Camera System Options

Requirements Loaded

Source: Tier 2 compound requirements document integration/security-infrastructure.md, v9, last-updated 2026-08-05, supplied in full in the task prompt for this run and cross-checked against the on-disk copy referenced by the knowledge index (also shown as v9, POPULATED). Individual Tier 1 domain documents were not loaded, per standing instruction.

This is a full formal re-run, not a transcription of the prior same-day pass. Every specific make/model below was independently re-verified today (2026-08-05) by live web search and page fetch — see the Source URL and Availability note on every priced line. The prior pass's Option B "recommendation" (SKUs DS-2CD2347G2-LU bay turret and DS-2CD2T47G2-LSE gate bullet, both found delisted) has been dropped entirely; it is not carried forward.

Key constraints extracted (v9, corrected from v7/v8):

---

Phase 1 Budget: ~$5,000 (cameras + NVR combined)

All figures below include GST. No PoE switch cost included — already resolved (see above).

---

Live Verification Summary (2026-08-05)

What changed vs. the ad-hoc research earlier today: the NVR and gate-camera findings quoted in the task brief are confirmed accurate and are carried forward with independent re-verification (including a direct fetch of the official Hikvision NVR datasheet, which this pass added and the earlier ad-hoc research did not have). The bay camera (DS-2CD2366G2-ISU/SL, $399) is also confirmed live and in a buyable state today. One new, materially useful finding this pass: Smart Surveillance also sells an 8-channel/8-PoE version of the same NVR family (DS-7608NI-M2/8P) with 4TB HDD bundled for $1,599 — $300 cheaper than the 16-channel unit, opening up a genuine budget option not identified in the ad-hoc research, at the cost of Phase 3 scalability headroom (see Option A compliance table).

---

Options

Option A: Budget — 8-ch NVR + 4x Strobe/Siren Turret (uniform camera model, gate + bay)

Spec summary: 1x Hikvision DS-7608NI-M2/8P NVR with bundled 4TB HDD (8 channels, 8 built-in PoE ports); 4x Hikvision DS-2CD2366G2-ISU/SL 6MP ColorVu AcuSense strobe/siren turret, 2.8mm — 2 positioned at the gate for rego/driver capture, 2 for bay coverage. Using one camera model everywhere simplifies spares, firmware, and Tom's day-to-day config.

Requirements compliance (against corrected v9):

Phase 1 cost (NZD incl. GST):

Leaves ~$1,655 headroom against the $5,000 envelope.

Storage/retention check: 6MP H.265+ working estimate ~10-12GB/day/camera (higher than the compound requirement's 4MP working figure of ~8GB/day, since the substitute cameras are 6MP, not the originally-specified 4MP). At 4 cameras x ~12GB/day = 48GB/day, a 4TB (~3,600GB usable) HDD gives ~75 days, short of the 90-day insurer target. This is a genuine, quantified risk introduced by moving from 4MP to 6MP substitute cameras — mitigate by tuning H.265+ smart-compression/bitrate settings down in the NVR config (Tom-manageable), or budget for a second HDD (the NVR has only 1 spare SATA bay on the 8-ch unit) sooner than Phase 3 would otherwise require.

Phase 2/3 upgrade path: Cameras can be added up to the 8-port ceiling (4 more before running out); beyond that, this NVR must be replaced, not just supplemented — the single biggest difference from Option B. Second HDD can be added in the spare SATA bay if retention needs increase.

What this locks in: Commits to a hardware ceiling of 8 cameras total, in tension with the Phase 3 vision (8+ with no replacement). Locks in the same camera model at gate and bay, which is operationally simple but means no differentiation in hybrid-light range between the two roles.

NZ supplier(s): Smart Surveillance (NVR, https://www.smartsurveillance.co.nz), Security Camera Warehouse (cameras, https://www.securitycameras.co.nz).

Risks: NVR channel ceiling conflicts with the explicit Phase 3 requirement that the NVR "must scale without replacement" to 8+ cameras — this option only works if Ed is willing to accept an NVR swap at Phase 3, which is a real cost not modelled in this budget. Storage runs slightly short of the 90-day target on default settings. ONVIF/RTSP not independently re-confirmed for this exact NVR SKU (M2/8P) this pass.

