FR EA
1019-00004 · Whitmore Aerospace LLC · Engagement
northbridge-edd-engagement-letter.docx DOCUMENT M&A / Corporate
10 / 12 ← → ✕
Contract analysis Extract to table

CALDERWOOD & HARKNESS LLP Attorneys at Law

1200 Pennsylvania Avenue NW, Suite 800 Washington, DC 20004

Telephone: (202) 555-7100 Facsimile: (202) 555-7199 www.calderwoodharkness.com

May 12, 2025

PRIVILEGED AND CONFIDENTIAL ATTORNEY WORK PRODUCT

Mr. Samuel Kreindler Managing Director Northbridge Forensic Advisory Group LLC 55 Water Street, 18th Floor New York, NY 10041

Re: Engagement of Northbridge Forensic Advisory Group LLC — Tier 2 Enhanced Due Diligence Investigation of Castellan Holdings Limited (HE-394521) and Yiannis Andreou

Dear Mr. Kreindler:

1. Introduction and Engagement of Services

Calderwood & Harkness LLP ("C&H" or the "Firm"), on behalf of its client Whitmore Aerospace LLC ("Whitmore" or "WAL"), a Virginia limited liability company headquartered at 2400 Ridgecrest Boulevard, Suite 600, Arlington, Virginia 22201, hereby engages Northbridge Forensic Advisory Group LLC ("Northbridge") to conduct a Tier 2 Enhanced Due Diligence investigation as described herein (the "Engagement"). The purpose of this letter is to set forth the terms and conditions under which Northbridge will provide investigative and analytical services to C&H in support of C&H's provision of legal advice and counsel to Whitmore.

This Engagement has been authorized by Janet Pfeiffer, General Counsel and Chief Compliance Officer of Whitmore Aerospace LLC (Virginia Bar No. 78432), who has directed C&H to retain a qualified forensic investigative firm to conduct enhanced due diligence on the subjects identified below. The authorization was communicated to C&H in connection with the opening of this matter on May 7, 2025, and C&H confirms that it possesses the requisite authority from Whitmore to retain Northbridge for the purposes described in this letter.

C&H is serving as engagement counsel to Whitmore for matters involving International Traffic in Arms Regulations ("ITAR") and Export Administration Regulations ("EAR") jurisdiction and commodity classification assessment, export licensing strategy, and Office of Foreign Assets Control ("OFAC") and restricted-party sanctions screening in connection with a prospective defense export transaction more particularly described in Section 2 below. The Engagement of Northbridge is a component of C&H's legal advisory services to Whitmore and is undertaken at the direction of counsel for the purpose of enabling C&H to render informed legal advice regarding the compliance risks associated with the prospective transaction.

The responsible partner at C&H for this matter is Sandra Tung (DC Bar No. 492103). Day-to-day coordination with Northbridge will be handled by Leila Nazari, Associate (DC Bar No. 1081209), with oversight from Garrett Simmons, Lead Associate (DC Bar No. 1067432). All substantive communications from Northbridge regarding the progress of the investigation, interim findings, and final deliverables should be directed to Ms. Nazari in the first instance, with copies to Ms. Tung as appropriate. Contact information for the C&H team is as follows:

Sandra Tung, Partner Telephone: (202) 555-7118

Email: stung@calderwoodharkness.com

Leila Nazari, Associate Telephone: (202) 555-7234

Email: lnazari@calderwoodharkness.com

Garrett Simmons, Lead Associate Telephone: (202) 555-7221

Email: gsimmons@calderwoodharkness.com

2. Background and Context

The following background information is provided to Northbridge solely for the purpose of establishing the context of this Engagement and enabling Northbridge to understand the compliance concerns that have given rise to the need for enhanced due diligence. This information is confidential and privileged, and Northbridge shall treat it accordingly in all respects.

2.1 Whitmore Aerospace and the Meridian Program. Whitmore is a Virginia-based defense manufacturer specializing in the design, development, and production of advanced electro-optical and infrared systems for military applications. Whitmore has developed the WPX-4200 "Meridian" Electro-Optical/Infrared Multi-Spectral Targeting Pod (the "Meridian" or "WPX-4200"), a defense article that is likely subject to ITAR jurisdiction under United States Munitions List ("USML") Category XII(d), covering fire control, range finder, optical and guidance and control equipment. A formal commodity jurisdiction ("CJ") determination request is contemplated as part of the export licensing process. The Meridian is a next-generation multi-spectral targeting pod designed for integration on fourth- and fifth-generation fighter aircraft and is considered a significant capability enhancement for allied and partner-nation air forces.

