# Audit Lite — structural record

A record of what exists in the built design as at 29 August 2026. Strings are quoted as they render. 23 screens across two surfaces, three shared components, two shells, one lens.

---

## Shared shells and lens

### Audit Lite Shell — customer rail

216px. Three parts: a fixed lockup head, a scrolling middle holding the bands (`overflow-y: auto`, thin scrollbar, edge hairlines that appear only where content is out of view, and the active destination scrolled into view on load), and a fixed foot. Seventeen destinations in three bands, headings rendered as plain-text overlines (not buttons, nothing collapsible), separated by hairlines.

**WORKSPACE**

| Destination | Icon | active-nav |
|---|---|---|
| Dashboard | `#ic-dashboard` | `dashboard` |
| Notifications | `#ic-mail` | `notifications` |
| Evidence | `#ic-evidence` | `documents` |
| Audit Packs | `#ic-batch` | `packs` |
| Requests | `#ic-requests` | `requests` |

**AUDIT**

| Destination | Icon | active-nav |
|---|---|---|
| Audits | `#ic-shield` | `audits` |
| Controls | `#ic-matrix` | `controls` |
| Observations | `#ic-observation` | `observations` |
| Exception triage | `#ic-cluster` | `triage` |
| Certifications | `#ic-horizon` | `certifications` |
| Regulatory filings | `#ic-flag` | `filings` |

**ADMINISTRATION**

| Destination | Icon | active-nav |
|---|---|---|
| Auditor Access | `#ic-door` | `auditor-access` |
| Audit Trail | `#ic-trail` | `trail` |
| Templates | `#ic-check` | `templates` |
| Reports | `#ic-chart` | `reports` |
| Users & roles | `#ic-admin` | `users` |
| Integrations & SSO | `#ic-link` | `integrations` |

Fixed foot, below the bands: the **room-switch link** — `#ic-door`, "Auditor microsite" with the second line "Bramwell Hoyt LLP", dashed 1px border, 3px corners, mono, `--color-text-tertiary`, no `aria-current`. It is demo chrome rather than a destination, and it survives dismissing the lens banner.

**Header bar**, left to right: the page title at h1; the muted as-at line beneath it ("As at 28 August 2026" by default); entity scope button "Alderway Group plc · all entities" with `#ic-chevron-down`, opening a popover listing the seven entities as an indented tree with a checkmark against the parent, closing on click-outside and Escape; the bell — `#ic-bell` with the count badge "7", an `<a href>` to Notifications on every screen except Notifications itself, where it renders as `role="status"` labelled "Notifications, 7 unread · you are here"; the identity block — `#ic-user` avatar with initials PR, "Priya Raghunathan", "Group Financial Controller"; and the slot holding the screen's one primary button.

### Auditor Microsite Shell — auditor rail

216px on `--color-bg-well`. Six ungrouped destinations, no bands.

| Destination | Icon | active-nav |
|---|---|---|
| Overview | `#ic-dashboard` | `overview` |
| Audits | `#ic-shield` | `audits` |
| Packs | `#ic-batch` | `packs` |
| Evidence | `#ic-evidence` | `evidence` |
| Requests | `#ic-requests` | `requests` |
| Queries | `#ic-annotate` | `queries` |

Beneath the lockup: "Auditor access" in overline treatment, "Alderway Group plc" beneath in secondary ink. Six destinations, ungrouped — six entries do not need bands, and adding them would imply a structure the microsite does not have. Fixed foot: the **room-switch link** — `#ic-entities`, "Customer portal" with "Alderway Group plc" beneath, same dashed chrome treatment — above the pinned ACCESS WINDOW block, "Access until 30 Nov 2026" with "94 days remaining" beneath. The auditor rail does not scroll.

**Header bar**: the page title at h1, its subtitle beneath, the seat identity on the right (`#ic-user` avatar with initials, the seat name, the firm and role beneath), and a slot for one primary button.

### Demo Lens

One component, mounted above the content by both shells. Dashed 1px border, 3px corners, no fill, mono, `--color-text-tertiary`, neutral only. Carries a room toggle ("Customer portal" | "Auditor microsite"), a seat select in the auditor room only, and a labelled dismiss button.

Customer room sentence:

> DEMO LENS · viewing as Alderway Group plc · this is the customer's view

Auditor room sentence:

> DEMO LENS · viewing as Nadia Sorensen · Bramwell Hoyt LLP · this is the auditor's view of Alderway Group plc

Under the second seat the name renders "Claire Whitfield".

---

---

# The identifier registry — `audit-lite-refs.js`

Not a screen. One file holds every identifier in the build; **17 of the 23 screens load it in their `<helmet>` and read it at module scope**, and the other six — Dashboard, Auditor Access, Certifications, Integrations, Templates, Users & roles — contain no reference literals at all, so they are complete rather than exempt.

**What it holds — 312 entries**

| Series | Entries |
|---|---|
| DOC | 168 |
| EXC | 44 |
| REQ | 37 |
| OBS | 32 |
| CTL | 14 |
| QRY | 11 |
| PACK | 4 |
| GRANT | 2 |

Every entry is `key: ['IDENTIFIER', 'subject']`, **subject-keyed, with zero keyed on an identifier** — `fixedAssetRegisterQ4Additions` → `DOC-2025-0361`, `supplierUsedBeyondItsApprovalPeriod` → `CTL-007`. A missing key throws rather than rendering blank.

**`assertUnique()`** enforces the property at load: one subject to one identifier, scoped per series, so cross-series reuse (a document and the request that produced it) does not surface. It returns `[]`. It carries **one commented allowance** — `EXC-2026-0203` and `EXC-2026-0247`, the same control failing the same way at two entities, which Exception triage exists to cluster. Any other same-series duplicate makes the registry refuse to load.

**`nextFree(series)`** returns the next identifier **above the series' maximum**, not the lowest unused, because in a build where nothing is deleted a gap may be a superseded record. It takes the zero-padding from how the series is written and **infers the stride from the gaps already present** — `DOC-2026` steps by 3, so `DOC-2026-0611` yields `DOC-2026-0614`. That inference is a guess about convention: it always returns something free, so it cannot cause harm, but it may hand back 0614 when 0612 was also free.

Current values: `DOC-2026-0614` · `DOC-2025-0514` · `REQ-2026-0207` · `OBS-2026-024` · `PACK-2026-012` · `QRY-2026-022` · `EXC-2026-0347` · `GRANT-2026-003` · `CTL-013`.

