# Counsel advice — Everfield loyalty-data assessment

## Executive assessment

For Everfield Markets matter CB-PR-3005, the review identified 16 source-supported exceptions requiring action before 2026-09-16. The assessment concerns Poppy Loyalty Cloud and the supplied record for Virginia.

## Method and record coverage

The review inventoried all 96 production files, read the 33 controlling, corroborating, and control records, searched the email exports, and checked metadata for the designated chain-of-custody sample. Conclusions are limited to the synthetic production supplied for this benchmark matter.

## Findings

### F-01 — processing-purpose gap (critical)

The records do not reconcile for processing-purpose gap: one source states the operative date is 2026-01-01 under control reference CB-PR-3005-A223, while the corroborating source states the acknowledged date is 2026-02-07 under response reference CB-PR-3005-J663.

Primary source: `/workspace/documents/01_data_inventory/001_data_inventory_control_register.md`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md`

Recommended action: Before 2026-09-16, obtain a signed ratification and update the controlling register; owner: Dominic Alvarez.

### F-02 — notice-practice mismatch (high)

The records do not reconcile for notice-practice mismatch: one source states the controlling amount is $2,345,239.00, while the corroborating source states the reconciliation and counterparty record use $2,496,978.00.

Primary source: `/workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv`

Recommended action: Before 2026-09-16, recalculate the exposure and preserve the supporting ledger; owner: Priya Raman.

### F-03 — consent-record deficiency (high)

The records do not reconcile for consent-record deficiency: one source states approval is attributed to Lena Varga as the sole authorized reviewer, while the corroborating source states the approval log names Rafael Okafor and contains no entry for Lena Varga.

Primary source: `/workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html`

Recommended action: Before 2026-09-16, secure written consent from the authorized decision-maker; owner: Elliot Mercer.

### F-04 — processor-contract omission (medium)

The records do not reconcile for processor-contract omission: one source states the item is recorded as closed without exception in CB-PR-3005-D275, while the corroborating source states the later status register marks it open and escalated in CB-PR-3005-M182.

Primary source: `/workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt`

Corroborating source: `/workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt`

Recommended action: Before 2026-09-16, issue a corrective notice using the contractually operative method; owner: Talia Brooks.

### F-05 — subprocessor inventory mismatch (medium)

The records do not reconcile for subprocessor inventory mismatch: one source states the applicable location is Virginia Attorney General, while the corroborating source states the implementation record assigns the obligation to Virginia operations outside Virginia Attorney General.

Primary source: `/workspace/documents/02_processing_records/013_processing_records_review_memorandum.json`

Corroborating source: `/workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json`

Recommended action: Before 2026-09-16, escalate the conflict to the responsible legal and business owners; owner: Jonas Feld.

### F-06 — cross-border transfer gap (low)

The records do not reconcile for cross-border transfer gap: one source states the threshold is 5% with no stated tolerance, while the corroborating source states the applied threshold is 10% and produced a different exception result.

Primary source: `/workspace/documents/02_processing_records/016_processing_records_status_report.md`

Corroborating source: `/workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md`

Recommended action: Before 2026-09-16, document the governing interpretation before the deadline; owner: Mei Whitaker.

### F-07 — retention schedule conflict (critical)

The records do not reconcile for retention schedule conflict: one source states formal notice must use notices-everfield_markets@example.test, while the corroborating source states the only delivery record was sent to archive-poppy_loyalty_cloud@example.test.

Primary source: `/workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml`

Corroborating source: `/workspace/documents/09_training/067_training_correspondence.eml`

Recommended action: Before 2026-09-16, place the affected population on hold pending reconciliation; owner: Caleb Hassan.

### F-08 — deletion-job failure (high)

The records do not reconcile for deletion-job failure: one source states the governed population contains 157 records through 2026-01-27, while the corroborating source states the certification covers 59 records through 2026-02-27.

Primary source: `/workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml`

Corroborating source: `/workspace/documents/09_training/070_training_formal_notice.xml`

Recommended action: Before 2026-09-16, amend the closing or response checklist with a dated cure item; owner: Leona Park.

### F-09 — access-request deadline (high)

The records do not reconcile for access-request deadline: one source states the operative date is 2025-09-23 under control reference CB-PR-3005-I423, while the corroborating source states the acknowledged date is 2025-10-04 under response reference CB-PR-3005-R540.

Primary source: `/workspace/documents/04_security_incidents/025_security_incidents_control_register.md`

Corroborating source: `/workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md`

Recommended action: Before 2026-09-16, obtain a signed ratification and update the controlling register; owner: Isaac Romero.

