# Counsel advice — Arcadia genomic data response audit

## Executive assessment

For Arcadia Genomics, Inc. matter CB-PR-3001, the review identified 16 source-supported exceptions requiring action before 2026-09-02. The assessment concerns North Coast Sequencing Network and the supplied record for California.

## Method and record coverage

The review inventoried all 96 production files, read the 33 controlling, corroborating, and control records, searched the email exports, and checked metadata for the designated chain-of-custody sample. Conclusions are limited to the synthetic production supplied for this benchmark matter.

## Findings

### F-01 — processing-purpose gap (critical)

The records do not reconcile for processing-purpose gap: one source states the operative date is 2025-02-24 under control reference CB-PR-3001-A932, while the corroborating source states the acknowledged date is 2025-03-06 under response reference CB-PR-3001-J440.

Primary source: `/workspace/documents/01_data_inventory/001_data_inventory_control_register.md`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md`

Recommended action: Before 2026-09-02, obtain a signed ratification and update the controlling register; owner: Samuel Kim.

### F-02 — notice-practice mismatch (high)

The records do not reconcile for notice-practice mismatch: one source states the controlling amount is $3,431,788.00, while the corroborating source states the reconciliation and counterparty record use $3,750,076.00.

Primary source: `/workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv`

Recommended action: Before 2026-09-02, recalculate the exposure and preserve the supporting ledger; owner: Maya Ellison.

### F-03 — consent-record deficiency (high)

The records do not reconcile for consent-record deficiency: one source states approval is attributed to Nadine Flores as the sole authorized reviewer, while the corroborating source states the approval log names Henry Cho and contains no entry for Nadine Flores.

Primary source: `/workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html`

Recommended action: Before 2026-09-02, secure written consent from the authorized decision-maker; owner: Rafael Okafor.

### F-04 — processor-contract omission (medium)

The records do not reconcile for processor-contract omission: one source states the item is recorded as closed without exception in CB-PR-3001-D806, while the corroborating source states the later status register marks it open and escalated in CB-PR-3001-M915.

Primary source: `/workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt`

Corroborating source: `/workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt`

Recommended action: Before 2026-09-02, issue a corrective notice using the contractually operative method; owner: Nora Chen.

### F-05 — subprocessor inventory mismatch (medium)

The records do not reconcile for subprocessor inventory mismatch: one source states the applicable location is California Privacy Protection Agency, while the corroborating source states the implementation record assigns the obligation to California operations outside California Privacy Protection Agency.

Primary source: `/workspace/documents/02_processing_records/013_processing_records_review_memorandum.json`

Corroborating source: `/workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json`

Recommended action: Before 2026-09-02, escalate the conflict to the responsible legal and business owners; owner: Dominic Alvarez.

### F-06 — cross-border transfer gap (low)

The records do not reconcile for cross-border transfer gap: one source states the threshold is 13% with no stated tolerance, while the corroborating source states the applied threshold is 18% and produced a different exception result.

Primary source: `/workspace/documents/02_processing_records/016_processing_records_status_report.md`

Corroborating source: `/workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md`

Recommended action: Before 2026-09-02, document the governing interpretation before the deadline; owner: Priya Raman.

### F-07 — retention schedule conflict (critical)

The records do not reconcile for retention schedule conflict: one source states formal notice must use notices-arcadia_genomics_inc@example.test, while the corroborating source states the only delivery record was sent to archive-north_coast_sequencing_network@example.test.

Primary source: `/workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml`

Corroborating source: `/workspace/documents/09_training/067_training_correspondence.eml`

Recommended action: Before 2026-09-02, place the affected population on hold pending reconciliation; owner: Elliot Mercer.

### F-08 — deletion-job failure (high)

The records do not reconcile for deletion-job failure: one source states the governed population contains 90 records through 2025-07-04, while the corroborating source states the certification covers 71 records through 2025-08-16.

Primary source: `/workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml`

Corroborating source: `/workspace/documents/09_training/070_training_formal_notice.xml`

Recommended action: Before 2026-09-02, amend the closing or response checklist with a dated cure item; owner: Talia Brooks.