## The five defect classes it exists to prevent

1. **Eight identifier collisions across screens** — two records sharing one identifier (DOC-2025-0344, DOC-2026-0512, DOC-2026-0522, DOC-2026-0544, DOC-2026-0556, DOC-2026-0559), and five subjects each carrying two identifiers (Change management log, Contractor engagement register, Production yield reconciliation, Purchase order approval matrix, Tax computation and deferred tax working).
2. **72 identifiers generated by array position** — `'DOC-2025-' + row[1]` on Evidence, `'REQ-2026-0' + (141 + (id - 1) * 3)` on Requests, `'REQ-BH-2026-' + padStart(33 + n)` on the microsite. 38 documents and 34 requests would have silently renumbered had a row been reordered. All 72 are now authored as literals.
3. **Three OBS collisions invisible to a backward-looking scan** — OBS-2026-001, -003 and -005 each named two different findings. Two sweeps missed them because an OBS- reference is authored *before* its title, so a scan reading backwards found no subject.
4. **Version sequences running backwards** between a repository row and a pack's contents — a pack listing v4 dated earlier than the v3 it supersedes.
5. **Titles where one record's name was a strict prefix of another's** — "Change management log — Q1" against "Change management log — Q1 FY 2026-27", and two closure-evidence rows carrying a status as a title.

**Four of those five could not have been caught by per-screen verification or by the drift pass**, because nothing disagreed with anything: each screen was internally consistent, and the defect existed only in the relationship between screens.

## Two conventions the sweep will always flag

**21 DOC/REQ title pairs are correct by design.** A request and the document that satisfies it share a name — `DOC-2025-0361` and `REQ-2026-0141` are both "Fixed asset register — Q4 additions" — and the evidence↔request round-trip depends on it. They sit in different columns on different screens ("Evidence requested" against "Evidence"). Do not reconcile them.

**A document may read at different versions in the repository and in a pack.** That is supersession seen from two angles, not a contradiction, and the Audit Packs panel's "What changed since you received it" section exists to explain it to an auditor. Worked example: **DOC-2025-0095**, "GST reconciliation — Q4 FY 2025-26" — **v3, modified 24 Apr 2026** in the Evidence repository (uploaded 06 Apr 2026), **v4, added 08 May 2026** in the GST audit pack and the Audits workspace.


# Customer screens

## 1 · Dashboard

- **FILE** `Audit Lite - Dashboard.dc.html`
- **TITLE** "Audit readiness" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `dashboard`
- **PRIMARY** "Share readiness summary"

**SECTIONS**

1. KPI band (band) — four tiles
2. "Audit readiness" (card, list of five audits)
3. "Open requests by age and entity" (card, heatmap) — sub-line in mono, "days since requested · open items only"
4. "Needs attention" (card, list)
5. "Readiness trend" (card, inline SVG line chart)
6. "Open observations by severity" (card, stacked bar + legend)
7. "Upcoming" (card, list)
8. "Compliance by entity" (card, table)

**BAND**

| Overline | Value | Sub-line |
|---|---|---|
| OPEN EVIDENCE REQUESTS | 68 | across 5 active audits |
| OVERDUE | 14 | oldest is 47 days past due |
| EVIDENCE ITEMS | 12,480 | 1,204 added this financial year |
| AUDITS IN PROGRESS | 5 | 2 in fieldwork, 1 in review |

**TABLE** "Compliance by entity" — columns: Entity · Open requests · Overdue · Last submission · Status. 7 rows.

Readiness card: 5 audit blocks. Needs attention: 5 rows.

**HEATMAP** "Open requests by age and entity" — seven entity rows in the two-level indent (0 / 12 / 24px), five age bands across the top: 0–3 · 4–7 · 8–14 · 15–30 · 30+.

| Entity | 0–3 | 4–7 | 8–14 | 15–30 | 30+ | Row total |
|---|---|---|---|---|---|---|
| Alderway Group plc | 6 | 5 | 4 | 2 | 1 | 18 |
| Alderway Manufacturing Pvt Ltd | 5 | 4 | 3 | 2 | 0 | 14 |
| Alderway Precision Components Pvt Ltd | 3 | 2 | 1 | 0 | 0 | 6 |
| Alderway Chemicals Ltd | 4 | 3 | 4 | 3 | 2 | 16 |
| Alderway Logistics FZE | 1 | 1 | 2 | 2 | 1 | 7 |
| Alderway Retail Ltd | 2 | 1 | 1 | 1 | 0 | 5 |
| Alderway Technologies Pte Ltd | 1 | 1 | 0 | 0 | 0 | 2 |
| **Column total** | **22** | **17** | **15** | **10** | **4** | **68** |

Cells are rounded plates from the heat sequence — 0 on `--color-heat-0` with `--color-text-tertiary` ink (5.14:1), 1–2 heat-1, 3–4 heat-2, 5–6 heat-3, 7+ heat-4, and any non-zero cell in the 30+ band on heat-5. Each cell is an `<a href>` to Requests at its default state with a full text label including the zeros — "Alderway Chemicals Ltd, 8 to 14 days, 4 open requests". Grid sits in an `overflow-x` wrapper with a 320px minimum. Trend card footer overlines: LAST MONTH 79%, THIS MONTH 86%, CHANGE +7%. Severity legend: High 5 (45%), Medium 4 (36%), Low 2 (18%). Upcoming: 4 rows.

**PANEL** none

**MODALS** "Share readiness summary" — three checkbox rows for the three dashboard sections, the third reading "Open requests by age and entity · 68 open requests"; keep "Keep it open", act "Share".

**COMPUTED** the heatmap's seven row totals (18 · 14 · 6 · 16 · 7 · 5 · 2, agreeing with the compliance table's Open requests column), its five column totals (22 · 17 · 15 · 10 · 4), its grand total (68, agreeing with the KPI band's OPEN EVIDENCE REQUESTS), and its caption "68 open requests across 7 entities. 4 have been open more than 30 days." Every other figure on the screen is typed.

## 2 · Notifications & alerts

- **FILE** `Audit Lite - Notifications.dc.html`
- **TITLE** "Notifications & alerts" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `notifications`
- **PRIMARY** "Mark all read"

**SECTIONS**

1. FILTERS (rail, 240px)
2. Alert list (list, not a table)
3. NOTIFICATION PREFERENCES (grid) — sub-line "How you are told, by category. Security and access alerts cannot be switched off."

**RAIL**

| Group | Options |
|---|---|
| STATUS | Unread · Read |
| CATEGORY | Requests · Evidence · Packs and sharing · Auditor access · Observations · Certifications · Controls |
| MARKED | Only the four kinds worth noticing |
| WHEN | Today · Last 7 days · Last 30 days |

**LIST** 12 alerts, newest first. Each row: category box chip, the sentence, a muted object/person/ago line, the timestamp, a `#ic-more` menu ("Mark as read" / "Mark as unread", "Open"). Five rows carry the 2px inset bar — danger on the two external shares and the deletion, warning on the modification and the version change.

**GRID** Preferences — columns Category · In-app · Email, 7 rows. The "Packs and sharing" and "Auditor access" rows carry genuinely `disabled` inputs (4 in total) and the ink-only marker "Always on". Closing line: "Packs and sharing and auditor access alerts are always delivered. Everything else is yours to set."

**PANEL** none

**MODALS** "Mark all read" — body "7 unread alerts will be marked read."; keep "Keep them unread", act "Mark 7 read".

**COMPUTED** results line "12 alerts · 7 unread · newest 2 hours ago"; every rail option count; the modal's fact line and act label.