2.2 The Prospective Export Transaction. Whitmore is pursuing a prospective Direct Commercial Sale of thirty-six (36) WPX-4200 Meridian units to the Ministry of National Defence of the Republic of Kantara ("Kantara MoND"), with an estimated base contract value of Seventy-Four Million Six Hundred Thousand United States Dollars ($74,600,000) and a total program value of approximately Ninety-One Million Three Hundred Thousand United States Dollars ($91,300,000), inclusive of initial spares packages and in-country field support services over a three-year sustainment period. The Republic of Kantara is a U.S. ally and NATO partner and is generally eligible for the acquisition of defense articles of this nature, subject to appropriate U.S. Government authorizations.

2.3 Appointment of In-Country Representative. In connection with the Meridian program, Whitmore has appointed Drakon Defence Systems Société Anonyme ("Drakon"), a Kantaran société anonyme (Registration No. KR-SA-2011-08934), registered at 42 Leventis Avenue, 3rd Floor, Velaris, Kantara 10340, as its exclusive in-country representative for the program. Drakon's commission structure is set at four and one-half percent (4.5%) of the net base contract value, yielding an estimated commission of Three Million Three Hundred Fifty-Seven Thousand United States Dollars ($3,357,000) (calculated as $74,600,000 × 4.5% = $3,357,000). Drakon is a well-established defense consultancy and systems integration firm in Kantara with a portfolio of prior representational engagements with U.S. and European defense contractors. Drakon's principal and majority shareholder is Theodoros Papadimitriou, a Kantaran national.

2.4 Phase 1 Restricted-Party Screening and Identification of Compliance Red Flag. During Phase 1 automated restricted-party screening conducted by Pinecrest Compliance Solutions LLC using the PineScan Global™ platform, and independently verified by C&H through manual screening procedures, a compliance red flag was identified concerning Drakon's minority shareholder, Castellan Holdings Limited, and its ultimate beneficial owner, Yiannis Andreou. The red flag pertains to Andreou's identified prior business association with Viktor Semichastny, a Russian national.

Specifically, Viktor Semichastny was designated on the OFAC Specially Designated Nationals and blocked Persons List (the "SDN List") under Executive Order 14024, effective April 15, 2022 (SDN Entry ID: SDNR-2022-04871). The designation basis, as published by the U.S. Department of the Treasury, is Semichastny's operation in the defense and defense-related materiel sector of the Russian Federation.

The Andreou-Semichastny association, as identified through open-source screening, arises from their co-investment in Adriatic Shores Development Ltd., a Cyprus-registered limited company (the "Adriatic Shores Entity"). The Adriatic Shores Entity was dissolved in 2020, approximately two years before Semichastny's OFAC designation. Public records indicate that both Andreou and Semichastny held equity interests in the Adriatic Shores Entity, the precise nature and extent of which remain to be determined through the enhanced due diligence investigation.

2.5 Compliance Rationale for Enhanced Due Diligence. While no direct match to Yiannis Andreou himself was found on any U.S., EU, or UN restricted-party list during Phase 1 screening, the identified historical business association between Andreou and an OFAC SDN-designated individual constitutes a red flag under OFAC compliance guidance, including but not limited to the OFAC "Framework for OFAC Compliance Commitments" (May 2019) and applicable OFAC enforcement guidance regarding sanctions evasion through the use of front companies, nominee structures, and indirect ownership. This red flag requires enhanced due diligence and a fully documented risk assessment before Whitmore may prudently proceed with the Drakon intermediary relationship and the associated export licensing submissions to the U.S. Department of State, Directorate of Defense Trade Controls ("DDTC").

Accordingly, Whitmore, through C&H, has determined to engage Northbridge to conduct the Tier 2 Enhanced Due Diligence investigation described herein in order to assess the scope and significance of the Andreou-Semichastny association, to verify the beneficial ownership structure of Castellan Holdings Limited, and to identify any additional compliance risks that may bear on the proposed intermediary arrangement with Drakon.

3. Investigation Subjects

The following individuals and entities are the subjects of this Engagement:

3.1 Castellan Holdings Limited

Castellan Holdings Limited is a primary subject of this investigation. Northbridge is directed to investigate the corporate structure, ownership chain, beneficial ownership, corporate history, and any compliance-relevant information pertaining to this entity.

3.2 Yiannis Andreou

Yiannis Andreou is a primary subject of this investigation. Northbridge is directed to investigate Andreou's personal background, business activities, corporate affiliations, and any connections — whether current or historical — to OFAC SDN-designated individuals or entities, with particular focus on the nature and extent of his relationship with Viktor Semichastny.

3.3 Viktor Semichastny (Reference Subject — Not a Primary Investigation Target)

Viktor Semichastny is a reference subject for purposes of this investigation. He is not the primary target of the Engagement. However, Northbridge is asked to investigate any current or historical connections between Andreou and Semichastny — including but not limited to corporate co-investments, shared business affiliations, financial linkages, and personal associations — to the extent that such connections can be identified through lawful investigative means. Northbridge should also identify and report on any other entities or individuals associated with Semichastny that may have a nexus to Castellan, Drakon, or Andreou.

