Excerpted from a real (anonymized) audit deliverable. The full version is ~25 pages including diagrams; here's the structure:
Section 1 - Inventory
Every AI workload in production. Model + version, monthly cost, latency p95, owner, last-eval-run date. Tabular, exportable for procurement review.
Section 2 - Cost analysis
Per-workload cost breakdown vs baseline. Found in past audits: 40-70% inference savings unlocked by prompt caching + model routing. Concrete numbers per workload, not hand-waving.
Section 3 - Reliability
Eval coverage map per workload. Drift detection. Known failure modes. Most-common gap: 60-70% of workloads have no eval harness; reliability is asserted, not measured.
Section 4 - Security
Prompt-injection exposure per workload. PII / PHI / PCI flow paths. Audit-log completeness for regulatory review. Adversarial test suite recommendations.
Section 5 - Prioritized fix list
Every finding scored on impact × effort. Top 10 ranked. Each with effort estimate (engineer-weeks) so your team can plan the work themselves OR contract AISD to ship it.
The audit itself is fixed-scope, fixed-price ($15,000-$25,000 depending on workload count), and ships in 2-4 weeks. We don't sell follow-on retainers - the fix list goes to your team or becomes a separate engagement scoped against the prioritized list.