I also agree that the contract should clearly say all the needs to be said about eh expectation of the interaction between the vendor and your company. Especially changes that they may make to the design of your procurement. For custom designs that are being outsourced there should be even more stringent controls around notification.