4. Scope of Investigation

Northbridge shall conduct the following investigative activities as part of the Tier 2 Enhanced Due Diligence Engagement. The scope described below represents the minimum investigative activities to be undertaken; Northbridge should exercise its professional judgment to pursue additional lines of inquiry that may arise during the course of the investigation, provided that any material expansion of scope is discussed with C&H in advance.

4.1 Corporate Registry Searches

Northbridge shall obtain and analyze a full corporate registry extract for Castellan Holdings Limited from the Cyprus Department of Registrar of Companies and intellectual Property (the "Cyprus Registrar"). The registry extract shall include, at a minimum, the following documents and data points:

(a) Certificate of incorporation and any certificates of name change;

(b) Memorandum and articles of association, including any amendments thereto;

(c) Annual returns for all available filing years;

(d) Current and historical directors and secretaries, including dates of appointment and resignation;

(e) Current and historical shareholders, including share transfer records and allotment schedules;

(f) Registered charges, mortgages, and debentures, if any;

(g) Dissolution, strike-off, or restoration records, if any; and

(h) Any other publicly available filings or records maintained by the Cyprus Registrar.

Northbridge shall cross-reference Castellan's disclosed corporate structure — as represented by Drakon to Whitmore — against the registry filings to identify any discrepancies in reported beneficial ownership, shareholding percentages, directorship composition, or other material corporate information. Any discrepancies identified shall be highlighted in the EDD Report.

In addition, Northbridge shall conduct searches to identify any other entities in which Yiannis Andreou holds a directorship, beneficial ownership position, or position of significant control, whether in Cyprus, Kantara, the European Union, or any other jurisdiction in which relevant records are reasonably accessible. This includes searches of the Cyprus Registrar, the Kantara Commercial Registry, and any other available corporate registries as Northbridge deems appropriate.

4.2 Ultimate Beneficial Ownership Verification

Northbridge shall conduct an independent verification of whether Yiannis Andreou is the true and sole ultimate beneficial owner ("UBO") of Castellan Holdings Limited, as disclosed by Drakon. This analysis shall include, but not be limited to, the following:

(a) Determination of whether Andreou holds his interest in Castellan directly or through one or more intermediary holding entities, trusts, foundations, or nominee arrangements;

(b) Identification of any intermediary holding companies, nominee shareholders, or trust structures in the ownership chain between Andreou and Castellan;

(c) Assessment of whether any persons other than Andreou exercise significant control over Castellan, whether through voting rights, contractual arrangements, or other mechanisms;

(d) Determination of whether any designated persons — including but not limited to Viktor Semichastny — hold any direct or indirect beneficial interest in Castellan Holdings Limited or any entity in its ownership chain; and

(e) Review of any UBO filings or declarations made by Castellan under the Cyprus Anti-Money Laundering Law (Law 188(I)/2007, as amended) or the EU Anti-Money Laundering Directives, to the extent such filings are publicly accessible or obtainable through lawful means.

4.3 Media and Open-Source intelligence Searches

Northbridge shall conduct a comprehensive global media and open-source intelligence ("OSINT") search covering the investigation subjects and their known affiliates. The media search shall encompass the following parameters:

(a) Languages: English, Greek, Russian, and such other languages as Northbridge determines to be relevant based on the geographic scope of the subjects' known activities (including, without limitation, Turkish, French, and Arabic, to the extent relevant to Cyprus and the Eastern Mediterranean region);

(b) Lookback Period: A minimum of ten (10) years from the date of this letter, extending further where relevant historical information is identified;

(c) Adverse Media Screening: Identification and analysis of any adverse media reports concerning Andreou, Castellan Holdings Limited, Adriatic Shores Development Ltd., or any affiliated entities or individuals, with particular focus on reports concerning sanctions evasion, money laundering, terrorist financing, corruption, bribery, arms trafficking, proliferation of weapons of mass destruction, or other illicit activity;

(d) Andreou-Semichastny Nexus: Identification of any media reports or open-source materials linking Andreou to Semichastny beyond the Adriatic Shores Development Ltd. co-investment, including any social, professional, or business connections;

(e) Public Records Review: Review of publicly available court records, regulatory filings, government gazettes, parliamentary records, and government publications in Cyprus, the Republic of Kantara, the European Union, the United Kingdom, the United States, and any other relevant jurisdictions; and

(f) Social Media and Digital Footprint Analysis: Review of publicly accessible social media profiles and digital presence of Andreou, to the extent such review may yield information relevant to the compliance assessment.

