velocity
Brand & Proposal System · v3 · 30 August 2026

One system for every document the organization ships.

Cobalt Ledger, slate light: one tinted-gray ground, two data inks, one typeface. This page is the working kit. It holds the colors, type, components, tables, chart variants, slide layouts, document and pamphlet templates, and the Word and PowerPoint style map. A document built from it satisfies the formatting instructions that repeat across federal solicitations before anyone edits a page.

Read the compliance rules Build the Word template
BODY TYPE
11pt

Manrope Regular, 1-inch margins, single column. Steps to 12pt when the solicitation says 12pt.

MINIMUM IN FIGURES
9pt

Tables, captions and chart labels never go below 9pt, whatever the page limit pressure.

Contents

Read 01 before every submission — it is the only section a solicitation can override. Everything else is fixed for the organization: if a document needs something this kit does not contain, add it here first, then use it.

Section 01

Federal formatting rules the templates already satisfy

Every template on this page is drawn inside the constraints below. They come from the way agencies define a page and from the instructions that repeat across solicitations. None of them is a matter of taste.

The constraints
Baseline page definition
RuleSetting in these templates
Sheet8.5″ × 11″, one side = one page. Foldouts count as the equivalent number of 8.5 × 11 pages.
Margins1″ on all four sides. Nothing but the header, footer and page number lives outside it.
Body type11pt Manrope, single column, 1.15 leading. Not smaller than 12pt where a solicitation defines a page that way.
Tables, figures, captions9pt floor. Many instructions permit smaller type in tables and graphics; 9pt is where readability stops.
Line densityNo more than six lines of body text per vertical inch.
Page numbersEvery page, bottom right, Volume · Section · Page x of y.
The solicitation always wins

Section L governs. If it names a font and size — 12pt Times New Roman is the common one — set the document in it and keep only the structure, color and graphics from this system. A non-compliant page count or typeface can put a proposal out without review.

Compliant fallback stack

When a face is mandated, map it: body → Times New Roman 12 or Arial 11; headings → the same face, bold, one step up; tables and captions → the same face at 9–10pt. Never mix the mandated face with Manrope in the same volume.

CUI and other markings

If any volume contains Controlled Unclassified Information, it carries a CUI banner marking centered at the top and bottom of every page, portion markings where the agency requires them, and a designation indicator block on the first page naming the controlled-by office, category, distribution limits and point of contact. CUI markings are separate from the proprietary legend and never replace it. Classified work does not use these templates.

What is excluded from page limits

Usually the cover, table of contents, tab dividers, acronym list, cost volume and resumes — but only when the solicitation says so. The cover and divider templates here carry no body content for that reason.

Not every solicitation has an L and an M

Sections L and M belong to negotiated procurements under FAR Part 15. Commercial-item solicitations issued on an SF-1449 under FAR Part 12 put the instructions and evaluation basis in addenda to the form, and simplified acquisitions may carry only a quote instruction in the RFQ text. The compliance matrix works the same way in all three cases: cite whatever the document calls its instructions, paragraph by paragraph.

Volume structure the templates assume

Vol I · Technical

Understanding, technical approach, management approach, staffing, transition, risk. Page-limited.

Vol II · Past Performance

CPARS-backed references on the past-performance sheet layout, one per page.

Vol III · Price

CLIN tables, basis of estimate, assumptions. Normally not page-limited.

Vol IV · Contract & Reps

SF-33/SF-1449, representations and certifications, subcontracting plan.

Every volume uses the same cover, divider, header/footer and figure-numbering conventions, so a reviewer moving between volumes never has to re-learn the document.

Section 02

The mark and lockup

Prism is one solid V split down the vertex: cobalt on the leading leg, ember on the trailing leg, with the seam on the center line. It is a single letterform rather than two shapes. The lockup is stacked, with the word spelled out beneath the wedge. Nothing is ever set beside the glyph.

02.1 Sizes and grounds
velocity
Clear space = the height of the wedge, all four sides
velocity
On ember-deep — whole lockup to card, 4.8:1
velocity
On ink — word steps to ember-light, 7.4:1
velocity
Single ink — print, fax, engraving, embroidery
02.2 Minimum sizes

Digital

Lockup no smaller than 16px wedge height (≈1rem setting). Below that the seam closes and the two legs merge.

Print

Lockup no smaller than 0.25 in wedge height. On coated stock the seam holds; on uncoated, go one step larger.

Favicon and avatar

Wedge alone, no word, on card or ink. 16 · 32 · 180 · 512px. The word is implied by context.

02.3 Misuse — each of these is a rejection
velocity
Never skew, rotate or stretch
velocity
Never recolor outside the token set
velocity
Never set the word beside the wedge
velocity
Never substitute the face or re-track the word

Also never: a tagline inside the clear space, the lockup on a photograph without a solid panel behind it, a shadow or outline on the wedge, or a reproduction with a gap between the legs.

Section 03

Color

One tinted cool gray carries every surface. Cobalt and ember carry every mark. All neutrals sit at OKLCH hue 260–262, which is cobalt's own hue at a whisper of chroma, so the grays belong to the brand rather than sitting next to it. No pure white, no pure black, no untinted gray.

Surfaces and ink
ground#E3E6EC
surface#F1F3F7
card#FCFDFF
ink#1A1E26
body#2C3038
muted#585E68
hairline#D4D8DD
hairline-strong#BABEC4
Brand
cobalt · 6.4:1#0E52BD
cobalt-deep · 8.7:1#003D9F
ember · 3.1:1#D56D1D
ember-deep · 4.4:1#BE5000
Data series — fixed order, never cycled
1 · 2 · 3 · 4 · 5 · 6≥3:1 on card
sequential · magnitudeL* 24→72
ok · warn (fill only) · error+ icon + label
Measured contrast — every pair that carries text
Contrast reference — WCAG ratios, sRGB
Foregroundon ground
#E3E6EC
on surface
#F1F3F7
on card
#FCFDFF
on ink
#1A1E26
Verdict
ink #1A1E2613.415.016.4—AAA · all text
body #2C303810.611.913.0—AAA · all text
muted #585E685.25.96.4—AA · captions, labels
cobalt #0E52BD5.76.47.01.5AA text · never on ink
ember-deep #BE50003.94.44.83.5AA on card/surface only
ember #D56D1D2.83.13.44.8Marks and large type only
ember-light #F695571.61.82.07.4Dark grounds only
card #FCFDFF———16.4Reversed text
ok #246A47 · err #9527325.2 · 6.45.9 · 7.26.4 · 7.9—AA · always with a glyph

Two pairs are excluded and must never be used: cobalt on ink (1.5:1) and ember-light on any light surface (under 2:1). Warning amber is a fill only. It carries ink text at 8.5:1 and is never itself a text color.

