T.00 Tradewinds Solutions Marketplace
Tracepoint: From Audit Findings to a Verifiable Remediation Package.
The submission film and its supporting record, in one place. Tradewinds assessors score the video alone; this page is the record behind it, with every figure linked to its source on this site.
SHA-256 32643e868255a138ab763361a2bcc174790bfea5520cae32a39ce22032a118d0, as submitted 30 September 2026. The file served here is byte for byte the file the marketplace received. This film and this page are frozen as of that date; any later correction appears as a dated note here rather than in the film.
Product footage uses synthetic data for a fictional unit (759th Brigade Engineer Battalion) and public data from the GAO Recommendations Database, retrieved 17 September 2026. Measurements were taken on 28 September 2026 on the build shown.
T.01 The film, chapter by chapter
Seven chapters in four minutes and fifty-eight seconds.
| From | To | Chapter | What is on screen |
|---|---|---|---|
| 0:00 | 0:01 | Title | The title card |
| 0:01 | 0:28 | The problem | The Department's own figures: findings reissued year after year, with the DoD OIG and GAO sources on screen |
| 0:28 | 2:19 | The solution | One finding worked on the real build, from import to a reviewer package; TRL 6 stated at the start |
| 2:19 | 2:52 | Measured results | The figures with their conditions: 10,000 findings to a 50-artifact package, the property book preview, the handling of planted defects |
| 2:52 | 4:06 | Why Tracepoint, and the business model | What a reviewer can check without us, the package digest and human confirmation on screen; the license model from 3:36 |
| 4:06 | 4:47 | The maturation plan | TRL 6 to TRL 9 through a live pilot and independent review |
| 4:47 | 4:58 | Close | The synthetic-data disclosure and the vendor |
T.02 The four scored criteria
Where each criterion is answered, in the film and on this site.
The submission form names four criteria, in the Announcement's own words. Each is mapped to the chapter that carries it and to the page or document where the evidence sits.
Film 0:01 to 0:28. The DoD OIG reports 622 findings reissued seven times since FY2018, and for FY2025 2,485 findings issued, 1,911 reissued, and 929 with no remediation date; GAO found the corrective action field populated for 33 of about 3,700 records. On the site: the figures under the home page hero and Document 01, The problem in numbers.
Film 0:28 to 2:52. One finding worked on the real build, then the measured results with their conditions. On the site: how the product works and the measured results, with Document 02, Performance and handling.
Film 2:52 to 3:36. What a reviewer can check without us: every record, every evidence hash, the trail in order, and a recomputable digest, with a named person's confirmation on the trail and nothing closing on its own. On the site: security and trust, the comparison, and Document 03, Threat model and Document 04, Competitive landscape.
Film 3:36 to 4:47. An annual site license per reporting entity in eight tiers that follow the echelons, no per-seat fees, the purchase routes, the team, and the maturation plan. On the site: pricing and how to buy, the company, and Document 05, Business model.
Assessment through the marketplace does not guarantee any current or future award. This page states the record as submitted and nothing more.
T.03 The abstract, as submitted
The solution abstract.
Tracepoint is the workspace where a DoD audit finding is worked, built for the person who holds it, at any scale, from a single section to a headquarters. Today the plan sits in one tracking system and the proof in spreadsheets and shared drives. The DoD OIG counts 622 findings reissued seven years running.
It runs in the browser on a unit's own machine, with no server and no network calls. A property book, findings register, scan or balance goes in as it came from GCSS-Army, the NFR Database or eMASS. The import preview fingerprints the file and names every duplicate, blank or refused row before anyone confirms. Suggestions come from written rules that cite their regulation, and every decision goes on an append-only trail under a named role. The audit is worked end to end in one place, from intake to closure: findings link to controls, corrective actions carry dated steps, evidence is hashed, and the guided walk runs existence counts, completeness samples and balance reconciliations. One export builds a package a reviewer opens with nothing installed; its digest is recomputable and it restores anywhere.
