# SHEDKO ADVISORY
## AI-Built Software Due Diligence
**AI can build software quickly. Can the business reliably own, operate, and maintain it?**

Independent assessment of software developed substantially with AI coding tools, for investors, acquirers, and technology leaders. Personally led by Andrey Shedko. The practice is in preparation; preliminary inquiries are welcome.

### Investment questions
- **Maintainability:** Can engineers who did not build it understand, change, test, and maintain it safely?
- **Security and correctness:** Are access controls, data handling, business rules, integrations, and critical functions properly implemented?
- **Technical debt:** Are fragile boundaries, duplicated logic, weak abstractions, missing tests, or hidden dependencies present?
- **Independence:** Can a new team deploy, monitor, recover, and take over the system?
- **Stabilization:** What engineering effort may be needed for a sustainable baseline?

### What is examined
Agreed areas of architecture, code quality, authentication and authorization, critical workflows, regression safeguards, dependencies, deployments, documentation, resilience, and handover. Where relevant, review includes generated implementations that have not been adequately verified. AI use alone does not establish poor quality.

**AI-built** concerns how software was developed. **AI-powered** concerns models used at runtime; an AI-built product may have no runtime AI feature. Model dependencies, data handling, and AI-specific application risks can be added under a separately agreed scope.

### Scope and indicative fees
| Format | Typical delivery | Fee |
|---|---|---|
| Focused AI-Built Assessment — selected high-risk areas | 5–8 business days | €2,000–4,000 |
| Comprehensive AI-Built Due Diligence — broader agreed coverage | 2–4 weeks | €6,000–12,000+ |

These are the focused and comprehensive engagement formats applied to AI-built software, not universal fixed-price packages. Written scope and fee control. Timing starts after sufficient agreed access and inputs; complexity, evidence gaps, and specialist needs affect delivery. Prices exclude VAT where applicable.

### Deliverables and limits
Executive risk conclusion; evidence-supported findings with confidence and coverage limits; maintainability and handover assessment; supportable engineering effort ranges; prioritized actions, including first 90-day priorities within scope; findings walkthrough. Any cost scenario requires explicit rates, roles, dependencies, and assumptions.

Code inspection alone cannot reliably establish AI authorship or provenance. No certification of IP ownership, legal compliance, complete security, or absence of defects is provided. Formal penetration testing and other specialist work need separate scope and confirmed availability. Materials require authorized access and agreed confidentiality terms. Owner-commissioned work is a Technical Readiness Assessment, not independent buy-side diligence.

**Request an assessment:** andrey@shedkoadvisory.com · https://shedkoadvisory.com/contact