Adjacent series slots always oppose blue against orange. That is the one axis that survives protanopia, deuteranopia and tritanopia (adjacent ΔE ≥ 65 in all three, CIE76 on Viénot simulation). Same-family slots separate on lightness alone, so scatter, bubble, map and small-multiple charts cap at three series (slots 1, 2 and 5) or facet instead. Status hues never appear in a chart, so a status can never impersonate data.

Section 04

Type

Manrope for everything — wordmark, headings, body, slides, UI. JetBrains Mono for eyebrows, labels, code, figure numbers and tabular figures. No third face. Figures set tabular wherever they stand in a column.

Screen scale
Display / 34px / 800Production from day one
H2 / 22px / 700Technical approach
H3 / 16px / 700Transition and onboarding
Body / 16px / 400We design, build, and operate agentic AI on your cloud — shipped as code you own, with an audit trail on every action.
Small / 13px / 400Cleared · federal & SLED · scale-to-zero infrastructure
Eyebrow / mono 11pxAgentic AI · built & operated
Figures / mono94s · $2,480,119 · 99.982% · 2026-08-30
Print scale — the one that ships in proposals
RoleFace & weightSize / leadingSpace before / afterMandated-font fallback
Volume titleManrope ExtraBold 80028 / 30pt— / 12ptTimes New Roman Bold 20pt
Heading 1 (section)Manrope Bold 70016 / 19pt18 / 6ptTimes New Roman Bold 14pt
Heading 2Manrope Bold 70013 / 16pt12 / 4ptTimes New Roman Bold 12pt
Heading 3Manrope SemiBold 60011.5 / 14pt10 / 3ptTimes New Roman Bold Italic 12pt
BodyManrope Regular 40011 / 14pt0 / 8ptTimes New Roman 12 / 14pt
Bullet L1 / L2Manrope Regular 40011 / 14pt0 / 4ptTimes New Roman 12pt
Table headerManrope Bold 7009.5 / 12pt3 / 3ptArial Bold 9pt
Table bodyManrope Regular 4009.5 / 12pt2 / 2ptArial 9pt
Figure / table captionJetBrains Mono 5009 / 11pt4 / 8ptArial 9pt
Header / footerJetBrains Mono 4008.5 / 10pt— / —Arial 8.5pt

Caption convention: Figure 3-2. Continuous ATO pipeline. — volume-section-number, period, sentence case, one line where possible. Tables take Table 3-2. in the same pattern and sit above the table; figure captions sit below the figure. Every figure and table is called out in the body text before it appears.

Section 05

Layout, spacing and elevation

One 4px spacing scale for screens, one 12-column page grid for documents, one 12-column grid for slides. Radius and elevation have three steps each. A value that is not on these scales is an error rather than a choice.

05.1 Spacing scale — 4px base
space-14px · 0.05in
space-28px · 0.1in
space-312px · 0.125in
space-416px · 0.17in
space-524px · 0.25in
space-632px · 0.33in
space-748px · 0.5in
space-864px · 0.67in
Page and slide grids
SurfaceGridGutterMargin
Proposal page (8.5×11)12 col · 0.542in each0.17in1.0in
Slide (13.33×7.5)12 col · 0.96in each0.2in0.9in / 0.75in
Tri-fold panel (3.66×8.5)4 col0.14in0.3in
Web / kit page12 col · max 1180px16px40px
Column rule

Proposal body copy is single-column at a 6.5in measure — two columns save space but break screen reading and reflow badly for accessibility. Tables and figures may span the full measure; nothing may sit in the margin.

05.2 Radius and elevation

radius-sm · 6px

Chips, table cells, chart marks, document pages.

radius-md · 12px

Cards, charts, callouts, slide frames.

radius-lg · 16px

Sections and full-width panels only.

elev-1

Contact edge only — table wrappers, inline blocks.

elev-2

Cards, charts, document and slide thumbnails.

elev-3

Sections — the top of the stack. Nothing sits above it.

Elevation is always a hairline plus a shadow, never a color change. The steps between ground, panel and card are only 4 and 3 points of OKLCH lightness, so the border does the separating.

Section 06

Imagery and icons

Photographs are evidence: real people, real screens, real facilities. Until the real asset exists, the striped placeholder stays in the layout with the required dimensions written on it. An empty frame is honest. A stock photograph implies something the company has not shown.

Photograph

team / facility · 2400×1350 · 3:2 or 16:9

Sits in a 1px hairline frame, radius-sm, no filter, no duotone.

Screen capture

UI capture · 2x scale · crop to the point

Crop to the region under discussion; annotate with cobalt callouts, never red circles.

Icons

Geometric stand-ins shown. The standard is Lucide at 1.75px stroke in a 24px box, currentColor — paste the real path data from lucide.dev; never filled, never two-tone, never a brand logo.

Placeholder contract

Every placeholder states the artifact and the minimum pixel size. A layout may ship to review with placeholders; it may never ship to a customer with one.

Government imagery

Do not use agency seals, logos or personnel photographs in a proposal or on marketing material — endorsement implications, and most agencies prohibit it outright. Name the customer in words instead.

Section 07

Components

Actions and labels

Buttons

PrimarySecondaryGhost

Cobalt fill · cobalt outline · text only

Chips and tags

CobaltEmberNeutralOutline✓ Compliant▲ Partial⬣ Gap

Status chips always carry a glyph and a word

Callouts — three, and no more
Discriminator

Cobalt label. Used for the claim you want an evaluator to carry out of the page.

Assumption

Ember label. Anything the government must confirm, or that prices depend on.

Risk & mitigation

Error label. Paired always — never a risk without its mitigation in the same box.

Evidence blocks
REPO → PRODUCTION
94s

One ember moment per surface — the rule under the number is this card's.