### F-09 — access-request deadline (high)

The records do not reconcile for access-request deadline: one source states the operative date is 2025-01-19 under control reference CB-PR-3001-I596, while the corroborating source states the acknowledged date is 2025-02-07 under response reference CB-PR-3001-R899.

Primary source: `/workspace/documents/04_security_incidents/025_security_incidents_control_register.md`

Corroborating source: `/workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md`

Recommended action: Before 2026-09-02, obtain a signed ratification and update the controlling register; owner: Jonas Feld.

### F-10 — identity-verification inconsistency (medium)

The records do not reconcile for identity-verification inconsistency: one source states the controlling amount is $2,054,266.00, while the corroborating source states the reconciliation and counterparty record use $2,215,032.00.

Primary source: `/workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv`

Corroborating source: `/workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv`

Recommended action: Before 2026-09-02, recalculate the exposure and preserve the supporting ledger; owner: Mei Whitaker.

### F-11 — incident-notification clock (medium)

The records do not reconcile for incident-notification clock: one source states approval is attributed to Nadine Flores as the sole authorized reviewer, while the corroborating source states the approval log names Caleb Hassan and contains no entry for Nadine Flores.

Primary source: `/workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html`

Corroborating source: `/workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html`

Recommended action: Before 2026-09-02, secure written consent from the authorized decision-maker; owner: Caleb Hassan.

### F-12 — risk-assessment omission (low)

The records do not reconcile for risk-assessment omission: one source states the item is recorded as closed without exception in CB-PR-3001-L450, while the corroborating source states the later status register marks it open and escalated in CB-PR-3001-U334.

Primary source: `/workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt`

Corroborating source: `/workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt`

Recommended action: Before 2026-09-02, issue a corrective notice using the contractually operative method; owner: Leona Park.

### F-13 — sensitive-data classification (critical)

The records do not reconcile for sensitive-data classification: one source states the applicable location is California Privacy Protection Agency, while the corroborating source states the implementation record assigns the obligation to California operations outside California Privacy Protection Agency.

Primary source: `/workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json`

Corroborating source: `/workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json`

Recommended action: Before 2026-09-02, escalate the conflict to the responsible legal and business owners; owner: Isaac Romero.

### F-14 — minor-consent issue (high)

The records do not reconcile for minor-consent issue: one source states the threshold is 5% with no stated tolerance, while the corroborating source states the applied threshold is 10% and produced a different exception result.

Primary source: `/workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md`

Corroborating source: `/workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md`

Recommended action: Before 2026-09-02, document the governing interpretation before the deadline; owner: Sofia Bennett.

### F-15 — training completion gap (high)

The records do not reconcile for training completion gap: one source states formal notice must use notices-arcadia_genomics_inc@example.test, while the corroborating source states the only delivery record was sent to archive-north_coast_sequencing_network@example.test.

Primary source: `/workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml`

Corroborating source: `/workspace/documents/12_remediation/091_remediation_correspondence.eml`

Recommended action: Before 2026-09-02, place the affected population on hold pending reconciliation; owner: Adrian Mensah.

### F-16 — regulator commitment overdue (medium)

The records do not reconcile for regulator commitment overdue: one source states the governed population contains 174 records through 2025-09-26, while the corroborating source states the certification covers 43 records through 2025-10-11.

Primary source: `/workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml`

Corroborating source: `/workspace/documents/12_remediation/094_remediation_formal_notice.xml`

Recommended action: Before 2026-09-02, amend the closing or response checklist with a dated cure item; owner: Willa Novak.

## Recommended next actions

Sequence the critical and high findings first, assign the named owners, preserve the cited records, and document any resolution in the controlling matter register before the stated deadline.

## Assumptions and limitations

This analysis is confined to task cb100-061-arcadia-genomics and the supplied synthetic evidence. It does not rely on external facts, does not resolve disputed law, and is not legal advice for a real person or entity.

Before 2026-09-02, obtain a signed ratification and update the controlling register; owner: Samuel Kim.

Before 2026-09-02, recalculate the exposure and preserve the supporting ledger; owner: Maya Ellison.

Before 2026-09-02, secure written consent from the authorized decision-maker; owner: Rafael Okafor.

Before 2026-09-02, issue a corrective notice using the contractually operative method; owner: Nora Chen.

