Section A — GitHub Account Attribution
PaySpark's internal identity management system has confirmed the mapping for account "aro_cto" used in the GitHub deletion event. The full registered username is:
aro_cto_████████
The full registered username and employee mapping are subject to a separate access request currently pending with PaySpark's external counsel. Records are expected within 5 business days.
API Call Volume — Recovered Logs
| Metric | Value |
|---|
| Total outbound API calls to api.nexpay.sg | 847 over 6 months |
| Data transmitted per call (average) | Fraud model scores, feature weights, transaction metadata |
| First call recorded | 6 months prior to death |
| Last call recorded | 4 days prior to death |
Section B — Supplemental Toxicology
The initial toxicology report estimated the Alprazolam ingestion window as 20:30–22:30 (± 30 min). Supplemental gastric analysis has refined this estimate.
Gastric pH and absorption markers are consistent with ingestion on a post-meal, semi-empty stomach (food confirmed as 2–3 hours prior). Alprazolam onset under these conditions is typically 30–45 minutes post-ingestion (faster than the standard 60–90 minute fasted-state model used in the initial calculation).
| Model | Ingestion Window |
|---|
| Initial estimate (standard model) | 20:30 – 22:30 |
| Refined estimate (supplemental — post-meal absorption) | 21:50 – 22:20 |
| Margin of error (refined) | ± 15 minutes |
Analyst Note
The refined ingestion window (21:50–22:20) is narrower than the initial estimate. The earlier window should be treated as superseded by this report for the purposes of the investigation. Further refinement is not possible from available samples.