At exactly 9:00, independent procurement reviewer Leah Mutiso switched on the recorder. Northgate’s compliance room now had name cards and exhibit numbers on every document.
Her first question required no file.
“Who sent the email attachment to the client list?”
“I did,” Musa said.
“Were you instructed to use that list?”
“No. It should have gone to four recipients. I selected the wrong distribution list and failed to perform the final check.”
“Before you sent it, did you know Meridian had two contract versions?”
“No.”
“So your discovery starts after your own mistake?”
“Yes.”
Musa built the timeline minute by minute: send time, campaign pause, incident ticket, recall window, Northgate comparison, warehouse hold, supplier statement. Every point had a source owner. Where he lacked an internal record, he said so.
“Do you have the mailbox audit log?” Leah asked.
“No. My preservation request is `HR-PR-0817`. Meridian must produce the log.”
“Backup metadata?”
“No copy. Joel Muriuki performed the authorized restore. The event references are in the IT ticket.”
“Dispatch logs?”
“Amina Wekesa can verify hold IDs through warehouse process. I did not take them out.”
Leah asked why he had refused copies. Musa answered that suspension did not give him the right to remove company or client data. Production requests should go to the owners of the records.
Ruth then laid out Northgate contract packs from three years. Leah built a whiteboard map: `client-signed`, `operational reference`, `supplier/dispatch reference`, `source owner`, `date`.
Some version discrepancies clearly predated Musa’s employment.
Leah asked about Peter Limo. Musa limited his answer to Peter’s exit date, access termination, and objection to reuse of his approval block. He did not claim Peter knew what happened later.
“Are you alleging Victor Ndege committed fraud?” Leah asked.
“No. I am saying the records must separate contract authority, operational substitution, billing route, and version-control process. I do not have a legal conclusion on fraud.”
Meridian had already submitted a statement describing the Blue file as a non-binding internal draft mistakenly sent by a junior employee. Musa accepted the part about his own mistake. He did not accept that the word draft resolved the other records.
Leah signed a formal preservation and production request for the mailbox audit trail, version directories, ACL history, dispatch logs, Sales Operations service accounts, and affiliate billing records linked to affected POs.
Before the session closed, Ruth demonstrated custody of each Northgate exhibit. Where Meridian might have a counterpart copy, Leah requested it too. That mattered to Musa: the reviewer was not simply accepting his side. Every fact was being given a path for challenge and verification.
The door opened. Meridian’s lawyer, Mr. Karanja, entered with a briefcase and placed an envelope before Musa.
“This is a confidentiality-breach notice and communication protocol.”
Musa read the cover before signing. “Acknowledgment of receipt only?”
“Only receipt.”
Karanja said internal drafts were not binding. Leah told him Meridian could make that argument together with the records under production request.
By the end of the interview, each line of Musa’s timeline was marked either supported, third-party certified, or requires Meridian production. He did not fill the gaps.
That did not restore his badge or salary. It did something else: it moved the dispute out of the category of “Musa says” and into records that could be produced, challenged, or formally withheld.
Karanja pushed a second envelope toward him.
The Meridian lawyer placed the envelope in front of Musa. “From now on, all communications go through us.”