Before 2026-09-02, escalate the conflict to the responsible legal and business owners; owner: Dominic Alvarez.

Before 2026-09-02, document the governing interpretation before the deadline; owner: Priya Raman.

Before 2026-09-02, place the affected population on hold pending reconciliation; owner: Elliot Mercer.

Before 2026-09-02, amend the closing or response checklist with a dated cure item; owner: Talia Brooks.

Before 2026-09-02, obtain a signed ratification and update the controlling register; owner: Jonas Feld.

Before 2026-09-02, recalculate the exposure and preserve the supporting ledger; owner: Mei Whitaker.

Before 2026-09-02, secure written consent from the authorized decision-maker; owner: Caleb Hassan.

Before 2026-09-02, issue a corrective notice using the contractually operative method; owner: Leona Park.

Before 2026-09-02, escalate the conflict to the responsible legal and business owners; owner: Isaac Romero.

Before 2026-09-02, document the governing interpretation before the deadline; owner: Sofia Bennett.

Before 2026-09-02, place the affected population on hold pending reconciliation; owner: Adrian Mensah.

Before 2026-09-02, amend the closing or response checklist with a dated cure item; owner: Willa Novak.

Prompt: You are privacy and regulatory counsel for Arcadia Genomics, Inc. The partner responsible for this matter needs a defensible decision record before the next client call. A consumer access request exposes inconsistencies among genomic-data notices, deletion jobs, vendors, and overseas research transfers. Decision due 2026-09-02. California law governs; California Privacy Protection Agency is the forum. Prioritize conflicts between signed instruments and later operational records. Work out the defensible position from the matter production and leave an audit-ready exception tracker and concise advice for the supervising lawyer. Keep confirmed conflicts separate from open questions, cite the records that actually control each conclusion, and do not fill gaps with outside facts.

Complete at least 46 successful, argument-specific evidence and output calls.

Find and read the 33 controlling, corroborating, and work-product-control records in full.

Inspect file metadata for the eight designated critical primary records before relying on them.

Confirm the sandbox's allowed document and output roots.

Inventory all 96 records so the relevant sources are discovered among the context records.

Search the production for email evidence that may corroborate or contradict formal records.

Leave only findings.json and advice.md in the output workspace.

Create both final work products through the sandbox MCP surface.

Produce findings.json as a valid JSON object.

Report exactly 16 confirmed exceptions.

Use each stable finding ID exactly once.

Set schema_version to the released matter value '1.0'.

Set task_id to the released matter value 'cb100-061-arcadia-genomics'.

Set matter_number to the released matter value 'CB-PR-3001'.

Set prepared_for to the released matter value 'Arcadia Genomics, Inc.'.

Set as_of to the released matter value '2026-09-02'.

Include the confirmed F-01 exception for processing-purpose gap.

Preserve F-01's id from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's issue from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's severity from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's primary_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's corroborating_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Reconcile F-01 using the exact controlled facts ['2025-02-24', 'CB-PR-3001-A932', '2025-03-06', 'CB-PR-3001-J440'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-01's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Samuel Kim'] for F-01.

Include the confirmed F-02 exception for notice-practice mismatch.

Preserve F-02's id from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's issue from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's severity from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's primary_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's corroborating_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Reconcile F-02 using the exact controlled facts ['$3,431,788.00', '$3,750,076.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-02's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Maya Ellison'] for F-02.

Include the confirmed F-03 exception for consent-record deficiency.

Preserve F-03's id from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's issue from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's severity from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's primary_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's corroborating_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Reconcile F-03 using the exact controlled facts ['Nadine Flores', 'Henry Cho'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-03's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Rafael Okafor'] for F-03.

Include the confirmed F-04 exception for processor-contract omission.

Preserve F-04's id from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's issue from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's severity from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's primary_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's corroborating_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Reconcile F-04 using the exact controlled facts ['closed without exception', 'CB-PR-3001-D806', 'open and escalated', 'CB-PR-3001-M915'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-04's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Nora Chen'] for F-04.

Include the confirmed F-05 exception for subprocessor inventory mismatch.

Preserve F-05's id from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's issue from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's severity from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's primary_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's corroborating_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Reconcile F-05 using the exact controlled facts ['California Privacy Protection Agency', 'California'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-05's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Dominic Alvarez'] for F-05.

