verify contractor credentials first