Past performance

GSA · 47PB0224D0019

Continuous ATO pipeline for a 240-user program office; 100% inspection pass rate across four option years.

$510K/yr2022–2026

Figure placeholder

graphic — 1200×675 min

Figure 4-1. Placeholder for a real graphic.

Cards are bordered and unfilled. The only filled surfaces in the system are the cobalt button, the ember ground, the ink ground and chart marks. Elevation is a hairline plus a two-layer shadow, never a color change.

Section 08

Tables

Nine table patterns cover the proposal set. All share one rule set: a 2px cobalt rule under the header, hairline row rules, 3% ink zebra striping, tabular figures right-aligned, header text never rotated, and no vertical rules. Every table carries a numbered caption above it.

08.1 Compliance matrix — the one that gets read first
Table 1-1. Section L / M cross-reference to proposal response
Section L ref.RequirementSection M factorWhere addressedStatus
L.3.1(a)Technical approach to continuous deliveryM.2 Factor 1Vol I § 2.1, pp. 4–7; Figure 2-1✓ Full
L.3.1(b)Authority to operate within 90 daysM.2 Factor 1Vol I § 2.3, pp. 9–11; Table 2-2✓ Full
L.3.2Key personnel and staffing planM.3 Factor 2Vol I § 3.1, p. 14; resumes at Tab C✓ Full
L.3.4Transition-in within 30 days of awardM.4 Factor 3Vol I § 4.2, p. 19; Figure 4-1▲ Partial
L.4.1Small business subcontracting planM.5Vol IV § 2, submitted separatelyN/A — sub

Fill the "where addressed" column with page numbers only after the final page break. The status chip is the internal control. Nothing ships with a partial or a gap left in the matrix.

08.2 Pricing / CLIN table
Table 3-1. Base period pricing by CLIN
CLINDescriptionTypeQtyUnitExtended
0001Platform engineering — laborFFP12$41,600$499,200
0002Cloud infrastructure — pass-throughCR12$18,400$220,800
0003ATO sustainment & audit supportFFP12$9,750$117,000
0004Surge — not-to-exceedT&M1$150,000$150,000
Base period total$987,000
08.3 Milestone schedule · 08.4 RACI
Table 4-1. Transition milestones
#MilestoneDayEvidence
M1Kickoff & access provisioned5Signed in-brief
M2Environment inventory complete14Inventory register
M3Pipeline running in government cloud30First green build
M4ATO package submitted60Package receipt in the authorization system
M5Full operations90Ops acceptance memo
Table 3-2. Responsibility assignment
ActivityPMLead EngISSOCOR
Sprint planningARCI
Release approvalCRAI
Control assessmentICRA
Invoice submissionRI—A
08.5 Risk register
Table 5-1. Risk register — no risk without its mitigation
IDRiskProb.ImpactMitigationOwner
R-01Government access not provisioned by day 5MedHighPre-award access request drafted; read-only start path defined so work begins without production credentials.PM
R-02Control inheritance rejected by the AOLowHighBody of evidence pre-staged in the authorization system of record; two prior AO acceptances of the same package cited in § 2.3.ISSO
R-03Key personnel attrition during transitionLowMedNamed alternates cleared and briefed; retention incentive through the first option year.PM
08.6 Requirement traceability · 08.7 Acronym list
Table 2-5. PWS traceability
PWS ref.RequirementApproach §Deliverable
C.5.1Continuous integration2.2.1Pipeline as code
C.5.2Monthly status reporting3.4MSR, CDRL A001
C.5.3Security control assessment2.3.2SAR, CDRL A004
C.6.1Transition-out support4.4Transition plan
Acronyms — two columns, alphabetical, no page number
TermDefinition
ATOAuthority to Operate
CDRLContract Data Requirements List
CORContracting Officer's Representative
CPARSContractor Performance Assessment Reporting System
PWSPerformance Work Statement
UEIUnique Entity Identifier
08.8 Comparison matrix · 08.9 Dense data table
Table 2-3. Approach comparison
CapabilityThis approachLift-and-shiftStatus quo
Deploys per week✓ 40+▲ 4⬣ 0.5
Audit trail per action✓ Yes⬣ No⬣ No
Government owns source✓ Yes▲ Partial⬣ No
Table 2-4. Monthly service levels, FY26
MonthAvailabilityP1 incidentsMTTR (min)Releases
Oct99.982%018164
Nov99.994%122171
Dec99.971%131148
Jan100.000%0—183
Mean99.987%0.524167
Section 09

Charts

Twelve chart types, one palette, one order. Every chart carries a monospaced caption, a legend when it has more than one series, and axis labels at 9pt or larger. Grid lines are hairlines or absent. No 3D, no shadows on data marks, no decoration, and never more than six series.

06.1 · Column
OctNovDecJanFebMar

Figure 6-1. One series: cobalt only.

06.2 · Grouped column
PlannedActual

Figure 6-2. Two series always oppose blue and orange.

06.3 · Bar (ranked)
Deploy freq.
94
Lead time
71
MTTR
58
Change fail
23

Figure 6-3. Ranked descending, labels left.

06.4 · Stacked / 100%
FY24100%
FY25100%
FY26100%
LaborCloudToolsOther

Figure 6-4. Largest share always at the left.

06.5 · Line
velocityBaseline

Figure 6-5. Dash pattern doubles the encoding.

06.6 · Area

Figure 6-6. Fill at 18% — one series only.

06.7 · Donut
46%24%18%12%

Figure 6-7. Four slices maximum, largest first, clockwise from 12.

06.8 · Heatmap
MTWTFSS Build Test Release Incident
lowhigh

Figure 6-8. Sequential ramp only — never the series palette.

06.9 · Schedule / Gantt
Transition
Pipeline build
ATO package
Full operations
Day 0306090

Figure 6-9. Critical path in ember; everything else cobalt.

06.10 · Waterfall
Base+ scope+ options− riskTotal

Figure 6-10. Base 62 → +16 → +11 → −9 → total 80. The only chart where ok/error hues are permitted, because the sign is the data.

06.11 · Bullet / KPI vs target
Availability
MTTR
Releases

Figure 6-11. Ink tick is the threshold; ember means the target is beaten.

06.12 · Scatter · sparkline

Figure 6-12. Scatter caps at three series (slots 1 · 2 · 5). Sparklines carry no axis.

