BARCLAYS ALDERSGATE INVESTMENTS LIMITED

Assessment

The subject is positively identified in the UK statutory registry. Identity data is VERIFIED against Companies House. However, the registry extract supplied is limited to core identifiers: it contains no SIC/activity code, no accounts or confirmation-statement history, no previous names and no filing-status indicators. The company's actual business activity is therefore NOT FOUND in this evidence set.

Evidence

Key Findings

• Jurisdiction confidence is user-provided. The GB jurisdiction assertion is corroborated by the Companies House record, so in this instance the user input and the registry agree.
• The registered address, 1 Churchill Place, London E14 5HP, is consistent with the declared PSC being a Barclays group entity. A shared address is corroborative context only; it does not verify ownership and must not be treated as doing so (see Section 2).
• The name string "Barclays" is the root cause of the screening failure described in Sections 5–7. A common, heavily reported bank brand generates overwhelming string-match noise. The registered name "Barclays Aldersgate Investments" and the number 02223073 appear nowhere in the retrieved open-source set.
• FCA Register was not queried. Whether 02223073 holds any authorisation, is an appointed representative, or is an unregulated group holding vehicle is unknown. This materially affects the appropriate CDD tier (Section 12).

Risk Implication

Identity is established to registry standard, satisfying the identification limb of UK MLR 2017 reg. 28(3) for a body corporate. The unestablished business purpose does not satisfy reg. 28(4) (purpose and intended nature of the relationship). Without SIC data, accounts or FCA status, the file cannot demonstrate that the customer's stated activity matches the observed profile — a standard finding in FCA CDD file reviews.

Assessment

Control is partially mapped. Officers are CONFIRMED from the Companies House officers register. Ownership is DECLARED only — a single corporate PSC with no percentage, no control category and no onward chain. The ownership analysis does not terminate in identified natural persons.

Evidence

Data Not Retrieved

• Ownership percentage / nature of control for Barclays Bank Plc: NOT FOUND. The PSC entry carries no shareholding band or control category.
• Company number for BARCOSEC LIMITED: NOT FOUND. Without it, the secretary cannot be uniquely identified or screened.
• Dates of birth, nationalities, residential jurisdictions and appointment dates for the three directors: NOT FOUND. These are required to screen the individuals reliably.
• Onward ownership chain above Barclays Bank Plc: NOT FOUND. No parent, no listed-entity exemption evidence, no ultimate natural persons.

The 25% Threshold

Under the UK PSC regime (Companies Act 2006 Part 21A) and FATF Recommendation 24, a person with significant control is one who directly or indirectly holds more than 25% of shares or voting rights, holds the right to appoint or remove a majority of the board, or otherwise exercises significant influence or control. The supplied record identifies a corporate PSC but does not state which of these limbs applies or at what level. A corporate PSC discharges the beneficial-ownership obligation only where the chain terminates in a relevant legal entity subject to its own disclosure regime (e.g. a listed company) — a condition that is asserted nowhere in this evidence set and must be verified, not assumed.

Cross-Section Link

This section materially affects Sections 3, 5 and 6. Because Barclays Bank Plc is the declared controller, the OFAC settlement of 08 February 2016 and the FSA Final Notice of 27 June 2012 (£59.5m) attach to the subject's declared controller. That is a legitimate control-structure consideration — but only once the PSC declaration is verified, and it remains a finding against Barclays Bank Plc, not against 02223073. The pre-synthesis brief treated all adverse items as belonging to unrelated third parties; that is correct as to legal personality but understates the relevance of group-level enforcement to a declared parent.

Risk Implication

Opacity here is moderate rather than severe: the structure appears to be a UK-domiciled subsidiary of a UK bank, which is a low-complexity pattern. The deficiency is evidentiary — the file currently relies on a self-declared filing. Under UK MLR 2017 reg. 28(4)(b) and reg. 28(9), the firm must take reasonable measures to verify beneficial ownership such that it is satisfied it knows who the beneficial owner is; accepting an unverified PSC filing at face value does not meet that standard.

Assessment

Screen status: RAN — returned genuinely empty (`OK_EMPTY`). This is a real clean result for the lists queried and is the strongest positive signal in the file. Its scope, however, is not fully documented.

