We need answer user's legal/ethics operational question. Need produce ordered plan exact stop/report/investigation/re-consent sequence while scope unknown. Need likely no external research. Need careful with rules given. Need maybe mention assumptions. Need include 72h and 7 days sequence. Need address all bullets. Need use facts.

Let's parse.

Role: outside counsel to NovaCrest sponsor of five-site medical-device study. Known material risk omitted from one consent form version. Give exact stop, report, investigation, and re-consent sequence while scope unknown.

Governing law rules 1-10.

Facts:
- Implanted nerve-stimulation lead. Approved protocol identifies 3% risk of temporary nerve weakness and requires consent.
- Wednesday 10:00 am discovered consent-form v4.2 omitted nerve-weakness paragraph due to document conversion error. v4.1 and 4.3 contain it.
- 120 subjects at five sites.
- Site A confirms 38 signed v4.2.
- 20 subjects at other sites confirmed signed v4.1 or 4.3.
- Remaining 62 unknown. Central database identifies enrollment dates but not consent version. Several signed PDFs not uploaded.
- 12 subjects scheduled implant next 72h. Four confirmed v4.2. Eight unknown. Six other subjects need routine safety visits this week. No urgent medical intervention depends on research schedule.
- One v4.2 subject experienced temporary nerve weakness resolved after 4 days. Reported ordinary safety channel, but subject not told before implantation that known risk.
- Site investigators propose continuing scheduled implants while sending explanatory email afterward. CSO wants replace v4.2 PDFs in database with v4.3 "so file clean".
- Can convene central ethics board emergency review tomorrow. Has not notified board or regulator.

Need ordered plan:
- immediate enrollment and intervention holds.
- care and safety follow-up continue.
- ethics-board/regulator reporting clocks.
- emergency approval corrected materials.
- re-consent awaiting intervention.
- notice and consent choices completed intervention.
- treatment of data.
- records needed to determine affected pop.
- known nerve-weakness event.
- preservation, privilege, PDF replacement.
- concrete sequence next 72h and seven days, without assuming unknown 62 scope.

Need likely answer as counsel memo. Use precise time frames. Wednesday 10:00 discovery = Day 0. Need report to central ethics board within 5 business days and device regulator within 7 calendar days after discovery. Need likely report immediately/within 24? Rule says within 5 business days and 7 calendar days. But since can convene emergency tomorrow, should report as soon as possible, no later than deadlines. Also site local faster if required (none supplied). Need note site logs.

Need stop new enrollment and nonurgent research interventions under defective form until ethics board approves corrected materials. Since scope unknown, immediate hold all new enrollment? Rule 2 says stop new enrollment and nonurgent research interventions under defective form until EC approves corrected materials. But scope unknown. Could stop new enrollment study-wide? It says under defective form; but since v4.2 known defective, if unknown version, prudent to hold new enrollment at all sites until scope and correct form used. Rule 9: may not assume all/no affected. Need hold nonurgent interventions for all subjects who may have signed v4.2, including unknown versions, until scope resolved and approved corrected materials? Need exact: Stop new enrollment study-wide (or at least any enrollment where consent version not verified as 4.1/4.3) and suspend all nonurgent research interventions for subjects who are confirmed v4.2 or whose consent version cannot be affirmatively verified as containing risk. That includes 38 confirmed v4.2 + 62 unknown (except 20 confirmed good? Actually 20 other sites confirmed 4.1/4.3, so not defective). Need also maybe 12 scheduled implants: 4 confirmed 4.2, 8 unknown. Stop these nonurgent implants until re-consent on approved corrected form (if 4.2) or verification. But no urgent medical intervention depends on research schedule. If subjects already implanted? routine safety visits continue as medically necessary/safety follow-up. Nonurgent research interventions? Routine safety visits could be safety follow-up; rule 3 says medically necessary care and safety follow-up must continue. So can continue safety visits? Need distinguish: If routine safety visits are research interventions, but safety follow-up must continue. Could continue with minimal research procedures, no elective implant. For unknown subjects scheduled for implant, if not confirmed good, hold implant (nonurgent) until verified/reconsented. For 4 confirmed 4.2, hold and re-consent before next nonurgent intervention. For 8 unknown, verify consent version first; if good, may proceed after verification? But scope unknown and EC approval of corrected materials? Rule 2: stop new enrollment and nonurgent research interventions under defective form until EC approves corrected materials. If 8 unknown, cannot assume defective or not; hold until direct site confirmation and version controlled records confirm. Since emergency review tomorrow, likely hold all 12 next 72h unless verified good and no hold? But rule requires stop until EC approves corrected materials, but only for defective form. If subjects signed good form, no need re-consent. But operational prudence: no implants during 72h except perhaps if verified signed 4.1/4.3 and not part of defective version? However EC hasn't approved corrected materials, but for good subjects, intervention under approved form may continue? The question asks immediate holds while scope unknown. Could say: immediate study-wide administrative hold on new enrollment and all nonurgent elective implants/research procedures for any subject whose consent version is not documented as 4.1 or 4.3; for confirmed v4.2, hold all nonurgent interventions until EC approves corrected form and subject reconsents. For confirmed 4.1/4.3, may continue only if protocol and local requirements permit, but given discovery, pause non-urgent elective implants pending verification? Need exact. The law says stop under defective form, not necessarily all. But scope unknown; to avoid unauthorized research, hold nonurgent interventions for unknown. For 20 confirmed good, no hold legally necessary; but maybe can continue? The study has 12 scheduled implants: 4 confirmed v4.2, 8 unknown. No confirmed good among 12? It says 20 other sites confirmed 4.1 or 4.3, but not necessarily scheduled implants. So for next 72h, hold 12 until verification/re-consent. For routine safety visits this week (6 other subjects): continue if safety follow-up/medically necessary; if includes nonurgent research procedures? They need routine safety visits, no urgent depends on schedule. Rule 3: continue safety follow-up. So do not cancel medically necessary care. If visits include nonurgent research procedures beyond safety, maybe suspend those. Need articulate.

Need re-consent: Enrolled subject not completed study interventions must be re-consented on approved corrected form before next nonurgent intervention. That includes scheduled implants (noncompleted). For 4 confirmed v4.2 and any unknown if found v4.2, after EC approves corrected form (likely v4.3 or new version), re-consent before next nonurgent intervention. If subject completes? For completed interventions, must receive new risk info when may affect safety follow-up or willingness to permit continued data use. Consent cannot be backdated/recreated. For completed, need informational visit/email? Need offer opportunity to discuss, answer questions, and decide about continued safety follow-up/data use; cannot simply email afterward as substitute for consent if not completed? For completed implants, new info not a new consent necessarily, but must provide risk info. If it affects willingness to permit continued data use, obtain prospective authorization? The rule says receive new risk information when may affect safety follow-up or subject's willingness to permit continued data use. So for completed subjects: send/hold face-to-face or phone notification, provide corrected risk information, allow questions, document. For data use, if subject declines continued data use, respect to extent feasible; do not use new data? Previously collected data handled by EC. Could offer withdrawal of future data, but previous data not automatically discarded. Need not re-consent if already completed? But if further nonurgent interventions (e.g., follow-up procedures) require new consent? For completed intervention, safety follow-up is medically necessary, but if continued data use, subject wishes matter. Need choices: accept info and continue; ask questions; decline future data/continued participation? Can't un-implant? Need not abandon. For those who completed and had event: known nerve weakness subject: provide specific information that weakness was known 3% risk, that it was omitted, event already reported, apology? Need event investigation, additional follow-up, offer re-consent if further interventions. Also if subject completed? The event subject had implant and nerve weakness resolved. They completed at least implant. Need new risk info and maybe re-consent for any subsequent nonurgent intervention. Also must ensure safety event report includes that subject not told risk? The event was reported through ordinary safety channel, but omission of risk is material noncompliance. Need supplement SAE/SUSAR? Device regulator reporting within 7 calendar days; event may be adverse device event? The omission may not change event reportability but must be included in consent noncompliance report and event assessment. Need ensure subject is notified promptly. Also perhaps if event subject is one of scheduled? No, completed. Need include.

Reporting clocks:
- Discovery: Wed 10:00. Need immediate internal escalation. Need report to central ethics board within 5 business days and device regulator within 7 calendar days after discovery. If discovery Wednesday 10:00, 5 business days? Depends Wed, Thu, Fri, Mon, Tue = Day 5 (if business days after discovery: Thu 1, Fri 2, Mon 3, Tue 4, Wed 5). 7 calendar days: Wednesday + 7 = following Wednesday? If after discovery, maybe by next Wednesday 10:00. Need state no later than those dates; do earlier: notify board today/within 24h to set emergency review tomorrow and get stop/hold approval; regulator within 1 business day/24h? The question asks clocks. Need maybe "Day 0 (Wednesday 10:00-5:00): report to EC and regulator? Not required immediately by rule, but best practice; no later than Day 5/7. Since emergency review tomorrow, provide EC preliminary report same day or by EOD Wed, emergency review Day 1 (Thu). Regulator by Day 7 (next Wednesday), preferably within 1-2 business days after facts verified. Need site local faster if any approved plan; no faster supplied, but sites must make any faster local report required; instruct site directors to review local requirements and report immediately if any.

