Exhibit Description
Standard A5 Moleskine notebook, black cover. Last 4 pages contain entries in blue ballpoint, consistent with Rohan Mehta's handwriting (confirmed against comparative samples). Entries span approximately 30 days. Below is a verbatim transcription of the final three dated entries.
Entry — 30 Days Before Death
Running usage stats on our API infrastructure. One dataset behaving oddly — query volumes don't match any internal workflow.
Traced the call signature. The anomaly originates from a file: aro_nexusBridge_v2.py
Cross-referenced the outgoing API key in the file. The endpoint it's calling is registered to a company called NexPay Solutions.
NexPay is our direct competitor in the fraud detection space. Someone at PaySpark is sending our model to them.
Entry — 10 Days Before Death
847 API calls from our internal servers to NexPay's Singapore endpoint over 6 months. Each call sends our fraud model's output scores and feature weights. This is the entire engine — not an excerpt.
The licensing value of this model is ₹20–25 crore conservatively.
I know who "aro" is. I confronted her this afternoon. Gave her 48 hours.
Board meeting Friday 10 AM. If she doesn't come forward, I present everything.
Entry — Day of Death (Thursday)
She said she needed more time. I told her there was no more time.
Staying in office tonight to finish the board presentation. Everything is ready.
If something happens to me — look at the code. Find "aro." The API key in that file points straight to NexPay Singapore.
The rest is all in the logs.