## Executive conclusion Solstice should treat the August 2 hotline submission as a **credible, time-sensitive investigation trigger**. The attachments are not a bare anonymous tip: they contain an alleged executive instruction to use a consultant to “make the border problem disappear” while avoiding “government names,” an invoice for “border facilitation and technical consulting,” and AP records showing Solstice reimbursed $240,000. Under the stated rules, that combination may already create **credible evidence supporting a reasonable belief that a covered payment occurred**, even though the final recipient is not yet known. To protect the voluntary-disclosure credit, Solstice should: 1. **Act immediately on August 2** to preserve, stop suspected ongoing payments, and stand up an independent investigation. 2. **Assume, conservatively, that the 30-day clock may have started on August 2** and set an internal disclosure decision well before the outer deadline. 3. If outside counsel concludes the clock did not start until a later corroborating fact, document that conclusion and file promptly when the threshold is met. 4. Use an **independent board committee** and **outside counsel** because a senior regional vice president is implicated and two directors are close business allies of Cole Marr. 5. Preserve perishable data now: messaging-app chats, personal work phones, finance audit logs, server data, and AP/payment records. 6. Pause suspect payments and Cole’s authority over the East Reach relationship, while continuing only properly controlled, documented customs-brokerage work if operationally necessary. 7. Interview employees only through counsel using proper warnings, with strict nonretaliation and witness-contact controls. 8. If a covered payment is reasonably supported, disclose known facts, known participants, known transactions, and material uncertainty without disclosing privileged legal advice. --- # 1. Immediate preservation and suspension of deletion ## A. August 2, 8:10 a.m. to noon: immediate sequence ### 1. Log and secure the hotline submission The chief compliance officer should immediately: - Preserve the original anonymous submission, metadata, timestamp, file properties, email headers, and all attachments. - Save the East Reach invoice, Cole Marr chat, and reimbursement spreadsheet in a forensic or privileged-access folder. - Do not alter, rename, annotate, or “clean up” the original files. - Preserve any anonymous-reporter metadata or account identifiers, if any exist, without attempting to identify the reporter unless legally appropriate and necessary. These underlying documents are ordinary business records and factual materials. They do not become privileged merely because counsel later reviews them. --- ### 2. Notify the proper governance structure immediately Because Cole Marr is a senior regional vice president and two directors are close business allies of Cole, the general counsel should not be the sole decisionmaker. Immediately: - Notify the general counsel. - Convene an **independent board committee** or emergency committee of disinterested directors. - If the board lacks sufficiently independent directors, use outside independent directors or an independent monitor/special investigator. - Direct the committee to retain **independent outside counsel** with no material relationship to Cole, East Reach, or the relevant country operations. - Exclude Cole Marr and the two allied directors from all investigation, preservation, disclosure, and witness-contact decisions. The independent committee should direct: - Scope of the investigation. - Preservation decisions. - Payment suspensions. - Employee access restrictions. - Interview decisions. - Whether to seek voluntary-disclosure credit. --- ### 3. Issue an immediate legal hold The general counsel or outside counsel should issue a legal hold before the end of August 2. The hold must reach: - All company systems: email, collaboration tools, file shares, document management, ERP/AP/finance systems, vendor master, payment systems, logistics systems, customs-entry records, and server logs. - Personal devices used for work, including the personal phones used by Cole Marr and the chief compliance officer for work messages. - Messaging applications used for work, including the application that deletes chats after seven days. - Finance records: AP ledgers, invoices, purchase orders, wire instructions, bank statements, payment approvals, audit logs, vendor files, and expense reports. - East Reach files within Solstice’s control: contracts, amendments, invoices, statements, service reports, correspondence, KYC/AML files, vendor onboarding, audit-rights materials, and country-account files. - Identified custodians: Cole Marr, the chief compliance officer, finance personnel, East Reach account manager, logistics/customs personnel, AP personnel, IT personnel, and any other employee who touched the $240,000 payments, East Reach relationship, or border-facilitation issue. The hold should expressly require preservation of: - Drafts and deleted items. - Metadata. - Backups. - Chat histories. - Financial audit logs. - Server logs. - Access logs. - Payment-routing data. - Bank account or vendor-master changes. - Routine business records. --- ### 4. Suspend auto-deletion and