Shown on the real build: 10,000 findings to a 50-artifact package in 7.5 s on one laptop; 500 broken rows handled by rule; exports to eMASS, OSCAL and ODCFO. TRL 6 with a written threat model; a twelve-month plan to TRL 9 through a live pilot and independent review. Annual site license per reporting entity, no per-seat fees. A&R Strategic Solutions, SBA-certified SDVOSB.
T.04 Keywords, as submitted
The keywords.
audit remediation, corrective action plan, NFR, POA&M, eMASS, ODCFO, OSCAL, evidence provenance, audit trail, property accountability, GCSS-Army, AR 710-4, financial statement audit, FIAR, reviewer package, offline, deterministic rules, SDVOSB, TRL 6
T.05 Readiness and the plan
TRL 6, and twelve months to TRL 9.
Tracepoint is at Technology Readiness Level 6 under the DoD Technology Readiness Assessment Guidebook, February 2025, Table 2-2, with a written threat model and independent verification ahead. The maturation plan runs twelve months in three phases: a live pilot with one reporting entity and the manual baseline measured; the full findings population with exports validated against the live eMASS and NFR Database workflows; and sustainment through the audit test period with an independent review. The license option activates after the second phase. The phases in full.
T.06 Measured, on the build shown
The figures the film states, with their conditions.
| Measured | Result | Condition |
|---|---|---|
| 10,000 findings to a 50-artifact package | 7.5 s | One laptop, each of three runs; 10,000 of 10,000 rows created |
| 10,000-line property book, import preview | 0.44 s | File fingerprinted, every conversion and gap listed before anything is created |
| Today screen on the full corpus | 1.0 s | Every screen inside its render budget |
| 500 planted broken rows | By rule | 23 refused with the reason, 28 blank fiscal years flagged, 37 defaulted and disclosed, 33 duplicates named |
| Automated checks before every commit | 2,213 | Date handling exercised in four time zones |
T.07 The supporting documents
Six documents, published as prepared for the marketplace, with any revision dated inside.
- D.01The problem, in numbersCited public figures on the DoD remediation backlog, and an explicit account of what we decline to state because it cannot be substantiated.Tradewinds resubmission
- D.02Performance and data handlingMeasured results against the shipping code at 100, 1,000, and 10,000 findings, plus what the product does with deliberately imperfect data. Includes the defects benchmarking found in our own product.Tradewinds resubmission
- D.03Threat model and security postureWhat append-only and tamper-evident mean on a machine the user controls, ten named threats, and what the product does not defend against.Tradewinds resubmission
- D.04Competitive landscapeWhere Tracepoint sits against GRC platforms, audit suites, evidence repositories, and the spreadsheets most of this work runs on today.Tradewinds resubmission
- D.05Business model and pricingTiers, prices, license terms, data rights, and the acquisition paths a government buyer can actually use.Tradewinds resubmission
- D.06Scope, users, systems, and integrationWhat is in scope and what is not, the six roles, the formats in and out, and how duplicates, conflicts, incomplete records, and classified material are handled.Tradewinds resubmission
T.08 The vendor record
What a reviewer looks up first.
| Item | A&R Strategic Solutions, LLC |
|---|---|
| Unique Entity ID | GYNSEG3M4CY7 |
| CAGE code | 21E37, SAM.gov active |
| Certification | SBA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB) and Veteran-Owned Small Business (VOSB), entered August 2026, through August 2029 |
| NAICS | 541611 primary; 518210, 541430, 541511, 541512, 541519, 541618, 561110, 611430 |
| Purchase paths | Government purchase card under the micro-purchase threshold for the first three tiers, simplified acquisition to Command, SDVOSB sole source under FAR 19.1406, and the Tradewinds pathway |
| Contact | info@arssconsulting.com, (775) 900-4546 |
T.09 Next step
The application the film shows is running on this site.
Load the worked example and take a finding from intake to a sealed package.