Separate a bug fix from a new scope request
Format: Company perspective.
“It does not do what we need” starts a useful discussion. It does not, by itself, prove a bug. Check what the parties agreed the tool would do. Then compare that with what it does now.
NIST says its Secure Software Development Framework gives buyers and suppliers shared terms for secure software development.[3] It does not decide whether a request is a bug or new scope. Use the card below to sort requests against your own agreement, not as a NIST classification rule.
Use this card: request; build version; agreed test or term; what happened; what should happen; proof; proposed category; owners who confirm it. Keep the test or term linked so both sides can read it.
Consider three hypothetical requests for an internal followup tool:
- Defect: The agreed test says a saved assignment remains after a fresh login. It does not. Link the test and show safe steps to repeat the fault on the delivered build.
- Changed requirement: The tool lets a lead choose an owner. The new request asks it to choose from staff calendars. List that new work and the access it would need as a separate scope request.
- Unresolved original scope: The agreement says “export history,” but does not say whether files are included. Do not assume the work is free or has an extra charge. Check the proposal and prior notes. Ask both sides to confirm the meaning in writing.
A request may contain both a bug and new work. Split them so the new feature does not hide a fault. If staff need a safe way to keep working now, agree on that while the parties settle who owes what.
The builder and authorized buyer should confirm the classification and next step in writing. Contract terms govern obligations; this card does not determine payment rights.
Book a Demo with Core Agentic to discuss a custom build with clear acceptance and change boundaries before delivery makes them contentious.
Sources
These sources describe the named provider or framework. They do not establish a Core Agentic integration, customer result or certification.