The decision in context.
This fictional memorandum compares a disputed public page with an earlier supplied capture and records the handling of those materials. A payment instruction differs between the two copies. The supplied records do not establish who edited the page, whether the copies reflect the full page history or whether a particular legal claim is satisfied.
Decision requested
Counsel should decide whether to seek additional original records or provider-held material through appropriate channels. Limit circulation to the agreed matter team until distribution is reviewed.
What was reviewed.
Answer the fictional instruction: what differences are visible between two supplied page captures, and what provenance gaps affect their interpretation? Review client-provided copies and maintain an illustrative exhibit index and handling sequence.
Outside this assessment
Legal opinions, expert-witness designation, conclusions on intent or liability, assurance of privilege or admissibility, device acquisition, third-party access and claims of forensic accreditation.
| Asset / record | Owner | Coverage |
|---|---|---|
| AS-01 / Earlier capture | Instructing team | Exhibit EX-01; supplied copy |
| AS-02 / Later capture | Instructing team | Exhibit EX-02; supplied copy |
| AS-03 / Instruction record | Matter lead | Defined question and authorized recipients |
Method and confidence
Define authority and scope; register supplied material; separate direct observations from statements; assess alternative explanations; review limitations; and assign actions with acceptance evidence.
High confidence: cited material directly supports the narrow observation. Moderate: support exists but an important gap remains. Low: a lead or statement needs corroboration. Confidence does not establish identity, intent or legal liability.
Priority reflects potential impact and dependencies, not a CVSS score. High-priority items need prompt attention; medium-priority items need a near-term owner; low-priority items follow the agreed review cycle. All timestamps are UTC.
Findings, with their limits.
Visible payment instruction changed between supplied copies
- Observation
- EX-01 shows the approved contact route; EX-02 shows a different payment-contact reference. The comparison concerns only visible contents of the copies.
- Why it matters
- The difference is relevant to counsel's factual question and should be preserved with both source versions.
- Alternative / uncertainty
- The copies might represent different page states, localized views or incomplete captures rather than a single unauthorized edit.
- Recommended action
- Record the exact difference and ask counsel whether original captures and contextual records are needed.
- Evidence references
- E-01, E-02
Capture provenance is incomplete
- Observation
- The supplied files lack a complete collector record, tool version and verified source-clock information.
- Why it matters
- The memorandum cannot independently establish the claimed capture times or completeness.
- Alternative / uncertainty
- The original collector may retain supporting notes outside the supplied bundle.
- Recommended action
- Request the collector's original records through the instructing team and preserve the copies without silently modifying them.
- Evidence references
- E-01, E-02
Integrity checks do not establish authorship
- Observation
- The illustrative handling workflow calls for a file digest at receipt and transfer. No real evidence digest is represented in this public sample.
- Why it matters
- A matching digest can support file consistency in a defined workflow but cannot identify who created the underlying content.
- Alternative / uncertainty
- A faithfully preserved copy can still be incomplete or misleading about the original event.
- Recommended action
- Separate integrity statements from provenance and attribution; record any transformations and retain original files.
- Evidence references
- E-03
Evidence & chronology.
| ID | Source | Received (UTC) | Limitation |
|---|---|---|---|
| E-01 | Fictional EX-01 earlier page copy | 2026-10-04 09:00 UTC | Collector and original capture details incomplete |
| E-02 | Fictional EX-02 later page copy | 2026-10-04 09:05 UTC | Not independently retrieved from the original provider |
| E-03 | Fictional instruction and handling record | 2026-10-04 10:00 UTC | No real signatures, seals or evidence hashes |
| Event time (UTC) | Event | Source |
|---|---|---|
| 04 Oct / 09:00 | EX-01 receipt recorded in example register | E-01 |
| 04 Oct / 09:05 | EX-02 receipt recorded separately | E-02 |
| 05 Oct / 14:00 | Comparison reviewed; provenance gap retained | E-03 |
Handling and provenance
These are invented descriptions, not evidence attachments. A live engagement records authority, collector, source, collection and receipt times, method and limitations. Originals stay in approved storage; access, transformations and transfers are logged. Digests, where appropriate, are calculated on actual files.
A screenshot supports what was visible in that copy. It does not establish origin, completeness, authorship or the full history of an event. Client-reported events remain distinct from independently verified observations.
Owners, actions & acceptance.
| When | Owner | Completion evidence | State |
|---|---|---|---|
| Before reliance | Instructing counsel | Confirm question, recipients and permitted use | Required |
| Before final memorandum | Matter lead | Request originals and collector notes | Open |
| At every transfer | Evidence custodian | Record handler, purpose, time and integrity result | Required |
| Before external filing | Client counsel | Review disclosure, privilege and admissibility questions | Client decision |
| Record | Handling event | Integrity / location |
|---|---|---|
| EX-01 / E-01 | 04 Oct 09:00 UTC; received by Custodian A | Digest not populated in public sample; example vault item 01 |
| EX-02 / E-02 | 04 Oct 09:05 UTC; received by Custodian A | Digest not populated in public sample; example vault item 02 |
| Review copy | 05 Oct 14:00 UTC; Analyst B compared copies | Transformation and tool log required in real matter |
| Proposed delivery | Not performed in sample | Recipient approval and transfer receipt required |
This is a reporting example, not an expert report, sworn statement, actual chain of custody or signed instruction. Counsel controls legal characterization and distribution.
Closing an action
Record the actual completion time, responsible person and evidence reference. A recommendation, request or submission is not completion. Keep dependencies visible and agree the next review date.
Limitations & handover.
Technical comparison does not determine authenticity, intent, liability, privilege or admissibility. No conclusion should extend beyond the supplied materials and the stated question.
Release checklist for a live engagement
- Approved instruction, scope and authorized assets.
- Named preparer and reviewer, review date and corrections.
- Client decision owner, accepted actions and unresolved objections.
- Approved recipients, secure transfer receipt and acceptance date.
- Next review, retention basis and disposal responsibility.
These fields remain unsigned in this example. No actual approval, instruction or evidence transfer is represented. A live report needs an agreed distribution and retention plan. Real evidence and personal data must not be published in website assets.
Method references
Background guidance only. These publications do not validate fictional findings or certify the report. Apply current platform procedures and engagement-specific legal advice separately.