routine destruction immediately Because the facts state that: - Messaging-app chats delete after seven days; - Finance-system audit logs roll over after 21 days; - A quarterly server purge begins this weekend; Solstice must not wait to confirm the complaint is “real.” The CFO’s proposal to wait on personal devices is not defensible under the stated rules. Immediate actions: #### Messaging application - Disable or suspend seven-day chat deletion for relevant custodians and channels. - Export or preserve relevant chat data from the application server, if available. - Collect relevant work messages from custodians’ devices. - Preserve chat metadata: sender, recipient, timestamp, device ID, channel, deletion history, and retention settings. - If the chats are stored only on devices and auto-delete is imminent, image the relevant devices immediately. #### Personal phones - Issue immediate preservation notices to Cole Marr, the chief compliance officer, and any other employee using personal phones for work messages related to East Reach, border facilitation, customs, or the $240,000 payments. - Require them not to delete, alter, or discard relevant work messages. - Where company policy permits, require production or forensic collection of relevant work data from personal devices. - Where consent is required, obtain written consent. - If an employee refuses and there is a credible spoliation risk, consider administrative suspension or other lawful measures and document the refusal. - Do not wait until the investigation is complete. #### Finance-system audit logs - Extract and hash the relevant finance audit logs immediately. - Suspend or disable the 21-day rollover for the relevant modules. - Preserve AP transaction logs, user activity logs, invoice-creation logs, payment-approval logs, vendor-master change logs, and bank-account change logs. #### Quarterly server purge - Suspend the quarterly server purge before it begins this weekend. - If the scheduled job cannot be suspended, image the affected volumes before the purge runs. - Preserve backups that may contain relevant data. --- # 2. Whether payments or relationships should be paused ## A. Pause suspected ongoing payments now Under the governing rules, Solstice must stop reasonably suspected ongoing payments. The $240,000 “border facilitation and technical consulting” invoice, the Cole Marr chat, and the reimbursement spreadsheet create a reasonable basis to pause suspect payments. Solstice should immediately: - Place a hold on pending or future payments to East Reach labeled or categorized as: - border facilitation; - facilitation; - customs facilitation; - technical consulting related to customs or border clearance; - unspecified services; - off-invoice payments; - cash payments; - payments to unidentified consultants or intermediaries. - Require compliance or independent-committee approval before releasing any East Reach payment. - Suspend Cole Marr’s authority to approve or request payments to East Reach, customs consultants, or border-related service providers. - Suspend Cole Marr’s authority to make vendor or payment changes involving East Reach. - Reassign the East Reach account to a neutral manager or compliance-controlled function. - Freeze new vendor setups or bank-account changes involving East Reach or related consultants. - Block payments to unidentified consultants, shell entities, or newly created payees connected to the East Reach relationship. --- ## B. Do not necessarily stop all legitimate customs brokerage immediately East Reach also performs legitimate customs brokerage worth approximately $160,000 per year. A blanket stop may disrupt lawful operations, but Solstice cannot allow the relationship to continue without controls. Solstice should: - Separate legitimate customs-brokerage services from “border facilitation,” “consulting,” or other suspect categories. - If customs clearance is operationally necessary, continue only under enhanced controls: - documented scope of services; - pre-approved invoices; - market-rate benchmarking; - no cash payments; - no payments to unidentified consultants; - compliance sign-off; - dual control over payment release; - audit trail of services performed; - no off-book or side arrangements. - If feasible, temporarily use an alternate compliant customs broker for sensitive shipments. - Place East Reach on enhanced vendor monitoring. - Consider temporarily suspending new business with East Reach pending investigation. - Do not terminate the relationship solely on the allegation unless the facts justify it, but do not allow the relationship to continue as if nothing happened. --- # 3. Board and counsel structure ## A. Independent board committee is required Because Cole Marr is a senior regional vice president, and two directors are close business allies of Cole, Solstice should use an independent board committee to direct the investigation and disclosure decision. The committee should: - Be composed of directors with no close business or personal relationship to Cole Marr. - Include the audit, risk, or ethics committee chair if independent. - Exclude Cole Marr and the two allied directors from all decisions about: - preservation; - witness contacts; - employee discipline; - payment suspensions; - disclosure; - regulator communications. - If