---

Option B: Recommended — 16-ch NVR + 2x Active-Deterrence Hybrid-Light Gate Camera + 2x Strobe/Siren Bay Camera

Spec summary: 1x Hikvision DS-7616NI-M2/16P NVR with bundled 4TB HDD (16 channels, 16 built-in PoE ports); 2x Hikvision 6MP ColorVu 3.0 Active Deterrence Turret (canonical part number DS-2CD2367G2H-LISU/SL; retailer-listed SKU text DS-2CD23676G2H-LIS2/SL-2.8MM — confirm exact part number before ordering) at the gate, 30m IR + 30m white-light hybrid illumination; 2x Hikvision DS-2CD2366G2-ISU/SL 6MP ColorVu AcuSense strobe/siren turret for bay coverage.

Placement rationale: gate cameras capture rego plates/driver identity (the sole gate log, since EasyGate has no data interface) and get the higher-spec hybrid-light unit for the longer, harder-lit driveway throw; bay cameras use the lower-cost strobe turret, adequate for shorter-range shed-door coverage.

Requirements compliance (against corrected v9):

Phase 1 cost (NZD incl. GST):

Leaves ~$1,018 headroom against the $5,000 envelope for installation labour and contingency.

Storage/retention check: Mixed fleet — 2 gate cameras at an estimated ~12GB/day each (higher-spec hybrid-light unit, longer illumination range increases bitrate) + 2 bay cameras at ~10GB/day each = ~44GB/day total. A 4TB (~3,600GB usable) HDD gives ~82 days — still slightly short of the strict 90-day insurer target on default settings, though closer than Option A. Recommend confirming the exact insurer wording (see Open Questions) and, if 90 days must be a hard floor from day one, either tune bitrate down in the NVR (Tom-manageable, no specialist callout) or add a second HDD into the M2/16P's spare SATA bay (up to 16TB supported) — a straightforward, non-disruptive upgrade given 2 SATA bays are built in.

Phase 2/3 upgrade path: Add up to 12 more cameras into spare PoE ports on the same NVR (16-channel headroom) with no replacement; add a second HDD when camera count or retention needs grow past what 4TB comfortably covers (roughly 6-8 cameras at these bitrates); integrate the DSC HS2032 alarm panel's PGM output into the NVR's alarm input 1 in Phase 2 (now unambiguously sufficient under the corrected 1-input floor).

What this locks in: Hikvision NVR/Hik-Connect ecosystem for the project's lifecycle; camera mounting positions should be finalised before cabling is run; the gate camera's exact SKU needs confirming with the retailer (see caveat) before the order is placed.

NZ supplier(s): Smart Surveillance (NVR, https://www.smartsurveillance.co.nz/products/hikvision-ds-7616ni-m2-16p-16-channel-1u-16-poe-8k-nvr), Security Camera Warehouse (both camera models, https://www.securitycameras.co.nz/products/network-ip-cameras/hikvision/).

Risks: Gate camera SKU text discrepancy needs a direct confirmation call/email before ordering (low risk — description matches exactly, only the printed part number differs slightly). ONVIF Profile T/G phrasing not found verbatim for the NVR SKU despite a direct datasheet fetch — recommend a one-line written confirmation from the retailer before committing budget. Storage retention runs close to, but arguably just under, the 90-day target on default bitrate settings and should be tuned or supplemented. No backup internet path for the 60-second alert requirement in Phase 1 (unchanged risk, applies to all options).

---

Option C: Premium — 16-ch NVR + 4x Active-Deterrence Hybrid-Light Camera (uniform, gate + bay)

Spec summary: 1x Hikvision DS-7616NI-M2/16P NVR with bundled 4TB HDD (as Option B); 4x the same 6MP ColorVu 3.0 Active Deterrence hybrid-light turret used at the gate in Option B, deployed uniformly across gate and bay positions — no camera-tier compromise anywhere on site.

Requirements compliance (against corrected v9): Same pattern as Option B, with two differences: (1) all 4 cameras get the longer 30m IR + 30m white-light hybrid range and higher-spec AcuSense/ColorVu 3.0 processing, which is a genuine quality uplift for bay coverage at night, not just the gate; (2) storage load increases further since all 4 cameras are now the higher-bitrate model.

Phase 1 cost (NZD incl. GST):

Leaves only ~$706 headroom against the $5,000 envelope — the tightest of the three options.

Storage/retention check: 4 cameras x ~12GB/day = ~48GB/day → ~75 days on the bundled 4TB HDD, short of the 90-day target by a wider margin than either other option, because every camera is now the higher-bitrate hybrid-light model. A second HDD (e.g. an 8TB or larger Western Digital/Seagate Surveillance-class drive in the NVR's second SATA bay) should be budgeted as a near-term Phase 1 add, not deferred to Phase 3, if this option is chosen and the 90-day figure is a hard requirement — this pushes the realistic all-in Phase 1 cost above the figure in the table above and closer to the edge of, or slightly over, the $5,000 envelope once a second drive (~$250-450 estimate, unpriced this pass) is included.