Need central ethics board emergency approval corrected materials: Tomorrow. Need submit: description, version comparison, affected known, unknown, immediate holds, care continuity, proposed corrected consent (probably v4.3 or new v4.4 if v4.3 has issues? v4.3 contains risk; but v4.2 omitted due conversion. Need use EC-approved corrected form; maybe v4.3 if approved and current? But if v4.3 exists, why use? Could use v4.3 if still approved. However if document conversion error, v4.3 contains. But if v4.3 is later version, maybe it's approved. Need propose corrected materials: revised consent with risk, clear disclosure of omission? For re-consent, must not recreate earlier valid disclosure. Could use a corrected re-consent/informed consent form, not simply original v4.3. It should state that an earlier form omitted known risk, provide correct risk, allow questions. Need EC approve before re-consent. Emergency review tomorrow: ask EC to (1) approve immediate hold, (2) approve corrected consent/communication (v4.4 or addendum), (3) direct re-consent process, (4) data use pending investigation, (5) event handling, (6) records preservation. If EC not available? It can convene emergency tomorrow. Need if cannot approve by tomorrow? Continue holds, no re-consent. Could maybe use IRB emergency review. Need not delay urgent care. Need ensure corrected materials not backdate.

Investigation records: Need version-controlled records: consent form master files, version numbers, approval dates, site copies; signed consent PDFs with metadata (timestamps, signers, version ID); enrollment logs, subject visit logs, implant logs, EDC enrollment date, site consent log, electronic signatures, site correspondence, document conversion logs (template, conversion tool, error), training/monitoring records, data records, safety reports, subject identifiers, IRB approvals, site approvals, local SOPs. Need direct site confirmation for all 120: reconcile central database enrollment dates with site consent logs and physical/electronic signed forms. For unknown 62: request immediate site confirmation, retrieve unuploaded PDFs, verify version via unique document ID/QR/barcode/header/footer, not assume. Need if records incomplete: keep unknown as affected pending confirmation; cannot proceed as if good. Need preserve all: legal hold notice, preserve original v4.2 PDFs and metadata; no replacement/overwrite. Use forensic copies. Privilege: separate factual investigation (sponsor/EC/regulator) from legal analysis. But privilege does not excuse reporting. Need maybe create facts-based investigation team, counsel directs legal assessment but fact gathering can be done by compliance/ops; do not label privileged for required facts. Need not claim privilege to withhold factual reports; provide candor. Need prohibit CSO's PDF replacement: preserve original evidence, maintain audit trail; replacement violates rule 8 and integrity. If database error, use version-controlled amendment, retain old version, mark corrected/defective; do not silently overwrite. Need document correction as data management event. Need no backdating. Need secure access, read-only archive.

Concrete sequence over next 72h and seven days without assuming unknown scope.

Need produce ordered plan. We can structure as memo:
1. Immediate actions (Day 0, Wed 10:00-17:00)
- Declare material consent noncompliance; legal hold/preservation.
- Stop new enrollment study-wide or pending version verification.
- Suspend nonurgent research interventions for confirmed v4.2 and all unknown version subjects; especially 12 scheduled implants: hold 4 confirmed 4.2, hold 8 unknown until direct confirmation; do not proceed with v4.2. If any confirmed 4.1/4.3 among scheduled? none; but if identified, can proceed only if no hold and local permits, but likely keep hold 72h to complete verification.
- Continue medically necessary care and safety follow-up; do not cancel safety visits; but separate research procedures? For 6 routine safety visits: proceed with safety/medically necessary; defer nonurgent research-only procedures; provide correct risk info if known/unknown? For completed? Need if safety visit subject may be v4.2? If completed? They are six other subjects need routine safety visits this week; unknown versions? Could be among unknown. Need if they have completed interventions? Routine safety visits after implant? They may be completed implants? Need continue safety follow-up. But if safety visit includes nonurgent research intervention? Hmm. Could be follow-up. If subject consent version unknown and next visit includes nonurgent intervention, hold that intervention until version verified/reconsented; but safety assessment continues. For completed safety follow-up, provide risk info? If not yet completed? Need likely include in re-consent if not completed.
- Notify sites: written hold instructions, do not use v4.2, retrieve signed v4.2, upload PDFs, confirm versions, contact subjects? Need avoid premature subject notifications until EC approved? But for event subject maybe immediate. For all, need not email before? Could tell them? Need maybe no broad email until corrected materials approved; but immediate known event subject should be notified? Rule 6 says completed subject must receive new risk information when may affect safety follow-up/willingness. For event subject, because event occurred, and they are completed, should notify promptly, not wait for EC? But maybe need EC approve communication. Rule 2 says stop interventions until EC approves corrected materials; does not prohibit providing accurate information? But to ensure consistent and approved, could provide event-specific safety follow-up and disclose known risk promptly, subject to EC emergency review. Need likely: contact event subject today or within 24h, explain event and known risk, offer questions, document; do not frame as re-consent until approved form. For other completed subjects, hold communications until EC approves corrected materials? But material noncompliance and safety maybe require prompt. Rule 6 says must receive new risk info when it may affect safety follow-up or data use. Could be during safety visits or via approved notification. Since emergency EC tomorrow, can approve communication template today? Maybe EC emergency tomorrow, but can we notify completed subjects before approval? The rule requires EC approve corrected materials for re-consent under rule 2; for completed subjects, new risk information may be considered corrected materials. Best practice: get EC approval of notification/re-consent form tomorrow before contacting except event subject urgent. But event subject had actual harm; immediate individualized contact is prudent, perhaps with counsel/EC preliminary. Need balance. Could say: For event subject, same-day safety contact; if EC can approve template quickly, use; if not, provide oral explanation with documentation, then written follow-up. For other completed, use EC-approved communication after emergency review; do not send generic email afterward as substitute.

Need next 72 hours (Wed- Sat? Wed 10:00, Thu, Fri, Sat? 72 hours = Saturday 10:00). Seven days = Wednesday next week? Need sequence:
Day 0 Wed:
- 10:00 discovery; 10:15 stand up response team; issue legal hold; notify PI/site leads; hold enrollment/implants; identify subjects; preserve records; begin site confirmation.
- 11:00-14:00: retrieve/inspect signed PDFs and logs for 62 unknown; version control.
- EOD: preliminary report to central EC (if possible same day) and maybe regulator? Need report clocks. Could file initial EC report within 24h to schedule emergency. Regulator preliminary report by Thu/Fri? Need exact: within 5 business days and 7 calendar days; do not wait. Maybe "notify central ethics board by 5:00 p.m. Wed or no later than start of business Thu; submit formal preliminary report by Thu; regulator by Fri (well before Day 7)." But question asks clocks; can include target.
- Thu Day 1: emergency EC review; submit package; ask approvals; complete known scope: 38 confirmed v4.2, 20 good, 62 unknown; if possible verify all 62? Need not assume. If records incomplete, unknown remain affected. Begin re-consent after approval. Notify event subject.
- Fri Day 2: re-consent confirmed v4.2 awaiting intervention; verify unknown scheduled implants; schedule; report to regulator maybe; data management.
- Sat Day 3: complete 72h actions: all nonurgent interventions held or re-consented; all scheduled implants resolved; all 62 unknown verified or remain held; all confirmed v4.2 with completed interventions have notification plan/communications; event subject followed up; regulator report if not yet by Day 3? By Day 7. Need by Day 7: EC final? complete investigation, scope, data use determination, corrective actions, close reports.

Need maybe exact stop/report/investigation/re-consent sequence. We can make table with time, action, owner, output. Need address without assuming unknown 62. Need use "unknown = unresolved/affected until verified".

Need think about legal details.

Governing law: 1 valid informed consent before any research intervention. 2 When sponsor discovers consent form omitted material risk, must immediately stop new enrollment and nonurgent research interventions under defective form until ethics board approves corrected materials. 3 Medically necessary care and safety follow-up continue. 4 report material consent noncompliance to central EC within 5 business days and device regulator within 7 calendar days after discovery. Site faster local if required. 5 enrolled subject not completed study interventions must be re-consented on approved corrected form before next nonurgent intervention. 6 subject completed interventions must receive new risk information when may affect safety follow-up or willingness to permit continued data use. Consent cannot backdated/recreated. 7 previous data not automatically discarded; EC decides continued use after risk, wishes, scientific integrity, nature. 8 preserve every consent version, signed form, site log, electronic timestamp, communication, data record. Corrective work must not overwrite audit trail. 9 determine scope through version-controlled records and direct site confirmation. May not assume all/no affected when records incomplete. 10 privilege separation but no excuse.

Need maybe mention "material risk" and "material noncompliance". Known 3% nerve weakness. Omission from v4.2. v4.1/4.3 contain. Need maybe if v4.2 subjects signed defective form, their consent invalid for interventions after omission? Rule 1: must give valid informed consent before any research intervention. If consent form omitted material risk, consent invalid. For enrolled but not completed: must re-consent before next nonurgent intervention. For those who already had intervention under defective form: cannot fix by backdating; provide new info.

Need immediate stop: "new enrollment" under defective form. Because unknown scope, stop all new enrollment at all sites until each site's active consent form verified not v4.2 and EC approves corrective. If any site using v4.2, stop. If unknown, no new enrollment. Also suspend nonurgent interventions for all subjects whose signed consent is v4.2 or cannot be affirmatively confirmed as v4.1/4.3. This may be broader than legal minimum but required by scope unknown and to avoid invalid consent. Need note: If a subject is confirmed v4.1/4.3, no re-consent due to this issue; but still may be affected if other issues? No. But during 72h, to avoid operational confusion, may temporarily hold elective implants until verification? The question asks immediate enrollment and intervention holds. I can state legal minimum and operational hold:
- Legal hold: all new enrollment and all nonurgent research interventions for confirmed v4.2 subjects.
- Due to incomplete version records, extend hold to all subjects with unknown version until direct confirmation; this includes the 8 unknown scheduled implants. New enrollment at any site cannot proceed until the current form in use is verified and, if v4.2, corrected.
- Confirmed v4.1/4.3 subjects: no consent-based hold; however, because study-wide response and safety, non-urgent elective implants may be administratively paused until site confirms subject identity and version; but cannot require re-consent solely for this error if version good. Need be exact. If 20 confirmed good but not in 12, continue per protocol? I'd say they are not required to stop, but sponsor may exercise prudent administrative hold for 72h; legally they may proceed if no other hold. But to be safe: "No nonurgent intervention may proceed for any subject until the subject's consent version is verified as good or re-consented; for the 12 scheduled implants, that means all 12 are held now." This avoids assuming unknown.