the board is too compromised, retain an independent outside monitor or special investigator. --- ## B. Outside counsel should direct the privileged investigation The general counsel’s proposal to use outside counsel is correct, but the structure should be strengthened. Solstice should retain: - Independent outside counsel, conflict-checked to avoid relationships with Cole Marr, East Reach, the distributor owner, the consultant, or the relevant country operations. - Outside forensic accountants engaged at counsel’s direction. - Possibly an independent customs or anti-corruption investigator, if needed. - Internal audit may assist with routine fact-gathering, but internal audit should not be the primary privileged investigative body. The CFO’s proposal to assign internal audit, let Cole explain informally, and wait on personal devices should be rejected because: - Internal audit lacks the independent legal judgment required. - Informal explanations by Cole may contaminate the record. - Waiting on personal devices risks loss of perishable evidence. - The investigation must be capable of independent legal judgment and privilege protection. --- # 4. Privilege limits and employee interview warnings ## A. Privilege protects legal communications, not underlying facts Under the stated rules: - Attorney-client privilege protects confidential communications made for legal advice when counsel directs the investigation for that purpose. - Underlying facts do not become privileged merely because counsel is involved. - Ordinary business records do not become privileged merely because counsel is involved. - Remediation work does not become privileged merely because counsel is involved. Therefore: - The invoice, chat, spreadsheet, AP records, contracts, and customs-entry records are factual or business records. - Counsel’s legal advice, mental impressions, and privileged communications are protected. - Remediation steps, such as payment holds, training, or vendor controls, are factual business actions. Solstice should: - Keep privileged legal advice separate from ordinary business communications. - Limit distribution of privileged materials to counsel, the independent committee, and necessary legal/compliance personnel. - Use privilege logs when withholding or redacting privileged material. - Not label ordinary business records “privileged” merely because counsel requested them. - Not use privilege to hide who, what, when, or how much. --- ## B. Interview protocol All employee interviews should be conducted by counsel or at counsel’s direction. Each interview should begin with a warning similar to the following: > “I am an attorney representing Solstice Transit Group. I do not represent you personally. The company controls the attorney-client privilege, and the company may choose to waive it. I am conducting this interview to obtain information for legal advice and to support a privileged investigation. You may have the right to separate counsel, and you should consider whether you want separate counsel. You are prohibited from retaliating against, threatening, or pressuring any employee for participating in this investigation. I cannot promise personal confidentiality because the privilege belongs to the company, not to you. Please do not discuss this interview or the investigation with anyone except counsel or separate counsel of your choosing, if you retain one.” Additional interview controls: - Record interviews or take detailed notes. - Identify all attendees. - Do not allow Cole Marr, allied directors, or their designees to participate in interviews. - Do not promise immunity, non-disclosure, non-discipline, or personal confidentiality. - Do not pressure employees to provide information beyond lawful and policy-based obligations. - If an employee invokes separate counsel, counsel may continue appropriate company-directed questioning where lawful, but should be cautious and document the interaction. - Do not use an employee’s participation in the investigation as a basis for adverse action. --- # 5. First custodians, devices, and records to collect ## A. Priority custodians Collect from the following in this order: 1. **Chief compliance officer** - Hotline submission. - Compliance files. - Communications about the report. - Personal phone work messages, if any. 2. **Cole Marr** - Email. - Chat applications. - Personal phone work messages. - Calendar. - Travel and expense records. - Payment approvals. - East Reach communications. - Vendor or consultant communications. - Device and file access logs. 3. **East Reach account manager / relationship owner** - Email. - Chat messages. - Contract files. - Invoice files. - Service reports. - Meeting notes. - Payment requests. 4. **Finance / AP / treasury personnel** - AP ledgers. - Invoices. - Purchase orders. - Payment approvals. - Wire instructions. - Bank statements. - Vendor master. - Audit logs. - Bank-account change logs. 5. **Logistics / customs / operations personnel** - Customs-entry records. - Shipment records. - Rail-control equipment order files. - Brokerage files. - Clearance documentation. - Country-account files. 