Phase 2/3 upgrade path, locks-in, suppliers: Same as Option B. Main advantage: no camera-tier compromise, and the strongest low-light/night image quality across the whole site given boats/caravans are high-value and unattended overnight.

Risks: Tightest budget headroom of the three options once installation labour is added, and effectively requires an early second-HDD purchase to hit the 90-day retention target — treat the table total as a lower bound, not the realistic all-in Phase 1 cost.

---

Recommended Option

Option B.

Reasons:

1. It is the only option that fully satisfies the Phase 3 "8+ cameras, no NVR replacement" requirement while staying meaningfully under budget (~$3,982 of ~$5,000, ~$1,018 headroom) — Option A trades this away for a $637 saving that creates a real future hardware-replacement cost not reflected in its own budget line; Option C spends the difference on image quality everywhere rather than on the specific gate-deterrence requirement that the compound requirements emphasise most.
2. Every specific product in this option was independently re-verified today with a live, page-confirmed price and stock/availability status (see Live Verification Summary) — this replaces the ad-hoc research's unverified carry-forward with genuine confirmation, including a direct fetch and read of the official Hikvision NVR datasheet.
3. Meets every disqualifying compound requirement (H.265, RTSP, active deterrence at the gate, 25fps/1080p rego capture, ≥1 alarm input under the corrected v9 floor, no cloud-first architecture, no paid monitoring contract) with only two remaining verification items, both low-risk and cheap to close before ordering: the NVR's ONVIF Profile T/G wording, and the gate camera's exact printed SKU.
4. Storage retention is closer to the 90-day target than either alternative and has a clear, low-cost path to close the remaining gap (bitrate tuning or a second HDD in the NVR's spare SATA bay) without hardware replacement.
5. Operationally appropriate for Tom's stated capability — Hik-Connect app and the NVR's local GUI remain the interface across all three options; Option B does not add any operational complexity over Option A.

---

Open Questions

1. Confirm the gate camera's exact SKU with Security Camera Warehouse before ordering. The page-scraped text reads DS-2CD23676G2H-LIS2/SL-2.8MM, which does not exactly match Hikvision's canonical DS-2CD2367G2H-LISU/SL. Product description matches exactly (6MP, ColorVu 3.0, Smart Hybrid Light, strobe+siren+mic, 2.8mm) — this is very likely a retailer data-entry variant, not a different product, but confirm by phone/email before committing budget.

1. Get written confirmation of ONVIF Profile T/G support on the DS-7616NI-M2/16P. The official Hikvision datasheet (directly fetched this pass) confirms ONVIF version 2.2/2.5 and RTSP but does not use "Profile T/G" wording explicitly. Given Profile T is disqualifying if absent per the compound requirements, get this in writing from Smart Surveillance or Hikvision NZ support — a one-line question, low risk given the ONVIF version level, but not yet phrased in the manufacturer's own profile-letter terminology.

1. 90-day retention is tight on the bundled 4TB HDD across all three options once the shift from the originally-specified 4MP cameras to 6MP substitutes is accounted for (estimated 75-88 days depending on option, against a 90-day target). Decide whether to (a) tune NVR bitrate/compression settings down (Tom-manageable, no cost), (b) budget a second HDD now rather than at Phase 3 (~$250-450 estimate, unpriced this pass — get a quote), or (c) confirm with FMG directly whether the 90-day figure has any tolerance.

1. Facial blurring / redaction workflow decision — unchanged, still open. Confirmed absent from the M-series NVR tier; requires a manual/third-party redaction workflow on exported clips as a stated operating procedure, or a NVR-tier upgrade to Hikvision's DeepinMind line (not proportionate to this project's scale).

1. FMG insurance CCTV retention and camera-count requirements — unchanged open item, confirm directly with FMG.

1. Planning consultant confirmation of CCTV-based gate logging as consent evidence — unchanged open item.

1. Site survey for lens sizing — unchanged open item; driveway length determines whether 2.8mm (assumed throughout this document) is the right gate-camera lens or whether a longer focal length is needed.

