Services · Forward deployed engineers

Forward deployed engineers who stay until the system is running.

Senior engineers who work inside your environment, on your real data and your real approval path, and who are accountable for the system running in production. A named production date and a named handover date, both agreed before we start.

100%
Of released code written by AI, and proven by an eval suite
Week 1
The timeline we scope to for something running on your real data
2 dates
A production date and a handover date, named before we start

Inside your environment, accountable for the outcome.

In your repository

Production code merged and running, not a document describing how it should work.

Discovery on site

The specification is written inside your environment, because it cannot be written from outside it.

Evals from the spec

Checks written before the code exists and graded by something other than the model.

A mapped release path

We find out what it takes to reach your production in week one, not month three.

A named handover

Your engineer releases a change without help before we leave. That is the test.

Limited by contract

A production date and a handover date, agreed at signature rather than discussed later.

A forward deployed engineer works inside your organization rather than beside it: your repository, your data, your authentication, your release path. They write production code and they stay accountable until the system is running. That is the model Palantir created and AWS, OpenAI and Anthropic now run, and it is what we do.

This page is what we sell and where its limits are. If you want the subject rather than the sales pitch, the forward deployed engineering guide is 46 pages of it, including the case against the model and the questions to ask us.

What you get

Engineers in your repository. Not a design document and not a proof of concept that somebody else makes ready for production. Code that gets merged and runs. Around 80 percent of the week goes on building, which is the split First Round Review describes as healthy and the one that separates this work from presales.

Discovery inside the environment. The reason the model exists is that the specification cannot be written from outside. We work with the people who will use the system, query the real tables, and produce the list of what differs from the description. That list arrives in the first two weeks and it is the most useful thing you will get early.

Something running in week one. Small, real, against production data. It is a tool for defining the scope rather than a demo: what breaks tells us more than a planning document would.

A mapped path to production. In week one we ask what has to be true for a change to go live, who approves each step, and how long each has historically taken. That answer sets the schedule more than the build does, and discovering it in month three is how deployments get delayed.

What is different here

The code is AI-written and an eval suite proves it. Every change has to pass checks derived from the specification, written before the code exists, and graded by something other than the model that produced the code. Generated code is not secure by default, which is exactly why the verification is the product rather than an afterthought.

Which is why the price is different. We use AI instead of hiring more engineers, so the same build takes a small team, and that saving goes into your price rather than our margin. It applies to a portion of the work: discovery, integration and getting through your approval path still take human time. We do not publish a percentage, because no discount has been measured and a number we cannot show the calculation for is worth nothing.

The eval suite is also the handover. Documentation tells your team how the system works today. A runnable suite tells them whether their change broke it, which is the only version that lets them own it.

The limits

Two dates go in the contract before we start.

A production date. The date the defined system is running for real users. Not a design delivery date and not a pilot date.

A handover date. The date we stop operating it and your engineers take over, with a named person on your side who has been involved since the production phase, and a handover test: your engineer releases a real change through your real release path, without help, while we are still there in case it fails.

We are explicit about this because the failure mode of the model is the engagement that never ends. AWS named customer self-sufficiency after the engagement as a design goal of its own programme, and that is the right standard. An engagement without an ending has stopped being a deployment.

Two ways to buy it

A team on your problem. You have an outcome that has to reach production inside your environment. We take it, with the two dates named.

Engineers into your customer accounts. You sell AI into large companies and the gap between your product working and your customer getting value is measured in weeks of engineering. We supply the delivery team, working under your brand or alongside it. This is the as-a-service route, and it exists because building the function inside your company takes a hiring cycle plus two or three engagements of learning.

What we will tell you not to buy

If your scope can be written down and you have senior technical leadership making the decisions, you want senior engineers under your direction, which is staff augmentation and costs less. The comparison is here.

If your customers all want the same thing, an embedded engineer is an expensive way to do setup work that a simple setup tool could do, and the money is better spent on implementation templates and documentation.

If your contract values cannot pay for an engineer for a quarter, no vendor arrangement fixes that. Compare the full cost of one engineer for one quarter against the value of the deployment before you talk to anybody, including us. What it costs has the arithmetic.

What we cannot show you

We have no client testimonials and no completed-handover reference, because Reveneau is new and inventing either is the fastest way for a consultancy to become untrustworthy. What we will do is put both dates in the contract, tell you exactly what proves the code correct, and hand you an eval suite your team can run.

If you want to check us against the market first, how to choose a partner is the criteria we would want to be judged on.

References

Common questions

What is a forward deployed engineer?

A software engineer placed inside a customer's organization to build and release production software against that customer's real data and systems, and who stays accountable until the deployment is running. The role was popularised by Palantir and is now used by AWS, OpenAI, Anthropic and Google. Three tests separate it from similar roles: they merge production code, they work in your environment, and they are answerable if it does not run.

How is this different from staff augmentation?

Staff augmentation adds senior engineers who work under your direction on the roadmap you own, so you keep control and you keep the delivery risk. Forward deployed engineering hands us the outcome: we decide the approach and we are accountable for the system running. If you have someone senior making the technical decisions, staff augmentation is the cheaper and more sensible purchase.

How long does an engagement last?

It is limited by two dates agreed before we start: a production date and a handover date. The length depends on the scope and your approval path, both of which we map in week one. What we will not do is run an engagement with no agreed ending, because that has stopped being a deployment and become a dependency.

What happens at handover?

Your engineers take over on the agreed date. You get a runbook covering deployment, rollback, alerts and credential rotation, the eval suite derived from the specification, the current specification, and a written list of known compromises. The test is that your engineer releases a real change through your real release path without help, while we are still present to answer questions.

You use AI to write the code. How do we know it works?

Because the checks are derived from the specification before the code exists, and they are graded by something other than the model that wrote the code. Generated code is not secure or correct by default, which is why the verification is the part we build first. The suite is also what you inherit at handover, so your team can change the system and still know whether it works.

Can you supply engineers for our own customer deployments?

Yes. If you sell AI into large companies and the gap between your product working and your customer getting value is weeks of engineering, we can be that delivery team, working under your brand or alongside it. Building the function inside your company takes a hiring cycle plus two or three engagements of learning, which is the cost this route avoids.

What access do your engineers need?

Scoped access to the repositories the work touches, granted to named individuals, plus the data and environments the work requires. Production access defaults to none, and where it is genuinely needed it becomes a named exception with a stated reason, an audit trail and an end date. Our access is revoked on the handover date as a contract term rather than a courtesy.

When would you tell us not to hire forward deployed engineers?

When your scope can be written down and your technical leadership is strong, in which case you want senior engineers under your direction and should pay staff augmentation prices. When every customer implementation is the same, since templates and documentation serve you better. And when your contract values cannot pay for an engineer for a quarter, which no vendor arrangement fixes.

What are you building?

We would love to hear about it and see how we can help.

Send us a message
Start a project