4.4 Litigation and Regulatory Enforcement Searches

Northbridge shall conduct civil and criminal litigation searches and regulatory enforcement action searches for Yiannis Andreou and Castellan Holdings Limited in the following jurisdictions and databases:

(a) Cyprus: Civil and criminal courts, including the Supreme Court of Cyprus and district courts; Cyprus Securities and Exchange Commission enforcement records; Central Marlowe National Bank regulatory actions;

(b) European Union: Court of Justice of the European Union and General Court records; European Commission enforcement databases;

(c) United Kingdom: Companies House records; High Court of Justice records; Crown Court records; Financial Conduct Authority enforcement actions; Serious Fraud Office public records;

(d) United States: Federal court records (PACER); OFAC enforcement actions database; Department of Justice press releases and enforcement records; SEC EDGAR filings, to the extent relevant; BIS enforcement records;

(e) Republic of Kantara: Kantara civil and commercial courts; Kantara financial regulatory authority records, to the extent accessible; and

(f) Bankruptcy and Insolvency Records: Searches of publicly available bankruptcy, insolvency, and winding-up records in Cyprus, the United Kingdom, and any other jurisdictions where Andreou or Castellan is known to have operated.

4.5 Financial Network Analysis

Northbridge shall conduct an analysis of publicly available financial and transactional connections between Andreou and Semichastny, with particular attention to the following areas:

(a) Adriatic Shores Development Ltd.: Detailed analysis of the Adriatic Shores Development Ltd. co-investment, including the nature of the venture (real estate development, investment holding, or other purpose), the equity structure and respective interests of Andreou and Semichastny, the timeline of the entity's operations and dissolution, and any other co-investors or parties involved in the venture;

(b) Joint Ventures and Co-Investments: Identification of any other joint ventures, co-investments, shared corporate affiliations, or business arrangements between Andreou and Semichastny, whether current or historical;

(c) Current Financial Linkages: Identification of any current financial linkages between Andreou and Semichastny, including but not limited to shared bank accounts, shared business addresses, shared professional advisors (legal counsel, auditors, accountants, corporate service providers), or nominee relationships;

(d) Semichastny-Affiliated Entities: Assessment of whether any entities or individuals known to be affiliated with Semichastny — including family members, known business associates, and entities identified in the OFAC SDN designation materials — hold any interests in Castellan Holdings Limited, Drakon Defence Systems S.A., or any other entity connected to Andreou; and

(e) Corporate Service Providers: Identification of the corporate service providers, registered agents, and professional advisors used by Castellan Holdings Limited, and assessment of whether any of those same service providers have been used by Semichastny or his affiliated entities.

4.6 Sanctions and Watchlist Cross-Referencing

Northbridge shall conduct comprehensive screening of all individuals and entities identified during the course of the investigation — including newly discovered affiliated persons and entities not previously known to C&H or Whitmore — against the following sanctions and watchlists:

(a) OFAC Specially Designated Nationals and blocked Persons List (SDN List);

(b) OFAC Sectoral Sanctions Identifications List (SSI List);

(c) OFAC Non-SDN Menu-Based Sanctions List (NS-MBS List);

(d) Bureau of Industry and Security (BIS) Entity List;

(e) BIS Denied Persons List;

(f) BIS Unverified List;

(g) DDTC AECA Debarred Parties List (Statutory Debarment List);

(h) European Union Consolidated Sanctions List;

(i) United Nations Security Council Consolidated List;

(j) Her Majesty's Treasury (HMT) Consolidated List of Financial Sanctions Targets (United Kingdom);

(k) Canadian Consolidated Autonomous Sanctions List (SEMA List); and

(l) Any other applicable national or multilateral sanctions lists that Northbridge, in its professional judgment, deems relevant to the investigation.

In addition to screening against the foregoing lists, Northbridge shall apply the OFAC "50 Percent Rule" to assess whether any entities identified during the investigation are owned fifty percent (50%) or more, in the aggregate, by one or more blocked persons and are therefore themselves blocked under OFAC regulations, even if not individually listed on the SDN List.

4.7 Source Inquiries

Northbridge shall conduct discreet, lawful source inquiries in Cyprus and the Republic of Kantara, as appropriate and as Northbridge determines to be necessary in its professional judgment, to assess the following:

(a) Andreou's current business activities, professional reputation, and standing in the business community in Cyprus and Kantara;

(b) Andreou's known or reported ongoing connections to Semichastny or other designated persons, or to individuals or entities with known ties to the Russian defense sector;

(c) The general reputation and standing of Castellan Holdings Limited in the Cyprus business community; and

(d) Any other information relevant to the compliance risk assessment that may not be obtainable through documentary or open-source research alone.

All source inquiries must be conducted in a lawful manner consistent with applicable local laws and regulations. Under no circumstances shall Northbridge disclose the identity of Whitmore Aerospace LLC, the nature of the prospective export transaction involving the WPX-4200 Meridian, or any privileged information or attorney work product during the conduct of source inquiries. Northbridge shall use appropriate cover narratives consistent with its standard operational procedures and shall exercise all reasonable care to avoid alerting the investigation subjects to the existence of the Engagement.