1. Camera/NVR internet backup for the 60-second alert requirement — unchanged open item. Phase 1 has no backup connectivity for the camera/NVR path if Lightwire is down. If this must hold even during an outage, a 4G backup router needs to move from Phase 2 into Phase 1 scope, with associated budget impact outside the ~$5,000 envelope modelled here.

1. DSC HS2032 / TL280LE communicator procurement status — unchanged open item, a Phase 2 blocker rather than a Phase 1 camera procurement blocker; now unambiguously compatible with any of the three NVR options above under the corrected 1-alarm-input floor.

1. Constraints that could be relaxed if budget is tight: drop from 4 to 2 cameras at Phase 1 launch (gate cameras only, since these are the load-bearing consent-evidence requirement) and add bay cameras in a fast-follow Phase 1b; accept Option A's 8-channel NVR and plan for a Phase 3 NVR swap explicitly rather than treating 16-channel headroom as mandatory, if the ~$637 saving materially matters against other Phase 1 budget lines.

---

Intruder Alarm System Options

Requirements Loaded

Source: This is a full, formal re-run commissioned directly by the parent agent. Per explicit

task instruction, the Tier 2 compound requirements were supplied embedded in the task (extracts

from .claude/knowledge/integration/security-infrastructure.md, v9, 2026-08-05) rather than read

from the file directly. context/guidance.md and .claude/knowledge/strategic-context.md were read

directly per standard procedure. The prior version of this file (same-day v1, referencing v5 of the

compound requirements) was read to avoid duplicating work, but this pass supersedes it — mandatory

live re-verification was run against every specific make/model per this agent's own standing

instructions, and it found a materially significant new issue that no prior pass caught.

Key constraints extracted from the embedded v9 extract:

From context/guidance.md / strategic-context.md: no paid monitoring contract in Phase 1; NZ

suppliers with local service capability preferred; Tom must be able to arm/disarm and review alerts

without specialist callout; alarm budget itself is TBD, subject to this document's own output.

---

CRITICAL FINDING (new this pass) — the confirmed platform is Grade 2, not Grade 3

This is the headline finding of this refresh and the single most important thing in this

document. Every prior pass of this research (including the same-day v1 predecessor to this file)

stated or implied that the DSC PowerSeries Neo HS2032 is EN 50131 Grade 3 certified. This is

factually wrong, and it was live-verified as wrong in this pass, with a primary-source citation.

DSC's own compliance documentation states, verbatim: *"The models HS2128, HS2064, HS2032, HS2016

Control Panel has been certified by Telefication according to EN50131-1:2006 +A1:2009,

EN50131-3:2009, EN50131-6:2008+A1:2017 (Type A) and EN50136-1:1997 (ATS2) for Grade 2, Class

II."* Source:

docs.johnsoncontrols.com — EN50131 Compliance and Certification, PowerSeries Neo.

This covers the entire PowerSeries Neo panel family — HS2016, HS2032, HS2064, and HS2128 — with no

Grade 3 variant. There is no Grade 3 version of PowerSeries Neo.

The DSC panel family that is actually EN 50131 Grade 3 certified is PowerSeries Pro (HS3032 /

HS3128 / HS3248), a physically and architecturally different product line, not an upgrade module or

firmware option on top of Neo. This is confirmed by DSC's own PowerSeries Pro product page

(dsc.com PowerSeries Pro — Grade 3),

which describes the line as "EN Grade 3 compliant," and independently corroborated by an NZ trade

listing at SWL for the "HSC3020C — PowerSeries Pro Grade 3 Metal Cabinet" (see Option C below).

What this means: if "EN 50131 Grade 3 equivalent" in the compound requirements is read literally

— i.e., an installation that actually carries Grade 3 certification, as opposed to a Grade 2 system

built to a high standard — the currently confirmed HS2032 + TL280LE platform does not satisfy it, and

has never satisfied it, regardless of what accessories, PIRs, or communicator are fitted to it. Grade

is a property of the certified control panel itself, not something achieved by adding

better-than-average sensors around a Grade 2 panel.

This does not necessarily mean the confirmed platform is wrong for this project — Grade 2 is the

standard most NZ commercial and residential alarm installations use, and it may be entirely

sufficient for FMG's actual requirement once that requirement is confirmed (v9 notes the FMG quote,

and any monitoring/grade requirement attached to it, is still pending). But it does mean the

requirements document and this document's own prior versions have been carrying forward an

unverified and, on primary-source checking, incorrect compliance claim. This should be corrected

upstream in security-infrastructure.md as a v10 factual correction, and Ed/Tom should not present

this system to FMG (or anyone else) as "EN 50131 Grade 3" without either (a) confirming FMG will

accept Grade 2, or (b) moving to the PowerSeries Pro line covered in Option C below.

