Raw

**Send the architecture diagram now — it's the one action that unblocks both open compliance items today.**

We have enough to move: a security review is mandatory (scope, incl. pen test, set by the reviewer during the review), and Fernway staff may work from Ireland. Everything else that's still open is blocked on us, not on Aldergate:

- **Diagram is the blocker, and it's sitting finished.** Q7 (data storage, encryption, logging) can't be answered without the architecture diagram and design walkthrough — Aldergate said so on 12 May, and on 9 July we agreed to send the draft before the next sync. The draft has existed since 11 August. Sending it starts the clock on the last unanswered technical question and unblocks R-14.
- **The dependency list is Aldergate's overdue action, not ours.** Promised 12 May by Mercer, repeated 9 July by Whitcombe, still not sent — 98 days open (R-11). No standard turnaround exists, so there's no SLA to invoke; the only lever is to chase it, ideally directly with S. Okafor (the actual security owner, named 9 July but never present in a joint meeting — Whitcombe has just been relaying).
- **Lisbon staff location is an open question we raised and got silence on.** Only Ireland has been confirmed as acceptable; Fernway's PM flagged Lisbon-based engineers on 9 July and Aldergate didn't respond. Needs an explicit answer, not an assumption.

Net: pricing the build phase (R-07) stays blocked until Q7 is answered, dependencies are approved, and Lisbon is cleared — none of which we control except the diagram send.