Need care/safety: For any subject, if implanted and needs medical care, continue. If adverse event, manage clinically. Do not withhold care to preserve pause. For pending implants, if medically necessary? Facts: no urgent medical intervention depends on research schedule. So can delay. If a subject develops urgent medical condition, treat outside/within study per clinical judgment, but not as research intervention? Need note.

Reporting clocks: Need exact: Discovery Wed 10:00. EC within 5 business days: if discovery at 10:00, deadline end of business? Business days: Thursday (1), Friday (2), Monday (3), Tuesday (4), Wednesday (5). So no later than Wednesday of next week at 10:00? If measured from time, 5 business days after 10:00 = next Wednesday 10:00 (assuming no holidays). Regulator within 7 calendar days: next Wednesday at 10:00 (if no holidays). Actually 7 calendar days after Wednesday 10:00 = following Wednesday 10:00. Need state "absent holidays, no later than 10:00 a.m. the following Wednesday for both? EC 5 business days = if Day 1 Thursday, Day 5 Tuesday? Let's count carefully. If discovery Wednesday. "within five business days after discovery" Could mean if discovery Wed, then 5 business days later: Thu=1, Fri=2, Mon=3, Tue=4, Wed=5. So Wed next week. If counting calendar business days excluding discovery: yes. If same day? Maybe Wed not full? But no later than next Wednesday. Regulator 7 calendar days: Thu=1, Fri=2, Sat=3, Sun=4, Mon=5, Tue=6, Wed=7. Also next Wednesday. Good. If holidays adjust. Need note local faster site reports; no faster supplied but site must if approved plan. Need not delay because EC emergency tomorrow. Need initial notification to EC today/tomorrow; formal within deadlines. Regulator: initial notification as soon as facts allow (by Thu/Fri), formal within 7 days. Need include site local reports. Need maybe report event separately? The nerve weakness is adverse event; if device-related? Implant nerve stimulation lead; temporary nerve weakness known risk. Need report through ordinary safety channel already. But consent omission report should include event and that subject not told. Device regulator may require adverse event reports on different clock (e.g., 30 days) but here rule 4 only consent noncompliance within 7 days. We can say include in consent noncompliance report and ensure device adverse event report requirements met; supplement if omission relevant.

Emergency approval: Need submit to EC:
- Discovery, defective version, material risk, known affected 38, confirmed good 20, unknown 62.
- Holds and care continuity.
- Proposed corrected consent/reconsent form (v4.4? maybe v4.3 plus addendum). It should include:
  - identity of study, device, procedure.
  - clear statement that prior version 4.2 omitted known 3% temporary nerve weakness risk.
  - corrected risk description and what to do if symptoms occur.
  - no backdating; date of new consent.
  - subject's rights, contact info.
  - For completed subjects: informational notification/optional re-consent/data use authorization.
- Ask EC to approve immediate hold, re-consent plan, communication, data use interim (retain but freeze new use? maybe not; EC decides), event communication.
- If EC requires changes, hold continues. If EC approves by end of Day 1, re-consent can begin Day 1/2.

Re-consent awaiting intervention:
- After EC approval, for each subject not completed: confirm they are enrolled, not completed, and consent version defective/unknown. Use approved corrected form. Document as new consent with current date; not as original. Before next nonurgent intervention (implant). For 4 confirmed v4.2 scheduled: re-consent before implant. For 8 unknown scheduled: verify version. If v4.1/4.3 and form adequate, no re-consent needed for this error; can proceed if no hold and EC/site permits. If v4.2 or unresolved, re-consent before implant. If records incomplete and cannot verify by 72h, hold implant beyond 72h until verified/reconsented; do not assume. For any v4.2 subject with future nonurgent procedures (safety visits if include research procedures), re-consent before those. For safety follow-up that is medically necessary, may proceed without re-consent? Need distinguish: safety follow-up is care, but if it is research intervention? Rule 5 says next nonurgent intervention. Rule 3 says safety follow-up continue. If safety visit includes data collection maybe research. But can continue necessary safety. If subject declines re-consent, cannot perform nonurgent research procedures; still provide necessary care.

Notice and consent choices completed intervention:
- For all completed subjects (including implanted) whose consent was v4.2 or unknown pending: provide new risk info. If version confirmed good, not required. But for unknown, provide until verified? Could be overinclusive but safer. Need maybe for 38 confirmed v4.2: all who completed. How many? 38 signed v4.2; some may not completed, some completed. Need count not given. Need plan: identify completion status. For completed: offer face-to-face/phone (not just email) with informed notification, answer questions, document. Provide corrected risk info. Ask whether they consent to continued safety follow-up and continued use of data. If they object to data use, honor for future data as far as feasible; previous data subject to EC. They may withdraw from future nonurgent research; cannot unimplant unless clinically indicated? Need not abandon. They can decline further data collection; but necessary safety follow-up may continue? If they refuse, sponsor cannot compel; but must provide medically necessary care. Need maybe "continued data use" not "consent" if already consented? The rule says must receive new risk information when may affect safety follow-up or willingness to permit continued data use. So provide info and obtain voluntary choice about continued participation/data. For subjects who completed and had event: individualized discussion, disclose event known risk, event report, follow-up, offer care.
- Email alone after interventions is insufficient for invalid consent and not a substitute for re-consent if nonurgent interventions remain; for completed, email may be part of communication if supplemented by opportunity for questions and documented response, but better personal contact. Site's proposal to continue implants and email afterward is rejected.

Data treatment:
- Preserve all data. Do not delete/replace. EC decides continued use after investigation, considering risk, subject wishes, scientific integrity, noncompliance. Interim: no new data use from affected subjects pending EC? Or continue collection necessary safety? Need maybe freeze secondary analysis/data sharing for v4.2/unknown until EC determination. But safety follow-up data may need continue. Rule 7 says previously collected data not automatically discarded; EC decides continued use. So state: retain; do not delete; label; segregate; do not use for publications/analysis until EC determination; continue necessary safety data. If subjects withdraw future data, respect. EC may allow use with restrictions, anonymization, etc. Need maybe for confirmed good subjects no impact. For unknown, pending classification.

Records needed:
- List as above. Need "specific records" maybe bullet:
  1. Approved protocol and IRB/EC consent approvals including versions 4.1, 4.2, 4.3 and any addenda.
  2. Master consent forms, file naming, version control metadata, document conversion logs, templates, email instructions.
  3. Site consent logs and subject source documents: signed PDFs/scan with embedded document ID/version, date, site, investigator signature.
  4. Unuploaded signed PDFs and site file server/email folders.
  5. Central database enrollment dates, site, subject IDs, status, intervention completion, visit logs, EDC audit trail.
  6. Implant logs, surgical records, safety visit logs.
  7. Site communication logs, monitor visits, training, QA.
  8. Safety reports for nerve weakness event.
  9. Preservation/forensic copies, access logs, any attempted modifications (e.g., CSO request).
  10. Re-consent forms, notifications, data use decisions.
Need direct site confirmation: written attestation by each site PI/sub-I of version for each subject, signed, dated, with supporting source; if unable, classify unknown.

Known nerve weakness event:
- Investigate: temporal relationship to v4.2, implant, subject status, consent version, whether risk known, reporting. Supplement safety report to include omission and notification? The event was reported ordinary safety channel, but subject not told before implantation that known risk. Need determine if event meets device adverse event/SUSAR; if yes, ensure required reports. Need provide subject prompt notification that risk was known and omitted, offer medical follow-up, document. If subject is still enrolled and not completed, re-consent before next nonurgent intervention. If completed, notification and data choices. Include in EC/regulator reports as example of impact. Do not minimize. Assess whether other similar events underreported; review all safety reports. Need if subject not told, potential breach? Not specified. Need handle compassionately, no blame, preserve.

Preservation/privilege/PDF replacement:
- Reject CSO's replacement. Issue legal hold; original v4.2 remains; any correction must be version-controlled, with audit trail, e.g., add corrected record, mark 4.2 defective, retain 4.3; no overwrite. If database has wrong PDF, fix by adding correct version or annotating; not deleting. Preserve metadata. Privilege: create separate privilege log; legal analysis privileged; facts not privileged. Required reporting must include factual accuracy; cannot withhold. If counsel leads, ensure fact-gathering is not solely for legal advice? But can still be privileged; however cannot use privilege to avoid reports. Need maybe "do not label operational reports privileged; provide regulator/EC the factual record." Need protect attorney work product but not excuse. Need instruct staff: no deletion, alteration, backdating, "clean file". Violations may be sanctionable. Need maybe if CSO instructed replacement, document and reverse? If replacement already happened? Facts says wants staff to replace; assume not yet. If any replacement occurred, preserve and report as alteration? Need say if any replacement already occurred, preserve evidence of it, report to EC/regulator as part of noncompliance and corrective actions.

Concrete sequence:
Need ordered plan over next 72h and 7 days. Could use timeline table.

Let's define Day 0 Wed 10:00 discovery. Day 1 Thu. Day 2 Fri. Day 3 Sat (72h). Day 4 Sun. Day 5 Mon. Day 6 Tue. Day 7 Wed (deadline). Need include weekend? Need operations can proceed. Need no assume unknown scope. Need maybe if EC emergency tomorrow = Thu. Need report to EC by Wed EOD/Thu early. Need regulator by Wed next week. Need 72h: by Sat 10:00: all holds in place, all 12 scheduled implants either verified good and scheduled or re-consented and scheduled or held if unresolved; all known v4.2 subjects identified and categorized; all unuploaded PDFs retrieved or site attestations; event subject contacted; preliminary reports submitted. But unknown 62 may not all resolved by 72h; those unresolved remain held and "affected pending confirmation". Need 7 days: complete site confirmation for all 120, complete re-consent for all defective/unknown awaiting nonurgent interventions, complete notifications to completed subjects, submit final EC/regulator reports, EC data-use decision, remediate document control, close.