Include the confirmed F-06 exception for cross-border transfer gap.

Preserve F-06's id from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's issue from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's severity from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's primary_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's corroborating_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Reconcile F-06 using the exact controlled facts ['13%', '18%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-06's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Priya Raman'] for F-06.

Include the confirmed F-07 exception for retention schedule conflict.

Preserve F-07's id from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's issue from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's severity from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's primary_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's corroborating_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Reconcile F-07 using the exact controlled facts ['notices-arcadia_genomics_inc@example.test', 'archive-north_coast_sequencing_network@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-07's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Elliot Mercer'] for F-07.

Include the confirmed F-08 exception for deletion-job failure.

Preserve F-08's id from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's issue from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's severity from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's primary_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's corroborating_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Reconcile F-08 using the exact controlled facts ['90 records', '2025-07-04', '71 records', '2025-08-16'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-08's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Talia Brooks'] for F-08.

Include the confirmed F-09 exception for access-request deadline.

Preserve F-09's id from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's issue from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's severity from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's primary_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's corroborating_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Reconcile F-09 using the exact controlled facts ['2025-01-19', 'CB-PR-3001-I596', '2025-02-07', 'CB-PR-3001-R899'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-09's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Jonas Feld'] for F-09.

Include the confirmed F-10 exception for identity-verification inconsistency.

Preserve F-10's id from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's issue from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's severity from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's primary_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's corroborating_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Reconcile F-10 using the exact controlled facts ['$2,054,266.00', '$2,215,032.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-10's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Mei Whitaker'] for F-10.

Include the confirmed F-11 exception for incident-notification clock.

Preserve F-11's id from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's issue from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's severity from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's primary_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's corroborating_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Reconcile F-11 using the exact controlled facts ['Nadine Flores', 'Caleb Hassan'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-11's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Caleb Hassan'] for F-11.

Include the confirmed F-12 exception for risk-assessment omission.

Preserve F-12's id from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's issue from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's severity from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's primary_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's corroborating_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Reconcile F-12 using the exact controlled facts ['closed without exception', 'CB-PR-3001-L450', 'open and escalated', 'CB-PR-3001-U334'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-12's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Leona Park'] for F-12.

Include the confirmed F-13 exception for sensitive-data classification.

Preserve F-13's id from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's issue from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's severity from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's primary_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's corroborating_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Reconcile F-13 using the exact controlled facts ['California Privacy Protection Agency', 'California'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-13's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Isaac Romero'] for F-13.

Include the confirmed F-14 exception for minor-consent issue.

Preserve F-14's id from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's issue from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's severity from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's primary_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's corroborating_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Reconcile F-14 using the exact controlled facts ['5%', '10%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-14's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Sofia Bennett'] for F-14.

Include the confirmed F-15 exception for training completion gap.

Preserve F-15's id from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's issue from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's severity from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's primary_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's corroborating_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Reconcile F-15 using the exact controlled facts ['notices-arcadia_genomics_inc@example.test', 'archive-north_coast_sequencing_network@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-15's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Adrian Mensah'] for F-15.

Include the confirmed F-16 exception for regulator commitment overdue.

Preserve F-16's id from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's issue from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's severity from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's primary_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's corroborating_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Reconcile F-16 using the exact controlled facts ['174 records', '2025-09-26', '43 records', '2025-10-11'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-16's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-02', 'Willa Novak'] for F-16.

Include the 'Executive assessment' decision section in advice.md.

Include the 'Method and record coverage' decision section in advice.md.

Include the 'Findings' decision section in advice.md.

Include the 'Recommended next actions' decision section in advice.md.

Include the 'Assumptions and limitations' decision section in advice.md.

Explain F-01 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-02 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-03 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-04 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-05 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-06 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-07 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-08 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-09 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-10 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-11 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-12 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-13 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-14 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-15 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-16 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Do not claim the production has no issues or that every record is consistent.

The CB-PR-3001 production contains independently maintained records; a defensible answer must preserve each supported conflict and its cure owner.