## 3 · Evidence

- **FILE** `Audit Lite - Documents.dc.html` (filename retained from the Documents→Evidence rename; `active-nav` stays `documents`)
- **TITLE** "Evidence" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `documents`
- **PRIMARY** "Upload evidence"

**SECTIONS**

1. Search band — search input, "Saved searches" ghost, Table/Grid segmented control, active filter chips, "Clear all filters"
2. FILTERS (rail, 240px)
3. Results line + results table (table) or card grid
4. Pagination row

**RAIL**

| Group | Options |
|---|---|
| FINANCIAL YEAR | FY 2026-27 (1,204) · FY 2025-26 (3,918) · FY 2024-25 (3,602) · FY 2023-24 (3,756) |
| AUDIT TYPE | Statutory Audit · Internal Audit · Tax Audit · GST Audit · Cost Audit · ISO 9001 Surveillance · SOC 2 Type II |
| ENTITY | the seven, as a two-level indented tree |
| DEPARTMENT | Finance · Procurement · HR · IT · Operations · Legal · Tax |
| CLASSIFICATION | Public · Internal · Confidential · Restricted (collapsed) |
| TAGS | year-end · reconciliation · board-approved · signed · auditor-shared · restated (collapsed) |

**TABLE** columns: Evidence · Reference · Entity · Department · Classification · Version · Modified · Size. 62 authored rows, paged at 25 (page sizes 25 · 50 · 100). Pagination row: range line, size select, First, Previous, page numbers with `aria-current`, Next, Last; First and Previous genuinely `disabled` on page one.

**PANEL** 480px — DETAILS · VERSION HISTORY · **CONTROLS THIS SUPPORTS** · TAGS · IN PACKS.

DETAILS carries, in order, Entity · Department · Audit type · Owner · Uploaded · **Arrived against** · Last modified · Format · Retention · Source. "Arrived against" names the REQ- reference in mono, linking to Requests, or reads "Uploaded directly" as a stated fact with no link — eight items arrived against a request. "Source" reads "Uploaded directly" or a connector name (SharePoint Online, OneDrive for Business, SAP S/4HANA) linking to Integrations & SSO, drawn only from connectors that are live on that screen.

CONTROLS THIS SUPPORTS renders one row per mapped control — `#ic-matrix` glyph, reference in mono, process in emphasis, the control text truncated to a line, the tier box chip with the entity as a marker on a deviated instance — each linking to Controls, closing with "Mapping confirmed by Daniel Okafor · 04 Aug 2026". **Where exactly one control maps**, the control's wording follows on the well plate at lead size with framework/clause and frequency tag chips and the owner attribution, quoting the entity's instance and its deviation line where one operates. **Where two map** — DOC-2026-0529, CTL-002 and CTL-007, the only such item in the build — both rows render and no wording, so version history and tags stay above the fold. Where none maps: "No control maps to this item. It is a record rather than control evidence." 11 items map; the rest render the sentence.

**MODALS** "Upload evidence" — drop area "Drop a file here, or choose one" and four selects (Entity, Department, Audit type, Classification); keep "Keep it open", act "Upload".

**COMPUTED** results line — page one "Showing 1–25 of 3,918 evidence items", page two "Showing 26–26 of 3,918 evidence items", page three the honest sentence "Rows beyond this point are not included in this demonstration. 26 of the 3,918 items in this view are authored here."; second line "3,918 items in FY 2025-26 · 12,480 across all financial years"; the range line; the register total follows the selected year (FY 2023-24 → 3,756, adding "· FY 2023-24 is closed. These items are retained for regulatory review."); the empty-state filter count.

## 4 · Audit packs

- **FILE** `Audit Lite - Audit Packs.dc.html`
- **TITLE** "Audit packs" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `packs`
- **PRIMARY** "New pack"

**SECTIONS**

1. Toolbar — tabs, two selects, Grid/List segmented control
2. Results line
3. Card grid (grid) or list table

**TOOLBAR** tabs "All (9)" · "Draft (2)" · "Shared (6)" · "Withdrawn (1)"; selects "Audit: all", "Entity: all entities".

**GRID** one card holds, top to bottom: `#ic-batch` glyph and pack name at h3; muted audit line; entity with its short code in mono; hairline; a figures row (`#ic-evidence` with the item count, size right-aligned); a status pill; a shared line; a footer with "Open" and "Share with auditor" ("Re-share" on the withdrawn pack).

**TABLE** (List view) columns: Pack · Audit · Entity · Evidence · Size · Status · Shared with · Shared on. 9 rows.

**PANEL** 520px — CONTENTS (table: Evidence · Reference · Entity · Version · Added, 10 rows) · SHARED WITH · ACTIVITY

**MODALS** "Share with auditor" — recipient firm select, four seat checkboxes, two date fields, two radios; keep "Keep it open", act carries the count "Share 42 evidence items". "New pack" — keep "Keep it open", act "Create pack".

**COMPUTED** results line "Showing 9 packs · 233 evidence items in total"; the share modal's act-label count.

## 5 · Evidence requests

- **FILE** `Audit Lite - Requests.dc.html`
- **TITLE** "Evidence requests" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `requests`
- **PRIMARY** "New request"

**SECTIONS**

1. Toolbar — tabs; a three-way segmented control "By function" / "By audit" / "Flat list", By function selected on load
2. FILTERS (rail, 240px)
3. Results line + grouped table
4. ESCALATION RULES (table, beneath the card, outside the rail's column) — sub-line "Applied to every evidence request across all entities."

**TOOLBAR** tabs "All 86" · "Open 68" · "Overdue 14" · "Submitted 7" · "Under review 5" · "Closed 18".

**RAIL**

| Group | Options |
|---|---|
| STATUS | Requested · In progress · Submitted · Under review · Accepted |
| FUNCTION | Finance · Procurement · IT · HR · Tax · Legal · Operations |
| AUDIT | the five active audits by name |
| ENTITY | the seven, as a two-level indented tree |
| OWNER | the nine named owners |
| FLAGS | Overdue · Reminder sent · Escalated · Due this week |

**TABLE 1** columns: (selection checkbox) · Evidence requested · Audit · Entity · Owner · Requested · Due · Status · Reminder & escalation. 22 rows in seven function groups.

**TABLE 2** ESCALATION RULES — columns When · Action · Who is notified · Channel · Applies to · Status. 6 rows, in trigger order. Closing line: "Reminders and escalations are recorded against the request and appear in the audit trail."