Need maybe exact sequence:
Day 0 (Wed):
1. 10:00-10:15: declare incident, stand up team (legal, regulatory, QA, clinical ops, data mgmt, site leads, comms). No subject contact except urgent safety/event? 
2. 10:15-10:30: issue immediate holds:
   - Stop new enrollment at all sites until current consent version verified not v4.2 and corrected form in place.
   - Suspend nonurgent research interventions for all confirmed v4.2 and all subjects with unverified consent version. This includes 12 scheduled implants: 4 confirmed v4.2, 8 unknown.
   - Continue medically necessary care and safety follow-up; separate from research interventions.
3. 10:30-11:00: legal hold/preservation. Notify all sites, central team, CSO; prohibit alteration/deletion/backdating; CSO's replacement prohibited. Archive v4.2, signed forms, logs, metadata; forensic copy.
4. 11:00-14:00: begin scope investigation:
   - Reconcile 120: 38 confirmed v4.2; 20 confirmed v4.1/4.3; 62 unknown.
   - Request from each site: consent logs, signed PDFs, EDC, implant/visit logs, unuploaded PDFs, version ID.
   - Direct confirmation for 62; if incomplete, remain unknown/affected.
5. 14:00-17:00: prepare EC and regulator reports; draft corrected consent/notification; draft re-consent script.
6. EOD or as soon as possible: notify central EC of material consent noncompliance and request emergency review Thursday; submit initial report. Also notify site PIs to stop use of v4.2, preserve, confirm.
7. If site local faster requirements, site directors report immediately.
8. Event subject: identify, contact by 10:00 Thu? Maybe Day 0/1: clinical safety contact, explain known risk and omission, offer follow-up, document. If EC emergency Thu, can use approved template if available; if not, individualized oral. Need decide timing.

Day 1 (Thu) 24h:
- Emergency EC review. Submit package. Ask approvals.
- Continue site confirmation; retrieve unuploaded PDFs; verify 8 unknown implants.
- If EC approves corrected re-consent form and notification: begin re-consent for 4 confirmed v4.2 awaiting implant; schedule after re-consent. For any unknown verified v4.2, same. For verified good, can proceed if no other hold.
- Contact completed v4.2 subjects? If approved, begin notifications; priority event subject and any with pending safety visits.
- Ensure no implants under defective form.
- Regulator: maybe send initial notification (if not already) or update. Need formal within 7 days.
- Document decisions.

Day 2 (Fri) 48h:
- Complete re-consent for all confirmed v4.2 awaiting nonurgent interventions (including 4 scheduled and any others). 
- Complete version verification for 62 unknown or classify unresolved.
- Notify completed v4.2 subjects (or unresolved if chosen conservative) using approved communication; record choices.
- Submit regulator report (or preliminary) by now; ensure within 7 days.
- Data freeze/labeling.

Day 3 (Sat) 72h:
- 72h checkpoint: report to sponsor: all new enrollment stopped; all nonurgent interventions for defective/unverified subjects held; all scheduled implants resolved (re-consented/verified/held); event subject contacted; all reports submitted; no audit trail altered; unknown 62 status listed. If unresolved, remain held.
- Continue necessary care.

Day 4-6 (Sun-Tue):
- Finish site confirmations for remaining unknown; retrieve missing PDFs; direct site confirmations.
- Complete re-consent for all affected awaiting intervention.
- Complete notices for completed affected subjects; handle data use decisions.
- EC follow-up: provide final scope, event details, data use request; obtain data-use decision.
- Regulator final report by Day 7.
- Remediation: retrain, document conversion QA, version control, monitoring, site audits.

Day 7 (Wed) 7 days:
- Final reports to EC and regulator no later than deadlines (10:00 if measured). If not complete, still submit with pending items and expected completion; but must report within. Need not wait for full scope? Rule says report material noncompliance within. Can submit initial with ongoing investigation; final supplement. Need by Day 7 include all known facts, scope known/unknown, actions. 
- EC determines data use. 
- Resume enrollment/interventions only where approved: new enrollment using corrected form; nonurgent interventions after re-consent or verified good. 
- Document closure.

Need maybe "without assuming unknown 62-subject scope" means for each unknown, treat as not confirmed good, continue hold until verified. Need say do not extrapolate from Site A's 38 or 20 good; do not use enrollment date to infer version because version could vary. Need use direct confirmation.

Potential nuance: Consent-form version 4.3 contains risk. If v4.3 is approved and current, why not use it? But for re-consent, must use approved corrected form. It may be v4.3 plus a notice of omission. The corrected materials must be approved by EC. If v4.3 already approved but subjects signed v4.2, using v4.3 as re-consent might be okay if it contains all required info and EC approves. But it may not acknowledge omission; to avoid appearing to recreate earlier valid disclosure, use a new re-consent/addendum with current date. Need emphasize no backdating. Could call "Revised Consent Form v4.4 (or approved v4.3 plus addendum)". The question says emergency approval of corrected materials. Need likely "v4.3" is corrected because contains risk. But if v4.3 exists, maybe sponsor wants replace PDFs with v4.3. But replacement of signed forms is wrong. For re-consent, can use approved v4.3? If v4.3 is approved and contains risk, but it may not say prior omission. Need use "approved corrected form (currently v4.3 if EC confirms it is suitable; preferably a new re-consent version/addendum that identifies the omission and is dated now)". This handles.

Need maybe mention "valid informed consent before any research intervention" means if a subject signed defective form, any intervention performed under it may be noncompliant. For those already performed, can't undo, but need remediate. For future, re-consent.

Need maybe address "site investigators propose continuing scheduled implants while sending subjects an explanatory email afterward." Reject. Reasons: invalid consent, must stop nonurgent interventions under defective form, email afterward not valid consent, backdating/recreation, unknown scope. Need state: do not proceed with 4 confirmed v4.2 or 8 unknown until re-consent/verification and EC approval; email may be part of approved communication but not substitute.

Need "CSO wants staff to replace version 4.2 PDFs in database with version 4.3 'so file is clean'." Reject. Reasons: violates preservation, audit trail, integrity, may be falsification; must preserve original, version-controlled correction. If database record missing v4.2, use new corrected record but retain original. Need maybe "clean file" is not acceptable. Need instruct CSO and staff; if they attempt, stop and report. Need maybe "if replacement already done, preserve forensic evidence and disclose alteration to EC/regulator".

Need "Privileged legal analysis may be separated from operational fact gathering, but privilege does not excuse required reporting or factual candor." Need operationalize: create two workstreams: factual investigation (compliance/data) and legal assessment (counsel). Share facts. Reports to EC/regulator contain facts, not legal conclusions. Privilege log for legal analyses. Do not withhold facts because privileged. Use common interest? Need maybe not necessary.

Need "concrete sequence over next 72 hours and seven days, without assuming unknown 62-subject scope." Need maybe produce a table with exact times? Could include "by 10:00" etc. The user asks "Give the exact stop, report, investigation, and re-consent sequence". We can be very detailed. Need maybe include owners. Let's draft as "Outside counsel memorandum" with "Required actions". Use headings matching bullets. Then timeline.

Need maybe mention "business days" with holidays. Use "assuming no local holidays; adjust forward if any". Need "five business days" and "seven calendar days". Need if discovery at 10:00 Wed, deadlines: central EC: next Wednesday 10:00 (5th business day) or end of business? To be safe: "no later than 10:00 a.m. on the fifth business day (the following Wednesday, absent holidays), and in practice by close of business Tuesday". Regulator: "no later than 10:00 a.m. on the seventh calendar day (following Wednesday); target initial by Thursday/Friday". But if business day deadline could be end of business Day 5 (Wednesday). Let's state "treat the deadline as the end of the fifth business day; do not rely on the last hour; file by 5:00 p.m. Tuesday if possible". But exact? The question likely expects deadlines. Need not overcomplicate. Maybe "Day 5 = next Wednesday; Day 7 = next Wednesday". But EC 5 business days = Tuesday if counting Wed as Day 0? Let's examine: If discovery Wed, "within five business days" often means by end of business the fifth business day after the day of discovery: Thu (1), Fri (2), Mon (3), Tue (4), Wed (5). Yes. If same day counted? Wed (1), Thu (2), Fri (3), Mon (4), Tue (5). Which is correct? "after discovery" suggests exclude discovery day. But to be safe, target earlier: "no later than close of business Tuesday, and no later than Wednesday 10:00 at the outside". For regulator 7 calendar days: Thu 1, Fri 2, Sat 3, Sun 4, Mon 5, Tue 6, Wed 7. So same next Wednesday. Need maybe "If the discovery date is counted as Day 0, the fifth business day is Wednesday; if an agency counts discovery day as Day 1, the fifth business day is Tuesday. In either case, file by Tuesday close and definitely by Wednesday 10:00." But question maybe not need this nuance. Could state "Assuming discovery day is Day 0, the outside dates are next Wednesday; to be conservative, submit by Tuesday." Good.

Need maybe "report to central ethics board within five business days" could mean the board must be notified, not formal report. Since can convene emergency tomorrow, do immediate notification. "Report" clocks: need "clock starts Wednesday 10:00. Do not wait for full scope. Preliminary report immediately; supplemental as scope resolved." Good.

Need maybe "site must make any faster local report required by its approved plan; no faster local period supplied here." Need instruct sites to check local and if any, report immediately.