5. Deliverables

Upon completion of the investigative activities described in Section 4, Northbridge shall deliver to C&H a comprehensive written Tier 2 Enhanced Due Diligence Report (the "EDD Report") setting forth all findings, analysis, and conclusions resulting from the investigation. The EDD Report shall be addressed to Calderwood & Harkness LLP and marked "PRIVILEGED AND CONFIDENTIAL — ATTORNEY WORK PRODUCT — PREPARED AT THE DIRECTION OF COUNSEL."

The EDD Report shall include the following components:

(a) Executive Summary: A concise summary of the key findings, risk assessment, and overall conclusions of the investigation, suitable for review by senior decision-makers;

(b) Detailed Findings: A section-by-section presentation of findings corresponding to each scope area set forth in Section 4, including corporate registry results, beneficial ownership analysis, media and OSINT findings, litigation and enforcement search results, financial network analysis, sanctions screening results, and source inquiry findings;

(c) Supporting Documentation and Source References: All findings shall be supported by appropriate source citations, and copies of key supporting documents (registry extracts, media articles, court records, etc.) shall be appended as exhibits to the EDD Report;

(d) Risk Assessment and Risk Rating: An overall risk assessment and risk rating for the proposed intermediary relationship with Drakon, taking into account all findings regarding Castellan Holdings Limited and Yiannis Andreou. The risk rating shall be expressed using Northbridge's standard risk classification methodology (e.g., Low, Low-Moderate, Moderate, Moderate-High, High, or equivalent); and

(e) Recommendations: Any recommendations that Northbridge may have regarding additional investigative steps, risk mitigation measures, or other actions that Whitmore and C&H should consider in light of the investigation findings.

The EDD Report shall specifically address and opine on the following questions, which are of particular importance to the compliance risk assessment:

(a) Whether Andreou's prior business association with Semichastny was limited to the Adriatic Shores Development Ltd. co-investment, or whether the association extends beyond that single venture to encompass additional business, financial, or personal relationships;

(b) Whether any current business, financial, or personal connections exist between Andreou and Semichastny, including any connections that postdate Semichastny's OFAC designation on April 15, 2022;

(c) Whether any OFAC SDN-designated individuals or entities, or any other sanctioned individuals or entities (under any applicable sanctions regime), hold any direct or indirect interest in Castellan Holdings Limited, Drakon Defence Systems S.A., or any entity in the ownership chain of either; and

(d) Whether any other adverse information regarding Andreou or Castellan has been identified that would bear on the compliance risk assessment for the proposed intermediary relationship between Whitmore and Drakon, including but not limited to information concerning corruption, bribery, money laundering, fraud, or other reputational risks.

6. Report Delivery Deadline

The EDD Report shall be delivered to C&H no later than June 16, 2025, which date represents forty (40) calendar days from the opening of the underlying matter on May 7, 2025. Delivery shall be made by encrypted electronic transmission to the C&H team members identified in Section 1, unless C&H directs an alternative delivery method.

Interim status updates shall be provided to Leila Nazari at C&H on a weekly basis throughout the duration of the Engagement. Interim updates may be provided by telephone or by encrypted email and should summarize the status of each scope area, any preliminary findings of significance, any obstacles or challenges encountered, and the projected timeline for completion.

If Northbridge anticipates any delay in meeting the June 16, 2025 deadline, Northbridge shall promptly notify both Sandra Tung and Leila Nazari, in writing, with a revised estimated delivery date and an explanation of the circumstances giving rise to the delay. C&H will evaluate any such notification on a case-by-case basis and work with Northbridge to expedite completion of the investigation to the extent practicable.

The report delivery schedule is critical to the overall compliance and export licensing timeline for the Meridian program. Whitmore has suspended finalization of the Drakon intermediary agreement pending completion of the Phase 2 Enhanced Due Diligence process. In addition, the broader export licensing timeline contemplates a commodity jurisdiction ("CJ") request filing target of June 20, 2025, and Whitmore requires the completed EDD assessment and documented risk analysis in advance of that filing in order to proceed with the Drakon intermediary engagement on an informed basis and to satisfy its compliance obligations. Northbridge should plan its investigative activities accordingly and allocate sufficient resources to meet the stated deadline.

7. Fees and Payment

7.1 Flat Fee. The total fee for this Engagement shall be a flat fee of Twenty-Eight Thousand Five Hundred United States Dollars ($28,500) for the Tier 2 Enhanced Due Diligence Report, inclusive of all investigative costs, analyst time, source inquiries, database access fees, document procurement costs, translation costs, and report preparation. The flat fee represents Northbridge's all-in price for the scope of work described in Section 4 and the deliverables described in Section 5.