**BY AUDIT** the same 22 rows regrouped, six groups in descending count with ties broken by most overdue, headings computed:

| Group | Rows | Overdue |
|---|---|---|
| STATUTORY AUDIT FY 2025-26 | 10 | 3 |
| INTERNAL AUDIT — PROCUREMENT | 4 | 1 |
| SOC 2 TYPE II | 3 | 1 |
| TAX AUDIT FY 2025-26 | 2 | — |
| ISO 9001 SURVEILLANCE | 2 | — |
| GST AUDIT | 1 | 1 |

**ROW BEHAVIOUR — three targets.** The selection checkbox toggles selection and stops propagation; the audit name beneath the title is an `<a href>` to Audits and stops propagation; the rest of the row opens the detail panel. Rows are keyboard-reachable (Enter / Space) and carry `aria-current` while open.

**PANEL** 560px, docked right, panel z-band, no Tab trap, closes on its labelled close button and on Escape. Header: the evidence requested at h2, a REQ- reference in mono, a state pill, tag chips for audit, entity and function, a `#ic-more` ghost and the close button. Summary strip on the sunken plate: Owner · Requested · Due · Overdue by — the overdue figure in danger ink, as a figure and not a chip. Five sections:

- **WHAT WAS ASKED FOR** — the request text on the well plate with its attribution, and an upstream line ("Raised from an auditor request by Bramwell Hoyt LLP") present only where one applies, absent rather than "n/a".
- **WHAT IT WILL SUPPORT** — the mapped control as a row (`#ic-matrix`, reference in mono, process, tier box chip, entity marker on a deviated instance, linking to Controls), then the control's **wording on the well plate** at lead size with framework/clause and frequency tag chips and the owner attribution — the entity's instance where one operates, with its factual deviation line. Where nothing maps: "This request is for a record rather than control evidence."
- **PROGRESS** — the state changes with person and timestamp, and a plain-words waiting line ("Waiting on the owner. Last activity 21 June.").
- **REMINDERS AND ESCALATIONS** — what the rules have done, newest first, each naming the rule that fired ("rule: 15 days overdue"), closing with "Sent automatically by the escalation rules on this screen." where "escalation rules" is an in-page `#escalation-rules` anchor rather than a navigation.
- **EVIDENCE RECEIVED** — the item that satisfied it, linking to Evidence, or "Nothing has been submitted against this request." 8 of the 22 carry an item; 14 carry the empty form. 11 of the 22 map to a control; 11 do not.

Footer, pinned: ghost "Send reminder" (`#ic-bell`), ghost "Escalate" (`#ic-flag`), ghost "Reassign" (`#ic-user`). None is saffron.

**MODALS** "New request" — six fields; keep "Keep it open", act "Create request". "Reassign request" — the request and its current owner, an owner select of the nine, a reason field, and a line stating the reassignment is recorded and appears in the audit trail; keep "Keep the owner", act "Reassign". "Send reminder" / "Escalate request" — each states what it would do and who would be notified; keep "Close", act "Send reminder" / "Escalate". "Edit escalation rule" / "Add escalation rule" — trigger select + days field (absent on "on the due date"), action select, five role checkboxes, channel radios, applies-to select; keep "Keep it open", act "Save rule" / "Add rule". "Pause rule" / "Resume rule" — keep "Keep it active", act "Pause rule" / "Resume rule".

**COMPUTED** results line (All → "Showing 22 of 86 requests", Open → "Showing 22 of 68 open requests", Overdue → "Showing 6 of 14 overdue requests", Closed → "Showing 0 of 18 closed requests"); every rail option count; the seven group heading counts and their overdue markers; the selection action bar's counts ("Send reminder 3", "Escalate 3").

## 6 · Audits

- **FILE** `Audit Lite - Audits.dc.html`
- **TITLE** "Audits" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `audits`
- **PRIMARY** "New audit"

**SECTIONS**

1. Audit list (list, 320px left pane) — search "Find an audit", segmented control "Active (5)" / "Closed (3)", eight selectable cards
2. Workspace header — audit name at h1, tag chips, "Open pack" and "Audit access" ghosts
3. Stage rail — five stages
4. Figures row (band)
5. Four tabs, each rendering its own table

**BAND** Evidence 184 of 226 · Open requests 18 · Overdue 6 · Observations 11

**TOOLBAR** tabs "Evidence (184)" · "Requests (18)" · "Observations (11)" · "Team (9)"

**TABLES**

- Evidence: Evidence · Reference · Entity · Classification · Version · Added — 8 rows
- Requests: Evidence requested · Entity · Owner · Due · Status · Reminder — 7 rows
- Observations: Reference · Observation · Entity · Owner · Severity · Target date · Status — 6 rows
- Team: Name · Role · Entity or firm · Added — 9 rows in two groups (ALDERWAY (5), BRAMWELL HOYT LLP (4))

**PANEL** none

**MODALS** "New audit" — five fields; keep "Keep it open", act "Create audit".

**COMPUTED** none of the eight workspaces' figures — all typed per audit.

## 7 · Risk-control matrix

- **FILE** `Audit Lite - Controls.dc.html`
- **TITLE** "Risk-control matrix" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `controls`
- **PRIMARY** "New control"

**SECTIONS**

1. Toolbar row 1 — view switch "Controls" (`#ic-matrix`) / "By framework" (`#ic-grid-rows`)
2. Toolbar row 2 — search "Search controls by process, risk or clause"; selects "Tier: all", "Framework: all", "Entity: all entities"; per-select Clear; "Clear every filter"
3. Results line
4. Controls table (table) or framework grouping (list)

**TABLE** columns: Reference · Process · Risk · Control · Frameworks · Frequency · Owner · Version · Tier. 14 rows — 12 baselines, 2 deviated instances each directly beneath its baseline.

**BY FRAMEWORK** four framework sections with computed coverage lines; clause rows in clause order; three unclaimed clauses rendered in place on a dashed danger border with the ink-only marker "No control maps to this clause" — ISO 27001:2022 §A.5.7 Threat intelligence, ISO 9001:2015 §9.1.2 Customer satisfaction, SOC 2 §CC9.2 Vendor and business partner risk.

**PANEL** 640px, sections collapsible — THE CONTROL (open on load) · THE DEVIATION (deviated rows only, open on load) · METADATA · FRAMEWORK MAPPING · **EVIDENCE FOR THIS CONTROL** (open on load) · VERSION HISTORY.

EVIDENCE FOR THIS CONTROL carries a computed results line ("2 items · most recent 26 Aug 2026" on CTL-001) above a table — Evidence · Reference · Entity · Version · Added — with rows linking to Evidence, and a ghost "Attach evidence" with `#ic-clip` beneath. **Three controls carry no evidence — CTL-009, CTL-012 and the CTL-002-APCL instance** — and render "No evidence is attached to this control." in the rows' place: no graphic, no icon, no warning chip, and the section stays rendered. Within THE DEVIATION: "Corporate baseline · v4" on the well plate, the entity's wording on the surface plate, then REASON FOR THE DEVIATION and the closing line "The corporate baseline is unchanged by this deviation."

**MODALS** "New control" — Process, Frequency, Risk, Control text, Framework and clause, Owner, plus two tier radios ("Corporate baseline", "Adopt an existing baseline for an entity") revealing Entity and Baseline selects; keep "Keep it open", act "Create control".