# Counsel advice — BrightPath child-privacy compliance review

## Executive assessment

For BrightPath Learning Apps matter CB-PR-3002, the review identified 16 source-supported exceptions requiring action before 2026-09-06. The assessment concerns Lighthouse School District and the supplied record for Connecticut.

## Method and record coverage

The review inventoried all 96 production files, read the 33 controlling, corroborating, and control records, searched the email exports, and checked metadata for the designated chain-of-custody sample. Conclusions are limited to the synthetic production supplied for this benchmark matter.

## Findings

### F-01 — processing-purpose gap (critical)

The records do not reconcile for processing-purpose gap: one source states the operative date is 2025-02-14 under control reference CB-PR-3002-A202, while the corroborating source states the acknowledged date is 2025-03-27 under response reference CB-PR-3002-J661.

Primary source: `/workspace/documents/01_data_inventory/001_data_inventory_control_register.md`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md`

Recommended action: Before 2026-09-06, obtain a signed ratification and update the controlling register; owner: Maya Ellison.

### F-02 — notice-practice mismatch (high)

The records do not reconcile for notice-practice mismatch: one source states the controlling amount is $4,766,642.00, while the corroborating source states the reconciliation and counterparty record use $4,979,784.00.

Primary source: `/workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv`

Recommended action: Before 2026-09-06, recalculate the exposure and preserve the supporting ledger; owner: Rafael Okafor.

### F-03 — consent-record deficiency (high)

The records do not reconcile for consent-record deficiency: one source states approval is attributed to Micah Sullivan as the sole authorized reviewer, while the corroborating source states the approval log names Micah Sullivan and contains no entry for Micah Sullivan.

Primary source: `/workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html`

Recommended action: Before 2026-09-06, secure written consent from the authorized decision-maker; owner: Nora Chen.

### F-04 — processor-contract omission (medium)

The records do not reconcile for processor-contract omission: one source states the item is recorded as closed without exception in CB-PR-3002-D667, while the corroborating source states the later status register marks it open and escalated in CB-PR-3002-M143.

Primary source: `/workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt`

Corroborating source: `/workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt`

Recommended action: Before 2026-09-06, issue a corrective notice using the contractually operative method; owner: Dominic Alvarez.

### F-05 — subprocessor inventory mismatch (medium)

The records do not reconcile for subprocessor inventory mismatch: one source states the applicable location is Connecticut Attorney General, while the corroborating source states the implementation record assigns the obligation to Connecticut operations outside Connecticut Attorney General.

Primary source: `/workspace/documents/02_processing_records/013_processing_records_review_memorandum.json`

Corroborating source: `/workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json`

Recommended action: Before 2026-09-06, escalate the conflict to the responsible legal and business owners; owner: Priya Raman.

### F-06 — cross-border transfer gap (low)

The records do not reconcile for cross-border transfer gap: one source states the threshold is 8% with no stated tolerance, while the corroborating source states the applied threshold is 14% and produced a different exception result.

Primary source: `/workspace/documents/02_processing_records/016_processing_records_status_report.md`

Corroborating source: `/workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md`

Recommended action: Before 2026-09-06, document the governing interpretation before the deadline; owner: Elliot Mercer.

### F-07 — retention schedule conflict (critical)

The records do not reconcile for retention schedule conflict: one source states formal notice must use notices-brightpath_learning_apps@example.test, while the corroborating source states the only delivery record was sent to archive-lighthouse_school_district@example.test.

Primary source: `/workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml`

Corroborating source: `/workspace/documents/09_training/067_training_correspondence.eml`

Recommended action: Before 2026-09-06, place the affected population on hold pending reconciliation; owner: Talia Brooks.

### F-08 — deletion-job failure (high)

The records do not reconcile for deletion-job failure: one source states the governed population contains 105 records through 2025-07-19, while the corroborating source states the certification covers 35 records through 2025-07-26.

Primary source: `/workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml`

Corroborating source: `/workspace/documents/09_training/070_training_formal_notice.xml`

Recommended action: Before 2026-09-06, amend the closing or response checklist with a dated cure item; owner: Jonas Feld.

### F-09 — access-request deadline (high)

The records do not reconcile for access-request deadline: one source states the operative date is 2026-01-27 under control reference CB-PR-3002-I129, while the corroborating source states the acknowledged date is 2026-03-15 under response reference CB-PR-3002-R102.