Chart rules that hold everywhere: label the axis in words and units; put the takeaway in the caption, not in a title; sort categories by value unless time or a required order says otherwise; annotate the one number the reader should remember rather than labelling every mark; and never encode a variable in color alone — pair it with order, position, a dash pattern or a direct label.

Section 10

Diagrams and the quad chart

Four diagram patterns cover the graphics a proposal needs. All are built from hairline boxes, cobalt rules and one ember accent. No gradients, no SmartArt, no isometric clip art. Each drops into slide layout 11.5 or 11.7 and into the body-page figure frame without resizing.

10.1 Process flow — left to right, ember on the gate that matters
01
Commit
Developer pushes to the government repository.
→
02
Build & scan
SAST, SCA and IaC checks run; evidence emitted.
→
03
Control gate
Inherited controls verified automatically; ISSO notified only on exception.
→
04
Deploy
Signed artifact promoted into the accredited boundary.
→
05
File evidence
Audit record written to the authorization system with the release ID.

Figure 10-1. Continuous ATO pipeline — the control gate is the discriminator.

10.2 Organization chart · 10.3 Swimlane
A. Rivera, PMPPROGRAM MANAGER · TS/SCI
Lead EngineerKEY PERSONNEL
ISSOKEY PERSONNEL
Quality / CMSHARED · 0.5 FTE
Platform team4.0 FTE
Automation team3.0 FTE

Figure 3-1. Key personnel solid, shared roles dashed, FTE on every node.

GOV
velocity
SHARED
Award+30d+60d+90d

Figure 4-2. Swimlane — who acts, when, and where responsibility is shared.

10.4 Quad chart — 11 × 8.5 landscape, one page, four fixed boxes
Operational need

Ship software continuously into an accredited boundary, with audit evidence a COR can read without contractor help.

Technical approach
  • Pipeline inside the boundary on day one
  • Controls inherited, not re-attested
  • Evidence emitted at build time
Past performance
  • GSA FAS · CPARS Exceptional
  • 74-day median time to ATO
  • TRL 9, in production today
Price, schedule, contact

$987K base · 90-day transition
A. Rivera, PM · (202) 555-0143
UEI ABC123DEF456 · CAGE 9XYZ8

Box order is fixed

Need, approach, past performance, price — clockwise from top left. Reviewers scan quad charts in that order; changing it costs you the read.

One graphic maximum

If the approach box needs a figure, it takes the process flow at 10.1 shrunk to three steps. Never two graphics on a quad chart.

Typography floor

9pt body, 8pt for the price line, 10pt bold box headings in JetBrains Mono caps. If it does not fit at those sizes, cut words.

Section 11

Slide layouts — 16:9

A deck is built only from these twelve layouts. Type never drops below 24px at 1920×1080, each slide carries one idea, and the takeaway is written as the headline rather than left for the presenter to supply. Section dividers are the only dark or ember surfaces in a deck.

velocity
Production from day one, governed by default.
Oral presentation · Solicitation 47QFLA26R0031 · 30 August 2026
11.1 Title
Factor 2
Management approach
How the work is run, staffed and reported.
02
11.2 Section divider — ink
Factor 3
Transition
Ember divider — used once per deck, for the section that carries the win theme.
11.3 Section divider — ember
Agenda
01Understanding of the requirement
02Technical approach and the 90-day ATO
03Staffing and key personnel
04Transition, risk and mitigations
05Price realism
velocity2 / 24
11.4 Agenda
Technical approach
Every action leaves an audit record the COR can read without us.
—Pipeline runs in your cloud, under your identity provider
—Controls inherited from the platform, not re-attested per release
—Evidence generated at build time and filed automatically to the authorization system of record (eMASS, Xacta or agency equivalent)
velocity7 / 24
11.5 Headline + bullets
Key personnel
Named, cleared, and available at award.
Each résumé maps to a Section L labor category and a Section M factor.
photograph or diagram
1600×1800 min
11.6 Half-bleed image + text
Performance
Release frequency doubled while change-failure rate fell.
FY23FY24FY25FY26
+118%
releases per quarter, same team size
velocity11 / 24
11.7 Chart + takeaway
Compliance
Section L cross-reference
L ref.RequirementStatus
L.3.1Continuous delivery approach✓ Full
L.3.2Key personnel✓ Full
L.3.4Transition within 30 days▲ Partial
velocity3 / 24
11.8 Table slide
Transition
90 days, four gates, no gap in service.
Day 5 · kickoffDay 30 · pipeline liveDay 60 · ATO filedDay 90 · ops
velocity15 / 24
11.9 Timeline
Evidence
94s
repo to production
99.98%
availability, FY26
0
P1 incidents in 14 months
velocity19 / 24
11.10 Three metrics
“The transition was the least disruptive I have seen in eleven years of contracting.”
Contracting Officer's Representative · CPARS narrative, FY25
11.11 Quote
velocity
Ready at award. Ready to be audited.
proposals@velocity.example · UEI ABC123DEF456 · CAGE 9XYZ8
11.12 Closing

The diagram patterns in Section 10 drop straight into 11.5 (headline + bullets, diagram replacing the list) and 11.7 (chart + takeaway) without resizing — they are drawn on the same grid.

Deck rules: 16:9 at 1920×1080; the footer carries the wordmark left and page / total right; no slide numbers on dividers or the title; every chart on a slide reuses the palette and order from Section 09; and an oral-presentation deck carries no animation, because most solicitations forbid it.

Section 12

Document templates

Every page is 8.5 × 11 with 1-inch margins. The four proposal pages below share one header, one footer and one figure-numbering scheme; the capability statement and the pamphlet are standalone marketing pieces built from the same parts.

