Talley IT LLC
Verifiable software infrastructure — formal verification, tamper-evident logging, and cryptographic receipt rails for systems that must prove what they did.
Capability Statement
Small Business · Virginia
Updated 19 Sep 2026
Unique Entity ID
HK9GTULP5GJ2
CAGE Code
23EL9
SAM Registration
ActiveExpires 24 Jul 2027
Congressional Dist.
VA-02Virginia Beach, VA 23464

Core Competencies

Formal verificationSMT-based (Z3) static guardrails that prove properties of generated or third-party code before it executes — taint tracking, constraint checking, and refusal on unproven paths.
Tamper-evident loggingHMAC-chained usage and audit ledgers where each entry commits to the previous one, with the chain key held outside the ledger so alteration is detectable by replay.
Hash-chained receiptsOrder-intent and reconciliation packets carrying SHA-256 digests over a chain in which each record commits to its predecessor, so any edit to an earlier entry is detectable by re-deriving the chain.
Content-addressed VCSFast-forward-only version control where object identity is the content hash, for artifacts requiring an unbroken provenance chain.
Governed executionOS-sandboxed execution gates for agent-written or untrusted code, producing chained receipts for every run.

Differentiators

  • Purchase-card ready. Registered in SAM.gov to accept Government purchase cards, and eligible for micro-purchases below the simplified threshold without competitive solicitation.
  • Local to the Hampton Roads fleet concentration. Virginia Beach, VA-02 — within 20 miles of NAVSUP FLC Norfolk, CNIC, and the regional shipyards.
  • Owner-delivered. No subcontracting layer, no account management tier. The person scoping the work performs it.
  • Evidence over assertion. Deliverables are auditable by design: hashes, chained records, and reproducible verification runs rather than status reports.

NAICS Codes

541511Custom Computer Programming Services (primary)
541512Computer Systems Design Services
513210Software Publishers
518210Computing Infrastructure, Data Processing & Hosting

Compliance Support

NIST SP 800-171 gap assessment for DoD suppliers. Fixed fee $3,500, one week: SPRS score calculated with the DoD Assessment Methodology, System Security Plan, and Plan of Action and Milestones. The contractor posts its own score in SPRS.

Engineering evidence supporting NIST SP 800-171 controls — including 3.1.1, 3.1.2, 3.3.2, 3.4.2 and 3.13.15 — through access gating, immutable audit trails, and configuration provenance.

Scope is technical evidence and documentation support for a contractor's own self-assessment. Talley IT does not perform DoD or CMMC certification assessments and does not represent any system as compliant.

Business Data

  • Entity: Limited Liability Company, sole proprietorship, for-profit
  • Registered: Active since 11 Aug 2026, All Awards
  • State of incorporation: Virginia

Contact

Point of ContactMatthew Talley, Owner
757-839-6311