Supply Chain Vulnerabilities at Falcon Defense & Aerospace

An AutoExplore run across FACT_PARTS_SUPPLY, DIM_SUPPLIER, and DIM_PARTS identified six concentrated supply-chain vulnerabilities. The largest is not in Tier 1 or Tier 2 — it's the Tier 3 small-business layer handling 74% of parts spend with 0% DCAA approval. Recommended interventions are prioritized below.

Executive Summary

The active supplier portfolio is 198 vendors arranged in a three-tier structure. The traditional narrative — Tier 1 primes carry the heavy lifting, Tier 3 handles niche commodity supply — does not match the data. Across 5 years and 700,000 purchase orders, Tier 3 accounts for $1.007T of $1.36T in total PO value. This is the supply chain's center of gravity, and it's also its most structurally exposed layer.

Combined with a 30% sole-source rate on Mission Critical parts and a step-function drop in OTD performance once quality ratings fall below 4.5, the portfolio presents a two-layered risk: concentration at the vendor level and single-point-of-failure at the part level.

Finding 1 — Tier 3 Owns 74% of Parts Spend

Each of the ten Tier 1 OEM relationships averages $25.9B of spend over five years — clearly a heavy commitment per vendor. But summed, Tier 3 dwarfs the other tiers combined:

The concentration risk is not that any one T3 supplier is too big; it's that the layer is load-bearing. A labor dispute, a sub-component shortage, or a capacity ceiling in the small-business tier cascades into 3/4 of ARES's parts pipeline.

Finding 2 — Mission Critical Parts Show Highest Sole-Source Rate

Sole-source concentration by part criticality runs counter to intuition. The most critical hardware should have the most backup options:

Each of those 144 Mission Critical sole-source parts is a program-stoppable failure: if the supplier can't deliver, there is no qualified alternate in DIM_PARTS. This pattern typically emerges from "easier to qualify one vendor" decisions made years ago, never revisited.

Finding 3 — Tier 3 Has Zero DCAA Approval

DCAA approval is a gating condition for cost-type contract pass-through. Without it, ARES absorbs vendor audit risk internally:

This is both a compliance risk (cost-type pass-through is inefficient) and a competitive threat: ARES competitors with higher T3-DCAA coverage have better cost-contract economics. A targeted "DCAA-upgrade" program on the top-20 T3 vendors by spend (~$300B coverage) would shift the structural picture.

Finding 4 — Quality-OTD Correlation is Step-Function, Not Linear

Binning active suppliers by quality rating reveals a discontinuity:

Improving a supplier from 3.5 to 4.0 yields no meaningful OTD lift. The supplier-development framework should be restructured around identifying "step-function candidates" — vendors with the structural capacity to reach 4.5+ — rather than continuous improvement coaching of the 3.0-4.0 band, which doesn't pay off.

Finding 5 — 95 Active Suppliers are Single-Points-of-Failure

Combining low OTD with sole-source exclusivity yields a concentrated exposure list:

A targeted dual-sourcing program on these 95 would reclassify roughly half the active portfolio's risk profile. Priority order: (a) Mission Critical sole-source parts first, (b) then Flight Safety, (c) then sole-source parts on contracts with near-term period-of-performance expiries from Dashboard 8.

Finding 6 — Lead Time Variability is Not a Differentiator

Against the common assumption that Tier 3 small businesses run looser schedules, the data shows tight parity:

Don't invest in lead-time forecasting differentiation — it's a commodity performance layer. The leverage is elsewhere (OTD hit rate, sole-source reduction, DCAA upgrade). Scheduling systems can treat all tiers as equivalent.

What We Didn't Find (Null Results)

Nine hypotheses returned no meaningful signal. Recording them prevents future sessions from re-litigating the same questions:

• No domain-supplier correlation. The distribution of supplier tiers across warfighting domains (Air, Land, Sea, Space, Cyber, Multi-Domain) is uniform. No domain carries more T3 risk than another.
• No seasonality in OTD. Monthly OTD by tier shows ~±0.5pp noise, no September-vs-March pattern, no holiday dips.
• No defect-rate year-over-year trend. First-pass yield held steady at ~96.5% across all five years and all three tiers. No deterioration, no improvement.
• No geographic clustering of at-risk suppliers. Bottom-15 OTD vendors span 8 distinct geographies. Not a localized problem.
• No correlation between MIL-SPEC flag and OTD. MIL-SPEC and COTS parts show equivalent delivery performance.
• No supplier concentration by contract vehicle. IDIQ, BOA, GSA vehicles draw from the same T3 pool. No vehicle-specific risk.
• PPV did not correlate with OTD. Suppliers charging premium prices over catalog did not deliver more reliably.
• Quality rating 4.5+ cohort has no DCAA skew. The 9 top-quality suppliers are distributed across T1/T2/T3 in line with population share.
• No first-year supplier effect. Suppliers onboarded in 2023-2024 show the same OTD distribution as legacy suppliers. The issue is structural, not ramp-period.

Recommended Actions (Prioritized)

Methodology

The AutoExplore session ran 20 directed-mode hypotheses on 2026-04-20. Each hypothesis was framed as a specific question about tier concentration, sole-source exposure, DCAA coverage, quality-performance correlation, or cross-dimension pattern. Queries ran against FACT_PARTS_SUPPLY (700K rows, 5 years), DIM_SUPPLIER (220 rows, 198 active), and DIM_PARTS (1,800 rows).

Findings reported above passed the dual filter of (a) a materiality threshold (>10% deviation from portfolio mean or >5pp band difference) and (b) reproducibility across at least two adjacent tier/category slices. Null results are preserved in autoexplore-journal.md.

Limitations: this analysis uses the demo ARES dataset. Real-world deployment would cross-reference against sub-component BOM depth, multi-program criticality scoring, and ITAR/classification overlays not present in the current schema.