12.1 Volume cover · 12.2 Section divider · 12.3 Body page
velocity
Volume I
Technical Proposal
Agentic AI Platform Engineering Services
Solicitation 47QFLA26R0031
Submitted to the General Services Administration
30 August 2026
RESTRICTION ON DISCLOSURE AND USE OF DATA — THIS PROPOSAL INCLUDES DATA THAT SHALL NOT BE DISCLOSED OUTSIDE THE GOVERNMENT AND SHALL NOT BE DUPLICATED, USED, OR DISCLOSED IN WHOLE OR IN PART FOR ANY PURPOSE OTHER THAN TO EVALUATE THIS PROPOSAL. [Reproduce the full legend at FAR 52.215-1(e)(1) verbatim, including the sheet list.] THE DATA SUBJECT TO THIS RESTRICTION ARE CONTAINED IN SHEETS: ____.
12.1 Volume cover — no page number, excluded from count
Factor 1
Technical
Approach
Responds to Section L.3.1 · Evaluated under Section M.2
01
12.2 Tab divider — ghost numeral in ember
Volume I · Technical Proposal47QFLA26R0031
2.1 Understanding of the requirement
The government needs software delivered continuously into an accredited environment, with evidence produced as a by-product of the work rather than assembled at the end of it. Three conditions follow from that, and Section 2.2 addresses each in turn.
Our approach places the pipeline inside the government boundary on day one, so no artifact ever leaves the accreditation boundary and no control has to be re-attested per release.
Discriminator
Evidence is generated at build time and filed automatically — the audit trail is the deliverable, not a report about it.
Figure 2-1 — pipeline diagram
Figure 2-1. Continuous ATO pipeline inside the government boundary.
Use or disclosure subject to the restriction on the title page.Vol I · § 2 · Page 4 of 42
12.3 Body page — single column, 11pt
12.4 Past performance sheet · 12.5 Key-personnel résumé · 12.6 Executive summary
Past performance · reference 1 of 3
GSA Federal Acquisition Service
CONTRACT
47PB0224D0019
VALUE
$2.48M · 4 option years
PERIOD
Oct 2022 – Sep 2026
ROLE
Prime · 100% self-performed
Relevance. Same scope, same size, same agency: continuous delivery into an accredited AWS GovCloud environment for a 240-user program office.
Outcome. ATO in 74 days, 164 releases per month at steady state, zero P1 incidents in 14 months, CPARS Exceptional in all six rated areas.
CPARS ExceptionalRecent · Relevant
Use or disclosure subject to the restriction on the title page.Vol II · Page 2 of 9
12.4 One reference per page
photo
Key personnel · Program Manager
A. Rivera, PMP
Labor category: Program Manager (L.3.2, Table L-2) · Clearance: TS/SCI · Available at award
Relevant experience
14 years managing accredited software delivery for civilian and defense agencies; led the GSA reference above from transition through the fourth option year.
Education & certifications
M.S. Computer Science · PMP · CISSP · AWS Solutions Architect Professional
Mapped requirements
L.3.2(a) staffing · L.3.4 transition · M.3 Factor 2
Two pages maximum per résumé.Tab C · Page 1 of 2
12.5 Résumé — mapped to labor category
Executive summary
Three reasons this proposal is the low-risk choice.
1
The pipeline already exists in your boundary. Transition is configuration, not construction — 30 days, not 180.
2
The audit trail is automatic. Every action is recorded at build time and filed to eMASS without a human step.
3
You own what we build. Source, infrastructure and runbooks are delivered as code in your repositories.
74
DAYS TO ATO
99.98%
AVAILABILITY
0
P1 INCIDENTS
Use or disclosure subject to the restriction on the title page.Vol I · Page 1 of 42
12.6 Executive summary — one page, numbered claims
12.7 Capability statement · 12.8 Pamphlet panel · 12.9 Letterhead
velocity
UEI ABC123DEF456
CAGE 9XYZ8
SAM registered · active
Agentic AI platform engineering for federal and SLED programs — built in your cloud, delivered as code you own.
Core competencies
Continuous delivery into accredited environments · Section 508 remediation · FedRAMP and CMMC-aligned cloud migration · agentic workflow automation · O&M of mission systems
Differentiators
74-day median time to ATO · audit evidence generated at build time · government owns every artifact at delivery · cleared staff available at award
Company data
NAICS 541512 · 541519 · 518210 · 541611
PSC D302 · D307
Small business · SDVOSB
Accounting system determined adequate by DCAA
Contact
A. Rivera, Program Manager
proposals@velocity.example
(202) 555-0143
Past performance
GSA FAS · 47PB0224D0019 · $510K/yr · 2022–2026 — continuous ATO pipeline, CPARS Exceptional.
DHS CISA · 70RSAT24C0011 · $340K/yr · 2024–2026 — 508 remediation across 14 public systems.
State of Arizona · CTR-2023-0892 · $280K/yr · 2023–2025 — agentic case-triage automation.
12.7 Capability statement — one page, six blocks, PDF
velocity
Governed AI, in production.
We stand up agentic systems inside your accreditation boundary and hand you the keys — source, infrastructure and evidence.
panel image
velocity.example
proposals@velocity.example
12.8 Tri-fold panel (3.66 × 8.5) — one idea per panel
velocity
1201 Example Ave NW, Suite 400
Washington, DC 20005
velocity.example
30 August 2026
Contracting Officer
General Services Administration
Subject: Transmittal of proposal, Solicitation 47QFLA26R0031
velocity submits the enclosed proposal in four volumes. We take no exception to the terms and conditions of the solicitation, and our offer remains valid for 120 days.
A. Rivera
Program Manager
Letterhead · 1″ margins · no footer rule on page 1
12.9 Letterhead / transmittal letter

Two different legends, and they are not interchangeable. The title page carries the full restriction at FAR 52.215-1(e)(1), reproduced verbatim, with the restricted sheets listed. Every restricted sheet carries the short legend at FAR 52.215-1(e)(2) in its footer: "Use or disclosure of data contained on this sheet is subject to the restriction on the title page of this proposal." Mark only the sheets that genuinely contain proprietary data; marking the whole volume weakens the claim and irritates evaluators. Cover pages, dividers and the acronym list carry no page number when the solicitation excludes them from the count — but they still carry the legend.

Section 13

Word and PowerPoint templates

Build the .dotx and .potx from this map and the two files will stay in step with the web system. Style names are literal — use them exactly, so a document can be re-styled by swapping the template instead of re-formatting the text.

