Most founders discover what they don't own on the day they try to switch vendors. The enclosure exists as a STEP file nobody can edit cleanly. The PCB exists as Gerbers with no layout source. The firmware exists as a binary. At that point you own a product you cannot change.
This checklist exists so that day never comes.
The rule: source, outputs, and the instructions to rebuild
Every discipline produces three kinds of files. You need all three.
- Source — the editable native file the engineer worked in.
- Outputs — what a factory or a phone actually consumes: Gerbers, STEP, binaries, app builds.
- Rebuild instructions — tool versions, settings and steps so a new engineer can regenerate the outputs from the source.
Outputs without source lock you in. Source without rebuild instructions costs weeks of archaeology.
Electronics
| File |
Why it matters |
| Schematic source (KiCad, Altium, Eagle) |
The only place the circuit logic lives. |
| PCB layout source with the board stack-up |
Lets anyone revise the board. |
| Gerbers or ODB++, drill files, pick-and-place file |
What the fab and assembly house consume. |
| BOM with manufacturer part numbers and approved alternates |
Alternates keep your line running through shortages. |
| Assembly drawings and polarity / orientation notes |
Prevents the classic reversed-diode batch. |
| Design notes: impedance-controlled nets, antenna matching, layout constraints |
Stops the next engineer from breaking RF or high-speed routing. |
The BOM deserves extra attention. A BOM with only distributor SKUs, or with single-source parts and no alternates, is a supply-chain risk you inherit silently.
Firmware
| File |
Why it matters |
| Full source repository with commit history |
History explains why things are the way they are. |
| Build instructions with exact toolchain and SDK versions |
Embedded SDKs break between versions. Pin them. |
| Bootloader source and configuration |
Without it, you cannot change how updates work. |
| OTA update pipeline and documentation |
Shipping devices you cannot update is shipping a liability. |
| Signing keys and credentials — transferred securely, with custody documented |
Whoever holds the signing keys controls your fleet. |
| Test firmware used on the production line |
Needed for every future batch. |
Ask this directly: who holds the firmware signing keys after handover? If the answer is vague, your fleet belongs to someone else.
When full transfer isn't the default
Some engagements license parts of the stack — a firmware framework or backend platform the studio reuses across products — and price the engagement lower in return. That can be a fair trade. It must be explicit in the contract, before work starts. The bad version is discovering it at handover.
Red flags before you sign
- The contract says "deliverables" without listing file types.
- Accounts and repositories get created in the studio's name.
- No mention of signing keys, alternates or test fixtures.
- Handover happens "at the end" instead of continuously, milestone by milestone.
We push source to the client's repositories as we go. Handover then becomes a confirmation, not an event.