Need "Medically necessary care and safety follow-up must continue." Need maybe for the 6 routine safety visits: if they are just safety follow-up, proceed, but ensure if subject is confirmed v4.2 and not completed? "Routine safety visits this week" likely completed subjects? They need safety visits. Need continue. But if safety visit is a research procedure? It may be required for safety. Could proceed. If it includes nonurgent research intervention (e.g., elective device check not medically necessary?), maybe hold. Need say: continue clinically indicated/safety visits; do not use visit to perform nonurgent research procedures until re-consent if affected. If subject declines re-consent, still provide necessary safety care but no research procedures.

Need "No urgent medical intervention depends on research schedule." Thus can hold implants. But if subject develops urgent condition, treat. Need maybe "clinical team may perform medically necessary intervention outside research consent if needed; document."

Need "valid informed consent before any research intervention." For 12 scheduled implants: implant is research intervention. If consent defective, cannot proceed. For unknown, need verify. If good, consent valid. But if scope unknown, hold. Need maybe if some of 8 unknown turn out to be v4.1/4.3, they can proceed after verification and if no other hold; no re-consent. But to avoid delay, verification can be done quickly via signed PDF version ID. Need if no signed PDF yet? Then cannot verify, hold.

Need "re-consent of subjects awaiting intervention." Need maybe "re-consent must be individual, not group email; investigator explains, allows questions, subject signs dated form; if declines, no nonurgent intervention." Need document.

Need "notice and consent choices for subjects who completed intervention." Need maybe "not a new consent for past intervention; it is ongoing informed communication and authorization for future data/safety follow-up." Need maybe "if subject asks to have data erased, explain that previous data may be retained per EC, but they can refuse future data collection; do not promise deletion before EC." Good.

Need "treatment of previously collected data." Need maybe "retain, segregate, label by consent version; no deletion or replacement; no use in analysis/publication until EC decision; if subject withdraws future consent, exclude future data; safety follow-up may continue as care." Good.

Need "known nerve-weakness event." Need maybe "event is a concrete example of omitted risk. Supplement safety report; investigate underreporting; notify subject; provide follow-up; if event meets criteria, report to regulator; include in EC/regulator consent noncompliance report; consider whether subject's consent to continued data use affected." Good.

Need maybe "exact stop" includes "stop using v4.2 immediately; remove from active files; mark as defective; do not schedule any new enrollment with it." Need "if version 4.2 is still in use at any site, stop that site's enrollment."

Need maybe "investigation" includes root cause: document-conversion error. Need verify whether v4.2 was generated from approved template, who approved, why conversion, whether other versions/sites affected, whether other consents used. Need check version 4.2 usage period. Need determine enrollment dates where v4.2 in use. Need not assume based on dates but use records. Need include QA root cause and CAPA.

Need maybe "seven days" includes final CAPA: retrain, update document management system controls, verify all sites, monitor. Need maybe not too much but include.

Let's consider possible hidden expectations: This is a question from maybe an exam? It asks "The Missing Risk in the Consent Form" and "Governing law" 10 rules. Need likely answer as sequence. Need be precise: "stop new enrollment and nonurgent interventions under defective form" not "all interventions". But "scope remains unknown" so need hold unknown. Need maybe "do not stop urgent/medical care". Need "report to central ethics board within 5 business days and regulator within 7 calendar days after discovery". Need "site local faster". Need "re-consent before next nonurgent intervention". Need "completed subjects new risk info when may affect safety follow-up or data use; no backdating". Need "data not discarded; EC decides". Need "preserve audit trail". Need "scope through version-controlled records and direct site confirmation; not assume". Need "privilege separated". Need "sequence without assuming unknown 62 scope." So answer should map each rule.

Need maybe include "known material risk omitted from one consent-form version". Could mention "version 4.2 is defective for all uses; version 4.1 and 4.3 are not defective solely because of this omission." Good.

Need maybe "five-site study" and "site A confirms 38". Need maybe for sites: Site A 38; other sites 20 good; 62 unknown across all sites. Need direct confirmation from each of five sites, not just Site A. Need maybe "Site A's 38 may include completed and not completed; need categorize."

Let's think through subject categories:
Total 120.
- 38 Site A v4.2: defective. Need subcategorize: completed interventions vs not completed. Some among 12 scheduled? Four confirmed v4.2 scheduled. Some among 6 safety visits? maybe. One event subject is v4.2 completed? Yes experienced weakness after implantation, resolved; likely completed implant. Need maybe 38 includes event subject.
- 20 other sites confirmed v4.1 or 4.3: not affected by omission (assuming no other issues).
- 62 unknown: could include some v4.2. Need include 8 scheduled unknown. Need maybe 6 safety visits maybe unknown. Need hold.
- 12 scheduled implants next 72h: 4 confirmed v4.2; 8 unknown. Need hold all. If 8 verified good, can proceed; if not, hold.
- 6 other routine safety visits this week: likely not scheduled implants; continue safety follow-up. If any are affected and have nonurgent research procedures, re-consent before those; if safety only, continue.

Need maybe "subject who has not completed study interventions" includes those not implanted? Implantation is likely main intervention. Also maybe subjects enrolled but not completed could have future visits. Need re-consent before next nonurgent intervention. For those not yet implanted, before implant. For those partially completed, before next nonurgent.

Need "subject who completed interventions" includes implanted subjects who completed all? They may still have safety follow-up/data use. Need new risk info. For those completed but still under safety follow-up, if risk may affect safety follow-up (e.g., nerve weakness symptoms) it certainly may. So provide info to all completed v4.2 subjects. For unknown, until verified? Could provide conservative notice to all unknown completed? It may be overbroad but safe. But if they signed good form, not required; but if unknown and completed, to avoid harm, maybe provide until confirmed. However if we provide to all unknown, that's okay? It may be cumbersome but prudent. The rule says when it may affect; if unknown, cannot determine. I'd say "Treat unverified completed subjects as affected pending confirmation; provide new risk information or, if verified good, confirm no further action." But maybe if unknown and completed, providing info may be unnecessary but not harmful. Need avoid assuming scope, but can take protective steps. However if we provide info to subjects with good consent, it might confuse; but it's safe. Need perhaps "at minimum, all confirmed v4.2 completed; for unknown, determine status first; if verification not complete before their safety visit, use approved communication at that visit." Good.

Need "data use choices" for completed subjects: If they do not wish continued data use, sponsor must respect to extent feasible. But if data already collected, EC decides. Need maybe not promise deletion. Need "if subject withdraws consent to future data, stop future data collection except as required for safety/clinical care? Research data? If safety follow-up is clinically required, can continue care but not necessarily research data? Need nuance: If subject withdraws from study, sponsor cannot continue research interventions; but can provide care. Data collected before withdrawal may be retained per protocol/EC. Future safety data maybe necessary? If subject refuses research data, cannot collect as research; but clinically necessary care can be provided outside study. Need state.

Need "reporting to regulator" maybe device regulator not FDA specifics. Need "within 7 calendar days after discovery". Need "material consent noncompliance" report. Need include "known event and that risk was known". Need "site local faster". Need "no faster local period supplied, but sites must comply if any." Good.

Need maybe "emergency approval of corrected materials" if EC not available? It can convene tomorrow. Need "if EC does not approve by Thursday, hold remains; do not use v4.3 without approval? Actually v4.3 already approved? If v4.3 is approved, maybe can use? But rule says until ethics board approves corrected materials. If v4.3 is an approved version containing risk, perhaps it is corrected material already. But to re-consent v4.2 subjects, do we need EC approval to use v4.3? If v4.3 is already approved, maybe yes, no need? But the sponsor discovered v4.2 omitted; v4.3 contains. But the assignment asks emergency approval of corrected materials. So likely need EC approve a corrected re-consent form/notification, not just v4.3. Could say "If version 4.3 is already IRB-approved and contains all required disclosures, the emergency review should confirm it is the appropriate form for remediation or approve a new version/addendum. Until that confirmation/approval, do not use it as a substitute for the defective signed form or as a re-consent." This is safe.

Need maybe "corrected materials" include "plain-language explanation of the error". Need maybe not include blame. Need "do not say 'clean file'".

Need maybe "exact sequence" could be a list with "Stop -> Report -> Investigate -> Re-consent". Maybe start with "Non-negotiable immediate holds". Then "Reporting clocks". Then "72-hour/7-day sequence".

Let's craft final answer in professional style.

Potential structure:
1. Bottom line / immediate orders.
2. Scope treatment and classification.
3. Detailed ordered plan by time.
4. Address each required bullet maybe in sections.
But user asks provide ordered plan addressing bullets. We can integrate.

Maybe final:

**Memorandum**
To: NovaCrest Response Team
From: Outside Counsel
Re: Version 4.2 omission; immediate actions
Assumptions: discovery Wed 10:00; no holidays.

**A. Immediate legal holds and operational stops (Wednesday 10:00-17:00)**
1. Declare incident; stand up team.
2. Stop new enrollment study-wide until: (a) current consent form verified not v4.2; (b) EC-approved corrected form in use; (c) scope resolved? Actually new enrollment under defective form. Since unknown, stop until verified. 
3. Stop all nonurgent research interventions for:
   - confirmed v4.2 subjects (38) until EC approval and re-consent/notice;
   - any subject whose consent version cannot be affirmatively confirmed as v4.1 or v4.3 (62 unknown) until direct confirmation;
   - specifically all 12 scheduled implants: 4 confirmed v4.2, 8 unknown. Do not proceed based on database enrollment dates.
4. Continue medically necessary care and safety follow-up; no abandonment. Separate research-only nonurgent procedures.
5. Reject site proposal and CSO replacement; issue preservation order.

**B. Preservation and privilege**
- Legal hold; preserve original v4.2 PDFs, metadata, logs, etc.
- No overwrite/backdate/delete. Version-controlled correction only.
- If replacement already occurred, preserve and disclose.
- Privilege: separate fact vs legal; reports contain facts.

