Raw

Build-phase pricing is blocked by three gaps: the approved package list is 98 days overdue, data storage details require an architecture diagram we hold but haven't sent, and dependency approval timelines are undefined. Send the draft architecture diagram immediately and escalate the package list delay to S. Okafor.

Fernway is preparing build-phase pricing for Aldergate Bank. Compliance inputs are fragmented; key deliverables are delayed, and critical constraints depend on an architecture diagram Fernway controls but hasn't shared.

**Confirmed Requirements**
• Security review is mandatory before production; penetration testing is decided during the review. [gate-review.xlsx]
• An internal hardening framework exists, but the review is required regardless of conformance. [gate-review.xlsx]
• A policy for open-source dependencies exists, and the approved-package list will be provided. [gate-review.xlsx]
• Fernway staff may work from Ireland. [gate-review.xlsx]

**Outstanding Items & Required Actions**
• Approved package list: 98 days overdue. Promised 12 May (D. Mercer) and 9 July (R. Whitcombe); no date attached. Owner now S. Okafor (Info Sec). Action: Escalate delay to S. Okafor or management. [gate-review.xlsx, sync-0709.md, risk register]
• Data storage, encryption, and logging: Cannot be answered without an architecture diagram and design walkthrough. Action: Send draft architecture diagram (ready since 11 August) to unlock these answers. [gate-review.xlsx, sync-0709.md, risk register]
• Dependency approval: Usage assessed during review; no standard turnaround time, handled case-by-case. [gate-review.xlsx]
• Remote work outside Ireland: Ambiguous. Two Fernway engineers are based in Lisbon; Aldergate has not responded. Action: Clarify eligibility for Lisbon staff. [sync-0709.md]