**COMPUTED** results line "Showing 14 controls · 12 corporate baseline, 2 deviated · mapped to 18 clauses across 4 frameworks"; each framework's coverage line (ISO 27001:2022 "5 clauses in scope · 4 covered · 1 unclaimed", ISO 9001:2015 "4 clauses in scope · 3 covered · 1 unclaimed", SOC 2 "4 clauses in scope · 3 covered · 1 unclaimed", Companies Act 2013 "1 clause in scope · 1 covered · 0 unclaimed"); the empty-state filter count.

## 8 · Observations

- **FILE** `Audit Lite - Observations.dc.html`
- **TITLE** "Observations" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `observations`
- **PRIMARY** "New observation"

**SECTIONS**

1. Toolbar row 1 — six tabs
2. Toolbar row 2 — four selects; By severity / By audit segmented control
3. Results line
4. Grouped table

**TOOLBAR** tabs "All (34)" · "Open (11)" · "Remediated (8)" · "Validated (6)" · "Closed (7)" · "Past target (5)"; selects "Audit: all", "Entity: all entities", "Severity: any", "Owner: anyone".

**TABLE** columns: Reference · Observation · Audit · Entity · Owner · Target date · Severity · Status. 12 rows in three severity groups — HIGH (5) · MEDIUM (4) · LOW (3).

**PANEL** 560px — a four-step progression (Open → Remediated → Validated → Closed), then AUDITOR'S COMMENT · MANAGEMENT RESPONSE · ACTION PLAN · CLOSURE EVIDENCE. Summary strip: Owner · Raised · Target · Days open.

**MODALS** "New observation" — six fields; keep "Keep it open", act "Raise observation".

**COMPUTED** results line "Showing 12 of 34 observations · sorted by severity, then target date"; the three group counts.

## 9 · Exception triage

- **FILE** `Audit Lite - Exception Triage.dc.html`
- **TITLE** "Exception triage" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `triage`
- **PRIMARY** "Promote to observation" — absent when no visible cluster is awaiting promotion

**SECTIONS**

1. Summary band (band)
2. Toolbar — three tabs, three selects
3. Results line
4. Cluster cards (list) — each with a figures strip and a collapsed disclosure
5. UNCLUSTERED (table)

**BAND**

| Overline | Value | Sub-line |
|---|---|---|
| OPEN EXCEPTIONS | 44 | across 6 entities |
| CLUSTERS | 6 | covering 41 of the 44 |
| UNCLUSTERED | 3 | no shared attribute |
| OLDEST | 47 | days, Fixed asset capitalisation |

**TOOLBAR** tabs "All clusters 6" · "Not yet promoted 5" · "Promoted 1"; selects "Entity: all entities", "Function: all", "Grouped by: shared test" / "Grouped by: entity" / "Grouped by: function".

**CARDS** each cluster card holds: `#ic-cluster` glyph and the finding title at h3; tag chips for test, entity and function; a linked `OBS-` tag chip where promoted; a four-figure sunken strip (IN THIS CLUSTER · OLDEST · WORST OVERDUE · SPAN); a disclosure button "Show N exceptions"; and "Promote to observation" where not yet promoted.

**TABLE** member and unclustered tables share columns: Exception · Reference · Entity · Function · Raised · Days overdue.

**PANEL** none

**MODALS** "Promote to observation" — observation title field, four severity radios (Low · Medium · High · Critical), Owner select, Target date; keep "Keep it open", act "Promote 9 exceptions".

**COMPUTED** all four band figures; the three tab counts; every cluster's four figures and its span; the results line "6 clusters · 41 exceptions · 3 unclustered · oldest 47 days"; the tail heading "Unclustered — 3 exceptions" and its sentence; the modal's scope line and act-label count. Regrouping recomputes: by entity 6 clusters · 43 exceptions · 1 unclustered; by function 5 clusters · 42 exceptions · 2 unclustered.

## 10 · Certifications

- **FILE** `Audit Lite - Certifications.dc.html`
- **TITLE** "Certifications" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `certifications`
- **PRIMARY** "Add certificate"

**SECTIONS**

1. Summary band (band)
2. Toolbar — four tabs, two selects
3. Results line
4. Certificate cards (list, full-width stacked), each containing SURVEILLANCE VISITS

**BAND**

| Overline | Value | Sub-line |
|---|---|---|
| CERTIFICATES HELD | 7 | across 5 entities |
| EXPIRING IN 90 DAYS | 3 | earliest 06 Sep 2026 |
| LAPSED | 1 | ISO 45001 — Chemicals, 59 days ago |
| SURVEILLANCE DUE | 2 | next 15 Sep 2026 |

**TOOLBAR** tabs "All 7" · "Valid 3" · "Expiring soon 3" · "Lapsed 1"; selects "Entity: all entities", "Issuing body: all".

**CARDS** each card: left — the standard at h3, issuing body, entity with its short code in mono, tag chips for certificate number and scope; right — the overline "DAYS UNTIL EXPIRY" or "DAYS SINCE EXPIRY", the figure at KPI scale in semantic ink, a validity pill, the window line; beneath — a validity bar with its window dates; then SURVEILLANCE VISITS (2–3 visit rows with an outcome pill) and a next-visit line with a days marker; footer "View certificate" and "Evidence".

**PANEL** none

**MODALS** "Add certificate" — Standard, Issuing body, Entity, Certificate number, Valid from, Valid to; keep "Keep it open", act "Add certificate".

**COMPUTED** CERTIFICATES HELD, EXPIRING IN 90 DAYS, LAPSED and the four tab counts; results line "Showing 7 certificates · sorted by lapsed first, then days until expiry, soonest first". SURVEILLANCE DUE (2) is typed.

## 11 · Regulatory filings

- **FILE** `Audit Lite - Filings.dc.html`
- **TITLE** "Regulatory filings" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `filings`
- **PRIMARY** "Record a filing"

**SECTIONS**

1. Summary band (band)
2. Toolbar row 1 — five tabs
3. Toolbar row 2 — four selects; By due date / By entity segmented control
4. Results line
5. Grouped table

**BAND**

| Overline | Value | Sub-line |
|---|---|---|
| DUE IN 30 DAYS | 5 | earliest 07 Sep 2026 |
| OVERDUE | 1 | Form 3CEB — Group, 12 days |
| FILED THIS YEAR | 34 | 2 filed late |
| ACKNOWLEDGEMENTS | 3 | awaiting from the authority |

**TOOLBAR** tabs "All 16" · "Due soon 5" · "Overdue 1" · "Filed 4" · "Filed late 2"; selects "Entity: all entities", "Authority: all", "Financial year: FY 2025-26", "Frequency: any".

**TABLE** columns: Filing · Authority · Entity · Period · Due · Status · Acknowledgement. 16 rows in four groups — OVERDUE (1 filing) · DUE THIS MONTH (5 filings) · DUE NEXT MONTH (4 filings) · FILED (6 filings).