7.2 Exclusions. The flat fee does not include the following, which shall be billed separately if incurred and only upon prior written authorization from C&H:

(a) Extraordinary disbursements such as overseas travel by Northbridge personnel, if required in connection with the investigation and pre-approved in writing by C&H; and

(b) Any supplemental investigation scope requested by C&H beyond the scope described in Section 4, including but not limited to investigation of additional subjects, additional jurisdictional coverage, or follow-up investigative activities arising from the initial findings of the EDD Report.

Any supplemental scope or extraordinary disbursements shall be documented in a separate written authorization or amendment to this Engagement letter prior to being incurred by Northbridge.

7.3 Payment Terms. Northbridge shall submit a single invoice to Calderwood & Harkness LLP upon delivery of the final EDD Report. Payment shall be due net thirty (30) days from the date of the invoice. The invoice shall be directed to:

Sandra Tung, Partner Calderwood & Harkness LLP 1200 Pennsylvania Avenue NW, Suite 800 Washington, DC 20004

Email: stung@calderwoodharkness.com

The invoice shall reference the C&H matter number and client name (Whitmore Aerospace LLC) to facilitate internal processing.

7.4 Fee Pass-Through. The fee payable to Northbridge under this Engagement will be passed through to Whitmore Aerospace LLC as a third-party cost under the terms of C&H's engagement letter with Whitmore dated May 7, 2025. Notwithstanding the foregoing, C&H shall be the contracting party and shall bear direct responsibility for payment to Northbridge under this Engagement letter.

8. Confidentiality and Privilege Protections

8.1 Attorney-Client Privilege and Work Product Doctrine

Northbridge acknowledges and agrees that this Engagement is undertaken at the direction of counsel — specifically, Calderwood & Harkness LLP — in anticipation of providing legal advice to Whitmore Aerospace LLC regarding compliance with U.S. export control laws (including the International Traffic in Arms Regulations, 22 C.F.R. Parts 120-130, and the Export Administration Regulations, 15 C.F.R. Parts 730-774), economic sanctions regulations administered by the Office of Foreign Assets Control of the U.S. Department of the Treasury, and related statutory and regulatory requirements including the Arms Export Control Act (22 U.S.C. § 2778) and the International Emergency Economic Powers Act (50 U.S.C. §§ 1701-1706).

All work performed by Northbridge under this Engagement, including but not limited to investigative activities, research, interviews, analysis, internal notes, drafts, memoranda, communications with C&H, and the final EDD Report, is intended to be protected by the attorney-client privilege and the attorney work-product doctrine as materials prepared at the direction of counsel in anticipation of rendering legal advice. Northbridge understands that the protection of these privileges is of paramount importance to C&H and to Whitmore, and Northbridge agrees to take all reasonable steps to preserve and protect the privileged nature of the engagement and all work product generated hereunder.

Northbridge shall treat all materials, findings, communications, and work product in connection with this Engagement as privileged and confidential. All written materials prepared by Northbridge shall bear the legend "PRIVILEGED AND CONFIDENTIAL — ATTORNEY WORK PRODUCT — PREPARED AT THE DIRECTION OF COUNSEL" or such similar legend as C&H may direct.

Northbridge shall not disclose any information regarding this Engagement, the investigation subjects, the identity of the client (Whitmore Aerospace LLC), or the nature of the underlying transaction to any third party without the prior written consent of C&H, except as may be required by applicable law, in which case Northbridge shall provide C&H with prompt advance notice of any such required disclosure to the extent permitted by law.

8.2 Non-Disclosure Obligations

Northbridge shall not disclose the existence or subject matter of this Engagement to any person or entity outside of Northbridge personnel who have a need to know for purposes of conducting the investigation. Northbridge shall limit the dissemination of Engagement-related information within its organization to those analysts, investigators, and supervisory personnel who are directly involved in the performance of the investigative work.

In particular, and without limitation, Northbridge shall not contact or communicate with any of the following persons or entities without the prior written consent of C&H:

(a) Yiannis Andreou;

(b) Castellan Holdings Limited or any of its directors, officers, employees, or agents;

(c) Drakon Defence Systems S.A. or any of its directors, officers, employees, or agents, including Theodoros Papadimitriou;

(d) Any representative, official, or employee of the Republic of Kantara or Kantara MoND; and

(e) Viktor Semichastny or any known representative, associate, family member, or agent of Semichastny.

8.3 Data Security

Northbridge shall maintain appropriate physical, technical, and administrative safeguards to protect all information and materials obtained or produced in connection with this Engagement from unauthorized access, disclosure, alteration, or destruction. Such safeguards shall be consistent with industry best practices for the handling of sensitive investigative materials and privileged attorney work product.

The EDD Report, all supporting materials, and all interim communications containing substantive findings or analysis shall be transmitted to C&H via encrypted electronic means (using AES-256 encryption or equivalent) or secure physical delivery, as directed by C&H. Northbridge shall not transmit any Engagement-related materials via unencrypted email or other unsecured channels.