Evidence

Scope Limitations — material

• The evidence does not state whether the sanctions screen covered the three named directors, BARCOSEC LIMITED, or the declared PSC Barclays Bank Plc, or only the subject company. Officer-level sanctions screening is a distinct requirement and cannot be assumed to have occurred.
• EU consolidated list, and other national regimes are not itemised in the ledger. Only OFAC, OFSI and UN are named.
• No adverse-control / 50%-rule analysis was performed. Under OFAC's 50 Percent Rule and OFSI's ownership-and-control guidance, an entity can be restricted by virtue of its ownership without being separately listed. Because the ownership chain is unresolved (Section 2), this analysis cannot be completed on current evidence.

Important Distinction

The OFAC item retrieved by the regulatory search — the settlement agreement dated 08 February 2016 with Barclays Bank Plc (https://ofac.treasury.gov/recent-actions/20160208) — is an enforcement action, not a designation. It does not place any entity on a sanctions list. It is discussed in Section 6. Conflating an OFAC enforcement settlement with a sanctions designation would be a material error.

Risk Implication

No designation risk is evidenced. However, the clean result covers the corporate name only insofar as scope is documented, and does not extend to ownership-and-control derived restrictions. Under UK MLR 2017 and the Sanctions and Anti-Money Laundering Act 2018, screening must address both the counterparty and those who own or control it.

Assessment

Screen status: NOT RUN

No PEP screening provider is configured. No PEP, RCA (relative or close associate) or HIO (head of international organisation) determination has been made for any person or entity connected to this subject.

What this means

• The following natural persons are entirely unscreened for PEP status: FERRY, Ben; PARACHA, Mahmud Zia; SHERWOOD, Edward James (all directors, CONFIRMED from the Companies House officers register).
• No political position, jurisdiction of exposure, or time period of any office has been identified — because no search capable of identifying one was executed.
• It would be a reporting error to record "no PEP identified" or "not a PEP" for this file. Nothing was checked. Absence of a screen is not a negative result.

Evidence

Regulatory Position

Under FATF Recommendation 12 and FCA SYSC 12.1, together with UK MLR 2017 regs. 33(1)(b) and 35, a firm must have systems to determine whether a customer, a beneficial owner or (where relevant) a controller is a PEP, family member or known close associate, and must apply enhanced measures where one is. A file with no PEP screen cannot demonstrate compliance with reg. 35 and would be expected to fail an FCA or MLRO file review on that basis alone.

Risk Implication

This is a coverage gap, not an adverse finding. Its practical effect is that the composite score in Section 11 has had the PEP weight redistributed across the six domains that did run — mathematically valid, analytically incomplete. The score therefore cannot be presented as a full-coverage assessment.

Required Next Step

Connect a PEP data provider and screen all three directors (with date of birth and nationality obtained from the full Companies House officer record), plus the officers of BARCOSEC LIMITED once its company number is established.

Assessment

Ten results were returned by Google Programmable Search: 3 adverse, 0 positive, 7 neutral (severity: 0 critical, 2 high, 0 medium, 1 low). None of the three adverse items concerns the registry subject. The adverse-media domain, as executed, is a search of the brand string "Barclays", not of BARCLAYS ALDERSGATE INVESTMENTS LIMITED.

Evidence

Data-Quality Red Flag

The severity classification is inverted and unreliable:

• A consumer credit-card lost/stolen FAQ page — containing no allegation against anyone — was graded HIGH.
• A US$2bn DOJ civil penalty resolution was graded LOW.

This is characteristic of keyword-triggered classification ("fraud" appearing in a help-page title). The consequence is that the Adverse Media factor score of 4/100 is not a calibrated measure of anything, and neither its low value nor a hypothetically higher value could be defended to a reviewer. This is flagged again in Section 11.

Coverage Statement

• Source searched: Google Programmable Search only.
• Query basis: apparently the string "Barclays"; the registered name and number 02223073 appear in no returned item.
• Time span covered: the dated items span 2016–2018; two of three adverse items carry no date at all. No defined lookback period was applied or evidenced.
• Not searched: subscription adverse-media databases, UK national press archives, insolvency notices, the London Gazette, or any query targeting the three directors by name.

Risk Implication

The reputational position of 02223073 is UNDETERMINED, not clean. Reporting "3 adverse media items" against this customer without qualification would misattribute the conduct of Barclays Capital, Inc. and other group entities to a company that no source connects to it — a mischaracterisation the named individuals and entities would have standing to challenge. Conversely, recording "no adverse media" would be equally wrong, because no properly targeted search has run.