**PANEL** 560px — WHAT IS REQUIRED · SUPPORTING EVIDENCE · FILING HISTORY · TRACEABILITY. Summary strip: Due · Overdue by / Position · Owner · Prepared.

**MODALS** "Record a filing" — Filed date, Acknowledgement reference, a drop area "Attach the filed return or its acknowledgement"; keep "Keep it open", act "Record filing".

**COMPUTED** DUE IN 30 DAYS, OVERDUE, the "2 filed late" sub-line, all five tab counts, the four group counts, and the results line "Showing 16 filings · 1 overdue · next due 07 Sep 2026". FILED THIS YEAR (34) and ACKNOWLEDGEMENTS (3) are typed.

## 12 · Auditor access

- **FILE** `Audit Lite - Auditor Access.dc.html`
- **TITLE** "Auditor access" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `auditor-access`
- **PRIMARY** "Grant access"

**SECTIONS**

1. Summary band (band)
2. Toolbar — four tabs, two selects, "Access history" ghost with `#ic-trail`
3. Results line
4. Grants table

**BAND**

| Overline | Value | Sub-line |
|---|---|---|
| ACTIVE GRANTS | 4 | across 3 firms |
| SEATED PEOPLE | 11 | 9 external, 2 observers |
| EXPIRING IN 30 DAYS | 2 | earliest 06 Sep 2026 |
| EVIDENCE IN SCOPE | 158 | across 6 packs |

**TOOLBAR** tabs "All (7)" · "Active (4)" · "Scheduled (1)" · "Ended (2)"; selects "Firm: all firms", "Entity: all entities".

**TABLE** columns: Firm · Audits in scope · Entities · Seats · Access window · Status. 7 rows.

**PANEL** 560px — ACCESS WINDOW · IN SCOPE (AUDITS and ENTITIES side by side) · SEATED · SHARED WITH THEM (table: Pack · Evidence · Shared on · Opened · Downloaded, 6 rows) · RECENT ACTIVITY. Footer: "Extend window", "Revoke access" in danger emphasis, and "Open auditor's view" with `#ic-door` on grant 1.

**MODALS** "Grant auditor access" — firm select, audits multi-select, entity tree, two date fields, two permission radios; keep "Keep it open", act "Grant access". "Revoke access" (destructive) — keep "Keep the access", act "Revoke access".

**COMPUTED** the "6 packs · 158 evidence items" results line in SHARED WITH THEM and the revoke modal's consequence count.

## 13 · Audit trail

- **FILE** `Audit Lite - Audit Trail.dc.html`
- **TITLE** "Audit trail" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `trail`
- **PRIMARY** "Export trail"

**SECTIONS**

1. Toolbar row 1 — search "Search the trail by document, person or reference"; five-range segmented control "Today" / "7 days" / "30 days" / "This FY" / "All"
2. Toolbar row 2 — five selects, the "Only modifications, deletions and version changes" checkbox, "Clear every filter"
3. Results line
4. Trail table

**TOOLBAR** selects "Event: all events", "Person: anyone", "Entity: all entities", "Evidence: any", "Source: all sources".

**TABLE** columns: When · Event · Evidence or object · Person · Entity · Source · Detail. 24 rows, newest first. Eleven rows carry the 2px inset bar — warning for modifications and version changes, danger for deletions and access revocations.

**PANEL** none

**MODALS** "Export trail" — format select (CSV, PDF, JSON), "Include detail column" checkbox, a muted line on filters; keep "Keep it open", act "Export 24 events".

**COMPUTED** results line "Showing 24 of 3,412 events · 30 days to 28 August 2026 · 6 modifications, 2 deletions, 3 version changes"; the marked-only checkbox reduces to the eleven marked rows and updates the line; the export modal's scope line and act-label count.

## 14 · Templates & checklists

- **FILE** `Audit Lite - Templates.dc.html`
- **TITLE** "Templates & checklists" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `templates`
- **PRIMARY** "New template"

**SECTIONS**

1. Toolbar row 1 — two tabs "Templates (24)" · "Checklists (9)"
2. Toolbar row 2 — four selects "Function: all", "Entity: all entities", "Audit type: all", "Lifecycle: any"; Grid/List segmented control
3. Results line
4. Card grid (grid) or list table

**GRID** a template card holds: `#ic-evidence` glyph and the template name at h3; a muted function/audit-type line; hairline; tag chips for framework, applicability and version; a lifecycle box chip on its own line; a muted last-changed line with a usage count; footer "Preview" and "Use template". A checklist card holds `#ic-check` and the name, audit type and applicability, a step count with `#ic-queue`, a lifecycle box chip, a last-changed line, and "Preview" / "Start from this".

**TABLE** (List view) columns: Template · Function · Audit type · Framework · Applicability · Version · Lifecycle · Last changed. 12 rows.

**PANEL** 520px — template preview: WHAT IT CONTAINS · VERSION HISTORY · WHERE IT IS USED. Checklist preview: THE STEPS, grouped under four sunken sub-headings.

**MODALS** "New template" — Name, Function, Audit type, Applicability, Framework, plus two radios ("Start blank", "Start from an existing template") with a template select; keep "Keep it open", act "Create template".

**COMPUTED** results line — templates "Showing 12 of 24 templates · 8 published, 3 released, 1 deprecated", checklists "Showing 9 checklists · 187 steps in total".

## 15 · Reports

- **FILE** `Audit Lite - Reports.dc.html`
- **TITLE** "Reports" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `reports`
- **PRIMARY** "Run report"

**SECTIONS**

1. Report library (list, 300px left pane) — search "Find a report", five report cards, then SCHEDULED with three rows
2. Report header — the report name at h1, a muted run line, "Export", "Schedule", "Filters" ghosts
3. Parameters strip — four tag chips (Entity: all · Period: FY 2025-26 · Audits: active · Format: summary)
4. Report body — six sections: a figures band, "Readiness by audit" (table), "Open items by function" (table), "Observations by severity and status" (matrix table), an attestation footer on the well plate

**BAND** Active audits 5 · Evidence available 409 of 473 · Open requests 68 · Overdue 14

**TABLES**

- Readiness by audit: Audit · Entity · Firm · Stage · Available · Pending · Readiness — 5 rows
- Open requests by age and audit: Audit · Entity · 0–3 · 4–7 · 8–14 · 15–30 · 30+ · Open · Oldest — 5 audit rows plus a **Total** row on the sunken plate. Plain table, no heat colour: ink figures, hairlines, no plates. Oldest takes danger ink above 30 days.

| Audit | 0–3 | 4–7 | 8–14 | 15–30 | 30+ | Open | Oldest |
|---|---|---|---|---|---|---|---|
| Statutory Audit FY 2025-26 · AGP | 8 | 6 | 5 | 4 | 1 | 24 | 47 days |
| Internal Audit — Procurement · AMPL | 5 | 4 | 4 | 2 | 1 | 16 | 37 days |
| Tax Audit FY 2025-26 · ACL | 4 | 3 | 3 | 3 | 1 | 14 | 39 days |
| SOC 2 Type II · ATPL | 3 | 2 | 2 | 2 | 0 | 9 | 26 days |
| ISO 9001 Surveillance · AMPL | 2 | 2 | 1 | 0 | 0 | 5 | 12 days |
| **Total** | **22** | **17** | **15** | **11** | **3** | **68** | |

  The Open column sums to 68, agreeing with the Dashboard KPI band and the Requests Open tab. The band figures are the report's own population of 68, not the 22 rows authored on Requests, so they do not match those groups row for row.
- Open items by function: Function · Open requests · Overdue · Oldest overdue · Observations open — 7 rows
- Observations by severity and status: (severity) · Open · Remediated · Validated · Closed · Total — 4 rows including Total

**PANEL** none

**MODALS** "Run report" — entity tree, period select, audits select, Summary/Detailed radios; keep "Keep it open", act "Run report". "Export report" — PDF, XLSX, CSV; keep "Keep it open", act "Export".