This finding is presented here, ahead of the options, precisely because it is the kind of thing this

document's Common Pitfalls guidance is written to catch, and because it changes what "the confirmed

platform" can honestly be represented as delivering.

---

Budget

Alarm budget is listed as TBD in context/guidance.md, subject to compound requirements output — v9

does not itself set a dollar figure. Estimated total for Option A (the recommended, Grade 2, cost-

effective specification): approximately $3,100–$4,300 NZD incl. GST for hardware + installation,

essentially unchanged from the prior pass's estimate. Option C (genuinely Grade 3, PowerSeries Pro)

is materially more expensive and cannot be fully costed from public NZ pricing — see that option.

---

Options

---

Option A: DSC HS2032 + TL280LE — Full Phase 2 Specification (Recommended for Phase 1, Grade 2)

Full specification for a 12-bay facility with perimeter and entry detection, wired reed switches for

bay door monitoring, dual-tech PIR for the main shed, and the TL280LE-AU dual-path communicator.

Spec summary:

• Panel: DSC PowerSeries Neo HS2032 (8 zones onboard, expandable to 32 via RS-485 expanders) —

EN 50131 Grade 2, Class II certified, not Grade 3 (Critical Finding above)

• Communicator: DSC TL280LE-AU (LTE 4G + Ethernet dual-path, Australia/NZ-region variant —

confirmed live at SWL under this exact model number, not the discontinued US -AT/-RG variants; see

verification note below)

• Zone expanders: 2x DSC HSM2108 (adds 8 zones each; total 32 zones available)
• Keypad: DSC HS2LCD (LCD keypad, local arm/disarm and status display)
• PIR main shed: 2x DSC BV-501 (dual-tech PIR + microwave; anti-masking; ceiling-mount, suited to a

reflective steel-shed environment)

• PIR entry zone: 1x DSC LC-103-PIMSK (anti-masking)
• Bay door contacts: 12x wired surface-mount reed switches (NC, EOL-supervised zones — one per bay)
• Entry/exit contacts: 2x wired surface-mount reed switches (entry door and secondary access point)
• Internal SLA battery: supplied with HS2032 (4+ hours standby); independent of external UPS
• Tamper-protected steel enclosure with anti-substitution supervision on panel and communicator

Zone allocation plan (17 of 32 available zones used): Zones 1–12 (bay doors), 13–14 (entry/

secondary door), 15–16 (dual-tech PIR), 17 (entry-zone PIR), 18–32 spare for Phase 3

perimeter/gate/driveway.

Requirements compliance:

Live availability verification this pass:

• DSC PowerSeries Neo HS2032 panel — confirmed current and actively listed by DSC

(dsc.com HS2032 product page)

and by SWL, multiple configurations (PCB-only, with cabinet, in kits) all shown as in-catalogue

today: SWL HS2032 PCB only,

SWL HS2032 with cabinet.

Price: POA (trade account) — not independently orderable at a public numeric NZ price this

pass, same as every prior pass. Availability: confirmed listed/orderable 2026-08-05; stock level

not shown.

• DSC TL280LE-AU communicator — this is the finding that most needed re-checking this pass, and

it checked out with an important nuance. A general search on "TL280LE" surfaces multiple

discontinued North American carrier variants — TL280LE-AT (AT&T) and TL280LE-RG (Rogers,

Canada) are both confirmed discontinued without replacement

(geoarm.com TL280LE-AT listing,

Anixter Canada TL280LE-RG listing).

Those are not the product being recommended here. The correct product for this project is the

regional AU/NZ variant, TL280LE-AU, confirmed as a distinct, separately-numbered SKU, live and

in-catalogue at SWL today:

SWL — DSC Neo TL280LE-AU PowerSeries NEO LTE Ethernet Dual-Path communicator 4G,

fetched 2026-08-05, confirming compatibility with HS2016/HS2032/HS2064/HS2128 and a compatible

cabinet (PC5003C). Its own installation documentation confirms the -AU variant supports

network-profile selection for Telstra, Vodafone, Optus, and Spark

(search evidence: DSC TL280LE installation manual excerpts referencing "-AU radio," profile

selection "01 Telstra / 02 Vodafone / 03 Spark"). Price: POA at SWL.

