{
  "additional_resources": [
    {
      "purpose": "Items to agree before transfer, not unverified actual security/provider assurances.",
      "title": "Agree the handling before sharing the records.",
      "url": "https://cyberdile.com/guides/before-sharing-records/"
    },
    {
      "fictional": true,
      "source_catalogue": "https://cyberdile.com/sample/sources/catalogue.json",
      "title": "A source-linked project review, with the sources",
      "url": "https://cyberdile.com/sample/"
    }
  ],
  "audience": [
    "project owners",
    "counsel",
    "family offices",
    "professional advisers"
  ],
  "guides": [
    {
      "description": "Build a source passport, preserve originals, track working copies and carry corrections into every conclusion that depends on them.",
      "order": 1,
      "sections": [
        {
          "id": "question",
          "title": "Preserve the question as well as the record."
        },
        {
          "id": "passport",
          "title": "Give each source a passport."
        },
        {
          "id": "copies",
          "title": "Separate originals, working copies and extracts."
        },
        {
          "id": "locator",
          "title": "Make every material statement independently findable."
        },
        {
          "id": "corrections",
          "title": "Correct the dependent work, not just one cell."
        },
        {
          "id": "handover",
          "title": "The useful handover pack is small and traceable."
        }
      ],
      "title": "A source is more than a file.",
      "url": "https://cyberdile.com/guides/evidence-provenance/"
    },
    {
      "description": "Trace a contract change from request to authority, issued revision, implementation and payment without treating unlike approvals as the same act.",
      "order": 2,
      "sections": [
        {
          "id": "states",
          "title": "Do not compress different acts into “approved”."
        },
        {
          "id": "baseline",
          "title": "Find the baseline in force at that time."
        },
        {
          "id": "identity",
          "title": "Use an item key that survives across organizations."
        },
        {
          "id": "conditions",
          "title": "Carry conditions forward."
        },
        {
          "id": "worked-example",
          "title": "Use a missing-link question, not a verdict."
        },
        {
          "id": "handover",
          "title": "Give the next owner a live boundary."
        }
      ],
      "title": "Approval is a chain, not a signature.",
      "url": "https://cyberdile.com/guides/approval-chain/"
    },
    {
      "description": "Separate association, action, authority and causal contribution. Build a finding that can survive contrary records and a fair response.",
      "order": 3,
      "sections": [
        {
          "id": "separate",
          "title": "Association is the beginning of a question."
        },
        {
          "id": "finding",
          "title": "Write a finding in six parts."
        },
        {
          "id": "alternatives",
          "title": "Make competing explanations operational."
        },
        {
          "id": "absence",
          "title": "A gap has a search boundary."
        },
        {
          "id": "response",
          "title": "A fair response can improve the record."
        },
        {
          "id": "publication",
          "title": "Separate the working brief from a public account."
        }
      ],
      "title": "Test the explanation before naming the cause.",
      "url": "https://cyberdile.com/guides/fair-attribution/"
    },
    {
      "description": "Reconcile baseline, authorized changes, invoices, paid amounts and credits at item level before testing cause or recoverability.",
      "order": 4,
      "sections": [
        {
          "id": "basis",
          "title": "Choose the comparison before calculating the difference."
        },
        {
          "id": "ledger",
          "title": "Keep one row per work item."
        },
        {
          "id": "example",
          "title": "Explain the arithmetic without overselling it."
        },
        {
          "id": "double-count",
          "title": "Check the traps that make a total look larger."
        },
        {
          "id": "uncertainty",
          "title": "Use ranges with reasons, not precision without support."
        },
        {
          "id": "deadline",
          "title": "Protect the legal clock outside the spreadsheet."
        }
      ],
      "title": "A cost increase is not a loss calculation.",
      "url": "https://cyberdile.com/guides/loss-ledger/"
    },
    {
      "description": "Choose the lawful route, write a bounded request, control retrieval costs and track a response without turning absence into an accusation.",
      "order": 5,
      "sections": [
        {
          "id": "route",
          "title": "The custodian and route come first."
        },
        {
          "id": "free",
          "title": "Check the free and routine sources first."
        },
        {
          "id": "request",
          "title": "Write enough detail to route and search."
        },
        {
          "id": "priority",
          "title": "Pay for a discriminator, not an indiscriminate collection."
        },
        {
          "id": "response",
          "title": "Keep the response as a source."
        },
        {
          "id": "privacy",
          "title": "Request less personal information, not more exposure."
        },
        {
          "id": "counsel",
          "title": "Keep requests and legal deadlines on separate tracks."
        }
      ],
      "title": "Ask for a record the custodian can find.",
      "url": "https://cyberdile.com/guides/lawful-records-requests/"
    }
  ],
  "name": "Cyberdile evidence workflow",
  "official_reference_links": [
    {
      "title": "NIST: Digital Evidence Preservation",
      "url": "https://www.nist.gov/publications/digital-evidence-preservation-considerations-evidence-handlers"
    },
    {
      "title": "BC Information and Privacy Commissioner: requesting records",
      "url": "https://www.oipc.bc.ca/for-the-public/how-do-i-request-records/"
    },
    {
      "title": "BC government: preparing a records request",
      "url": "https://foirequestform.gov.bc.ca/getting-started2"
    },
    {
      "title": "Privacy Commissioner of Canada: limiting collection",
      "url": "https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/p_principle/principles/p_collection/"
    }
  ],
  "purpose": "Research workflow, not legal advice, a misconduct finding or a recovery guarantee.",
  "references_checked": "2026-10-12",
  "supplement_version": "2026.10.12-r44-evidence-v1",
  "url": "https://cyberdile.com/guides/",
  "version": "2026.10.12-r43-content-v1"
}