### F-10 — identity-verification inconsistency (medium)

The records do not reconcile for identity-verification inconsistency: one source states the controlling amount is $1,806,343.00, while the corroborating source states the reconciliation and counterparty record use $2,119,186.00.

Primary source: `/workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv`

Corroborating source: `/workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv`

Recommended action: Before 2026-09-16, recalculate the exposure and preserve the supporting ledger; owner: Sofia Bennett.

### F-11 — incident-notification clock (medium)

The records do not reconcile for incident-notification clock: one source states approval is attributed to Lena Varga as the sole authorized reviewer, while the corroborating source states the approval log names Henry Cho and contains no entry for Lena Varga.

Primary source: `/workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html`

Corroborating source: `/workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html`

Recommended action: Before 2026-09-16, secure written consent from the authorized decision-maker; owner: Adrian Mensah.

### F-12 — risk-assessment omission (low)

The records do not reconcile for risk-assessment omission: one source states the item is recorded as closed without exception in CB-PR-3005-L694, while the corroborating source states the later status register marks it open and escalated in CB-PR-3005-U907.

Primary source: `/workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt`

Corroborating source: `/workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt`

Recommended action: Before 2026-09-16, issue a corrective notice using the contractually operative method; owner: Willa Novak.

### F-13 — sensitive-data classification (critical)

The records do not reconcile for sensitive-data classification: one source states the applicable location is Virginia Attorney General, while the corroborating source states the implementation record assigns the obligation to Virginia operations outside Virginia Attorney General.

Primary source: `/workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json`

Corroborating source: `/workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json`

Recommended action: Before 2026-09-16, escalate the conflict to the responsible legal and business owners; owner: Theo Laurent.

### F-14 — minor-consent issue (high)

The records do not reconcile for minor-consent issue: one source states the threshold is 14% with no stated tolerance, while the corroborating source states the applied threshold is 16% and produced a different exception result.

Primary source: `/workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md`

Corroborating source: `/workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md`

Recommended action: Before 2026-09-16, document the governing interpretation before the deadline; owner: Amara Patel.

### F-15 — training completion gap (high)

The records do not reconcile for training completion gap: one source states formal notice must use notices-everfield_markets@example.test, while the corroborating source states the only delivery record was sent to archive-poppy_loyalty_cloud@example.test.

Primary source: `/workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml`

Corroborating source: `/workspace/documents/12_remediation/091_remediation_correspondence.eml`

Recommended action: Before 2026-09-16, place the affected population on hold pending reconciliation; owner: Henry Cho.

### F-16 — regulator commitment overdue (medium)

The records do not reconcile for regulator commitment overdue: one source states the governed population contains 83 records through 2025-11-14, while the corroborating source states the certification covers 36 records through 2025-11-22.

Primary source: `/workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml`

Corroborating source: `/workspace/documents/12_remediation/094_remediation_formal_notice.xml`

Recommended action: Before 2026-09-16, amend the closing or response checklist with a dated cure item; owner: Nadine Flores.

## Recommended next actions

Sequence the critical and high findings first, assign the named owners, preserve the cited records, and document any resolution in the controlling matter register before the stated deadline.

## Assumptions and limitations

This analysis is confined to task cb100-065-everfield-market and the supplied synthetic evidence. It does not rely on external facts, does not resolve disputed law, and is not legal advice for a real person or entity.

Before 2026-09-16, obtain a signed ratification and update the controlling register; owner: Dominic Alvarez.

Before 2026-09-16, recalculate the exposure and preserve the supporting ledger; owner: Priya Raman.

Before 2026-09-16, secure written consent from the authorized decision-maker; owner: Elliot Mercer.

Before 2026-09-16, issue a corrective notice using the contractually operative method; owner: Talia Brooks.

Before 2026-09-16, escalate the conflict to the responsible legal and business owners; owner: Jonas Feld.

Before 2026-09-16, document the governing interpretation before the deadline; owner: Mei Whitaker.

Before 2026-09-16, place the affected population on hold pending reconciliation; owner: Caleb Hassan.

Before 2026-09-16, amend the closing or response checklist with a dated cure item; owner: Leona Park.

Before 2026-09-16, obtain a signed ratification and update the controlling register; owner: Isaac Romero.

Before 2026-09-16, recalculate the exposure and preserve the supporting ledger; owner: Sofia Bennett.

Before 2026-09-16, secure written consent from the authorized decision-maker; owner: Adrian Mensah.

Before 2026-09-16, issue a corrective notice using the contractually operative method; owner: Willa Novak.

Before 2026-09-16, escalate the conflict to the responsible legal and business owners; owner: Theo Laurent.

