A bounded implementation sprint for one API or webhook workflow using a mock fixture or client-owned sandbox. I map and implement one trigger-to-output slice, test duplicate and retry behavior, identify human approval points, and return working sandbox evidence plus migration and rollback notes. Access uses a revocable least-privilege native invitation; raw secrets stay in your provider or vault. Production promotion is separately scoped after sandbox acceptance.