MGLA
Multi-Gap Live Analysis
Vol. VIII · Findings · How a gap becomes a record

Every finding is bound to evidence.

MGLA does not surface opinions. It surfaces findings: structured records that bind an obligation to the artefact that violated it, ranked by a weighted risk score and routed to a named owner.

§ 01   Anatomy of a finding

Specimen — GDPR · Critical · 48.1

A finding has a fixed shape. It is not a paragraph of analysis and it is not a screenshot — it is a typed record that the framework can act on, route, version, and close.

The card on the right is a real specimen from a GDPR loop: an ambiguous legitimate-interest balancing test, surfaced across all four normative layers, with the evidence that produced it.

domainOne of nine — AI, GDPR, CYBER, FINTECH, CONTRACT, PQC, WEB3, ECOM, SPACEseverityCritical · High · Medium · Low · Inforisk scoreWeighted: severity × confidence × domain prioritylegal basisThe article(s), recital(s), and supervisory guidance invokedevidenceThe artefacts — log, clause, configuration — that produced the gapownerThe named function responsible for the closure
● FINDING / GDPR / CRITICALrisk 48.1
Ambiguous legitimate-interests balancing test
NORMGDPR Art. 6(1)(f) · WP 217TECHconsent-svc v3.2 · 14,221 evt/dCONTRACTDPA §7 — processor scope mismatchJURISDE · IE · BR  (3)CONFIDENCE0.92OWNERDPO · Privacy EngineeringSTATUSOPEN · routed
evaluated 2026-04-25 19:06:46 · loop #4,221 · evidence hash a7f3…c19b

§ 02   Severity & weighting

Risk score = severity × confidence × domain priority
SeverityWeightMeaning
Critical
25
Immediate regulatory risk. Potential fines, enforcement, or breach exposure.
High
15
Significant gap requiring closure within weeks.
Medium
8
Notable gap to address in the medium term — one to three months.
Low
3
Minor gap with limited exposure. Address when convenient.
Info
1
Informational observation or already-resolved item.

§ 03   Lifecycle of a finding

01
Open

Surfaced by the loop and bound to a named owner with policy-driven routing.

02
Triage

Severity, confidence and ownership confirmed; if disputed, returned with evidence.

03
Acting

Remediation in progress. The framework re-evaluates on every relevant change.

04
Closed

Evidence confirms closure. The finding remains on the chain of evidence, versioned.

05
Reopened

Drift in the layer that produced the finding re-opens it. The clock resumes.

MGLA
Multi-Gap Live Analysis™

A live regulatory analysis framework, developed and maintained by IT Law 2035.

Framework
Reading
Institution
MGLA™ Multi-Gap Live Analysis™ · © 2026 IT Law 2035The MGLA framework, architecture and methodologies are proprietary.