Before 2026-09-16, document the governing interpretation before the deadline; owner: Amara Patel.

Before 2026-09-16, place the affected population on hold pending reconciliation; owner: Henry Cho.

Before 2026-09-16, amend the closing or response checklist with a dated cure item; owner: Nadine Flores.

Prompt: You are privacy and regulatory counsel for Everfield Markets. Outside counsel inherited this file after turnover on the client team and must validate every operative record before advising. Loyalty profiles combine purchase and inferred health data with consent, retention, and processor terms that differ by system. Decision due 2026-09-16. Virginia law governs; Virginia Attorney General is the forum. Evaluate both legal consequence and the practical owner needed to cure each exception. Work out the defensible position from the matter production and leave an audit-ready exception tracker and concise advice for the supervising lawyer. Keep confirmed conflicts separate from open questions, cite the records that actually control each conclusion, and do not fill gaps with outside facts.

Complete at least 46 successful, argument-specific evidence and output calls.

Find and read the 33 controlling, corroborating, and work-product-control records in full.

Inspect file metadata for the eight designated critical primary records before relying on them.

Confirm the sandbox's allowed document and output roots.

Inventory all 96 records so the relevant sources are discovered among the context records.

Search the production for email evidence that may corroborate or contradict formal records.

Leave only findings.json and advice.md in the output workspace.

Create both final work products through the sandbox MCP surface.

Produce findings.json as a valid JSON object.

Report exactly 16 confirmed exceptions.

Use each stable finding ID exactly once.

Set schema_version to the released matter value '1.0'.

Set task_id to the released matter value 'cb100-065-everfield-market'.

Set matter_number to the released matter value 'CB-PR-3005'.

Set prepared_for to the released matter value 'Everfield Markets'.

Set as_of to the released matter value '2026-09-16'.

Include the confirmed F-01 exception for processing-purpose gap.

Preserve F-01's id from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's issue from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's severity from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's primary_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's corroborating_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Reconcile F-01 using the exact controlled facts ['2026-01-01', 'CB-PR-3005-A223', '2026-02-07', 'CB-PR-3005-J663'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-01's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Dominic Alvarez'] for F-01.

Include the confirmed F-02 exception for notice-practice mismatch.

Preserve F-02's id from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's issue from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's severity from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's primary_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's corroborating_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Reconcile F-02 using the exact controlled facts ['$2,345,239.00', '$2,496,978.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-02's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Priya Raman'] for F-02.

Include the confirmed F-03 exception for consent-record deficiency.

Preserve F-03's id from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's issue from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's severity from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's primary_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's corroborating_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Reconcile F-03 using the exact controlled facts ['Lena Varga', 'Rafael Okafor'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-03's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Elliot Mercer'] for F-03.

Include the confirmed F-04 exception for processor-contract omission.

Preserve F-04's id from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's issue from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's severity from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's primary_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's corroborating_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Reconcile F-04 using the exact controlled facts ['closed without exception', 'CB-PR-3005-D275', 'open and escalated', 'CB-PR-3005-M182'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-04's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Talia Brooks'] for F-04.

Include the confirmed F-05 exception for subprocessor inventory mismatch.

Preserve F-05's id from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's issue from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's severity from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's primary_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's corroborating_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Reconcile F-05 using the exact controlled facts ['Virginia Attorney General', 'Virginia'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-05's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Jonas Feld'] for F-05.

Include the confirmed F-06 exception for cross-border transfer gap.

Preserve F-06's id from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's issue from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's severity from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's primary_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's corroborating_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Reconcile F-06 using the exact controlled facts ['5%', '10%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-06's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Mei Whitaker'] for F-06.

Include the confirmed F-07 exception for retention schedule conflict.

Preserve F-07's id from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's issue from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's severity from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's primary_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's corroborating_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Reconcile F-07 using the exact controlled facts ['notices-everfield_markets@example.test', 'archive-poppy_loyalty_cloud@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-07's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Caleb Hassan'] for F-07.

Include the confirmed F-08 exception for deletion-job failure.

Preserve F-08's id from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's issue from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's severity from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's primary_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's corroborating_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Reconcile F-08 using the exact controlled facts ['157 records', '2026-01-27', '59 records', '2026-02-27'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-08's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Leona Park'] for F-08.

Include the confirmed F-09 exception for access-request deadline.

Preserve F-09's id from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's issue from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's severity from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's primary_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's corroborating_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Reconcile F-09 using the exact controlled facts ['2025-09-23', 'CB-PR-3005-I423', '2025-10-04', 'CB-PR-3005-R540'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-09's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Isaac Romero'] for F-09.