13.1 Word style map (.dotx)
Table 9-1. Word paragraph and character styles
Style nameBased onFont / size / colorParagraphUsed for
V-Title—Manrope ExtraBold 28pt · inkLeft, 30pt line, 12pt after, keep with nextVolume cover title
V-Heading1Heading 1Manrope Bold 16pt · ink18pt before / 6pt after, outline level 1, no widowNumbered sections (2.1)
V-Heading2Heading 2Manrope Bold 13pt · ink12 / 4pt, level 2Sub-sections (2.1.1)
V-Heading3Heading 3Manrope SemiBold 11.5pt · ink10 / 3pt, level 3Run-in topics
V-BodyNormalManrope Regular 11pt · bodyLeft, 14pt exact line, 8pt after, no first-line indentAll prose
V-Bullet1 / 2List ParagraphManrope Regular 11pt0.25″ / 0.5″ indent, en dash then hanging 0.2″Bullets — two levels only
V-Table-Header—Manrope Bold 9.5pt · inkCobalt 6% fill, 2pt cobalt bottom rule, repeat as header rowTable headers
V-Table-Body / V-Table-Num—Manrope Regular 9.5pt · JetBrains Mono for the numeric variantLeft / right aligned, hairline row rules, 3% zebraTable cells
V-CaptionCaptionJetBrains Mono 9pt · muted4pt before / 8pt after, keep with previousFigure and table captions
V-Callout-Disc / -Assume / -Risk—Manrope Regular 10pt in a bordered frameHairline box, 3pt left rule in cobalt / ember / errorThe three callouts
V-Legend—JetBrains Mono 7.5pt · muted, all capsBoxed, bottom of coverRestrictive legend
V-Header / V-FooterHeader / FooterJetBrains Mono 8.5pt · mutedHairline above footer; page field rightRunning head and foot
13.2 PowerPoint master (.potx)
Table 9-2. Slide master settings
SettingValue
Slide size16:9, 13.333 × 7.5 in (1920 × 1080 px)
Safe margin0.9 in left/right, 0.75 in top/bottom
Title placeholderManrope Bold 40pt, ink, top-aligned
Body placeholderManrope Regular 20pt, body, en-dash bullets, two levels
Eyebrow placeholderJetBrains Mono 14pt, +0.18em tracking, cobalt, caps
Minimum type24px / 12pt anywhere on a slide; 18pt for chart labels
FooterWordmark left, page / total right, JetBrains Mono 12pt
Theme colorsTX1 #1A1E26 · BG1 #FCFDFF · A1 #0E52BD · A2 #D56D1D · A3 #4173B3 · A4 #8F3804 · A5 #5688BF · A6 #9E5300
Layouts to define, in this order

Title · Section divider (ink) · Section divider (ember) · Agenda · Headline + bullets · Half-bleed image + text · Chart + takeaway · Table · Timeline · Three metrics · Quote · Closing. Delete every stock Office layout so no one can pick one.

Embed the fonts

Save both templates with Embed fonts in the file and embed only the characters used off. A government reviewer without Manrope installed otherwise sees Calibri and the page count changes — which is a compliance problem, not a cosmetic one.

Never in either template

No SmartArt defaults, no gradient fills, no drop shadows on data, no WordArt, no theme other than this one, no color outside the token set, and no auto-fit shrinking that pushes body text below the minimum size.

13.3 File and export conventions
ArtifactFile name patternExport
Proposal volumevelocity_47QFLA26R0031_VolI_Technical_2026-08-30.pdfPDF/A-2b, text-searchable, embedded fonts, no comments, flattened
Oral presentationvelocity_47QFLA26R0031_Orals_2026-08-30.pdfPDF plus the .pptx if the solicitation asks for source
Capability statementvelocity_CapabilityStatement_2026-08.pdfOne page, text-searchable PDF, under 1 MB
Pamphlet / one-pagervelocity_OnePager_AgenticATO_2026-08.pdfPrint PDF with 0.125″ bleed; screen PDF without
Section 14

Accessibility, and the rules that hold everywhere

Section 508 · WCAG 2.0 AA required, 2.1 AA applied

The Revised 508 Standards incorporate WCAG 2.0 Level AA by reference; this system is built to 2.1 AA, which is a superset. Body and heading text clears 4.5:1 on every surface here; large text and chart marks clear 3:1. Tag every PDF: real heading structure, table header rows marked as headers, alt text on every figure, reading order checked, and language set. A scanned or flattened image of text is not an accessible document.

Never color alone

Status carries a glyph and a word. Chart series carry order, position, a dash pattern or a direct label in addition to hue. The compliance matrix is readable in grayscale.

Alt text that earns its place

Describe the finding, not the shape: "release frequency rose from 44 to 96 per quarter between FY23 and FY26" — not "bar chart". Reuse the caption's takeaway sentence.

Do

  • Read Section L and set the type to whatever it mandates before writing a word.
  • Write the takeaway as the heading or caption, then support it.
  • Keep one idea per slide and one claim per callout.
  • Use the fixed series order in every chart, in every artifact.
  • Number every figure and table and call it out in the text first.
  • Leave the margin alone — white space is not wasted page.

Don't

  • Shrink type or margins to fit a page limit — cut words instead.
  • Mix Manrope with a mandated face in the same volume.
  • Add a second warm color, a gradient, or a shadow on a data mark.
  • Use ember for body text, or cobalt as a large fill behind text.
  • Cycle the chart palette past six series, or use status hues as data.
  • Ship a proposal PDF that isn't tagged, searchable and font-embedded.

This page is the source of truth. When a token, a size or a rule changes, change it here first, then regenerate the .dotx, the .potx and the web theme from it. Record the date and version in the masthead so a proposal team can tell which kit produced a document.

Section 15

Governance and pre-submission QA

The kit stays usable only if one person owns it and every change is recorded. This section is that record, with the checklist a volume passes before it leaves the building.

15.1 Tokens — copy this block, do not retype values
:root{
  --ground:#E3E6EC; --surface:#F1F3F7; --card:#FCFDFF;
  --ink:#1A1E26; --body:#2C3038; --muted:#585E68;
  --line:#D4D8DD; --line-strong:#BABEC4;
  --cobalt:#0E52BD; --hover:#003D9F; --visited:#455581;
  --ember:#D56D1D; --ember-deep:#BE5000; --ember-light:#F69557;
  --s1:#0E52BD; --s2:#D56D1D; --s3:#4173B3; --s4:#8F3804; --s5:#5688BF; --s6:#9E5300;
  --q1:#013191; --q2:#0E52BD; --q3:#4275B9; --q4:#6897CD; --q5:#8EB6DC;
  --ok:#246A47; --warn:#FFA449; --err:#952732;
  --sans:'Manrope',system-ui,sans-serif; --mono:'JetBrains Mono',ui-monospace,monospace;
}

PowerPoint theme order: TX1 ink · BG1 card · A1 cobalt · A2 ember · A3 #4173B3 · A4 #8F3804 · A5 #5688BF · A6 #9E5300. Word theme colors use the same six accents in the same order, so a chart pasted between the two keeps its series colors.