6. **IT personnel** - System logs. - Chat-application data. - Server logs. - Backup logs. - Purge schedules. - Device inventory. - Access logs. 7. **CFO and finance leadership** - Not necessarily subjects, but may hold approval records or relevant communications. - Collect only to the extent relevant and under legal hold. --- ## B. Priority devices Collect or preserve: - Corporate laptops for the priority custodians. - Corporate phones for the priority custodians. - Personal phones used for work messages by Cole Marr, the chief compliance officer, East Reach account manager, and relevant finance/logistics personnel. - Mobile device management data, if available. - Messaging-application data stored on devices or in the cloud. - Finance-system workstations or relevant audit-log sources. - Servers containing East Reach files, AP data, customs files, or relevant chat data. For personal devices: - Issue immediate preservation notices. - Obtain consent where required. - If consent is not given and there is an imminent spoliation risk, document the refusal and consider administrative suspension or other lawful measures. - Do not wait until the investigation matures. --- ## C. Priority records Collect and preserve: ### Hotline and allegation materials - Original anonymous submission. - Email or portal metadata. - Attached invoice. - Attached Cole Marr chat. - Attached reimbursement spreadsheet. - Any related follow-up communications. ### Payment records - The $240,000 invoice. - Four installment records. - AP ledger entries. - Purchase orders. - Payment approvals. - Wire instructions. - Bank statements. - Bank account data. - Vendor master entries. - Vendor bank-account changes. - Expense reports. - Offsetting or credit memos. ### East Reach relationship files - Contract and amendments. - Scope-of-work documents. - Fee schedules. - Invoices. - Statements. - Service reports. - Delivery records. - Technical-consulting deliverables, if any. - Customs-brokerage service records. - Correspondence with East Reach owner. - KYC/AML files. - Audit-rights materials. - Country-account files. ### Customs and operational records - Customs-entry records. - Shipment records for rail-control equipment. - Clearance timestamps. - Brokerage fees. - Duty or tariff records. - Country account. - Local representative or distributor files. ### Communications - Email. - Chat-application messages. - Text messages, if work-related. - Meeting notes. - Calendar entries. - Phone logs, to the extent relevant. - Voicemails, if relevant. ### System and audit data - Finance audit logs. - User activity logs. - File access logs. - Chat-application deletion settings. - Server purge logs. - Backup logs. --- # 6. Nonretaliation and witness-contact controls ## A. Nonretaliation protections Solstice must protect: - The anonymous hotline reporter, if identified or later identified. - Employees who provide documents. - Employees who answer interview questions. - Employees who decline to answer certain questions. - Employees who retain separate counsel. - Employees who raise concerns about the investigation. - Employees who are witnesses or potential witnesses. Solstice should: - Prohibit retaliation in writing. - Notify managers that adverse action related to protected participation is prohibited. - Monitor for subtle retaliation: - changes in duties; - schedule changes; - performance-review changes; - exclusion from projects; - access restrictions; - pay or bonus effects; - threats or intimidation. - Require the independent committee to approve any adverse personnel action involving a witness or potential witness. - Exclude Cole Marr from any HR decision affecting witnesses. - Preserve HR records related to witnesses. - Investigate any allegation of retaliation promptly and separately. Cole Marr may be a subject of the investigation. That does not prevent evidence-based discipline, but any discipline should be: - Based on facts; - Approved by the independent committee; - Not used as a tool to pressure witnesses; - Documented; - Separate from witness-participation issues. --- ## B. Witness-contact controls Witness contact should be tightly controlled. Only the following may contact witnesses: - Independent outside counsel. - General counsel or counsel designee, if authorized. - Members of the independent board committee, if necessary and authorized. - HR personnel, only under counsel direction and for non-substantive administrative matters. Witness contacts should not be made by: - Cole Marr. - Cole Marr’s direct reports, if likely to be witnesses. - The two allied directors. - Managers who may be subjects or witnesses. - Any person who could pressure or coach witnesses. Controls: - Maintain a witness-contact log. - Use a standard interview warning. - Do not discuss the investigation with non-witness employees. - Do not allow group “briefings” that could pressure witnesses. - Do not promise non-discipline, immunity, or confidentiality. - Do not disclose more of the allegation than necessary. - Do not allow Cole Marr or his allies to learn witness identities. - Do not permit ex parte communications between a subject and witnesses. - Preserve all witness-contact records. --- # 7. Whether the existing attachments themselves start the 30-day clock ## A. The attachments are not a bare anonymous accusation The report includes: 1. An East Reach invoice for $240,000 labeled “border facilitation and technical consulting.” 