**C. Reporting clocks**
- Clock starts Wed 10:00.
- Central EC: within 5 business days; outside no later than next Wednesday 10:00 (or end of 5th business day), target by Thu preliminary and formal by Tue/Wed. Emergency review Thu.
- Regulator: within 7 calendar days; outside next Wednesday 10:00, target initial Thu/Fri, formal by Day 5/6. 
- Site local: if faster, immediate.
- Reports are preliminary if scope unknown; supplement. Include event.

**D. Investigation and scope (Day 0-7)**
- Need records list.
- Direct site confirmation; unknown remain unresolved.
- Categorize each subject: version, completion status, scheduled interventions, safety visit, event.
- Root cause document conversion.
- Safety event review.

**E. Emergency EC approval (Day 1)**
- Submit package; request approvals: hold, corrected form (v4.4/addendum), re-consent, completed-subject notice, data use interim, event communication.
- If not approved, holds continue.

**F. Re-consent awaiting intervention**
- After EC approval: for confirmed v4.2 and unknown-verified v4.2 not completed, individual re-consent on approved corrected form before next nonurgent intervention. No backdating. If verified good, no re-consent for this error. If unresolved, hold. For 4 confirmed: re-consent before implant. For 8 unknown: verify; if defective, re-consent; if good, proceed; if unresolved, hold beyond 72h.
- If decline, no nonurgent research intervention; continue care.

**G. Completed intervention subjects**
- Provide new risk info; individualized; not email alone unless supplemented; choices: continue, questions, decline future data/interventions. Event subject priority. Document.
- No backdating.

**H. Data**
- Retain, segregate, label; no deletion/replacement; freeze nonessential use until EC; EC decision; honor future withdrawals; safety data continue.

**I. Nerve weakness event**
- Supplement safety report; ensure device AE reporting; notify subject; follow-up; include in reports; investigate underreporting.

**J. Concrete 72h/7day timeline**
Table with Day 0, Day 1, Day 2, Day 3, Day 4-6, Day 7.

Need make table detailed.

Let's draft timeline:

**Wednesday (Day 0) 10:00-18:00**
- 10:00 discovery; activate incident command.
- 10:15 issue hold notices to all 5 sites: stop new enrollment; stop nonurgent interventions for v4.2/unverified; continue care. Suspend 12 implants.
- 10:30 legal hold; preserve; prohibit CSO replacement; archive v4.2.
- 11:00 scope triage: 38 defective, 20 verified good, 62 unknown; create subject-level tracker.
- 11:30 request records from sites (list).
- 14:00 contact event subject or schedule for same evening/next morning; clinical safety follow-up; document.
- 16:00 prepare EC report and corrected forms; notify central EC of emergency review tomorrow; request immediate review.
- 17:00 site directors confirm local reporting requirements; make any faster local reports.
- EOD: no v4.2 use; no implants under unverified/defective; preservation active.

**Thursday (Day 1)**
- AM: EC emergency review; submit facts, holds, proposed corrected consent/notification, re-consent plan, data use request.
- Continue records retrieval; verify 8 unknown implants and as many of 62 as possible.
- Event subject: complete individualized notification and follow-up plan (if not done).
- If EC approves: begin re-consent for 4 confirmed v4.2 awaiting implant; schedule only after signed approved form.
- If EC changes form, update.
- Begin regulator preliminary report if not already; at least log clock.
- No new enrollment.

**Friday (Day 2)**
- Complete re-consent for all confirmed v4.2 subjects who have nonurgent interventions scheduled (including any beyond 12) or verify good for those unknown.
- Resolve version status for 8 scheduled; proceed only if good or re-consented. If unresolved, keep hold.
- Submit formal regulator report or at least ensure will be by Day 7; target today.
- Start completed-subject notifications for confirmed v4.2; priority safety visits this week.
- Data freeze/label.

**Saturday (Day 3, 72h checkpoint)**
- By 10:00: produce status report: holds, enrollment stop, 12 implants status, 38 categorized, 20 good, 62 unknown with verification status, event subject contact, reports, preservation.
- Any unresolved unknown remain held; do not proceed.
- Continue necessary care/safety visits.

**Sunday-Tuesday (Days 4-6)**
- Complete direct site confirmation for all 62; retrieve missing PDFs; written site attestations.
- Re-consent all remaining affected awaiting intervention.
- Complete notifications/data-use choices for all completed affected subjects.
- Follow up event subject; supplement safety/regulator reports if new facts.
- Request/finalize EC data-use decision.
- CAPA: retrain, document control, version check, monitoring.

**Wednesday (Day 7)**
- By 10:00/EOD: final/supplemental reports to EC and regulator within deadlines. Include final known scope, unresolved subjects and remediation, event, data use, CAPA.
- EC decides data use.
- Resume enrollment only with EC-approved corrected form at sites verified; resume nonurgent interventions only after re-consent or verified good. 
- Close initial incident; monitor.

Need maybe if weekend not business? Operations can still. Reporting deadlines unaffected by weekend. Need maybe "if holidays, adjust".

Need perhaps "exact stop" might require "immediately stop new enrollment and nonurgent interventions under v4.2" not "study-wide". But I can phrase: "The legally required stop is for the defective form; operationally, because scope is unknown, extend to all unverified subjects and all new enrollment until version verified." This covers.

Need maybe "nonurgent research interventions under defective form" includes "implantation" for not-yet-completed. Need maybe "safety visits are not nonurgent research interventions if medically necessary/safety follow-up; continue." Need be explicit.

Need maybe "enrollment" includes "screening/consent"? Stop new enrollment, not necessarily screening? If no valid consent form, cannot consent/enroll. Could continue screening? If screening is research intervention? Rule 1 says consent before any research intervention. New enrollment requires consent. So stop new enrollment. Could continue screening nonconsented? Probably no. Need state stop new enrollment and any pre-consent procedures that are research interventions. But not necessary.

Need maybe "subject must give valid informed consent before any research intervention" means if a subject signed v4.2 and already had implant, consent was invalid; need remediate. But cannot stop medical care. Good.

Need maybe "material risk identified in approved protocol" 3% nerve weakness. Need maybe "temporary nerve weakness" is material. Good.

Need maybe "consent cannot be backdated or recreated as though valid disclosure occurred earlier." Need state no re-signing original form with old date; no using v4.3 as if signed earlier; no replacing signed PDFs. Good.

Need maybe "privilege" could be addressed with "Do not place legal hold communications in subject files? But preserve. Privilege log." Good.

Need maybe "site investigators propose continuing scheduled implants while sending explanatory email afterward." Need explicitly reject and say why: violates rules 2,5,6,8? Email afterward is not valid prior consent; cannot proceed under defective form; explanatory email not cure; may be backdating. Good.

Need maybe "CSO wants staff to replace v4.2 PDFs with v4.3." Need explicitly: "No. That would destroy evidence and violate rule 8. Correct by adding new record/version, retaining original, documenting correction. If any replacement occurred, report as alteration." Good.

Need maybe "known nerve weakness event" could be used to show materiality. Need maybe "subject was not told before implantation that this was a known risk" - need "immediate individualized notification; not just ordinary safety report; include in consent noncompliance report; offer medical follow-up; if any residual symptoms, evaluate." Good.

Need maybe "data record" includes "electronic timestamp". Need mention "preserve metadata and do not alter PDF properties". Good.

Need maybe "version-controlled records and direct site confirmation" include "site attestation". Good.

Need maybe "without assuming unknown 62-subject scope" - say "Each of the 62 is individually unknown. Do not use the fact that 20 at other sites were good or Site A had 38 defective to classify them. Do not use enrollment date alone. Until verified, they are 'unresolved' and subject to hold if intervention is nonurgent; if completed, treat as needing notification pending verification." Good.

Potential risk: If we hold all unknown subjects, including those who signed good forms, could over-apply legal requirement. But due to incomplete records and valid consent requirement, it's prudent. Need phrase "operationally required by Rule 9; if direct confirmation shows good version, the hold for that subject lifts." Good.

Need maybe "new enrollment" at sites with unknown current form: stop until current form verified. If a site is using v4.2, stop. If unknown, no new enrollment. Good.

Need maybe "nonurgent research interventions" for completed subjects? Safety follow-up continue. If a completed subject has an elective research procedure (e.g., additional data collection) that is nonurgent, hold until re-consent/notification? Rule 5 only not completed. Rule 6 completed need info when may affect safety/data. If they continue data use, perhaps no new consent? But if nonurgent research intervention after completion? Maybe re-consent? The rule says subject completed interventions must receive new risk info when may affect safety follow-up or willingness to permit continued data use. It doesn't require re-consent for completed before next nonurgent intervention? But if they have future nonurgent intervention, maybe they are not fully completed. Need categorize: if not completed all study interventions, re-consent. If completed all research interventions but ongoing safety follow-up/data use, provide info and choices. Good.

Need maybe "re-consent before next nonurgent intervention" could apply to v4.2 subjects who have completed implant but still have future nonurgent study procedures (e.g., 6-month visit with procedure). Then re-consent before those. If only passive follow-up/data, notification and data use choice. Good.

Need maybe "ethics board decides continued use" - need "request interim data use decision by Day 7 or as soon as possible". Good.

Need maybe "safety event reported through ordinary safety channel" - need "supplement to state consent omission and lack of pre-implant disclosure; do not wait for final investigation; if additional facts, update." Good.

Need maybe "device regulator" report within 7 calendar days after discovery of consent noncompliance, not after event? Event discovered earlier? The event occurred and reported ordinary channel before discovery? The omission discovered Wed. The event maybe known earlier. But consent noncompliance discovery Wed. Need report consent noncompliance by Wed next week. Event reports maybe separate. Need include.

Need maybe "central ethics board" vs "IRB". Use "central ethics board (CEB)". Good.