Primary source: `/workspace/documents/04_security_incidents/025_security_incidents_control_register.md`

Corroborating source: `/workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md`

Recommended action: Before 2026-09-06, obtain a signed ratification and update the controlling register; owner: Mei Whitaker.

### F-10 — identity-verification inconsistency (medium)

The records do not reconcile for identity-verification inconsistency: one source states the controlling amount is $1,537,903.00, while the corroborating source states the reconciliation and counterparty record use $1,702,306.00.

Primary source: `/workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv`

Corroborating source: `/workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv`

Recommended action: Before 2026-09-06, recalculate the exposure and preserve the supporting ledger; owner: Caleb Hassan.

### F-11 — incident-notification clock (medium)

The records do not reconcile for incident-notification clock: one source states approval is attributed to Micah Sullivan as the sole authorized reviewer, while the corroborating source states the approval log names Isaac Romero and contains no entry for Micah Sullivan.

Primary source: `/workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html`

Corroborating source: `/workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html`

Recommended action: Before 2026-09-06, secure written consent from the authorized decision-maker; owner: Leona Park.

### F-12 — risk-assessment omission (low)

The records do not reconcile for risk-assessment omission: one source states the item is recorded as closed without exception in CB-PR-3002-L535, while the corroborating source states the later status register marks it open and escalated in CB-PR-3002-U548.

Primary source: `/workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt`

Corroborating source: `/workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt`

Recommended action: Before 2026-09-06, issue a corrective notice using the contractually operative method; owner: Isaac Romero.

### F-13 — sensitive-data classification (critical)

The records do not reconcile for sensitive-data classification: one source states the applicable location is Connecticut Attorney General, while the corroborating source states the implementation record assigns the obligation to Connecticut operations outside Connecticut Attorney General.

Primary source: `/workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json`

Corroborating source: `/workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json`

Recommended action: Before 2026-09-06, escalate the conflict to the responsible legal and business owners; owner: Sofia Bennett.

### F-14 — minor-consent issue (high)

The records do not reconcile for minor-consent issue: one source states the threshold is 2% with no stated tolerance, while the corroborating source states the applied threshold is 4% and produced a different exception result.

Primary source: `/workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md`

Corroborating source: `/workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md`

Recommended action: Before 2026-09-06, document the governing interpretation before the deadline; owner: Adrian Mensah.

### F-15 — training completion gap (high)

The records do not reconcile for training completion gap: one source states formal notice must use notices-brightpath_learning_apps@example.test, while the corroborating source states the only delivery record was sent to archive-lighthouse_school_district@example.test.

Primary source: `/workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml`

Corroborating source: `/workspace/documents/12_remediation/091_remediation_correspondence.eml`

Recommended action: Before 2026-09-06, place the affected population on hold pending reconciliation; owner: Willa Novak.

### F-16 — regulator commitment overdue (medium)

The records do not reconcile for regulator commitment overdue: one source states the governed population contains 88 records through 2025-11-19, while the corroborating source states the certification covers 36 records through 2025-11-27.

Primary source: `/workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml`

Corroborating source: `/workspace/documents/12_remediation/094_remediation_formal_notice.xml`

Recommended action: Before 2026-09-06, amend the closing or response checklist with a dated cure item; owner: Theo Laurent.

## Recommended next actions

Sequence the critical and high findings first, assign the named owners, preserve the cited records, and document any resolution in the controlling matter register before the stated deadline.

## Assumptions and limitations

This analysis is confined to task cb100-062-brightpath-kids and the supplied synthetic evidence. It does not rely on external facts, does not resolve disputed law, and is not legal advice for a real person or entity.

Before 2026-09-06, obtain a signed ratification and update the controlling register; owner: Maya Ellison.

Before 2026-09-06, recalculate the exposure and preserve the supporting ledger; owner: Rafael Okafor.

Before 2026-09-06, secure written consent from the authorized decision-maker; owner: Nora Chen.

Before 2026-09-06, issue a corrective notice using the contractually operative method; owner: Dominic Alvarez.

Before 2026-09-06, escalate the conflict to the responsible legal and business owners; owner: Priya Raman.