**COMPUTED** none — the five reports' figures are typed.

## 16 · Users & roles

- **FILE** `Audit Lite - Users.dc.html`
- **TITLE** "Users & roles" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `users`
- **PRIMARY** "Add user"

**SECTIONS**

1. Toolbar — three tabs, two selects, search "Find a user"
2. Results line
3. Users table
4. ROLES AND CAPABILITIES (grid) — sub-line "Five roles, eleven capabilities. A capability is held or it is not."

**TOOLBAR** tabs "All 12" · "Active 11" · "Inactive 1"; selects "Role: all", "Entity: all entities".

**TABLE** columns: Name · Function · Entity access · Role · Last active · Status. 12 rows.

**GRID** capability matrix — sticky Capability column, five role columns (Compliance Manager · Audit Lead · Finance Controller · Function Owner · Read-only), 11 capability rows, 55 cells all marked (`#ic-check` held, `#ic-minus` not held). The two single-role rows carry the ink-only marker "Compliance Manager only". Closing line: "Capabilities are set by role. A user's entity access decides where the capability applies."

**PANEL** none

**MODALS** "Add user" / "Edit user" — Name, Job title, Function, Entity access (an "All entities" checkbox above the two-level tree), five role radios; keep "Keep it open", act "Add user" / "Save user". "Deactivate user" (destructive) / "Reactivate user" — keep "Keep the account", act "Deactivate" / "Reactivate".

**COMPUTED** the three tab counts; results line "Showing 12 users · 11 active, 1 inactive"; each role column's user count (Compliance Manager 1 user · Audit Lead 2 users · Finance Controller 4 users · Function Owner 4 users · Read-only 1 user); the deactivate modal's fact and consequence lines.

## 17 · Integrations & SSO

- **FILE** `Audit Lite - Integrations.dc.html`
- **TITLE** "Integrations & SSO" · subtitle "As at 28 August 2026"
- **ACTIVE-NAV** `integrations`
- **PRIMARY** "Add integration"

**SECTIONS**

1. Single sign-on (card) — Microsoft Entra ID, a three-figure block, an eight-row definition list, the auditor-grant line, GROUP MAPPING (table), footer "Test connection" and "Download metadata"
2. CONNECTED SYSTEMS (grid) — sub-line "Documents synced from a connected system carry their source and keep their version history."
3. SYNC ACTIVITY (table)

**BAND** (SSO figures) USERS PROVISIONED 12 · LAST SYNC 28 Aug 2026, 06:00 · METHOD SAML 2.0

**TABLES**

- Group mapping: Directory group · Mapped role · Users · Last changed — 4 rows. Closing line: "Read-only is assigned directly and is not mapped to a directory group. Eleven users hold a mapped role; the twelfth is assigned directly."
- Sync activity: When · System · Event · Items · Detail — 8 rows; the two failure rows carry the 2px inset danger bar.

**GRID** a connector card holds: `#ic-link` glyph and the system name at h3; a muted kind line; hairline; a connection pill; the status sentence (in the danger refusal treatment with `role="alert"` on the Error card); a two-figure sunken strip (ITEMS SYNCED · LAST SYNC / SYNC / LAST SUCCESSFUL SYNC) where live; a footer of "Configure" + "Sync now", "Configure" + "Resume", or "Connect" alone. 7 cards.

**PANEL** none

**MODALS** "Add integration" / "Configure <system>" / "Connect <system>" — system select, OAuth / API key radios, entity scope tree, sync frequency select; keep "Keep it open", act "Connect" / "Save changes". "Sync now" / "Resume connector" / "Test connection" / "Download metadata" — each states what it would do; keep "Close", act "Start the sync" / "Resume the connector" / "Run the test" / "Download".

**COMPUTED** USERS PROVISIONED (11 mapped + 1 direct = 12); the "Group mapping" definition value "4 groups mapped to 4 roles · 11 users".

---

# Auditor microsite screens

## 18 · Overview

- **FILE** `Auditor Microsite - Overview.dc.html`
- **TITLE** "Overview" · subtitle "What Alderway Group plc has shared with Bramwell Hoyt LLP"
- **ACTIVE-NAV** `overview`
- **PRIMARY** "Request evidence"

**SECTIONS**

1. Figures band (band) — five figures
2. "Packs shared with you" (card, list of six)
3. "Your open queries" (card, list of four)
4. "Your requests" (card, list of three)
5. "Recently added to your packs" (table)

**BAND**

| Overline | Value | Sub-line |
|---|---|---|
| AUDITS IN SCOPE | 2 | Statutory and Tax, FY 2025-26 |
| PACKS SHARED | 6 | most recent 26 Aug 2026 |
| EVIDENCE ITEMS | 158 | across the six packs |
| YOUR OPEN QUERIES | 4 | 2 awaiting a response |
| YOUR REQUESTS | 3 | 1 overdue |

**TABLE** columns: Evidence · Reference · Pack · Entity · Version · Added. 8 rows.

**PANEL** none

**MODALS** "Request evidence" — Evidence required, Audit, Entity, Needed by, and a note field; keep "Keep it open", act "Send request".

**COMPUTED** EVIDENCE ITEMS (158, summed from the six packs).

## 19 · Audits

- **FILE** `Auditor Microsite - Audits.dc.html`
- **TITLE** "Audits" · subtitle "Two audits in scope for Bramwell Hoyt LLP"
- **ACTIVE-NAV** `audits`
- **PRIMARY** none

**SECTIONS**

1. Audit list (list, 320px left pane) — two selectable cards
2. Workspace header — the audit name at h1, tag chips, "Raise a query" ghost
3. Stage rail — five stages, with the muted line "Stage dates are set by Alderway."
4. Figures row (band)
5. Three tabs

**BAND** Packs shared 5 · Evidence items 127 · Your queries 4 · Your requests 3

**TOOLBAR** tabs "Packs (5)" · "Evidence (127)" · "Your activity"

**TABLES**

- Packs: Pack · Entity · Items · Shared on · Shared by · Opened — 5 rows (1 row on the Tax audit)
- Evidence: Evidence · Reference · Pack · Entity · Version · Added · Queries — 10 rows
- Your activity: two groups — YOUR QUERIES (4) with columns Reference · Item · Against · Status, and YOUR REQUESTS (3). On the Tax audit the YOUR QUERIES group renders with the sentence "No queries raised on this audit."