15.2 Pre-submission QA — every volume, every time

Compliance

Production

15.3 Version history
v32026-08-30Added Section 16, cloud architecture views for agentic AI: a seven-layer provider-neutral reference architecture, the layer-to-service mapping across AWS, Azure and Google Cloud, a multi-agent deployment view stepped identically on all three, the LLM change-management pipeline with its evaluation and rollback gates, retrieval on controlled data inside a CUI boundary, the human-in-the-loop action path, and a compliance overlay for government environments. Added the drawing convention for rebuilding these in draw.io without redrawing trademarked provider icons.
v22026-08-30Editorial and technical review pass: US spelling throughout, paragraph references spelled out instead of the pilcrow glyph, the two FAR 52.215-1(e) legends distinguished, CUI marking rules, a FAR Part 12 / Part 15 note, agency-neutral references to the authorization system of record, and the Section 508 / WCAG relationship stated correctly. Added the mark and lockup rules (clear space, minimum sizes, misuse), the layout and spacing scales, imagery and icon rules, the measured contrast matrix, risk register / traceability / acronym tables, the diagram set and quad chart, the token block, the pre-submission QA checklist, this version history, and a real print stylesheet. Renumbered every section and re-anchored the navigation.
v12026-08-30First assembly: federal formatting rules, color, type, components, six table patterns, twelve chart types, twelve slide layouts, nine document templates, the Word and PowerPoint style map, accessibility rules.
v10 (brand)2026-08-30Color and identity settled: slate-tinted neutrals on cobalt's hue, ember orange as the warm voice, Prism stacked lockup, Manrope throughout.
15.4 Ownership and change control

Owner

One named owner for this file, the .dotx and the .potx. Changes land here first, then in the Office templates, then in the web theme — never the other way round.

Cadence

Reviewed after every submission cycle and at least twice a year. Anything a proposal team had to invent mid-bid becomes a numbered pattern here.

Deviation

A solicitation instruction always wins and needs no approval. Any other deviation — a new color, a new layout, a second face — needs the owner's sign-off and a line in the version history.

Deliberately absent from this kit: a second typeface, a dark mode for documents, decorative iconography, stock photography, animation in proposal decks, and any color outside the block in 15.1. Each was considered and refused. Adding one is a change to the system and needs the owner's sign-off.

Section 16

Cloud architecture views — agentic AI

Reference views for the architectures we propose most often, drawn in this system rather than in a stock diagramming style. Each view is provider-neutral first, then mapped to AWS, Azure and Google Cloud so the same figure can be retargeted without redrawing it. Service names are current at the version date and must be checked against the provider's government-region availability before a submission.

Drawing these outside this page

Rebuild them in draw.io on the same conventions: 1px hairline boxes at 6px radius, a 3px cobalt left or top rule to mark a layer, ember only on the element that carries the argument, orthogonal connectors with a single arrowhead, and text labels at 9pt minimum. Do not redraw provider icons. AWS, Microsoft and Google icon sets are trademarked and licensed for use as published, so either use the official set unmodified from the provider's own asset pack or name the service in text as these views do.

16.1 Reference architecture — provider-neutral, seven layers
Authorization boundary · FedRAMP moderate or high
Channel
Web / portalCase management systemEmail intakeCLI & API clients
Edge & identity
API gatewayWAFSSO / PIV-CAC federationPer-agent workload identity
Orchestration
Supervisor agentPlannerState store / checkpointingDurable workflow engineHuman-in-the-loop queue
Specialist agents
Retrieval agentAnalysis agentAction agentVerifier agentTool broker
Model & safety
Managed model endpointsGuardrails / content filterPrompt & model registryEvaluation harness
Knowledge
Vector indexDocument storeRelational system of recordIngestion & chunking pipelineRow-level access filter
Evidence
Immutable trace logToken & cost accountingSIEM exportControl evidence to the authorization system

Figure 16-1. Seven-layer agentic reference architecture. Ember marks the three elements an evaluator asks about: who decides, what constrains the model, and what proves it happened.

16.2 Service mapping — the same architecture on three providers
Table 16-1. Layer-to-service mapping, government regions noted
LayerAWSMicrosoft AzureGoogle Cloud
Edge & identityAPI Gateway · WAF · IAM Identity Center · IAM rolesAPI Management · Front Door WAF · Microsoft Entra ID · managed identitiesApigee · Cloud Armor · Cloud Identity · IAM service accounts
OrchestrationBedrock AgentCore · Step Functions · EventBridge · LambdaAzure AI Foundry Agent Service · Durable Functions · Logic Apps · Service BusVertex AI Agent Engine · Workflows · Cloud Run · Pub/Sub
Specialist agentsBedrock Agents · Lambda tools · ECS/Fargate tasksFoundry agents · Functions · Container AppsAgent Engine reasoning agents · Cloud Run services · Cloud Functions
Model & safetyAmazon Bedrock models · SageMaker endpoints · Bedrock GuardrailsAzure OpenAI in Foundry Models · Azure ML endpoints · Azure AI Content SafetyVertex AI (Gemini, third-party garden) · Model Armor · safety filters
KnowledgeBedrock Knowledge Bases · OpenSearch Serverless vectors · Aurora pgvector · S3Azure AI Search vectors · Cosmos DB · Azure SQL · Blob StorageVertex AI Search · Vector Search · AlloyDB pgvector · Cloud Storage
EvidenceCloudTrail · CloudWatch · S3 Object Lock · Security HubAzure Monitor · Log Analytics · immutable blob policy · Microsoft SentinelCloud Logging · Cloud Audit Logs · bucket retention lock · Security Command Center
IsolationVPC · PrivateLink · KMS CMK · AWS GovCloud (US)VNet · Private Link · Key Vault HSM · Azure GovernmentVPC Service Controls · Private Service Connect · Cloud KMS · Assured Workloads

Two cautions for a technical volume. Model availability in government regions lags commercial regions, so name the model family and cite the region where it is authorized rather than promising a specific commercial model. Agent and orchestration services also move fastest of anything in this table; confirm the service name and its FedRAMP status at the authorization package level before the proposal goes out.