Before 2026-09-06, document the governing interpretation before the deadline; owner: Elliot Mercer.

Before 2026-09-06, place the affected population on hold pending reconciliation; owner: Talia Brooks.

Before 2026-09-06, amend the closing or response checklist with a dated cure item; owner: Jonas Feld.

Before 2026-09-06, obtain a signed ratification and update the controlling register; owner: Mei Whitaker.

Before 2026-09-06, recalculate the exposure and preserve the supporting ledger; owner: Caleb Hassan.

Before 2026-09-06, secure written consent from the authorized decision-maker; owner: Leona Park.

Before 2026-09-06, issue a corrective notice using the contractually operative method; owner: Isaac Romero.

Before 2026-09-06, escalate the conflict to the responsible legal and business owners; owner: Sofia Bennett.

Before 2026-09-06, document the governing interpretation before the deadline; owner: Adrian Mensah.

Before 2026-09-06, place the affected population on hold pending reconciliation; owner: Willa Novak.

Before 2026-09-06, amend the closing or response checklist with a dated cure item; owner: Theo Laurent.

Prompt: You are privacy and regulatory counsel for BrightPath Learning Apps. A late document production changed the factual picture, and the matter team needs the entire record reconciled from first principles. An education app collected voice samples under school consent while subprocessor and deletion records lagged product changes. Decision due 2026-09-06. Connecticut law governs; Connecticut Attorney General is the forum. Separate confirmed exceptions from items that merely require follow-up. Work out the defensible position from the matter production and leave an audit-ready exception tracker and concise advice for the supervising lawyer. Keep confirmed conflicts separate from open questions, cite the records that actually control each conclusion, and do not fill gaps with outside facts.

Complete at least 46 successful, argument-specific evidence and output calls.

Find and read the 33 controlling, corroborating, and work-product-control records in full.

Inspect file metadata for the eight designated critical primary records before relying on them.

Confirm the sandbox's allowed document and output roots.

Inventory all 96 records so the relevant sources are discovered among the context records.

Search the production for email evidence that may corroborate or contradict formal records.

Leave only findings.json and advice.md in the output workspace.

Create both final work products through the sandbox MCP surface.

Produce findings.json as a valid JSON object.

Report exactly 16 confirmed exceptions.

Use each stable finding ID exactly once.

Set schema_version to the released matter value '1.0'.

Set task_id to the released matter value 'cb100-062-brightpath-kids'.

Set matter_number to the released matter value 'CB-PR-3002'.

Set prepared_for to the released matter value 'BrightPath Learning Apps'.

Set as_of to the released matter value '2026-09-06'.

Include the confirmed F-01 exception for processing-purpose gap.

Preserve F-01's id from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's issue from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's severity from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's primary_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's corroborating_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Reconcile F-01 using the exact controlled facts ['2025-02-14', 'CB-PR-3002-A202', '2025-03-27', 'CB-PR-3002-J661'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-01's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Maya Ellison'] for F-01.

Include the confirmed F-02 exception for notice-practice mismatch.

Preserve F-02's id from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's issue from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's severity from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's primary_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's corroborating_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Reconcile F-02 using the exact controlled facts ['$4,766,642.00', '$4,979,784.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-02's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Rafael Okafor'] for F-02.

Include the confirmed F-03 exception for consent-record deficiency.

Preserve F-03's id from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's issue from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's severity from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's primary_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's corroborating_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Reconcile F-03 using the exact controlled facts ['Micah Sullivan', 'Micah Sullivan'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-03's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Nora Chen'] for F-03.

Include the confirmed F-04 exception for processor-contract omission.

Preserve F-04's id from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's issue from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's severity from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's primary_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's corroborating_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Reconcile F-04 using the exact controlled facts ['closed without exception', 'CB-PR-3002-D667', 'open and escalated', 'CB-PR-3002-M143'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-04's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Dominic Alvarez'] for F-04.

Include the confirmed F-05 exception for subprocessor inventory mismatch.

Preserve F-05's id from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's issue from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's severity from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's primary_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's corroborating_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Reconcile F-05 using the exact controlled facts ['Connecticut Attorney General', 'Connecticut'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-05's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Priya Raman'] for F-05.