Include the confirmed F-10 exception for identity-verification inconsistency.

Preserve F-10's id from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's issue from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's severity from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's primary_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's corroborating_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Reconcile F-10 using the exact controlled facts ['$1,806,343.00', '$2,119,186.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-10's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Sofia Bennett'] for F-10.

Include the confirmed F-11 exception for incident-notification clock.

Preserve F-11's id from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's issue from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's severity from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's primary_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's corroborating_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Reconcile F-11 using the exact controlled facts ['Lena Varga', 'Henry Cho'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-11's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Adrian Mensah'] for F-11.

Include the confirmed F-12 exception for risk-assessment omission.

Preserve F-12's id from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's issue from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's severity from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's primary_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's corroborating_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Reconcile F-12 using the exact controlled facts ['closed without exception', 'CB-PR-3005-L694', 'open and escalated', 'CB-PR-3005-U907'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-12's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Willa Novak'] for F-12.

Include the confirmed F-13 exception for sensitive-data classification.

Preserve F-13's id from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's issue from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's severity from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's primary_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's corroborating_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Reconcile F-13 using the exact controlled facts ['Virginia Attorney General', 'Virginia'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-13's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Theo Laurent'] for F-13.

Include the confirmed F-14 exception for minor-consent issue.

Preserve F-14's id from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's issue from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's severity from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's primary_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's corroborating_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Reconcile F-14 using the exact controlled facts ['14%', '16%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-14's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Amara Patel'] for F-14.

Include the confirmed F-15 exception for training completion gap.

Preserve F-15's id from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's issue from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's severity from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's primary_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's corroborating_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Reconcile F-15 using the exact controlled facts ['notices-everfield_markets@example.test', 'archive-poppy_loyalty_cloud@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-15's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Henry Cho'] for F-15.

Include the confirmed F-16 exception for regulator commitment overdue.

Preserve F-16's id from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's issue from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's severity from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's primary_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's corroborating_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Reconcile F-16 using the exact controlled facts ['83 records', '2025-11-14', '36 records', '2025-11-22'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-16's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-16', 'Nadine Flores'] for F-16.

Include the 'Executive assessment' decision section in advice.md.

Include the 'Method and record coverage' decision section in advice.md.

Include the 'Findings' decision section in advice.md.

Include the 'Recommended next actions' decision section in advice.md.

Include the 'Assumptions and limitations' decision section in advice.md.

Explain F-01 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-02 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-03 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-04 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-05 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-06 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-07 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-08 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-09 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-10 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-11 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-12 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-13 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-14 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-15 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-16 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Do not claim the production has no issues or that every record is consistent.

The CB-PR-3005 production contains independently maintained records; a defensible answer must preserve each supported conflict and its cure owner.


# Counsel advice — Fable automated-decision privacy review

## Executive assessment

For Fable Financial Technologies matter CB-PR-3006, the review identified 16 source-supported exceptions requiring action before 2026-09-20. The assessment concerns Northbridge Model Services and the supplied record for Illinois.

## Method and record coverage

The review inventoried all 96 production files, read the 33 controlling, corroborating, and control records, searched the email exports, and checked metadata for the designated chain-of-custody sample. Conclusions are limited to the synthetic production supplied for this benchmark matter.

## Findings

### F-01 — processing-purpose gap (critical)

The records do not reconcile for processing-purpose gap: one source states the operative date is 2025-06-11 under control reference CB-PR-3006-A619, while the corroborating source states the acknowledged date is 2025-07-26 under response reference CB-PR-3006-J763.

Primary source: `/workspace/documents/01_data_inventory/001_data_inventory_control_register.md`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md`

Recommended action: Before 2026-09-20, obtain a signed ratification and update the controlling register; owner: Priya Raman.

### F-02 — notice-practice mismatch (high)

The records do not reconcile for notice-practice mismatch: one source states the controlling amount is $4,380,820.00, while the corroborating source states the reconciliation and counterparty record use $4,478,140.00.

Primary source: `/workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv`

Recommended action: Before 2026-09-20, recalculate the exposure and preserve the supporting ledger; owner: Elliot Mercer.

### F-03 — consent-record deficiency (high)

The records do not reconcile for consent-record deficiency: one source states approval is attributed to Samuel Kim as the sole authorized reviewer, while the corroborating source states the approval log names Dominic Alvarez and contains no entry for Samuel Kim.

Primary source: `/workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html`

Corroborating source: `/workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html`

Recommended action: Before 2026-09-20, secure written consent from the authorized decision-maker; owner: Talia Brooks.