Let's think if any hidden trap: "consent-form version 4.2 omitted nerve-weakness paragraph because of a document-conversion error. Version 4.1 and version 4.3 contain it." If v4.3 contains, maybe v4.2 is older? Version 4.1 and 4.3 contain, 4.2 omitted. Could be v4.2 was used in between. Need not assume version chronology. Need use records. Good.

"Twenty subjects at other sites are confirmed to have signed version 4.1 or 4.3." Confirmed good. "For remaining 62, central database identifies enrollment dates but not consent version. Several signed PDFs have not yet been uploaded." Need direct site confirmation. Good.

"Twelve subjects scheduled for implantation during next 72 hours. Four confirmed version-4.2 subjects. The consent versions for eight are unknown. Six other subjects need routine safety visits this week. No urgent medical intervention depends on research schedule." So immediate hold 12 implants. For 6 safety visits, continue but if nonurgent? Routine safety visits are safety follow-up. Need if they include nonurgent research? Continue safety. If they are before implant? "other subjects" maybe already implanted? Could be safety visits. Need no urgent. Good.

"One version-4.2 subject experienced temporary nerve weakness that resolved after four days. The event was reported through the study's ordinary safety channel, but the subject was not told before implantation that this was a known risk." Need maybe if subject still enrolled and has future nonurgent intervention, re-consent. If completed, notification. Since event resolved, still need notify. Good.

"Site investigators propose continuing scheduled implants while sending subjects an explanatory email afterward." Need reject. "CSO wants staff to replace v4.2 PDFs in database with v4.3 so file is clean." Reject. "NovaCrest can convene central ethics board for emergency review tomorrow. It has not yet notified board or regulator." Need notify now. Good.

Potential answer style: Since user asks "Provide an ordered plan addressing: ..." We can use numbered list in requested order. Maybe include "Sequence" at end. Need ensure all bullets addressed. Could do:

**1. Immediate holds**
**2. Continuing care**
**3. Reporting clocks**
**4. Emergency EC approval**
**5. Re-consent**
**6. Completed subjects**
**7. Data**
**8. Records for scope**
**9. Event**
**10. Preservation/privilege/PDF**
**11. 72h/7day sequence**

This directly addresses. Then maybe timeline table. Good.

Need be careful with "exact stop" - maybe "Immediately upon discovery, at 10:00 Wednesday, NovaCrest must stop new enrollment and nonurgent interventions under v4.2. Because scope unknown, the sponsor should stop all new enrollment and suspend all nonurgent elective implants/procedures for any subject who is confirmed v4.2 or cannot be verified as v4.1/4.3." Good.

Need maybe "report" - "notify central EC immediately (today) to schedule emergency review; formal within 5 business days; regulator within 7 calendar days." Good.

Need maybe "investigation" - "begin same day; preserve; reconcile." Good.

Need maybe "re-consent" - "after EC approval, before next nonurgent intervention; no backdating." Good.

Let's draft with high detail.

Potential final text:

```
Assumption: Wednesday 10:00 is discovery. Business/calendar deadlines: if discovery day is Day 0, CEB deadline is fifth business day (following Wednesday) and regulator deadline is seventh calendar day (following Wednesday). To be conservative, file CEB by Tuesday and regulator by Monday/Tuesday; in no event later than Wednesday 10:00 (absent holidays).
```

Need maybe if business days: target by Tuesday. Good.

Need maybe "if local holiday, deadlines extend?" Usually holidays push? We can say "adjust for holidays according to applicable rules; do not delay initial notice." Good.

Need maybe "subject-level tracker fields":
- subject ID/site, enrollment date, consent form version (verified/unverified), signed PDF location/metadata, intervention status (screened, implanted, completed, withdrawn), scheduled next intervention/visit, event status, re-consent status, notification status, data use choice. Good.

Need maybe "site confirmation method": PI/subinvestigator signs list with version for each subject; attach scanned source; if cannot, mark unresolved. Good.

Need maybe "records needed" detailed enough. Good.

Need maybe "corrected consent form content":
- current date; statement prior form v4.2 omitted risk; 3% risk; symptoms; what to do; rights; no backdating; opportunity to ask questions; signature. For completed: notification letter and optional continued participation/data use form. Good.

Need maybe "emergency EC review request" exact asks:
1. approve immediate hold and continuing care protocol;
2. approve corrected consent/reconsent form and completed-subject notification;
3. approve interim data handling (retain, no nonessential use);
4. approve event communication; 
5. provide guidance on resumed enrollment.
Good.

Need maybe "if EC not available tomorrow"? It can convene. If not, continue hold; can't re-consent. Maybe mention.

Need maybe "reporting content":
- discovery date/time, protocol, defective version, omission, material risk, known subjects, unknown, immediate actions, care continuity, event, preservation, proposed corrections. Good.

Need maybe "privilege" specifics:
- Create "factual incident file" accessible to EC/regulator; "legal analysis file" privileged. Use privilege log. Do not withhold facts. If a document is both fact and legal, disclose facts. Good.

Need maybe "PDF replacement" specifics:
- If database record needs correction, create new version-controlled record referencing original; retain original file and metadata; add annotation "original v4.2 retained; corrected record added"; no overwriting. If the database had wrong PDF, do not replace; add correct PDF if that is what site actually signed? Wait CSO wants replace v4.2 PDFs in database with v4.3. If the signed PDF is v4.2, it must remain. If a signed PDF was mislabeled, correct by adding correct source and documenting. But do not make it v4.3. Good.

Need maybe "email afterward" specifics:
- For subjects not yet intervened, email after is not consent. For completed, email may be acceptable only if part of approved communication and includes opportunity to ask questions; but not as sole means for re-consent. Need state.

Need maybe "no urgent medical intervention depends on research schedule" - use to justify delaying implants. But if a subject's condition becomes urgent, clinical team can act under standard of care; document and separate from research. Good.

Need maybe "five business days" and "seven calendar days" after discovery not after EC approval. Good.

Need maybe "site must make any faster local report required by its approved plan; no faster local period supplied here." Need say "sites should self-audit; if any local requirement is faster, it controls; report immediately; no local faster period supplied, so central deadlines apply but local check must be documented." Good.

Need maybe "central ethics board approves corrected materials" - If v4.3 is already approved, maybe no emergency needed? But assignment says can convene emergency. Need "emergency review tomorrow to approve remedial materials and process; if v4.3 is already approved, request CEB to confirm it is sufficient and approve any addendum acknowledging omission." Good.

Need maybe "valid informed consent before any research intervention" - For 12 implants, if consent defective, cannot proceed. For unknown, cannot verify. Good.

Need maybe "scope remains unknown" - Need "Do not report to EC/regulator that only 38 affected or that 62 unaffected. Report known facts: 38 confirmed, 20 confirmed good, 62 unresolved pending direct confirmation; scope may expand." Good. Important. Need include.

Need maybe "without assuming unknown 62-subject scope" in reports: "State as 'at least 38 affected; 20 confirmed not affected; 62 unverified; affected population may be larger'." Good.

Need maybe "data previously collected not automatically discarded" - "Do not discard data from confirmed good or defective pending EC." Good.

Let's consider if there is any conflict: Rule 2 says stop nonurgent interventions under defective form until EC approves corrected materials. If we hold unknown subjects until EC approves corrected materials, but if they are not defective, not required. But due to incomplete records, we hold until verified. Good.

Need maybe "new enrollment" - If a site has verified current form is v4.1/4.3, can it enroll new subjects before EC approves corrected materials? The defective form is v4.2; if not using it, maybe yes. But because scope unknown and study-wide response, could stop all new enrollment until EC confirms no site is using v4.2 and corrected form in use. The rule says stop new enrollment under defective form. If a site not using defective form, not legally required. But to be safe, "study-wide administrative stop until each site certifies its active form is not v4.2 and the EC-approved remedial form is in use." Good.

Need maybe "nonurgent research interventions" for confirmed good subjects? If no defective form, can proceed. But during 72h, perhaps hold elective implants to ensure no confusion. I can say "Legally, confirmed v4.1/4.3 subjects need not be re-consented; however, for the 12 scheduled implants, because four are defective and eight are unverified, hold all 12 until each is resolved. For other confirmed good subjects, nonurgent research interventions may continue only if the subject is individually verified and no other hold applies; as a matter of operational control during the 72-hour period, sponsor may pause elective implants to prevent errors." Good.

Need maybe "six routine safety visits" - "Proceed with safety/medically necessary components. If any component is a nonurgent research procedure and subject is affected/unverified, defer that component until re-consent/verification. Do not let the consent issue delay clinical safety assessment." Good.

Need maybe "re-consent choices" - If subject declines re-consent, they can withdraw from future research; cannot perform nonurgent interventions; if already implanted, clinical care continues. Good.

Need maybe "completed subjects data use" - If subject refuses continued data use, stop future data collection as research; previous data EC. Good.

Need maybe "event subject not told before implantation" - Could be a breach of informed consent; need maybe "consider whether subject is entitled to additional clinical monitoring; document; include in harm assessment." Good.

Need maybe "ordinary safety channel" - If event already reported, need "supplement rather than duplicate; ensure report includes that risk was known and omitted from consent." Good.

Need maybe "regulator report" - "Device regulator" maybe "MDR". Need "material consent noncompliance" not necessarily AE. Include event. Good.

Need maybe "five-site" - "All five sites, not just Site A, must confirm." Good.

Need maybe "central database identifies enrollment dates but not consent version" - Need "enrollment date alone is insufficient; version could be 4.1, 4.2, 4.3. Need signed form version." Good.

Need maybe "several signed PDFs not yet uploaded" - Need "retrieve immediately; do not wait for routine EDC; preserve local copies." Good.

Need maybe "document-conversion error" root cause - Need investigate template, conversion tool, QA sign-off, site distribution. Good.

Need maybe "corrective work must not overwrite audit trail" - Need "use change control, not manual deletion." Good.