Northbridge shall retain all Engagement-related materials in accordance with its standard document retention policies, provided that such retention period shall not be less than five (5) years from the date of delivery of the final EDD Report, unless C&H directs otherwise in writing.

9. Representations and Warranties of Northbridge

Northbridge represents and warrants to C&H and to Whitmore as follows:

(a) No Conflict of Interest. Northbridge represents that it has conducted an internal conflict of interest check and has determined that it has no conflict of interest with respect to the investigation subjects — Castellan Holdings Limited, Yiannis Andreou, or Viktor Semichastny — or any party to the underlying transaction, including Whitmore Aerospace LLC, Drakon Defence Systems S.A., Theodoros Papadimitriou, or the Republic of Kantara / Kantara MoND. Northbridge has not previously been engaged by, and does not currently represent or provide services to, any of the foregoing individuals or entities. If at any time during the Engagement a potential conflict of interest is identified, Northbridge shall promptly disclose such conflict to C&H.

(b) Professional Liability Insurance. Northbridge represents that it maintains appropriate professional liability (errors and omissions) insurance with policy limits adequate for an engagement of this nature and scope, and shall maintain such coverage throughout the term of the Engagement. Northbridge shall provide evidence of such insurance coverage upon request by C&H.

(c) Legal Compliance. Northbridge represents that it will conduct all investigative activities in connection with this Engagement in compliance with all applicable laws and regulations, including but not limited to:

(i) The Fair Credit Reporting Act, 15 U.S.C. § 1681 et seq., to the extent applicable to the investigative activities contemplated hereunder;

(ii) Data privacy laws of the European Union, including the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"), and the data protection laws of the Republic of Cyprus;

(iii) All applicable anti-bribery and corruption laws, including the U.S. Foreign Corrupt Practices Act, 15 U.S.C. §§ 78dd-1 et seq., and the UK Bribery Act 2010, to the extent applicable;

(iv) All applicable laws of the Republic of Cyprus, the Republic of Kantara, and any other jurisdiction in which Northbridge conducts investigative activities under this Engagement; and

(v) All applicable U.S. sanctions laws and regulations, including the requirement that Northbridge itself does not engage in any prohibited transactions with sanctioned persons in the course of conducting the investigation.

(d) Qualified Personnel. Northbridge represents that all investigators and analysts assigned to this Engagement are qualified professionals with relevant experience in corporate investigations, beneficial ownership analysis, sanctions compliance due diligence, and cross-border investigative research. Northbridge shall ensure that appropriately experienced personnel are assigned to this Engagement and that the Engagement receives adequate supervisory oversight by Northbridge senior management.

10. Term and Termination

10.1 Term. This Engagement shall commence upon execution of this letter by both parties and shall continue until delivery of the final EDD Report and payment of all fees due and owing hereunder, unless earlier terminated in accordance with this Section 10.

10.2 Termination for Convenience. Either party may terminate this Engagement upon ten (10) business days' written notice to the other party. Such notice shall be delivered by email to the designated contacts identified in this letter, with confirmation by overnight courier or certified mail.

10.3 Compensation Upon Early Termination. In the event of early termination by C&H, Northbridge shall be entitled to compensation on a pro-rata basis for work completed through the date of termination, calculated against the Twenty-Eight Thousand Five Hundred Dollar ($28,500) flat fee. Northbridge shall provide C&H with a detailed summary of work completed as of the termination date to support the pro-rata fee calculation. In the event of early termination by Northbridge, Northbridge shall likewise be entitled to pro-rata compensation for work completed, and shall cooperate fully with C&H to transition the engagement to an alternative provider, if applicable.

10.4 Obligations Upon Termination. Upon termination of this Engagement for any reason, Northbridge shall promptly: (a) return to C&H or, at C&H's direction, securely destroy all materials received from C&H in connection with the Engagement; and (b) deliver to C&H any partial work product completed as of the date of termination, including any draft reports, research memoranda, and supporting documentation.

11. Limitation of Liability

Northbridge's total aggregate liability to C&H, Whitmore, and any other person or entity under or in connection with this Engagement — whether arising in contract, tort, negligence, strict liability, or otherwise — shall not exceed the fee actually paid to Northbridge under this Engagement (i.e., Twenty-Eight Thousand Five Hundred United States Dollars ($28,500)). This limitation of liability shall not apply to claims arising from Northbridge's gross negligence, willful misconduct, or breach of the confidentiality and privilege provisions set forth in Section 8.

Northbridge makes no guarantee or warranty as to the completeness of publicly available records in foreign jurisdictions, and C&H and Whitmore acknowledge that the availability and accuracy of public records varies significantly across jurisdictions. The EDD Report is based on information reasonably obtainable through lawful means as of the date of the report, and Northbridge cannot warrant that all relevant information will have been identified or that circumstances will not change after the report date. The EDD Report does not constitute legal advice, and C&H and Whitmore should not rely upon the EDD Report as a substitute for independent legal analysis.

