has changed the system, alone, before the vendor left.

What goes wrong in forward deployed engagements

Forward deployed engagements fail in a small number of recognisable ways, and most of them are visible by week three if you know the tell. The endless engagement. The demo that never hardens. The engineer who became an account manager. The bespoke fork nobody can upgrade. The pilot that was never going to production. And the handover that was a slide deck. Each has an early signal and a specific intervention, and none of them get fixed by the engineer working harder.