16.3 Multi-agent deployment — one use case, three targets

AWS

GovCloud (US-West) · FedRAMP High
  1. Request enters API Gateway, authorized by IAM Identity Center with PIV-CAC federation.
  2. Bedrock AgentCore supervisor decomposes the task and writes a checkpoint to DynamoDB.
  3. Step Functions fans out to specialist Bedrock Agents; each tool call is a Lambda with its own role.
  4. Bedrock Guardrails screens every prompt and completion; blocked calls raise an EventBridge event.
  5. Retrieval runs against Knowledge Bases over OpenSearch Serverless, filtered by caller attributes.
  6. Traces land in CloudWatch, API calls in CloudTrail, and evidence in an S3 Object Lock bucket.

Azure

Azure Government · FedRAMP High
  1. Request enters API Management behind Front Door WAF, authenticated by Entra ID.
  2. AI Foundry Agent Service hosts the supervisor; state persists in Cosmos DB.
  3. Durable Functions orchestrate specialist agents; tools run as Container Apps with managed identities.
  4. Azure AI Content Safety filters input and output; violations post to Service Bus for review.
  5. Grounding uses Azure AI Search vectors with security filters applied at query time.
  6. Azure Monitor and Log Analytics collect traces; Sentinel receives the security stream.

Google Cloud

Assured Workloads · FedRAMP High / IL4
  1. Request enters Apigee behind Cloud Armor, authorized by Cloud Identity and IAM.
  2. Vertex AI Agent Engine runs the supervisor; sessions persist in Firestore or AlloyDB.
  3. Workflows dispatches specialist agents deployed as Cloud Run services, one service account each.
  4. Model Armor and Vertex safety filters gate prompts and responses before and after inference.
  5. Retrieval uses Vertex AI Search or Vector Search over Cloud Storage and AlloyDB.
  6. Cloud Audit Logs and Cloud Logging write to a retention-locked bucket; SCC watches posture.

Figure 16-2. The same seven layers, three providers. Step numbers match across columns so a reviewer can compare line for line.

16.4 LLM change management — model, prompt and tool promotion
01 · REGISTERCandidate
New model version, prompt revision or tool schema enters the registry with an owner and a change ticket.
02 · EVALUATEGolden set
Automated evaluation against a versioned test set: task success, refusal rate, citation accuracy, latency, cost per task.
03 · SAFETYRed team
Adversarial suite plus bias and data-leakage probes. A regression here stops promotion; no override path exists.
04 · APPROVEHuman gate
Named approver signs the change record. The government's representative is notified for any change to model family or data scope.
05 · CANARY5% traffic
Shadow or canary release with automatic comparison against the incumbent on the same live traffic.
06 · PROMOTEPinned
Version pinned by digest, not by a floating alias, and recorded in the authorization system of record.
07 · ROLLBACKOne step
Previous pinned version stays warm for 30 days. Rollback is a single action and is exercised quarterly.

Figure 16-3. Change management for a non-deterministic component. The evaluation set and the rollback drill are what make it auditable.

What is versioned

Model identifier and digest, system and task prompts, tool schemas, retrieval index snapshot, guardrail policy, and the evaluation set itself. All six in one manifest, so a result can be reproduced.

Provider mechanics

AWS: Bedrock model IDs with provisioned throughput and inference profiles. Azure: Foundry deployments with version pinning and deployment slots. Google Cloud: Vertex model versions with traffic split on the endpoint.

Drift watch

Weekly re-run of the golden set against the pinned version, plus monitoring of refusal rate, citation coverage, tool-error rate and cost per resolved task. A drift alert reopens the pipeline at stage 02.

16.5 Retrieval on controlled data · 16.6 Human-in-the-loop action
CUI boundary · no data leaves
Ingest
Source connectorsClassifier & taggerCUI marking preserved
Index
ChunkerEmbedding endpointVector index per classification
Query
Access filter on caller clearanceRerankerCitation assembler
Answer
Grounded responseRefusal when no citationTrace with source IDs

Figure 16-4. Retrieval architecture for controlled data. Access is filtered before the model sees the chunk, not after, and an answer without a citation is refused rather than generated.

01 →
Agent proposes
Action drafted with its evidence and a confidence score.
02 →
Policy check
Value, reversibility and data scope decide whether a human is required.
03 →
Reviewer acts
Approve, edit or reject in the queue, with a reason recorded.
04
Execute & log
Scoped credential, single transaction, immutable record.

Figure 16-5. Human-in-the-loop path. Irreversible actions, actions above a dollar threshold and anything touching CUI always route to a person.

Write this into the proposal, not just the diagram

Name the threshold, the role that approves, the median review time and where the record is kept. An evaluator scores the control, not the arrow.

16.7 Compliance overlay
Table 16-2. What to state about each environment
ItemAWSAzureGoogle Cloud
Government environmentGovCloud (US-East / US-West)Azure Government (US Gov Virginia / Arizona)Assured Workloads (US regions)
Authorization to citeFedRAMP High for the region, plus the agency ATO for the systemFedRAMP High and DoD IL4/IL5 where applicableFedRAMP High and IL4 where applicable
Data residency controlRegion pinning · service control policiesRegion pinning · Azure PolicyAssured Workloads location policy
Key custodyKMS customer managed key · CloudHSMKey Vault Managed HSMCloud KMS · Cloud HSM · CMEK
Model data handlingNo training on inputs; state the inference-only postureNo training on inputs; state the inference-only postureNo training on inputs; state the inference-only posture
Egress controlPrivateLink · no internet route from the VPCPrivate Link · forced tunnelingVPC Service Controls perimeter

Every claim in this table belongs in the proposal only with a citation to the provider's current authorization listing and the customer's own boundary documentation. Write the posture as a statement the government can verify, such as inference-only with no retention, keys held in a customer-managed HSM, and no egress path from the subnet, rather than as a brand name.