### F-04 — processor-contract omission (medium)

The records do not reconcile for processor-contract omission: one source states the item is recorded as closed without exception in CB-PR-3006-D560, while the corroborating source states the later status register marks it open and escalated in CB-PR-3006-M204.

Primary source: `/workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt`

Corroborating source: `/workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt`

Recommended action: Before 2026-09-20, issue a corrective notice using the contractually operative method; owner: Jonas Feld.

### F-05 — subprocessor inventory mismatch (medium)

The records do not reconcile for subprocessor inventory mismatch: one source states the applicable location is Illinois Department of Financial and Professional Regulation, while the corroborating source states the implementation record assigns the obligation to Illinois operations outside Illinois Department of Financial and Professional Regulation.

Primary source: `/workspace/documents/02_processing_records/013_processing_records_review_memorandum.json`

Corroborating source: `/workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json`

Recommended action: Before 2026-09-20, escalate the conflict to the responsible legal and business owners; owner: Mei Whitaker.

### F-06 — cross-border transfer gap (low)

The records do not reconcile for cross-border transfer gap: one source states the threshold is 5% with no stated tolerance, while the corroborating source states the applied threshold is 8% and produced a different exception result.

Primary source: `/workspace/documents/02_processing_records/016_processing_records_status_report.md`

Corroborating source: `/workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md`

Recommended action: Before 2026-09-20, document the governing interpretation before the deadline; owner: Caleb Hassan.

### F-07 — retention schedule conflict (critical)

The records do not reconcile for retention schedule conflict: one source states formal notice must use notices-fable_financial_technologies@example.test, while the corroborating source states the only delivery record was sent to archive-northbridge_model_services@example.test.

Primary source: `/workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml`

Corroborating source: `/workspace/documents/09_training/067_training_correspondence.eml`

Recommended action: Before 2026-09-20, place the affected population on hold pending reconciliation; owner: Leona Park.

### F-08 — deletion-job failure (high)

The records do not reconcile for deletion-job failure: one source states the governed population contains 110 records through 2025-03-06, while the corroborating source states the certification covers 73 records through 2025-04-20.

Primary source: `/workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml`

Corroborating source: `/workspace/documents/09_training/070_training_formal_notice.xml`

Recommended action: Before 2026-09-20, amend the closing or response checklist with a dated cure item; owner: Isaac Romero.

### F-09 — access-request deadline (high)

The records do not reconcile for access-request deadline: one source states the operative date is 2025-03-25 under control reference CB-PR-3006-I301, while the corroborating source states the acknowledged date is 2025-05-04 under response reference CB-PR-3006-R738.

Primary source: `/workspace/documents/04_security_incidents/025_security_incidents_control_register.md`

Corroborating source: `/workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md`

Recommended action: Before 2026-09-20, obtain a signed ratification and update the controlling register; owner: Sofia Bennett.

### F-10 — identity-verification inconsistency (medium)

The records do not reconcile for identity-verification inconsistency: one source states the controlling amount is $1,361,019.00, while the corroborating source states the reconciliation and counterparty record use $1,378,538.00.

Primary source: `/workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv`

Corroborating source: `/workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv`

Recommended action: Before 2026-09-20, recalculate the exposure and preserve the supporting ledger; owner: Adrian Mensah.

### F-11 — incident-notification clock (medium)

The records do not reconcile for incident-notification clock: one source states approval is attributed to Samuel Kim as the sole authorized reviewer, while the corroborating source states the approval log names Micah Sullivan and contains no entry for Samuel Kim.

Primary source: `/workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html`

Corroborating source: `/workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html`

Recommended action: Before 2026-09-20, secure written consent from the authorized decision-maker; owner: Willa Novak.

### F-12 — risk-assessment omission (low)

The records do not reconcile for risk-assessment omission: one source states the item is recorded as closed without exception in CB-PR-3006-L857, while the corroborating source states the later status register marks it open and escalated in CB-PR-3006-U642.

Primary source: `/workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt`

Corroborating source: `/workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt`

Recommended action: Before 2026-09-20, issue a corrective notice using the contractually operative method; owner: Theo Laurent.

### F-13 — sensitive-data classification (critical)

The records do not reconcile for sensitive-data classification: one source states the applicable location is Illinois Department of Financial and Professional Regulation, while the corroborating source states the implementation record assigns the obligation to Illinois operations outside Illinois Department of Financial and Professional Regulation.

Primary source: `/workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json`

Corroborating source: `/workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json`

Recommended action: Before 2026-09-20, escalate the conflict to the responsible legal and business owners; owner: Amara Patel.

### F-14 — minor-consent issue (high)

The records do not reconcile for minor-consent issue: one source states the threshold is 10% with no stated tolerance, while the corroborating source states the applied threshold is 16% and produced a different exception result.