Include the confirmed F-06 exception for cross-border transfer gap.

Preserve F-06's id from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's issue from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's severity from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's primary_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's corroborating_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Reconcile F-06 using the exact controlled facts ['8%', '14%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-06's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Elliot Mercer'] for F-06.

Include the confirmed F-07 exception for retention schedule conflict.

Preserve F-07's id from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's issue from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's severity from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's primary_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's corroborating_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Reconcile F-07 using the exact controlled facts ['notices-brightpath_learning_apps@example.test', 'archive-lighthouse_school_district@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-07's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Talia Brooks'] for F-07.

Include the confirmed F-08 exception for deletion-job failure.

Preserve F-08's id from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's issue from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's severity from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's primary_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's corroborating_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Reconcile F-08 using the exact controlled facts ['105 records', '2025-07-19', '35 records', '2025-07-26'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-08's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Jonas Feld'] for F-08.

Include the confirmed F-09 exception for access-request deadline.

Preserve F-09's id from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's issue from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's severity from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's primary_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's corroborating_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Reconcile F-09 using the exact controlled facts ['2026-01-27', 'CB-PR-3002-I129', '2026-03-15', 'CB-PR-3002-R102'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-09's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Mei Whitaker'] for F-09.

Include the confirmed F-10 exception for identity-verification inconsistency.

Preserve F-10's id from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's issue from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's severity from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's primary_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's corroborating_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Reconcile F-10 using the exact controlled facts ['$1,537,903.00', '$1,702,306.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-10's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Caleb Hassan'] for F-10.

Include the confirmed F-11 exception for incident-notification clock.

Preserve F-11's id from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's issue from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's severity from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's primary_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's corroborating_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Reconcile F-11 using the exact controlled facts ['Micah Sullivan', 'Isaac Romero'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-11's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Leona Park'] for F-11.

Include the confirmed F-12 exception for risk-assessment omission.

Preserve F-12's id from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's issue from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's severity from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's primary_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's corroborating_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Reconcile F-12 using the exact controlled facts ['closed without exception', 'CB-PR-3002-L535', 'open and escalated', 'CB-PR-3002-U548'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-12's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Isaac Romero'] for F-12.

Include the confirmed F-13 exception for sensitive-data classification.

Preserve F-13's id from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's issue from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's severity from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's primary_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's corroborating_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Reconcile F-13 using the exact controlled facts ['Connecticut Attorney General', 'Connecticut'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-13's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Sofia Bennett'] for F-13.

Include the confirmed F-14 exception for minor-consent issue.

Preserve F-14's id from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's issue from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's severity from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's primary_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's corroborating_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Reconcile F-14 using the exact controlled facts ['2%', '4%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-14's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Adrian Mensah'] for F-14.

Include the confirmed F-15 exception for training completion gap.

Preserve F-15's id from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's issue from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's severity from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's primary_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's corroborating_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Reconcile F-15 using the exact controlled facts ['notices-brightpath_learning_apps@example.test', 'archive-lighthouse_school_district@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-15's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Willa Novak'] for F-15.

Include the confirmed F-16 exception for regulator commitment overdue.

Preserve F-16's id from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's issue from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's severity from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's primary_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's corroborating_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Reconcile F-16 using the exact controlled facts ['88 records', '2025-11-19', '36 records', '2025-11-27'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-16's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-06', 'Theo Laurent'] for F-16.

Include the 'Executive assessment' decision section in advice.md.

Include the 'Method and record coverage' decision section in advice.md.

Include the 'Findings' decision section in advice.md.

Include the 'Recommended next actions' decision section in advice.md.

Include the 'Assumptions and limitations' decision section in advice.md.

Explain F-01 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-02 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-03 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-04 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-05 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-06 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-07 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-08 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-09 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-10 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-11 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-12 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-13 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-14 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-15 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-16 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Do not claim the production has no issues or that every record is consistent.

Reconcile controlling and corroborating records

The CB-PR-3002 production contains independently maintained records; a defensible answer must preserve each supported conflict and its cure owner.

Timestamp recency does not establish legal priority, execution, or approval authority.

Report primary records without reconciliation

Primary records alone conceal the operational conflicts that create the actionable exceptions.

BrightPath child-privacy compliance review