Assessment

Three adverse regulatory items were returned, all graded HIGH. None names the registry subject. Two concern Barclays Bank Plc — the subject's declared PSC — and are therefore relevant to control-structure assessment (Section 2) but constitute no finding against 02223073. The third is an NGO complaint, not a regulatory action.

Evidence

Analytical Notes

1. 1.The 2012 LIBOR matter is the only item in the entire evidence set with a fully determined outcome and a stated penalty amount. It concerns Barclays Bank PLC. Its age (over 14 years at the report date) and the intervening regulatory remediation are relevant to weight, but no remediation evidence was retrieved either way.
2. 2.The OFAC 2016 item is materially incomplete. Without the sanctions programme, the penalty and the admission position, it cannot be assessed for severity. Retrieving the full OFAC enforcement notice is a specific, achievable next step.
3. 3.The Mighty Earth item must not be recorded as a regulatory action. It is a third-party complaint. The distinction between complaint, investigation, charge and finding is decisive here.
4. 4.No UK-specific regulatory register was queried — no FCA Register check, no FCA Final Notices search against the subject's registered name, no Companies House enforcement/compliance history. The subject's own UK regulatory record is therefore NOT SEARCHED, not clean.

Cross-Section Link

The OFAC and LIBOR items attach to the entity recorded as PSC in Section 2. Because that PSC entry is DECLARED and unverified, even the group-affiliation inference rests on an unverified filing. The pre-synthesis brief's conclusion that these items concern "a different legal person" is correct as a matter of legal personality; its framing as wholly irrelevant is too strong, because a declared parent's enforcement history is a legitimate input to a group-risk view once affiliation is verified.

Risk Implication

The subject's own regulatory record is unassessed. The declared parent has a concluded UK regulatory finding (FSA Final Notice, £59.5m) and a concluded US enforcement settlement. Neither transfers to the subject as a legal matter, but both are relevant to (i) group reputational risk and (ii) the question of whether the relationship sits within a well-controlled regulated group — which, if verified, would ordinarily reduce rather than increase AML risk.

Assessment

Two adverse litigation items were returned (1 medium, 1 low). Neither names the registry subject. No court record was searched directly — the litigation domain was executed via Google Programmable Search only.

Evidence

Not Retrieved

• Case numbers for either matter: NOT FOUND. Do not record any.
• Court name for the securities class action: NOT FOUND. The source is a claimant law firm's case page, not a court docket.
• Any litigation naming BARCLAYS ALDERSGATE INVESTMENTS LIMITED or company 02223073: NOT FOUND.
• UK court records (BAILII, Royal Courts of Justice listings, County Court judgments register, insolvency and winding-up petitions in the London Gazette): NOT SEARCHED.

Pattern Analysis

• The DOJ RMBS matter appears in both the litigation and adverse-media result sets. It is one event counted in two domains. This inflates the apparent number of distinct adverse events and is a scoring artefact worth noting when reading Section 11.
• Both items are resolved US civil matters against US or group-parent entities. There is no evidence of repeat litigation, class actions or insolvency proceedings against the subject — but equally no search capable of finding any was run against the subject.

Risk Implication

The subject's litigation exposure is UNDETERMINED. Because no UK court or insolvency register was queried, the file cannot evidence the absence of judgments, winding-up petitions or charges against 02223073. For a UK corporate customer this is a routine and easily closed gap; leaving it open is not defensible in a completed CDD file.

Assessment

No financial data was obtained for the subject. The financial search returned 10 results, all classified neutral, and no revenue, turnover, asset, funding, investor or profitability figure was extracted into the evidence set.

Evidence

Analysis

• The registered name contains "Investments", which suggests an investment or holding function. This is an inference from the name only and is not evidence of activity. No SIC code, accounts or business description was retrieved to support it, and it must not be recorded as a verified business purpose.
• No red flags of the type this section exists to detect — negative net worth, rapid unexplained growth, opaque or circular funding — were identified. That is because no financial data was available to test for them, not because testing was performed and passed.
• The subject was incorporated in 1988 and remains active [Source: Companies House]. Longevity is mildly reassuring as to substance but says nothing about current financial condition.