2. A chat from Cole Marr to East Reach’s owner stating: > “Use the consultant who makes the border problem disappear. Do not put government names in our file.” 3. A spreadsheet showing Solstice reimbursed the $240,000 in four installments. That is more than an uncorroborated anonymous tip. It is documentary support involving an alleged senior employee, a distributor, an invoice, and company reimbursement records. --- ## B. Conservative answer for preserving credit Under the stated rules, credible evidence may exist before every detail is known. The missing details include: - Identity of the consultant; - Bank recipient; - Public official; - Country account; - Whether the money actually reached a public official. But the current documents may already support a reasonable belief that at least some portion of the $240,000 was connected to improper border facilitation. Therefore, the rational and protective course is: > **Assume the 30-day clock may have started on August 2 and plan as if the outer deadline is September 1.** If outside counsel concludes that the attachments do not yet create a reasonable belief that a covered payment occurred, Solstice should document that conclusion and identify the specific missing fact that would create the reasonable belief. In that case, the clock starts when that corroborating fact is obtained, such as: - bank beneficiary data showing payment to an official or intermediary; - East Reach subledger showing payment to the consultant or official; - customs-entry records tying the payment to an official act; - reliable witness confirmation that the funds reached a public official; - consultant identity and payment trail. Then Solstice should file promptly after the threshold is met. --- ## C. Practical clock rule Solstice should use this rule: - If the independent committee concludes a covered payment is reasonably supported, treat **August 2 as Day 0**. - If the committee concludes the threshold is not yet met, document why and identify the threshold event. - When the threshold event occurs, the 30-day clock starts. - In no event should Solstice wait until Day 30 if: - perishable records are at risk; - the investigation is substantially complete enough to disclose known facts; - there is a realistic risk the regulator will contact the company before Solstice files. --- # 8. Specific missing facts needed for the disclosure decision The investigation should focus on the following missing facts. ## A. Beneficial recipient and payment path - Did any of the $240,000 reach a public official? - If yes, which official or officials? - What country? - What was the official’s role? - Was East Reach the ultimate recipient or an intermediary? - Did East Reach pay a consultant? - What is the consultant’s identity? - What bank account received the funds? - Were there multiple recipients? - Were any payments made in cash? - Were any payments made outside Solstice’s AP system? - Were any payments offset against other invoices? Required sources: - Solstice bank statements. - Wire instructions. - East Reach subledger. - East Reach bank statements, if obtainable. - Consultant contracts or invoices. - Customs-entry records. - Local account records. - Reliable witness statements. --- ## B. Nature of the services - What services did East Reach actually provide? - Was the $240,000 for legitimate customs brokerage? - Was it for technical consulting? - Was it for “border facilitation”? - What deliverables, if any, were provided? - Were timesheets, reports, or work products produced? - Was the fee consistent with East Reach’s approximately $160,000 per year legitimate customs brokerage business? - Was the $240,000 above market or inconsistent with the contract? - Was the “technical consulting” label used to obscure a payment? --- ## C. Participants and roles - Who directed the payment? - Who approved the invoices? - Who requested the payments? - Who communicated with East Reach? - Who communicated with the consultant? - Did East Reach’s owner know the funds were intended for officials? - Did other Solstice employees know? - Did any Solstice employees participate in structuring, labeling, or approving the payments? - Were any board members, senior executives, or country managers involved? --- ## D. Timing and transactions - What are the exact dates of the four installments? - What amounts were paid in each installment? - What dates appear on the invoice? - What customs entries or shipments correspond to the payments? - Which rail-control equipment shipments were affected? - What country accounts were involved? - Were there payments before or after the $240,000? - Are there other East Reach invoices with similar labels? - Are there similar payments to other distributors or consultants? --- ## E. Extent of the conduct - Is this a single transaction or a pattern? - Are other customs officials involved? - Are other distributors involved? - Are other countries involved? - Are other Solstice business units involved? - Are there ongoing payments? - Are there off-books records? - Are there false statements in invoices, contracts, or customs filings? --- ## F. Legal and jurisdictional facts - Which country or countries are involved? - Are the recipients public officials under the applicable anti-corruption law? - Are facilitation payments treated differently