Home › Blog

☠ Death Star Evil Corp™ ☠ Death Star Evil Corp™ Vi Procurement & Commercial — Contract Variation Notice

Ref: DS-PROC-CVN-0066 — Supplier: Cloud City Holdings (Bespin) — Service: Managed Hosting, Cold Storage & Guest Services

Classification: COMMERCIAL IN CONFIDENCE. Then just CONFIDENCE. Then, by Section 9, not that either.


1. Background

Cloud City Holdings ("the Supplier") is a Tibanna-gas mining and hospitality concern operating a floating platform in the upper atmosphere of Bespin. The Supplier describes itself in its marketing collateral as "a small operation, not big enough to be noticed by the Empire," which the panel notes is a positioning statement rather than a fact, and which stopped being either at 14:20 on the day in question.

The Empire has never contracted with the Supplier. The Empire arrived, in force, and initiated a contract. The Supplier's Baron Administrator, L. Calrissian, has described the ensuing arrangement as "a deal." The panel is content to use his word. The panel has been unable to locate the deal.

2. The Original Terms (as understood by the Supplier)

Per Mr Calrissian's account, given at the exit interview he was not entitled to but attended anyway, the terms were:

  • The Empire may use Cloud City's facilities to detain three named guests and one Wookiee.

  • The Empire takes Skywalker.

  • The Empire leaves.

  • Cloud City remains independent, unmolested, and "not big enough to be noticed."

The panel notes this was not written down. The panel notes Mr Calrissian's exact words were "he agreed." The panel notes "he" was Lord Vader. The panel notes that Lord Vader's verbal agreements are not, under DS-PROC-POL-001 §3.2, binding on the Empire, and that this clause was drafted in Month 2 specifically because of Lord Vader, and that Mr Calrissian did not ask to see the policy and would not have been shown it.

3. Variation Events

The panel has reconstructed the following from the Supplier's ticketing system, the Empire's own logs, and a set of remarks attributed to Lord Vader which were captured on the Supplier's guest-services voice recorder.¹

3.1 — Variation 1, 13:05. Guest scope expanded from "detained" to "tortured." The Supplier raised a change request. The Supplier's change request was rejected with the annotation: "They must never again leave this city." The panel notes this is a one-way change with no rollback plan. The panel notes the Supplier's change board had one member and that member was the Baron Administrator, who had also been the one to raise it, and had now rejected his own ticket on the Empire's behalf. The panel notes this is not how change boards work. The panel notes it is how they end up working.

3.2 — Variation 2, 13:40. The Supplier's carbon-freezing facility, hitherto used for Tibanna at rest, was re-designated a cold-storage tier for a guest. The Supplier objected on the grounds that the facility "was not designed for humans" and "might kill him." The Empire's response was to test it on a different human. The panel notes this is the first documented instance of a supplier being made to run a production load test on a live customer against their own advice, and that the test passed, and that the customer is now a wall ornament.

3.3 — Variation 3, 13:55. The Wookiee and the Princess, originally within the "remain on Cloud City" scope, were reassigned to Imperial custody for transfer off-platform. Mr Calrissian is recorded as saying: "You said they'd be left in the city under my supervision." Lord Vader is recorded as saying: "I am altering the deal. Pray I don't alter it any further."

The panel has reviewed this exchange with the Legal Function. The Legal Function's position is that "pray I don't alter it any further" is not recognised as a consultation period under DS-PROC-POL-001 §7 (Supplier Consultation on Material Variation, minimum 14 days), and that Lord Vader's phrasing does not constitute an offer to consult, but rather an offer to not not consult, which Legal has not seen before and has asked to be kept out of.

3.4 — Variation 4, 14:02. Cold-storage guest (see 3.2) transferred to a third party — B. Fett, sole trader — for onward delivery to a fourth party, J. the Hutt, whose relationship to the Empire is described in the Supplier's vendor record as "none" and in the Empire's as "commercial."

The panel notes this is a sub-processor being added without notice. The panel notes the Supplier was not told. The panel notes the guest was not told, though the panel accepts the guest was in no position to be told. The panel notes the sub-processor was paid on delivery by the fourth party and that the Supplier has since received an invoice from the sub-processor for "handling," which the Supplier has paid, because it arrived with a purchase order number, and it was a real number, and nobody at Cloud City knew what to do with a real number that referred to a thing they hadn't agreed to.

3.5 — Variation 5, 14:20. Imperial garrison to remain on Cloud City indefinitely. This was not communicated to the Supplier. The Supplier found out from the garrison.

4. Commercial Position

The panel has attempted to establish who is paying whom for what.

Line Description Payer Payee Status 1 Detention of guests (3 + Wookiee), per diem Empire Cloud City Not raised. Cloud City "didn't like to." 2 Carbon-freeze facility, single use, human Empire Cloud City Not raised. See line 1. 3 Guest, frozen, in transit Hutt Fett Paid. 4 "Handling" Cloud City Fett Paid. 5 Garrison accommodation, indefinite Empire Cloud City Not raised. Garrison eating in the canteen. 6 Cloud City independence Cloud City Empire Delivered, not invoiced, not returned.

The panel notes that across the entire engagement the only money that moved was paid by the Supplier, to a bounty hunter, for the removal of a guest the Supplier had been instructed to keep. The panel notes Cloud City's finance team processed this in four minutes because the invoice was formatted correctly. The panel has seen the invoice. It is beautifully formatted. Fett has a template.