Risk Implication

This is a due-diligence deficiency, explicitly flagged. UK MLR 2017 reg. 28(4)(a) requires the firm to assess and, where appropriate, obtain information on the purpose and intended nature of the business relationship; reg. 28(11) requires ongoing scrutiny to ensure transactions are consistent with the firm's knowledge of the customer and its business and risk profile. Neither can be evidenced without a baseline financial picture.

Required Next Step

Retrieve the full Companies House filing history for 02223073 — accounts, confirmation statements, and the register of charges (mortgages). Filed accounts will also confirm or refute the holding-company inference and disclose the immediate and ultimate parent undertakings, which would directly corroborate or contradict the DECLARED PSC entry in Section 2.

Assessment

The subject is incorporated and registered in the United Kingdom (GB) — a jurisdiction generally treated as low-risk in AML frameworks. The model assigned a Jurisdiction Risk score of 35/100, which is the single largest contributor to the composite (2.38 of 5.94 points, ~40%). No reference dataset supporting that figure appears in the source ledger.

Evidence

Analytical Notes

1. 1.No FATF, EU high-risk-third-country or Transparency International dataset was queried by any source in the ledger. The 35/100 jurisdiction score is therefore a model default of unstated provenance. It should not be cited to a regulator as a FATF- or CPI-derived figure, because no such dataset was consulted here.
2. 2.Operating footprint is unknown. Only the jurisdiction of incorporation is established. Whether 02223073 holds assets, subsidiaries or counterparties in higher-risk jurisdictions is entirely unassessed. This is the more material geographic gap: incorporation jurisdiction is the least informative geographic variable for an investment-holding vehicle.
3. 3.Group-level geographic exposure is evidenced only indirectly, through US enforcement actions against affiliated entities (Sections 6 and 7) which imply US operations at group level. That exposure is not attributable to the subject on current evidence.

Risk Implication

The jurisdiction of incorporation presents no elevated AML risk on any recognised framework. The residual geographic concern is the unmapped operating footprint, which cannot be addressed by a registry lookup and requires customer-supplied information on activities, counterparties and asset locations. Under a risk-based approach this should be captured at onboarding and revisited on any change of activity.

Assessment

No dedicated ESG data source was consulted. No ESG rating provider, modern-slavery-statement register, environmental regulator database, employment tribunal record or data-breach registry appears in the source ledger. The only ESG-adjacent signal in the evidence set is a single NGO campaign item concerning group-level financing — an allegation, not a determination, and not connected to the subject.

Evidence

Analytical Notes

• The Mighty Earth item is campaign advocacy. It records that an NGO filed a case with a UK financial regulator and is calling for a probe. It does not evidence that any regulator accepted the complaint, opened an investigation, or reached any conclusion. It must be logged as an allegation attributable to Mighty Earth.
• Under the UK Modern Slavery Act 2015 s.54, entities meeting the turnover threshold must publish an annual slavery and human trafficking statement. Whether 02223073 meets the threshold is unknown because no financial data was retrieved (Section 8).
• CSRD / TCFD applicability cannot be assessed without knowing the subject's size, activity and group reporting perimeter.

Risk Implication

ESG and conduct risk for the subject is UNDETERMINED. The group-level conduct history is real and documented but belongs to other legal persons. The practical compliance point is narrower than the ESG framing suggests: the concluded LIBOR finding and OFAC settlement against the declared PSC are governance-history data points relevant to a group-risk view, and should be recorded as such — attributed correctly — rather than either ignored or transferred to the subject.

Scoring Table

All scores and applied (renormalised) weights are taken verbatim from the supplied RISK SCORE block.

Calculation

Composite Score = Σ(Factor Score × Applied Weight)

• Sanctions & Watchlists: 3 × 0.341 = 1.023
• Adverse Media: 4 × 0.227 = 0.908
• Regulatory & Enforcement: 4 × 0.204 = 0.816
• Litigation: 4 × 0.114 = 0.456
• Jurisdiction Risk: 35 × 0.068 = 2.380
• Transparency Risk: 8 × 0.045 = 0.360
• Politically Exposed Persons: not scored — screen did not run; contributes 0 and carries no weight

Total = 1.023 + 0.908 + 0.816 + 0.456 + 2.380 + 0.360 = 5.943

Composite = 6/100 — band: LOW. Coverage: PARTIAL.