under local law? - Is the payment “covered” under the fictional regulator’s program? - Are there other legal exposure issues, such as books-and-records or false-statement concerns? These facts matter, but they should not delay disclosure if the known facts already support a reasonable belief that a covered payment occurred. --- # 9. Seven-day investigative plan and decision date The plan should not wait until Day 30. The company should set early decision gates. ## Assumed calendar - **Day 0:** Monday, August 2. - **Day 7:** Monday, August 9. - **Day 10:** Thursday, August 12. - **Day 14:** Monday, August 16. - **Outer 30-day date if clock started August 2:** September 1. --- ## Day 0 — Monday, August 2 ### Objectives - Preserve evidence. - Stop suspected ongoing payments. - Stand up independent governance. - Begin privileged investigation. ### Actions 1. CCO logs and secures hotline submission. 2. GC notifies independent board committee. 3. Independent board committee forms. 4. Committee retains independent outside counsel. 5. Outside counsel issues or confirms legal hold. 6. IT suspends: - seven-day chat deletion; - 21-day finance-log rollover; - weekend server purge. 7. AP places hold on suspect East Reach payments. 8. Cole Marr’s payment and vendor authority over East Reach is suspended. 9. East Reach account is reassigned to neutral or compliance-controlled personnel. 10. Preservation notices issued to priority custodians, including Cole Marr and the chief compliance officer. 11. Forensic collection begins for messaging-app data, finance audit logs, AP records, and relevant server data. ### Output - Investigation charter. - Legal hold issued. - Payment hold in place. - Collection started. --- ## Day 1 — Tuesday, August 3 ### Objectives - Capture perishable data before deletion. - Begin payment tracing. - Begin structured interviews. ### Actions 1. Complete initial messaging-app export or device preservation. 2. Complete initial finance audit-log extraction and hashing. 3. Preserve relevant personal-device work data, with consent where required. 4. Verify server-purge suspension; if not possible, image affected volumes. 5. Begin forensic review of the four installments. 6. Trace each installment: - date; - amount; - payee; - bank account; - wire reference; - approver; - invoice; - purpose code. 7. Review East Reach contract and fee schedule. 8. Begin Upjohn interviews: - chief compliance officer; - AP personnel; - finance controller. 9. Issue neutral preservation and document request to East Reach under contractual audit rights, if appropriate, without revealing privileged strategy. ### Output - Initial payment trace. - First witness interviews. - Preservation status report. --- ## Day 2 — Wednesday, August 4 ### Objectives - Identify the payment path. - Determine whether the $240,000 matches legitimate services. ### Actions 1. Review invoice details against contract. 2. Compare $240,000 fee to East Reach’s normal $160,000 per year customs brokerage value. 3. Identify whether any “technical consulting” deliverables exist. 4. Review customs-entry records for rail-control equipment shipments. 5. Identify country account. 6. Continue interviews: - East Reach account manager; - logistics/customs personnel. 7. Request from Solstice’s bank all payment data for the four installments. 8. Prepare document requests for East Reach: - subledger; - consultant invoices; - bank statements; - service records; - payment tracing. ### Output - Preliminary service-vs-payment mismatch analysis. - Country and shipment identification. - East Reach document request list. --- ## Day 3 — Thursday, August 5 ### Objectives - Begin testing whether the funds reached a public official. ### Actions 1. Analyze AP and bank data for intermediary payments. 2. Search for consultant identity: - names; - companies; - bank accounts; - contact information. 3. Review customs-entry records for: - broker names; - facilitation fees; - unusual fees; - official interactions. 4. Continue interviews: - customs/logistics staff; - operations personnel. 5. Review Cole Marr’s communications for references to: - consultant; - border problem; - government names; - country; - customs officials. 6. Preserve any newly identified custodians or records. ### Output - Updated custodian list. - Preliminary identification of possible intermediary or consultant. - Evidence of whether official involvement is supported. --- ## Day 4 — Friday, August 6 ### Objectives - Complete pre-weekend preservation verification. - Assess whether disclosure threshold is met. ### Actions 1. Verify that all perishable data is preserved or imaged before weekend purge. 2. Review server purge logs and backup logs. 3. Review messaging-app deletion settings and retention history. 4. Confirm finance audit logs are preserved. 5. Review any responses from East Reach. 6. Continue forensic accounting review. 7. Prepare a privileged preliminary report for the independent committee. 8. If Cole Marr has not been interviewed and preservation is secure, schedule a structured Upjohn interview. 9. Do not conduct informal “let Cole explain” sessions. ### Output - Preservation verification. - Privileged preliminary report. - Recommendation on disclosure threshold. --- ## Day 5–6 — Weekend, August 7–8 ### Objectives - Continue data analysis if necessary. - Avoid reliance on perishable systems. ### Actions 1. Forensic accountants continue tracing the four installments. 