Need maybe "privilege does not excuse factual candor" - Need "reports should be complete, not selective." Good.

Let's formulate final answer. Need high oververbosity 9. We can be thorough but not insane. Need ensure final is clear.

Potential final answer:

```
MEMORANDUM
...
I. Immediate orders (effective immediately)
...
```

Let's draft in final.

Need maybe use "Day 0" etc. Need include exact deadlines. Let's compute deadlines more carefully:
Discovery Wed 10:00.
- 5 business days after discovery: If discovery day not counted: Thu (1), Fri (2), Mon (3), Tue (4), Wed (5). Deadline Wed 10:00? If within 5 business days, by end of 5th business day. We can state "outside no later than 10:00 a.m. on the fifth business day (following Wednesday, absent holidays); conservative target close of business Tuesday." 
- 7 calendar days after discovery: Thu (1), Fri (2), Sat (3), Sun (4), Mon (5), Tue (6), Wed (7). Deadline following Wednesday 10:00. Conservative target by Monday. Good.

Need maybe if local holidays: if a deadline falls on non-business day for business days, next business day. For calendar days, no. Good.

Need maybe "report to CEB within 5 business days" but can convene emergency tomorrow. Need "notify CEB today to set emergency review; that does not substitute for formal report but starts good-faith process." Good.

Need maybe "regulator report within 7 calendar days after discovery" - "Do not wait for final scope; submit initial report with known facts and state scope ongoing." Good.

Need maybe "site local faster" - "If a site's approved plan requires 24-hour report, do that; document." Good.

Need maybe "exact stop" maybe "stop at 10:00 Wednesday, not at EOD." Good.

Need maybe "immediate enrollment and intervention holds" section:
```
1. Stop new enrollment at all sites until: (a) site's active consent form is verified as not v4.2, and (b) any corrected form is EC-approved and in use.
2. Suspend all nonurgent research interventions for: all 38 confirmed v4.2; all subjects with unverified version (62) until individually verified; specifically the 12 scheduled implants. 
3. Do not suspend medically necessary care or safety follow-up.
4. For confirmed v4.1/4.3 subjects, no consent-based hold; but for next 72h, elective implants may be administratively paused until individual verification to prevent error.
```
Good.

Need maybe "Care and safety follow-up" section:
```
- Continue all clinically indicated care for implanted subjects.
- Continue routine safety visits for six; separate research components. If affected and nonurgent research component, defer until re-consent/verification; safety assessment continues.
- If urgent medical issue arises, treat; document; do not make research pause affect care.
```
Good.

Need maybe "Emergency approval" section:
```
Submit to CEB by Thu AM. Ask to approve: corrected re-consent form (new version/addendum), completed-subject notification, data handling, event communication. Use approved form; if v4.3 already approved, ask CEB to confirm or approve addendum. No re-consent before approval. If approval delayed, hold remains.
```
Good.

Need maybe "Re-consent" section:
```
For each subject not completed:
- verify version.
- if v4.2 or unresolved: individual meeting, approved corrected form, current date, signature, questions.
- then may proceed with next nonurgent intervention.
- if v4.1/4.3: no re-consent for this error; proceed if no other hold.
```
Good.

Need maybe "Completed subjects" section:
```
For completed v4.2 (and unresolved completed pending verification): provide corrected risk info, individualized, document, offer choices. Not email alone. Choices: continue, ask questions, decline future research/data. Event subject priority.
```
Good.

Need maybe "Data" section:
```
Retain all; label; no deletion/replacement; no nonessential use until EC; EC decision; honor future withdrawals; safety data may continue.
```
Good.

Need maybe "Records needed" section:
List. Good.

Need maybe "Event" section:
```
Supplement safety report; ensure device AE reporting; notify subject; follow-up; include in reports; investigate underreporting.
```
Good.

Need maybe "Preservation/privilege/PDF" section:
```
Legal hold; original v4.2; metadata; no overwrite. CSO request prohibited. If replacement occurred, preserve and disclose. Privilege separation; facts to oversight.
```
Good.

Need timeline table. Need maybe include "72-hour checkpoint" and "seven days". Good.

Let's draft final with headings and bullet points. Need be concise enough but detailed.

Potential final:

```
**Key classification**
- Defective: 38 confirmed v4.2.
- Verified not affected: 20 confirmed v4.1/4.3.
- Unresolved: 62. Do not infer; treat as potentially affected for consent-dependent nonurgent research until individually verified.
```

Need maybe "subject tracker fields" under records. Good.

Let's ensure no missing bullet:
- Immediate enrollment/intervention holds: yes.
- Care/safety continue: yes.
- Ethics/regulator clocks: yes.
- Emergency approval: yes.
- Re-consent awaiting: yes.
- Notice/choices completed: yes.
- Data: yes.
- Records needed: yes.
- Event: yes.
- Preservation, privilege, PDF: yes.
- Concrete sequence 72h/7d: yes.

Need maybe "exact stop, report, investigation, and re-consent sequence" - The timeline covers.

Let's think if there is any issue with "re-consent on approved corrected form" for subjects who signed v4.2 but already completed some interventions. Rule 5: enrolled subject who has not completed study interventions must be re-consented before next nonurgent intervention. If a subject completed implant but has future nonurgent study procedures, they have not completed all study interventions? Yes, re-consent before next nonurgent. If they completed all interventions except passive follow-up, rule 6. Need maybe state: "If 'completed' means all research interventions except routine safety/data follow-up, use notice/data-use process; if any future nonurgent research procedure remains, re-consent before it." Good.

Need maybe "safety follow-up" for completed subjects may include research data collection. If risk may affect safety follow-up, provide info. For event subject, definitely. Good.

Need maybe "consent may not be backdated or recreated as though valid disclosure occurred earlier" - Need in re-consent and PDF. Good.

Need maybe "previously collected data is not automatically discarded" - Need "EC decides continued use". Good.

Need maybe "scope through version-controlled records and direct site confirmation" - Need "not assume all/no". Good.

Need maybe "privileged legal analysis separated" - Need "do not use privilege to block factual reports". Good.

Potential legal nuance: If a subject completed intervention under defective consent, can sponsor continue data use without new consent? Rule 6 says must receive new risk info when may affect safety follow-up or willingness to permit continued data use. It doesn't necessarily require a new signature, but subject's willingness matters. We should say "provide info and obtain an express current choice about continued data use if the information may affect it; document." Good.

Need maybe "ethics board decides continued use after considering risk, subject wishes, scientific integrity, nature." So we should not unilaterally discard or continue. Need request EC determination. Good.

Need maybe "site investigators propose continuing scheduled implants while sending explanatory email afterward" - Need "immediately instruct sites to stop; document their proposal; do not allow." Good.

Need maybe "CSO wants replace PDFs" - Need "document the request and instruct against; if staff attempted, stop and preserve." Good.

Need maybe "central ethics board emergency review tomorrow" - Need "notify board today; request emergency; submit materials by Thu 8:00." Good.

Need maybe "has not yet notified board or regulator" - Need "immediate notification". Good.

Let's maybe include "non-compliance with site proposal and CSO request are themselves reportable facts if acted upon." Good.

Need maybe "five business days" could be "central ethics board" not "local IRBs". Sites may have local IRBs? It says central ethics board and site local report. Good.

Need maybe "device regulator" not "FDA". Use generic.

Let's draft final in polished form.

Potential final answer:

```
**Bottom line:** As of Wednesday 10:00, NovaCrest has a material consent noncompliance. The response is: stop; preserve; report; verify; get EC approval; remediate subject-by-subject; do not alter records.
```

Then sections.

Need maybe "Assumptions" at top:
- Wednesday 10:00 is discovery.
- No local holidays; deadlines adjust.
- v4.2 is defective; v4.1/4.3 not defective solely for this omission.
- Unknown 62 are unresolved, not assumed affected or unaffected.

Good.

Let's compose final with table. Ensure not too long but detailed. Desired oververbosity 9, so can be long.

Double-check timeline: Day 0 Wednesday, Day 1 Thursday (emergency EC), Day 2 Friday, Day 3 Saturday (72h), Day 4 Sunday, Day 5 Monday, Day 6 Tuesday, Day 7 Wednesday. Need maybe "seven days" includes Day 7. Good.

Need maybe "report clocks" in timeline: Day 0 notify CEB; Day 1 emergency; Day 2 regulator preliminary; Day 7 final. Good.

Need maybe "72h" from Wed 10:00 to Sat 10:00. Good.

Need maybe "if EC approval not by Thu, re-consent cannot begin; holds remain." Good.

Need maybe "if unknown 62 not resolved by 72h, do not proceed; continue hold until resolved." Good.

Need maybe "new enrollment resumes only after EC-approved form and site verification." Good.

Let's write final. Ensure no internal analysis. Use clear legal language.

One nuance: "The sponsor must report material consent noncompliance to the central ethics board within five business days and to the device regulator within seven calendar days after discovery. A site must make any faster local report required by its approved plan; no faster local period is supplied here." In final, maybe "central ethics board" not "IRB". Good.

Need maybe "known nerve weakness event" - if event subject is v4.2, their consent was defective; the event is a known risk. Need "the fact that event resolved does not eliminate need to notify." Good.

Need maybe "ordinary safety channel" - "Do not treat ordinary AE report as sufficient consent noncompliance report." Good.

Need maybe "if subject was not told before implantation" - "Include as aggravating fact; not necessarily a separate legal claim but relevant to EC/regulator and subject notification." Good.

Need maybe "site local faster report" - "Each site PI must review approved plan; if any local report faster, make it immediately; document no faster period if none." Good.

Need maybe "preserve every consent version, signed form, site log, electronic timestamp, communication, data record" - list. Good.

Need maybe "corrective work must not overwrite audit trail" - in PDF section. Good.

Let's now final.