**PANEL** none

**MODALS** "Raise a query" — evidence select, current-version line, query textarea, recipient select, a muted visibility line; keep "Keep it open", act "Send query".

**COMPUTED** the empty-group sentence; tab counts follow the selected audit's authored rows.

## 20 · Packs

- **FILE** `Auditor Microsite - Packs.dc.html`
- **TITLE** "Packs" · subtitle "Six packs shared with Bramwell Hoyt LLP"
- **ACTIVE-NAV** `packs`
- **PRIMARY** none

**SECTIONS**

1. Results line + Grid/List segmented control
2. Card grid (grid) or list table

**GRID** a card holds: `#ic-batch` glyph and the pack name at h3; a muted audit line; the entity with its short code in mono; hairline; a figures row (`#ic-evidence` with the item count, size right-aligned); a shared-by line; a "You opened N items · your firm downloaded N" line; footer "Open" and "Download all" (absent under Claire Whitfield). 6 cards.

**TABLE** (List view) columns: Pack · Audit · Entity · Items · Size · Shared on · Shared by · Opened. 6 rows.

**PANEL** 560px — CONTENTS (table: Evidence · Reference · Entity · Version · Added · Queries, 10 rows) · WHAT CHANGED SINCE YOU RECEIVED IT · YOUR ACTIVITY ON THIS PACK. Footer "Raise a query" and "Download all" (absent under Claire).

**MODALS** "Raise a query" — keep "Keep it open", act "Send query".

**COMPUTED** results line "Six packs · 158 evidence items · most recent shared 26 Aug 2026" (item count summed from the cards).

## 21 · Evidence

- **FILE** `Auditor Microsite - Evidence.dc.html`
- **TITLE** "Evidence" · subtitle "158 items across the six packs shared with Bramwell Hoyt LLP"
- **ACTIVE-NAV** `evidence`
- **PRIMARY** none

**SECTIONS**

1. FILTERS (rail, 240px)
2. Search "Search evidence shared with you" + results line
3. Evidence table

**RAIL**

| Group | Options |
|---|---|
| PACK | the six shared packs by name |
| AUDIT | Statutory Audit FY 2025-26 · Tax Audit FY 2025-26 |
| ENTITY | the seven, as a two-level indented tree |
| ADDED | Last 7 days · Last 30 days · Since the grant began (collapsed) |
| QUERIED | Has an open query · Has an answered query · No query (collapsed) |

**TABLE** columns: Evidence · Reference · Pack · Entity · Version · Added · Queries. 14 rows.

**PANEL** 640px — the rendered sheet on `--color-paper` with the seat-named diagonal watermark, a pager ("Page 1 of 4") and a zoom control, then DETAILS · VERSION HISTORY · **CONTROL TESTED** · TRACEABILITY · QUERIES ON THIS ITEM.

CONTROL TESTED sits on the well plate, since it quotes Alderway's wording to an outside reader: the control reference in mono, the process in emphasis, the control text in full at lead size, tag chips for the framework and clause and the frequency, and a muted owner and last-reviewed line. Where the entity runs a deviated instance it quotes **that instance** and adds the factual line stating what differs, carrying nothing about why — the reason is Alderway's internal governance, and the firm can raise a query for it. **The section is self-contained: nothing in it links anywhere**, because the auditor has no Controls destination and a link to a screen the firm cannot reach would be a control that lies. Where nothing maps it renders the same sentence as the customer panel. Footer "Raise a query" and "Download" (absent under Claire Whitfield).

**MODALS** "Raise a query" — item and version line, query textarea, recipient select, visibility line; keep "Keep it open", act "Send query".

**COMPUTED** results line "Showing 14 of 158 items · sorted by added, newest first"; every rail option count; the watermark's seat name.

## 22 · Requests

- **FILE** `Auditor Microsite - Requests.dc.html`
- **TITLE** "Requests" · subtitle "Evidence you have asked Alderway for"
- **ACTIVE-NAV** `requests`
- **PRIMARY** "Request evidence"

**SECTIONS**

1. Toolbar — five tabs, two selects, By audit / Flat list segmented control
2. Results line
3. Grouped table

**TOOLBAR** tabs "All 12" · "Open 7" · "Overdue 2" · "Submitted 2" · "Accepted 5"; selects "Audit: both", "Entity: all in scope".

**TABLE** columns: Evidence requested · Entity · Raised by · Raised · Needed by · Status · Alderway's response. 12 rows in two groups — STATUTORY AUDIT FY 2025-26 (9 · 2 overdue) · TAX AUDIT FY 2025-26 (3).

**PANEL** 520px — WHAT YOU ASKED FOR · ALDERWAY'S RESPONSE · TRACEABILITY, plus EVIDENCE PROVIDED where the request has been satisfied. Footer "Chase this request" and "Withdraw request" in danger emphasis.

**MODALS** "Request evidence" — Evidence required, Audit, Entity, Needed by, note; keep "Keep it open", act "Send request". "Withdraw request" (destructive) — keep "Keep the request", act "Withdraw request".

**COMPUTED** all five tab counts; results line "Showing 12 requests · 2 overdue · oldest raised 21 Jul 2026"; the two group counts and their overdue markers.

## 23 · Queries

- **FILE** `Auditor Microsite - Queries.dc.html`
- **TITLE** "Queries" · subtitle "Questions you have raised against evidence"
- **ACTIVE-NAV** `queries`
- **PRIMARY** "Raise a query"

**SECTIONS**

1. Toolbar — five tabs, three selects, By status / By evidence segmented control
2. Results line
3. Grouped table

**TOOLBAR** tabs "All 11" · "Awaiting response 3" · "Answered 3" · "Reopened 2" · "Closed 3"; selects "Audit: both", "Entity: all in scope", "Raised by: anyone".

**TABLE** columns: Reference · Query · Evidence · Entity · Raised by · Raised · Status. 11 rows in four status groups.

**PANEL** 560px — AGAINST THIS EVIDENCE · THE THREAD (five alternating entries, the firm's on the surface plate and Alderway's on the well plate, with a reply box and a "Send reply" ghost) · TRACEABILITY. Footer: "Close this query" on Answered and Reopened queries, absent on Awaiting response ones, "Reopen this query" on Closed ones.

**MODALS** "Raise a query" — evidence select, current-version line, query textarea, recipient select, visibility line; keep "Keep it open", act "Send query".

**COMPUTED** all five tab counts; results line "Showing 11 queries · 3 awaiting a response · oldest raised 27 Jul 2026"; the four group counts; the by-evidence regrouping into the seven items the eleven queries are against.