2. Counsel reviews newly identified documents. 3. If East Reach provides documents, begin review. 4. If bank data or customs entries identify an official or intermediary, preserve and analyze. 5. Do not delay necessary legal decisions until Monday. ### Output - Refined factual picture. - Identification of material uncertainties. --- ## Day 7 — Monday, August 9 ### Decision gate The independent board committee should meet and decide: 1. Has Solstice obtained credible evidence supporting a reasonable belief that a covered payment occurred? 2. If yes, should Solstice file an initial voluntary disclosure? 3. If no, what specific missing fact is needed? 4. What known facts must be disclosed now? 5. What material uncertainties must be disclosed? 6. Is there a risk the regulator will contact Solstice before filing? 7. Are all perishable records preserved? ### Decision rule - If the committee concludes a covered payment is reasonably supported, Solstice should proceed to disclosure. - If the committee concludes the threshold is not yet met, it should document the missing fact and set a short deadline to resolve it. - Solstice should not wait until Day 30 merely because the 30-day period is still running. ### Target filing If the committee concludes the threshold is met: - Prepare and file initial voluntary disclosure by **Day 10, August 12**, if possible. - In no event later than **Day 14, August 16**, unless the committee identifies a specific reason for a short additional delay. - If the threshold is first met after Day 7, file within 48 hours after the committee confirms the threshold. --- ## Day 10 — Thursday, August 12 ### Objective - File initial disclosure if threshold is met. ### Actions 1. File initial voluntary disclosure if authorized. 2. Provide known facts, known participants, known transactions, and material uncertainty. 3. Commit to continuing cooperation. 4. Provide supplemental information as it becomes available. --- ## Day 14 — Monday, August 16 ### Objective - Final internal decision if the threshold was not resolved by Day 10. ### Actions 1. If credible evidence exists but disclosure has not been made, file immediately. 2. If no credible evidence exists, document the basis for continuing the investigation. 3. If the regulator contacts Solstice at any point before filing, file immediately and disclose known facts. --- # 10. How to disclose material uncertainty without waiving privileged advice ## A. General disclosure principle Solstice can seek the voluntary-disclosure credit without disclosing privileged legal advice. The disclosure must be: - Substantially truthful. - Factual. - Specific enough to identify known participants and transactions. - Transparent about material uncertainty. - Not speculative. - Committed to continuing cooperation. Solstice cannot use privilege to hide: - who; - what; - when; - how much. Solstice also should not present speculation as fact. --- ## B. What to disclose if covered payment evidence is confirmed If the investigation confirms that a covered payment occurred, the initial disclosure should include: 1. **Who** - Cole Marr, as the regional vice president shown in the chat. - East Reach and its owner. - Relevant Solstice employees involved in payment approval or reimbursement. - The consultant, if identified. - The public official, if identified. - If the official or consultant is not yet identified, state that expressly. 2. **What** - Hotline report. - East Reach invoice for $240,000 labeled “border facilitation and technical consulting.” - Cole Marr chat directing East Reach to use a consultant to make the border problem disappear and not put government names in the file. - AP records showing reimbursement in four installments. - Confirmed payment path, if known. - Customs or border-facilitation purpose, if confirmed. 3. **When** - Date of hotline report: August 2. - Dates of the four installments. - Dates of relevant customs entries or shipments. - Dates of any confirmed payment to an official or intermediary. 4. **How much** - $240,000 total. - Amount of each installment, if known. - Amount confirmed to have reached a public official, if known. - Any other confirmed amounts. 5. **Material uncertainty** - If identity of the official is unknown, say so. - If identity of the consultant is unknown, say so. - If the exact amount paid to the official is unknown, say so. - If the country or local account is unknown, say so. - If it is unclear whether additional payments occurred, say so. 6. **Cooperation** - State that Solstice is cooperating. - State that Solstice will provide supplemental information. - State that Solstice has preserved records. - State that Solstice has suspended suspect payments. - State that Solstice is implementing controls. --- ## C. How to state material uncertainty without speculation Use factual uncertainty language. ### Appropriate > “The Company has identified an invoice from East Reach for $240,000 labeled ‘border facilitation and technical consulting’ and AP records showing Solstice reimbursed the amount in four installments. Based on the documents reviewed to date, the Company reasonably believes that at least