Contract analysis

I. Purpose This memorandum outlines the factual and strategic basis for Aurelius Media Americas, Inc.'s ("AMA") proposed Cross-Complaint against Gavin Aldrich ("Aldrich") in connection with Case No. 22STCV41087, currently assigned to the Honorable Catherine Villanueva, Department 52, Superior Court of the State of California, County of Los Angeles — Central District. By way of background, Aldrich filed his complaint

II. Factual Foundation A. Email Transmissions — Personal Account AMA's IT security team, operating under the direction of Gregory Tanaka (Vice President, Legal & Compliance), initiated a routine data loss prevention ("DLP") audit in August 2022. This audit was part of AMA's standard, calendar-driven information security program, which calls for periodic reviews of email traffic and data exfiltration patterns across t

III. Proposed Cross-Claims A. First Cause of Action — Breach of Employment Agreement (§§ 9.1, 9.2, 9.3, 9.4) The first proposed cross-claim sounds in breach of contract, based on Aldrich's violations of the restrictive covenant and confidentiality provisions contained in Article 9 of his Employment Agreement dated September 5, 2017, as amended by the First Amendment dated August 1, 2020 (collectively, the "Agreement"

IV. Evidentiary Needs The following table summarizes the evidence required to support AMA's proposed Cross-Complaint, the source of each item, and its current status: Additional Evidence to Pursue During discovery: We will need to pursue the following categories of evidence through formal discovery: • Aldrich's personal email communications with Halcyon Creek/Castellanos. The emails in AMA's possession show what Aldr

V. Timeline Vulnerability — Pretext Argument The most significant vulnerability in AMA's "for cause" narrative — and correspondingly, in the factual predicate underlying the Cross-Complaint — is the timeline of events between the DLP audit and the termination. As detailed in Section II.E above, preliminary DLP findings identifying the anomalous email forwarding activity were available to Gregory Tanaka on September 6

1. The DLP audit was a routine, calendar-driven audit, consistent with AMA's standard information security protocols, and was not triggered by the dispute with Mercer, by any desire to terminate Aldrich, or by any instruction from management to investigate Aldrich specifically. Supporting documentation — such as AMA's IT security audit schedule, prior DLP audit reports for other divisions or employees, and internal c

2. The preliminary DLP findings were reported to Tanaka on September 6, 2022 — more than one month before the October 10 insubordination. This chronology demonstrates that the investigation predated the conflict between Aldrich and Mercer and was not initiated as a retaliatory measure.

3. The delay between September 6 and October 14 was attributable to the time needed to complete the forensic review (which was not finalized until October 3) and to consult with counsel regarding the appropriate response to the findings. AMA was being methodical and deliberate in its investigation, not retaliatory. The fact that AMA did not immediately act on preliminary findings reflects a responsible approach — par

4. The termination decision was made based on the cumulative evidence — both the DLP findings (which revealed a sustained pattern of unauthorized disclosure of confidential information to a personal account and a competitor) and the insubordination (which demonstrated a refusal to comply with lawful management directives and an effort to undermine corporate leadership). The termination was not based solely on either

VI. Strategic Considerations A. Leverage. The Cross-Complaint is primarily a leverage tool for settlement negotiations. We should be candid about the fact that AMA's actual damages from Aldrich's email transmissions are, at present, difficult to quantify with precision. This is particularly true because there is no evidence — at this time — that Halcyon Creek Productions has produced, sold, or otherwise commercially

VII. Recommended Next Steps Based on the analysis set forth in this memorandum, I recommend the following next steps:

1. Finalize the Draft Answer and Cross-Complaint (Document 36) for client review by January 12, 2023. The draft should incorporate the four cross-claims outlined in Section III above, together with supporting factual allegations drawn from the evidence described in Section II.

2. Obtain client approval for the Answer and Cross-Complaint from Gregory Tanaka (VP, Legal & Compliance) and Philippa Cartwright (General Counsel, AGMG). Schedule a call or meeting to discuss the draft, the strategic considerations outlined in Section VI, and the pretext vulnerability addressed in Section V.

3. Prepare supporting declarations from the following individuals: • Jonathan Mercer (President, AMA): regarding the restructuring directive, the insubordination incident, the October 13 conference with Tanaka, and the termination decision. • Dwayne Prescott (VP, Unscripted Programming): regarding the proprietary value of the show format bibles, the development costs for "Apex Endurance," "The Remix," and "Untamed We

4. File the Answer and Cross-Complaint on or about January 20, 2023, consistent with AMA's responsive pleading deadline.

5. Assess timing for potential TRO/preliminary injunction motion. I recommend discussing the advisability, timing, and evidentiary requirements for injunctive relief at the next client strategy call, which should be scheduled promptly after client review of the draft pleading.

6. Identify and interview the IT security team member who conducted the DLP audit to prepare a declaration establishing the routine nature of the audit and the pre-insubordination timing of the preliminary findings. This declaration is critical to mitigating the pretext vulnerability.

7. Retain forensic IT evidence and document chain of custody for all email logs, DLP audit data, forensic review results, and laptop analysis. Ensure that all evidence is preserved in a manner that supports authentication at deposition and trial, including through testimony of the custodian of records.

8. Prepare a comprehensive discovery plan for the Aldrich matter, including: • Requests for Production targeting Aldrich's communications with Halcyon Creek and Nina Castellanos, including communications from personal email accounts, messaging applications, and cloud storage platforms; • Form and special interrogatories regarding Aldrich's post-termination employment, business relationships with Halcyon Creek, and th