Raw

**Send the architecture diagram today — it's the one blocker on Fernway's side — and escalate the two blockers that have been sitting on Aldergate's side for months, since the build price (R-07) can't be fixed until the security review closes.**

Aldergate's compliance office answered most of the gate-review questions on 12 May, but declined the one that matters most for pricing — data storage, encryption and logging (Q7) — until Fernway supplies an architecture diagram. At the 9 July sync Fernway agreed to send that diagram before the next sync; a draft has existed since 11 August but hasn't gone out (`gate-review.xlsx` Q7; `sync-0709.md`; `risk register R-14`). Send it now — it's the only compliance blocker that depends on Fernway, and it unlocks the last unanswered question.

**Already settled, no action needed:**
- A security review before production is mandatory; whether a pen-test is also required gets decided *during* that review, not before (`gate-review.xlsx` Q1).
- Aldergate's internal hardening framework exists but doesn't substitute for the review (Q2); dependency approval is likewise folded into the review, with no fixed turnaround (Q4, Q5).
- Working from Ireland is cleared (Q6).

**Stuck on Aldergate, and now overdue — push, don't wait:**
- The approved-package list was promised by D. Mercer on 12 May and again by R. Whitcombe on 9 July, with no date either time; it's now open 98 days and blocks dependency sign-off (`gate-review.xlsx` Q3; `sync-0709.md`; `R-11`).
- Real ownership is unclear: S. Okafor was named as the information-security owner on 9 July but has never joined a joint meeting — Whitcombe just relays questions. Ask for direct access to Okafor when you send the diagram, so the list and the Q7 follow-up don't route through a third party again.

**One gap nobody has raised:** two Fernway engineers are based in Lisbon; this was mentioned in the 9 July sync and Aldergate never responded. The location clearance on file only covers Ireland (`gate-review.xlsx` Q6; `sync-0709.md`). Worth putting in writing as its own question rather than leaving it as an unanswered aside.