Primary source: `/workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md`

Corroborating source: `/workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md`

Recommended action: Before 2026-09-20, document the governing interpretation before the deadline; owner: Henry Cho.

### F-15 — training completion gap (high)

The records do not reconcile for training completion gap: one source states formal notice must use notices-fable_financial_technologies@example.test, while the corroborating source states the only delivery record was sent to archive-northbridge_model_services@example.test.

Primary source: `/workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml`

Corroborating source: `/workspace/documents/12_remediation/091_remediation_correspondence.eml`

Recommended action: Before 2026-09-20, place the affected population on hold pending reconciliation; owner: Nadine Flores.

### F-16 — regulator commitment overdue (medium)

The records do not reconcile for regulator commitment overdue: one source states the governed population contains 141 records through 2026-01-11, while the corroborating source states the certification covers 47 records through 2026-01-30.

Primary source: `/workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml`

Corroborating source: `/workspace/documents/12_remediation/094_remediation_formal_notice.xml`

Recommended action: Before 2026-09-20, amend the closing or response checklist with a dated cure item; owner: Micah Sullivan.

## Recommended next actions

Sequence the critical and high findings first, assign the named owners, preserve the cited records, and document any resolution in the controlling matter register before the stated deadline.

## Assumptions and limitations

This analysis is confined to task cb100-066-fable-fintech and the supplied synthetic evidence. It does not rely on external facts, does not resolve disputed law, and is not legal advice for a real person or entity.

Before 2026-09-20, obtain a signed ratification and update the controlling register; owner: Priya Raman.

Before 2026-09-20, recalculate the exposure and preserve the supporting ledger; owner: Elliot Mercer.

Before 2026-09-20, secure written consent from the authorized decision-maker; owner: Talia Brooks.

Before 2026-09-20, issue a corrective notice using the contractually operative method; owner: Jonas Feld.

Before 2026-09-20, escalate the conflict to the responsible legal and business owners; owner: Mei Whitaker.

Before 2026-09-20, document the governing interpretation before the deadline; owner: Caleb Hassan.

Before 2026-09-20, place the affected population on hold pending reconciliation; owner: Leona Park.

Before 2026-09-20, amend the closing or response checklist with a dated cure item; owner: Isaac Romero.

Before 2026-09-20, obtain a signed ratification and update the controlling register; owner: Sofia Bennett.

Before 2026-09-20, recalculate the exposure and preserve the supporting ledger; owner: Adrian Mensah.

Before 2026-09-20, secure written consent from the authorized decision-maker; owner: Willa Novak.

Before 2026-09-20, issue a corrective notice using the contractually operative method; owner: Theo Laurent.

Before 2026-09-20, escalate the conflict to the responsible legal and business owners; owner: Amara Patel.

Before 2026-09-20, document the governing interpretation before the deadline; owner: Henry Cho.

Before 2026-09-20, place the affected population on hold pending reconciliation; owner: Nadine Flores.

Before 2026-09-20, amend the closing or response checklist with a dated cure item; owner: Micah Sullivan.

Illinois Department of Financial and Professional Regulation

Prompt: You are privacy and regulatory counsel for Fable Financial Technologies. The upcoming deadline leaves no room for unsupported assumptions, so every conclusion must trace to the supplied production. A credit prequalification workflow uses third-party model features while notices, assessments, deletion records, and complaint responses conflict. Decision due 2026-09-20. Illinois law governs; Illinois Department of Financial and Professional Regulation is the forum. Give controlling documents precedence only when the record supports that hierarchy. Work out the defensible position from the matter production and leave an audit-ready exception tracker and concise advice for the supervising lawyer. Keep confirmed conflicts separate from open questions, cite the records that actually control each conclusion, and do not fill gaps with outside facts.

Complete at least 46 successful, argument-specific evidence and output calls.

Find and read the 33 controlling, corroborating, and work-product-control records in full.

Inspect file metadata for the eight designated critical primary records before relying on them.

Confirm the sandbox's allowed document and output roots.

Inventory all 96 records so the relevant sources are discovered among the context records.

Search the production for email evidence that may corroborate or contradict formal records.

Leave only findings.json and advice.md in the output workspace.

Create both final work products through the sandbox MCP surface.

Produce findings.json as a valid JSON object.

Report exactly 16 confirmed exceptions.

Use each stable finding ID exactly once.

Set schema_version to the released matter value '1.0'.

Set task_id to the released matter value 'cb100-066-fable-fintech'.

Set matter_number to the released matter value 'CB-PR-3006'.