5. Findings

F-01 — CRITICAL. The deal has no document. There is no contract, MSA, SOW, or order form. There is a conversation, one party's memory of it, and a voice recording of the other party changing it. The panel notes the Supplier has since asked the Empire to "put something in writing" and that the Empire has done so; it is a garrison roster.

F-02 — CRITICAL. Unilateral variation without consultation, notice, or rollback. Five variations in seventy-five minutes. Zero change tickets on the Empire's side. The Empire's change process was not bypassed; it was never in the room. Lord Vader holds standing override authority (OVERRIDE-001, see DS-SEC-IR-0114) and the panel now understands that authority extends to commercial terms, hospitality, cryogenics, and the geopolitical status of a city.

F-03 — HIGH. Cold-storage tier used for a workload it was not designed for, on supplier advice, and it worked. The panel is aware this reads as a positive. It is not. It establishes a precedent. Facilities have already asked whether the tier could be used for "other long-term storage," and the panel would like the record to show that it does not know what Facilities meant and did not ask.

F-04 — HIGH. Sub-processor added without notification. The guest was transferred to a sole trader with no security accreditation, no insurance the panel can find, and a ship whose registered address is the ship. The panel notes the sub-processor delivered on time and in the agreed condition, which is more than can be said for any Imperial contractor in the current review cycle, and that this will be quoted at the panel later.

F-05 — MEDIUM. Supplier lock-in. The Supplier cannot exit. The exit would involve leaving a city. The Supplier eventually did leave the city, at speed, with the Wookiee, in a freighter that belonged to the guest in cold storage. The panel notes this was an unplanned migration to a competitor's infrastructure using the customer's own asset, and that it is the only successful migration in this report.

F-06 — LOW. The Supplier's marketing positioning ("not big enough to be noticed") has been withdrawn. The panel notes the replacement copy has not been agreed because the Supplier's marketing lead is now the garrison commander.

6. Supplier Statement

Provided by L. Calrissian, in writing, from an undisclosed location:

"I had a good thing going. Small platform, good margins, nobody bothered us. Then the biggest customer in the galaxy turns up, doesn't sign anything, changes the terms five times before lunch, moves my guests to a sub-contractor I've never heard of, bills me for it, and leaves a permanent presence in my building. And I'm the one who gets called a traitor.

I want it on record that I read the situation correctly. I want it on record that I didn't have a choice. And I want it on record that if anyone ever tells you 'this deal is getting worse all the time,' that's not a complaint. That's a forecast."

The panel notes it is a good statement. The panel notes it is the only document in this engagement with a signature on it.

7. Management Response

Lord Vader's response, received by voice, transcribed by a junior who has asked to be reassigned:

"I have read the findings. Finding two says I altered the deal without consultation. I consulted. I told him what the deal now was. That is a consultation. He had the opportunity to respond. He responded. I altered it again. That is iterative."

"Finding four says the sub-processor had no accreditation. He had a reputation. In my experience that is the better control."

"I have no view on the invoice Calrissian paid. That is between him and his finance team, and I understand his finance team is now the garrison, so I expect it will be resolved."

"Close it."

The panel notes it cannot close it, because closing requires the Supplier's countersignature, and the Supplier has left, and the garrison has offered to sign on his behalf, and the panel has said no, and the garrison has said "pray we don't offer again," which the panel has reported to HR.

8. Recommendations

  1. All supplier engagements initiated by Lord Vader in person to be followed, within 24 hours, by a written summary of what the deal now is. Legal has offered to draft the template. Legal has asked that the template not have their name on it.

  2. DS-PROC-POL-001 §7 to be amended to clarify that "pray" is not a consultation mechanism. Legal has confirmed this was always the intent. Legal has confirmed nobody thought it needed saying.

  3. Cold-storage tier to be re-designated "Tibanna only." Facilities to be told this is not a challenge.

  4. Sub-processor register to be created. First entry: B. Fett. Accreditation field: "has a template."

  5. The Supplier to be offered a formal apology. The Supplier's address is unknown. The Supplier's ship is known. The Supplier's ship is also the Empire's most wanted vessel. The apology has been raised as a ticket and assigned to whoever catches the ship.

9. Lessons Learned

The panel has one.

Cloud City did nothing wrong. It ran a tidy platform, kept its head down, and trusted a handshake with a customer who had the power to make the handshake mean whatever he liked. That is not a procurement failure. That is what every small supplier to a very large customer already knows, and signs anyway, because the alternative is not being a supplier.

The Empire did not breach the contract. There was no contract. The Empire was the contract, and it altered itself, and it did so with total procedural confidence, and it filed nothing.

The panel notes this is the cloud.

The panel notes it has always been the cloud.


Status: Open. Supplier signature outstanding. Supplier in hyperspace. Filed: Procurement Panel, on behalf of nobody who wanted their name on it.

Death Star Evil Corp™ · ISO 27001 Certified · SOC 2 Type II Attested · Cloud City Holdings is no longer a preferred supplier and has asked that this be understood as a compliment. "We didn't see it coming. We were the thing that came."


¹ The recorder was installed by the Supplier to capture guest feedback. It has captured, in order: Lord Vader, the Wookiee, and eleven minutes of a Ugnaught explaining the carbon-freeze procedure to a droid that was in pieces. The Supplier has not deleted any of it. Deletion requires an owner. The owner has left.

The Probably Fine Daily

Threat intelligence every morning — new victims, new groups, what matters, in plain English. Free, with receipts.

Subscribe to the Daily →

Originally published on LinkedIn ↗

← All writing