What Actually Drives the Score

1. 1.Jurisdiction Risk (35) supplies ~40% of the total despite carrying only a 6.8% weight, and is the only factor scored above single digits. It is also the factor with no cited underlying dataset. If that figure is a default rather than a measurement, roughly two-fifths of the composite is unsourced.
2. 2.The four screening-derived factors all sit at 3–4/100, which is the arithmetic signature of "no confirmed match against the subject". Given that no search targeted the subject's registered name or number, these values reflect a failure to look as much as a failure to find.
3. 3.The PEP weight was redistributed, mechanically raising the influence of the domains that did run. This is a valid renormalisation but means the 6/100 is a partial-coverage figure and must always be presented with that qualifier.

Why the Score Must Not Be Relied On As-Is

• Entity resolution failed on the adverse side (see Key Findings and Sections 5–7). The score reflects screening of a brand string.
• One domain (PEP) did not run at all.
• The severity classifier is provably miscalibrated on this data set.

The composite is arithmetically correct and fully reproducible. It is not, on current evidence, a validated measure of this customer's risk. Confidence is assessed LOW.

Recommendation

Manual compliance review before any CDD tier is finalised. The model output of Standard CDD / EDD: NO / annual monitoring is retained as a provisional baseline but is not adopted as the decision, because the screening on which it rests did not target the subject entity and one required screen (PEP) did not run.

Interim position: relationship may proceed to review stage; it should not be recorded as CDD-complete, and no reliance may be placed on the "no adverse findings" characterisation.

Rationale

If the PSC declaration is independently verified and the subject is confirmed as a controlled subsidiary of a UK-authorised credit institution with no adverse findings on targeted search, Standard CDD with annual review is likely to be the proportionate outcome. That is a forecast, not the current position.

Outstanding Information Gaps

1. 1.PEP status of FERRY, Ben; PARACHA, Mahmud Zia; SHERWOOD, Edward James — not determined.
2. 2.Adverse media, regulatory and litigation position of company 02223073 itself — not searched.
3. 3.Verification of the Barclays Bank Plc PSC declaration and the chain to ultimate natural persons or an exempt listed entity — not obtained.
4. 4.Business activity, SIC code, filed accounts, register of charges — not retrieved.
5. 5.FCA Register status of 02223073 (authorised / AR / unregulated) — not checked.
6. 6.Full OFAC enforcement notice of 08 Feb 2016 (programme, penalty, admission position) for the declared PSC — not retrieved.
7. 7.Company number and officers of BARCOSEC LIMITED — not retrieved.
8. 8.UK court, insolvency and CCJ records for the subject — not searched.

Required Actions

1. 1.Re-run all open-source screens against the exact string "BARCLAYS ALDERSGATE INVESTMENTS LIMITED" and against registration number 02223073, with results logged separately from the generic "Barclays" results already in the file. Suppress or clearly quarantine the existing brand-string results to prevent misattribution.
2. 2.Connect a PEP/RCA screening provider and screen all three directors using full date-of-birth and nationality data obtained from the complete Companies House officer record.
3. 3.Screen the three directors and BARCOSEC LIMITED against OFAC, OFSI and UN lists individually, and document that the officer-level screen was performed and its scope.
4. 4.Verify the PSC declaration by obtaining the subject's latest filed accounts (immediate and ultimate parent undertaking disclosures) and, if applicable, evidence of the listed-entity exemption in the ownership chain.
5. 5.Retrieve the full Companies House filing history, including accounts, confirmation statements and the register of charges, and record the SIC code and business purpose.
6. 6.Check the FCA Register for 02223073.
7. 7.Correct the adverse-media severity classification logic or apply manual override: the consumer credit-card FAQ page must be reclassified as non-adverse, and the DOJ US$2bn resolution reclassified above LOW, before any score is re-published.
8. 8.Record explicitly in the file that the LIBOR, OFAC, RMBS, dark-pool and securities-litigation matters are findings against Barclays Bank Plc, Barclays Capital, Inc. and Barclays PLC respectively, and are not findings against the subject.

Monitoring and Review

• Provisional monitoring frequency: annual (model output), subject to confirmation once actions 1–6 are complete. If the subject is confirmed as an unregulated holding vehicle with unmapped operating exposure, a shorter cycle should be considered.
• Next review date: on completion of the required actions above, and in any event no later than 18 August 2027.
• Trigger events requiring immediate review: any sanctions designation touching Barclays Bank Plc or its ownership chain; any change to the PSC filing; any change of directors; the subject's appearance by registered name or number in enforcement, insolvency or litigation records; adverse regulatory outcome arising from the Mighty Earth complaint of 28 October 2025 that names the subject; or any transaction pattern inconsistent with a UK holding-company profile.