Set prepared_for to the released matter value 'Fable Financial Technologies'.

Set as_of to the released matter value '2026-09-20'.

Include the confirmed F-01 exception for processing-purpose gap.

Preserve F-01's id from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's issue from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's severity from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's primary_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Preserve F-01's corroborating_source from /workspace/documents/01_data_inventory/001_data_inventory_control_register.md and /workspace/documents/07_transfer_mechanisms/049_transfer_mechanisms_control_register.md.

Reconcile F-01 using the exact controlled facts ['2025-06-11', 'CB-PR-3006-A619', '2025-07-26', 'CB-PR-3006-J763'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-01's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Priya Raman'] for F-01.

Include the confirmed F-02 exception for notice-practice mismatch.

Preserve F-02's id from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's issue from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's severity from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's primary_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Preserve F-02's corroborating_source from /workspace/documents/01_data_inventory/004_data_inventory_ledger_export.csv and /workspace/documents/07_transfer_mechanisms/052_transfer_mechanisms_ledger_export.csv.

Reconcile F-02 using the exact controlled facts ['$4,380,820.00', '$4,478,140.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-02's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Elliot Mercer'] for F-02.

Include the confirmed F-03 exception for consent-record deficiency.

Preserve F-03's id from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's issue from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's severity from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's primary_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Preserve F-03's corroborating_source from /workspace/documents/01_data_inventory/007_data_inventory_officer_certificate.html and /workspace/documents/07_transfer_mechanisms/055_transfer_mechanisms_officer_certificate.html.

Reconcile F-03 using the exact controlled facts ['Samuel Kim', 'Dominic Alvarez'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-03's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Talia Brooks'] for F-03.

Include the confirmed F-04 exception for processor-contract omission.

Preserve F-04's id from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's issue from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's severity from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's primary_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Preserve F-04's corroborating_source from /workspace/documents/02_processing_records/010_processing_records_executed_instrument.txt and /workspace/documents/08_retention_deletion/058_retention_deletion_executed_instrument.txt.

Reconcile F-04 using the exact controlled facts ['closed without exception', 'CB-PR-3006-D560', 'open and escalated', 'CB-PR-3006-M204'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-04's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Jonas Feld'] for F-04.

Include the confirmed F-05 exception for subprocessor inventory mismatch.

Preserve F-05's id from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's issue from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's severity from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's primary_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Preserve F-05's corroborating_source from /workspace/documents/02_processing_records/013_processing_records_review_memorandum.json and /workspace/documents/08_retention_deletion/061_retention_deletion_review_memorandum.json.

Reconcile F-05 using the exact controlled facts ['Illinois Department of Financial and Professional Regulation', 'Illinois'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-05's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Mei Whitaker'] for F-05.

Include the confirmed F-06 exception for cross-border transfer gap.

Preserve F-06's id from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's issue from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's severity from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's primary_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Preserve F-06's corroborating_source from /workspace/documents/02_processing_records/016_processing_records_status_report.md and /workspace/documents/08_retention_deletion/064_retention_deletion_status_report.md.

Reconcile F-06 using the exact controlled facts ['5%', '8%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-06's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Caleb Hassan'] for F-06.

Include the confirmed F-07 exception for retention schedule conflict.

Preserve F-07's id from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's issue from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's severity from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's primary_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Preserve F-07's corroborating_source from /workspace/documents/03_vendor_reviews/019_vendor_reviews_correspondence.eml and /workspace/documents/09_training/067_training_correspondence.eml.

Reconcile F-07 using the exact controlled facts ['notices-fable_financial_technologies@example.test', 'archive-northbridge_model_services@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-07's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Leona Park'] for F-07.

Include the confirmed F-08 exception for deletion-job failure.

Preserve F-08's id from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's issue from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's severity from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's primary_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Preserve F-08's corroborating_source from /workspace/documents/03_vendor_reviews/022_vendor_reviews_formal_notice.xml and /workspace/documents/09_training/070_training_formal_notice.xml.

Reconcile F-08 using the exact controlled facts ['110 records', '2025-03-06', '73 records', '2025-04-20'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-08's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Isaac Romero'] for F-08.

Include the confirmed F-09 exception for access-request deadline.

Preserve F-09's id from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's issue from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's severity from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's primary_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Preserve F-09's corroborating_source from /workspace/documents/04_security_incidents/025_security_incidents_control_register.md and /workspace/documents/10_regulator_correspondence/073_regulator_correspondence_control_register.md.

Reconcile F-09 using the exact controlled facts ['2025-03-25', 'CB-PR-3006-I301', '2025-05-04', 'CB-PR-3006-R738'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-09's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Sofia Bennett'] for F-09.