12. Governing Law and Dispute Resolution

12.1 Governing Law. This Engagement letter and all matters arising out of or relating to this Engagement shall be governed by and construed in accordance with the laws of the District of Columbia, without regard to conflict of laws principles.

12.2 Dispute Resolution. Any dispute, controversy, or claim arising out of or relating to this Engagement letter, or the breach, termination, or validity thereof, shall be resolved by binding arbitration administered by the American Arbitration Association in accordance with its Commercial Arbitration Rules. The arbitration shall be conducted in Washington, DC, by a single arbitrator selected in accordance with the applicable rules. The decision of the arbitrator shall be final and binding upon the parties and may be entered as a judgment in any court of competent jurisdiction. Each party shall bear its own costs and attorneys' fees in connection with any arbitration proceeding, unless the arbitrator determines that the allocation of costs and fees should be adjusted in light of the circumstances.

13. Authorization and Acceptance

C&H confirms that it has been authorized by its client, Whitmore Aerospace LLC, through Janet Pfeiffer, General Counsel and Chief Compliance Officer, to engage Northbridge Forensic Advisory Group LLC for the purposes described in this letter. The terms set forth herein have been reviewed and approved by Ms. Pfeiffer on behalf of Whitmore.

If the foregoing terms are acceptable to Northbridge, please countersign this letter in the space provided below and return a signed copy to the undersigned by email (scanned PDF) or by overnight courier. Upon receipt of the countersigned letter, C&H will transmit the limited briefing memorandum referenced below to facilitate the commencement of investigative activities.

We look forward to working with Northbridge on this important engagement and appreciate Northbridge's responsiveness in accepting and commencing this assignment on an expedited basis.

Very truly yours,

CALDERWOOD & HARKNESS LLP

By: ________

Sandra Tung Partner DC Bar No. 492103 Telephone: (202) 555-7118

Email: stung@calderwoodharkness.com

ACCEPTED AND AGREED

The undersigned, on behalf of Northbridge Forensic Advisory Group LLC, hereby accepts and agrees to the terms set forth in this Engagement letter and confirms Northbridge's readiness to commence the Tier 2 Enhanced Due Diligence investigation described herein.

NORTHBRIDGE FORENSIC ADVISORY GROUP LLC

By: ________

Samuel Kreindler Managing Director

Date: ________

Enclosures

Note Regarding Enclosures: No privileged client materials are enclosed with this letter. Upon execution and return of this Engagement letter by Northbridge, C&H will provide Northbridge with a separate, limited briefing memorandum containing non-privileged background information on the investigation subjects. The briefing memorandum will include, at a minimum: (i) publicly available corporate registry data for Castellan Holdings Limited (HE-394521) as currently in C&H's possession; (ii) publicly available corporate registry data for Drakon Defence Systems S.A. (KR-SA-2011-08934); (iii) open-source screening results regarding the Andreou-Semichastny connection, including relevant PineScan Global™ screening output; and (iv) the OFAC SDN designation details for Viktor Semichastny (SDN Entry ID: SDNR-2022-04871). The briefing memorandum will be transmitted via encrypted electronic means following receipt of the countersigned Engagement letter.

cc: Janet Pfeiffer, General Counsel & Chief Compliance Officer, Whitmore Aerospace LLC (via encrypted email — privileged and confidential)

cc: Leila Nazari, Associate, Calderwood & Harkness LLP

cc: Garrett Simmons, Lead Associate, Calderwood & Harkness LLP

FieldDetail
Full Legal NameCastellan Holdings Limited
Entity TypeCyprus private limited company
Registration NumberHE-394521
Registered Office8 Themistocles Dervis Street, Office 401, Nicosia, Cyprus 1066
Relationship to TransactionHolds a twenty-eight percent (28%) equity stake in Drakon Defence Systems S.A. (Registration No. KR-SA-2011-08934)
Listed Ultimate Beneficial OwnerYiannis Andreou (per Drakon's disclosure to Whitmore)
FieldDetail
NationalityCypriot
Approximate Age63 years
StatusListed as the ultimate beneficial owner of Castellan Holdings Limited
Identified Compliance ConcernFormer business association with Viktor Semichastny (OFAC SDN-designated individual) through co-investment in Adriatic Shores Development Ltd. (Cyprus, dissolved 2020)
FieldDetail
NationalityRussian
Approximate Age58 years
OFAC StatusDesignated on OFAC SDN List under Executive Order 14024, effective April 15, 2022
SDN Entry IDSDNR-2022-04871
Designation BasisOperating in the defense and defense-related materiel sector of the Russian Federation