{
  "preparedOn": "2026-10-23",
  "provenance": "Editorial inspection of retained actual Arc exports and supplied fictional sources from the 21 October production run. This manifest is a new review index, not a new generation, buyer submission or product approval event.",
  "status": "Partial returned questionnaire; package not approved or sent",
  "requirements": [
    {
      "id": "req-d090f24e0e78e99e507c",
      "reference": "Q1",
      "question": "In which jurisdiction is client reporting data hosted, and how is encryption handled in transit and at rest?",
      "questionCell": "Questionnaire!B4",
      "answerCell": "Questionnaire!C4",
      "answer": "Larkfield hosts all client reporting data in a UK data centre, encrypted in transit and at rest, with named-user role-based access and a quarterly access review.",
      "mandatory": true,
      "workflow": "Approved",
      "compliance": "Comply",
      "evidence": "Supported",
      "support": [
        {
          "path": "/downloads/samples/workflows/arc/source-bidder-evidence-larkfield.md.txt",
          "line": 46,
          "quote": "- Larkfield hosts client data in a UK data centre, encrypted at rest and in transit, with named-user access and a quarterly access review. Larkfield will notify a client of a personal-data breach within 24 hours of confirming it; the notice states what Larkfield knows at that time: what happened, which data is affected and what Larkfield is doing about it. Larkfield collects and keeps only the personal data a project's agreed purpose needs."
        }
      ],
      "requiredAttachments": []
    },
    {
      "id": "req-47bb218e33cdfd94336c",
      "reference": "Q2",
      "question": "Within what maximum timeframe will Larkfield Analytics notify Fenwick & Dale Stores of a confirmed personal-data breach?",
      "questionCell": "Questionnaire!B5",
      "answerCell": "Questionnaire!C5",
      "answer": "Larkfield will notify the client of a confirmed personal-data breach within 24 hours of confirmation, stating what happened, which data is affected, and the remediation steps underway.",
      "mandatory": true,
      "workflow": "ReadyForReview",
      "compliance": "Comply",
      "evidence": "Supported",
      "support": [
        {
          "path": "/downloads/samples/workflows/arc/source-bidder-evidence-larkfield.md.txt",
          "line": 46,
          "quote": "- Larkfield hosts client data in a UK data centre, encrypted at rest and in transit, with named-user access and a quarterly access review. Larkfield will notify a client of a personal-data breach within 24 hours of confirming it; the notice states what Larkfield knows at that time: what happened, which data is affected and what Larkfield is doing about it. Larkfield collects and keeps only the personal data a project's agreed purpose needs."
        }
      ],
      "requiredAttachments": []
    },
    {
      "id": "req-49c04450cc6537f2bdfc",
      "reference": "Q3",
      "question": "Which accessibility standard do the browser dashboards meet prior to go-live, and who owns testing?",
      "questionCell": "Questionnaire!B6",
      "answerCell": "Questionnaire!C6",
      "answer": "All browser dashboards are built to WCAG 2.2 level AA and tested before go-live and at each major release by Dashboard Developer Tomasz Wren. Every defect found in testing is fixed prior to launch.",
      "mandatory": true,
      "workflow": "Drafting",
      "compliance": "Comply",
      "evidence": "Supported",
      "support": [
        {
          "path": "/downloads/samples/workflows/arc/source-bidder-evidence-larkfield.md.txt",
          "line": 17,
          "quote": "- Tomasz Wren, Dashboard Developer. 7 years building dashboards. Owns accessibility testing against WCAG 2.2 level AA."
        },
        {
          "path": "/downloads/samples/workflows/arc/source-bidder-evidence-larkfield.md.txt",
          "line": 47,
          "quote": "- Dashboards are built to WCAG 2.2 level AA and tested against it before launch and at each major release. Larkfield records every accessibility defect found in testing and fixes it before the dashboard goes live."