Include the confirmed F-10 exception for identity-verification inconsistency.

Preserve F-10's id from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's issue from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's severity from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's primary_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Preserve F-10's corroborating_source from /workspace/documents/04_security_incidents/028_security_incidents_ledger_export.csv and /workspace/documents/10_regulator_correspondence/076_regulator_correspondence_ledger_export.csv.

Reconcile F-10 using the exact controlled facts ['$1,361,019.00', '$1,378,538.00'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-10's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Adrian Mensah'] for F-10.

Include the confirmed F-11 exception for incident-notification clock.

Preserve F-11's id from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's issue from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's severity from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's primary_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Preserve F-11's corroborating_source from /workspace/documents/04_security_incidents/031_security_incidents_officer_certificate.html and /workspace/documents/10_regulator_correspondence/079_regulator_correspondence_officer_certificate.html.

Reconcile F-11 using the exact controlled facts ['Samuel Kim', 'Micah Sullivan'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-11's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Willa Novak'] for F-11.

Include the confirmed F-12 exception for risk-assessment omission.

Preserve F-12's id from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's issue from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's severity from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's primary_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Preserve F-12's corroborating_source from /workspace/documents/05_consumer_requests/034_consumer_requests_executed_instrument.txt and /workspace/documents/11_risk_assessments/082_risk_assessments_executed_instrument.txt.

Reconcile F-12 using the exact controlled facts ['closed without exception', 'CB-PR-3006-L857', 'open and escalated', 'CB-PR-3006-U642'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-12's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Theo Laurent'] for F-12.

Include the confirmed F-13 exception for sensitive-data classification.

Preserve F-13's id from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's issue from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's severity from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's primary_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Preserve F-13's corroborating_source from /workspace/documents/05_consumer_requests/037_consumer_requests_review_memorandum.json and /workspace/documents/11_risk_assessments/085_risk_assessments_review_memorandum.json.

Reconcile F-13 using the exact controlled facts ['Illinois Department of Financial and Professional Regulation', 'Illinois'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-13's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Amara Patel'] for F-13.

Include the confirmed F-14 exception for minor-consent issue.

Preserve F-14's id from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's issue from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's severity from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's primary_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Preserve F-14's corroborating_source from /workspace/documents/05_consumer_requests/040_consumer_requests_status_report.md and /workspace/documents/11_risk_assessments/088_risk_assessments_status_report.md.

Reconcile F-14 using the exact controlled facts ['10%', '16%'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-14's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Henry Cho'] for F-14.

Include the confirmed F-15 exception for training completion gap.

Preserve F-15's id from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's issue from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's severity from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's primary_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Preserve F-15's corroborating_source from /workspace/documents/06_notices_consents/043_notices_consents_correspondence.eml and /workspace/documents/12_remediation/091_remediation_correspondence.eml.

Reconcile F-15 using the exact controlled facts ['notices-fable_financial_technologies@example.test', 'archive-northbridge_model_services@example.test'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-15's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Nadine Flores'] for F-15.

Include the confirmed F-16 exception for regulator commitment overdue.

Preserve F-16's id from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's issue from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's severity from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's primary_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Preserve F-16's corroborating_source from /workspace/documents/06_notices_consents/046_notices_consents_formal_notice.xml and /workspace/documents/12_remediation/094_remediation_formal_notice.xml.

Reconcile F-16 using the exact controlled facts ['141 records', '2026-01-11', '47 records', '2026-01-30'].

Do not introduce a controlled date, amount, percentage, address, or reference absent from F-16's cited source pair.

Preserve the supported cure owner and deadline anchors ['2026-09-20', 'Micah Sullivan'] for F-16.

Include the 'Executive assessment' decision section in advice.md.

Include the 'Method and record coverage' decision section in advice.md.

Include the 'Findings' decision section in advice.md.

Include the 'Recommended next actions' decision section in advice.md.

Include the 'Assumptions and limitations' decision section in advice.md.

Explain F-01 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-02 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-03 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-04 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-05 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-06 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-07 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-08 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-09 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-10 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-11 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-12 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-13 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-14 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-15 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Explain F-16 with its issue, severity, cited source pair, exact conflicting facts, owner, and deadline.

Do not claim the production has no issues or that every record is consistent.

Reconcile controlling and corroborating records

The CB-PR-3006 production contains independently maintained records; a defensible answer must preserve each supported conflict and its cure owner.

Timestamp recency does not establish legal priority, execution, or approval authority.

Report primary records without reconciliation

Primary records alone conceal the operational conflicts that create the actionable exceptions.