a portion of the payments may have been used to facilitate customs clearance through improper payments. The Company has not yet determined the identity of the beneficial recipient, whether the funds reached a public official, the country involved, or the precise amount, if any, paid to an official.” ### Also appropriate if confirmed > “The Company confirms that $240,000 was paid to East Reach in four installments between [dates]. The Company has also determined that East Reach paid [consultant/official] $[amount] on [date] in connection with customs clearance for rail-control equipment in [country]. The Company does not yet know whether additional payments were made to other officials or distributors.” ### Inappropriate > “We believe the consultants definitely bribed the customs officials with the full $240,000.” If that conclusion is not supported by evidence, it is speculation presented as fact and may forfeit credit. --- ## D. Protecting privilege while disclosing facts Solstice should: - Disclose facts, business records, and transaction details. - Not volunteer privileged attorney-client communications. - Not disclose counsel’s legal advice, mental impressions, or investigative opinions as legal conclusions. - If a document contains privileged communications, redact or segregate privileged portions and provide a privilege log. - Provide non-privileged factual summaries if the regulator requests information from privileged materials. - Limit distribution of the disclosure to the regulator and necessary company personnel. - Maintain a privilege log. - Not create a joint-defense relationship with East Reach or the consultant without careful analysis. - Not use privilege to obscure known participants, transactions, dates, or amounts. A statement such as: > “Outside counsel is directing the investigation” is a fact and may be disclosed. A statement such as: > “Outside counsel believes the payment was a covered bribe” is legal advice or counsel’s opinion and need not be disclosed, though the underlying facts must be disclosed if relevant. --- # 11. Rational decision framework for seeking voluntary-disclosure credit Solstice can rationally choose to seek credit when the independent committee can truthfully conclude: 1. A credible allegation has been investigated. 2. The evidence supports a reasonable belief that a covered payment occurred. 3. The company can identify known participants and transactions. 4. The company can disclose material uncertainty without presenting speculation as fact. 5. Filing now is better than waiting because: - the 30-day credit is available; - regulator contact may close the voluntary path; - delay increases spoliation and cooperation risk; - the 50 percent penalty reduction is presumptive. Solstice should not seek credit by disclosing a bare anonymous accusation as fact. But if the documents and investigation support a reasonable belief that a covered payment occurred, waiting for complete certainty is not required. --- # 12. Key do’s and don’ts ## Do - Do preserve immediately. - Do suspend auto-deletion and routine destruction. - Do collect personal-device work data where lawful and necessary. - Do use an independent board committee. - Do use outside counsel. - Do pause suspect payments. - Do remove Cole Marr from payment and vendor authority. - Do interview employees only with proper warnings. - Do protect witnesses from retaliation. - Do disclose known facts, known participants, known transactions, and material uncertainty. - Do file early if the credible-evidence threshold is met. ## Don’t - Don’t wait until Day 30. - Don’t let internal audit direct a privileged investigation. - Don’t let Cole Marr informally “explain” outside counsel’s control. - Don’t wait to preserve personal devices until the complaint is “real.” - Don’t allow allied directors to influence witness contacts or disclosure. - Don’t promise employees personal confidentiality. - Don’t retaliate against witnesses or reporters. - Don’t use privilege to hide who, what, when, or how much. - Don’t disclose legal advice or counsel’s mental impressions. - Don’t present speculation as fact. - Don’t delay disclosure when perishable records or regulator-contact risk exist. --- # Bottom-line plan 1. **August 2, immediately:** legal hold, suspension of deletion, preservation of chats, finance logs, server data, and personal work devices. 2. **August 2, immediately:** independent board committee and outside counsel; exclude Cole and allied directors. 3. **August 2, immediately:** pause suspect East Reach payments and suspend Cole’s payment/vendor authority. 4. **August 2–4:** collect priority custodians’ devices, AP/payment records, East Reach files, customs-entry records, and messaging data. 5. **August 3–7:** structured Upjohn interviews, payment tracing, forensic accounting, and document requests to East Reach. 6. **August 9:** independent committee decision gate on whether credible evidence supports a covered payment. 7. **August 12–16:** if threshold is met, file initial voluntary disclosure with known facts, known participants, known transactions, and material uncertainty. 8. **At all times:** protect witnesses, prevent retaliation, maintain privilege over legal advice, and disclose facts necessary to identify who, what, when, and how much.