        }
      ],
      "requiredAttachments": []
    },
    {
      "id": "req-a0f1552bb2e401814cb4",
      "reference": "Q4",
      "question": "Can the supplier deploy an air-gapped on-premises hardware server inside each of the nine shop back-offices?",
      "questionCell": "Questionnaire!B7",
      "answerCell": "Questionnaire!C7",
      "answer": null,
      "mandatory": false,
      "workflow": "NotStarted",
      "compliance": "NotAssessed",
      "evidence": "Missing",
      "support": [],
      "requiredAttachments": []
    },
    {
      "id": "req-e5c984b8095469b4c8ff",
      "reference": "Q5",
      "question": "Does the supplier provide 24/7/365 telephone helpdesk coverage on Christmas Day and UK bank holidays?",
      "questionCell": "Questionnaire!B8",
      "answerCell": "Questionnaire!C8",
      "answer": null,
      "mandatory": false,
      "workflow": "NotStarted",
      "compliance": "NotAssessed",
      "evidence": "Missing",
      "support": [],
      "requiredAttachments": []
    }
  ],
  "otherRequirements": [
    {
      "Requirement ID": "req-d6170be105df7e9702ea",
      "External number": "",
      "Requirement": "Timing: we would like the first dashboards in shop managers' hands before the spring season starts in 14 weeks. We can give a half-day each week from our head of retail operations and access to all three systems.",
      "Source": "brief-fenwick-dale.md",
      "Location": "line 11",
      "Mandatory": "No",
      "Disposition": "Active",
      "Workflow": "NotStarted",
      "Compliance": "NotAssessed",
      "Evidence": "NotAssessed",
      "Owner": "",
      "Reviewer": "",
      "Due": "",
      "Response": "",
      "Word limit": "",
      "Character limit": "",
      "Required attachments": ""
    }
  ],
  "pricing": {
    "currency": "GBP",
    "professionalServicesExVat": 39420,
    "hostingMonths": 12,
    "hostingPerMonth": 1400,
    "hostingExVat": 16800,
    "totalExVat": 56220,
    "tax": "VAT excluded; no tax-inclusive matching schedule asserted"
  },
  "attachments": [
    {
      "path": "/downloads/samples/workflows/arc/source-fenwick-dale-questionnaire.xlsx",
      "role": "Buyer questions before answers",
      "bytes": 5542,
      "sha256": "cf539ce296bee437f95158766746ddedb66ae87e1e6d668df91df5a3f99f48b7"
    },
    {
      "path": "/downloads/samples/workflows/arc/source-buyer-brief-fenwick-dale.md.txt",
      "role": "Buyer scope and timing",
      "bytes": 1344,
      "sha256": "c526999aade656d85997e1de035a7ec15fe2776e93f5be515bba520fd7e07663"
    },
    {
      "path": "/downloads/samples/workflows/arc/source-bidder-evidence-larkfield.md.txt",
      "role": "Supplied fictional bidder evidence",
      "bytes": 7890,
      "sha256": "817f079148e1c68b3b538c72cf51491458a21ef68a98d73dc27c23b566ef4a0d"
    },
    {
      "path": "/downloads/samples/workflows/arc/source-explicit-pricing-schedule.json",
      "role": "Supplied quantities and rates, excluding VAT",
      "bytes": 2088,
      "sha256": "94499ba45eb913622f333583f87f2ea4ce77ad31d3bc261e397f76f4cc745da1"
    },
    {
      "path": "/downloads/samples/workflows/arc/arc-questionnaire-exported.xlsx",
      "role": "Actual partial returned questionnaire",
      "bytes": 6921,
      "sha256": "0daf572977c8007f70526ee97e4607017e99fe443ef0d96b6a523fb6c930c59f"
    },
    {
      "path": "/downloads/samples/workflows/arc/arc-compliance-matrix.csv",
      "role": "Actual requirement and review-state export",
      "bytes": 2392,
      "sha256": "525972335ffac26fc8ab0e09e9a9eea99fbd89d3ff884f873489e41efb0875b0"
    },
    {
      "path": "/downloads/samples/workflows/arc/arc-client-proposal.pdf",
      "role": "Actual priced proposal PDF",
      "bytes": 278255,
      "sha256": "2748b7605f9e81895a42cf8cd54064d147b7326502bc051fd396ec8372a655a3"
    },
    {
      "path": "/downloads/samples/workflows/arc/arc-client-proposal.docx",
      "role": "Actual editable proposal Word file",
      "bytes": 15190,
      "sha256": "41467d45eaf4408354f782051b375176b6257f4e6c6d674847d1613ecbe210b1"
    }
  ],
  "attachmentScope": "These eight retained files form the inspectable review bundle. The exported requirement matrix names no required attachments. No buyer attachment requirement or delivery receipt is inferred.",
  "unproven": [
    "Q2 remains ReadyForReview and Q3 remains Drafting despite nonblank exported cells.",
    "Q4 and Q5 have no supplied supporting evidence and remain blank; they are optional in the retained export.",
    "The timing requirement from buyer brief line 11 remains NotStarted and NotAssessed.",
    "Source-to-answer links in this index were checked editorially from retained files; they are not a new in-app approval or citation event.",
    "No email, recipient activity, acceptance, signature or delivery-history event was performed or demonstrated."
  ]
}