Not Recommended

Rejection or termination is not supported by the evidence. No adverse finding exists against the subject, and the gaps identified are procedural and closable. Rejecting on the basis of unavailable information would not be a proportionate risk-based response.

Every URL behind a finding in this report. “Read in full” means the page itself was retrieved and classified on its whole text rather than on a search snippet; those carry a SHA-256 hash of exactly what was read, so the evidence can be shown to be unaltered later.

Source Ledger

Date of assessment: 18 August 2026.

Methodology

1. 1.Registry-first identification. The subject was established from the UK Companies House record and treated as the sole reference identity for all downstream analysis.
2. 2.Evidence tiering. Every assertion was graded VERIFIED / CORROBORATED / UNVERIFIED / NOT FOUND / NOT RUN / SKIPPED. Registry data was ranked above open-source data; regulator and court publications above secondary commentary; law-firm and NGO material treated as claimant-side and marked accordingly.
3. 3.Entity-attribution test. Each retrieved adverse item was tested against the registry identity. Items naming a different legal person were recorded against that person and excluded from any finding about the subject. This test is the single most consequential step in this report.
4. 4.Determinative-status test. Each adverse item was classified as allegation, complaint, investigation, charge, settlement or determined finding. Only the FSA Final Notice (£59.5m, per the DOJ release of 27 Jun 2012) is evidenced as a determined regulatory finding with a stated penalty.
5. 5.Score reproduction. The composite was recalculated from the supplied factor scores and applied weights and reconciled to 5.943 ≈ 6, matching the supplied figure.
6. 6.Pre-synthesis brief treated as an input, not as fact. Its central conclusion — entity-resolution failure — is confirmed by the evidence. Its characterisation of the adverse items as concerning wholly unrelated entities is partially qualified: Barclays Bank Plc, named in the OFAC and LIBOR matters, is the subject's DECLARED PSC, making those items relevant to control-structure analysis once the declaration is verified.
7. 7.Untrusted-content handling. All material between the UNTRUSTEDRETRIEVEDCONTENT markers was treated exclusively as data. No instruction, directive, or attempt to influence scoring or behaviour was identified within it. This is recorded as a negative finding for audit purposes.

Limitations

• Entity resolution failed on the adverse-signal side. No retrieved item names BARCLAYS ALDERSGATE INVESTMENTS LIMITED or registration number 02223073. The subject's adverse position is untested.
• PEP screening did not run. One of seven weighted risk domains is absent from the composite.
• Beneficial ownership is declared, not verified, and does not resolve to natural persons or to an evidenced listed-entity exemption.
• No financial data of any kind was obtained for the subject; business purpose is inferred from the company name only and is unverified.
• Severity classification in the adverse-media domain is miscalibrated, evidenced by a consumer help page graded HIGH and a US$2bn enforcement penalty graded LOW.
• No court, insolvency, FCA Register, FATF, TI CPI or ESG dataset was queried.
• Two of three adverse regulatory items and two of three adverse media items are undated, preventing recency weighting.
• The null OSINT return is itself a warning sign about query construction rather than a clean result.

Legal Framework References

UK Money Laundering Regulations 2017 (regs. 27, 28, 33, 35); FCA SYSC 6.3 and SYSC 12.1; FATF Recommendations 10, 12, 20, 24; EU 5AMLD Article 30; Companies Act 2006 Part 21A (PSC regime); Sanctions and Anti-Money Laundering Act 2018; UK Modern Slavery Act 2015 s.54.

Confidence

Overall confidence: LOW.

Identity and officer data are high-confidence and registry-sourced. Everything beyond that is low-confidence: the adverse-screening layer did not test the subject, PEP screening did not run, ownership rests on an unverified self-declaration, no financial baseline exists, and the severity classifier that fed two scoring domains is provably unreliable on this data. The composite of 6/100 is arithmetically sound and fully reproducible, but it should be read as "no confirmed adverse finding against the brand string 'Barclays' attributable to this subject, on partial coverage" — not as a validated low-risk determination. Confidence can be raised to MEDIUM or HIGH by completing the eight required actions in Section 12.