A second NZ retailer, Alarm Warehouse NZ, lists what is very likely the same underlying product

under a differently-formatted model name, "TL2080LE," at a stated numeric price of $499.00

NZD (Alarm Warehouse NZ product page,

fetched 2026-08-05) — description wording ("fully redundant Internet and Cellular dual path,"

SIA/Contact ID, 128-bit AES) matches the SWL TL280LE-AU listing closely enough to treat this as the

same product, but the differing model-name formatting between the two retailers has not been

resolved to full certainty — confirm the exact SKU on the order before paying. GST inclusion is

not stated on either page — budget up to $573.85 incl. GST until confirmed directly with the

supplier.

• Related DSC Neo -AU/-ANZ regional communicators found at SWL, for completeness: LE2080-AU

(cellular-only, no Ethernet — not sufficient alone for the dual-path requirement)

(SWL LE2080-AU),

and TL880LEAT-ANZ (Alarm.com-branded Internet & 4G dual-path module)

(SWL TL880LEAT-ANZ).

The TL880LEAT-ANZ is explicitly not recommended for this project: it is branded and marketed

for Alarm.com's interactive services, and Alarm.com's own support documentation confirms remote

app-based arm/disarm and push notifications stop working without an active, paid Alarm.com

provider subscription — local keypad arm/disarm still works, but the "no mandatory monitoring

contract for Phase 1" requirement would be broken by choosing this module over the TL280LE-AU.

• HSM2108, HS2LCD, BV-501, LC-103-PIMSK, reed switches, enclosure — no live numeric NZ pricing

found for these individual line items this pass (same result as the prior pass); DSC/SWL/Alarm

Warehouse NZ list them but do not publish trade pricing publicly. Estimates below are carried

forward from the prior pass's research base, not newly re-verified line by line.

Phase 1 cost (NZD incl. GST) — itemised:

The two line items with genuine live-found NZ retail pricing this pass are the HS2032 panel listing

(confirmed current, price not disclosed) and the TL280LE-AU/TL2080LE communicator ($499, GST

unconfirmed). Everything else remains POA or a carried-forward estimate. Get an actual written

quote from SWL and/or Alarm Warehouse NZ / DSC Alarms NZ, and from a Rotorua/BOP DSC installer,

before budgeting against this table.

Ongoing: LTE data SIM for TL280LE-AU, indicative $5–$15/month (Spark or One NZ M2M/IoT data plan) —

not independently re-quoted this pass; confirm actual Hamurana rural signal strength before

provisioning, and confirm which NZ carrier profile to select at commissioning.

Phase 2/3 upgrade path: Phase 3 professional monitoring adds a monitoring contract with no

hardware change (TL280LE-AU already supports Contact ID/SIA reporting to a monitoring centre);

per-bay relay outputs via HSM2204 if the NVR ever needs per-bay triggering (not required per v9's

confirmed 1-relay/1-NVR-input design); perimeter PIR for driveway/gate in Phase 3.

What this locks in: DSC PowerSeries Neo ecosystem (Grade 2) for all future expansion; a

DSC-certified installer for panel-level reconfiguration; one LTE SIM on a NZ carrier. It does not

lock in a path to Grade 3 — moving to Grade 3 later means replacing the panel with PowerSeries Pro

(Option C), not upgrading Neo in place.

NZ suppliers:

• SWL — trade account required, POA

pricing; the fullest current NZ DSC PowerSeries Neo catalogue found.

• Alarm Warehouse NZ / DSC Alarms NZ — only source with live numeric retail pricing for

individual communicator modules found this pass; 0800 723 373.

• Bay Security Solutions (Papamoa, 07 576 2021) — confirmed DSC/Ajax/Bosch/Paradox installer,

Bay of Plenty coverage; not confirmed as covering Rotorua specifically — ask directly.

Risks:

• This option does not satisfy a literal EN 50131 Grade 3 requirement — see the Critical Finding.

If FMG's eventual quote makes Grade 3 a hard condition of cover or pricing, this option needs to

become Option C, not Option A.

• Most hardware line items remain POA/estimated despite live search access — NZ trade distributors do

not publish full pricing publicly; get written quotes before committing budget.

• The TL280LE-AU / "TL2080LE" naming discrepancy between SWL and Alarm Warehouse NZ should be

resolved to full certainty (exact SKU/part number) before ordering.

• GST treatment of the one numeric price found ($499) is unconfirmed.
• Installer availability specifically in Rotorua (as opposed to wider BOP) is unconfirmed.

---

Option B: DSC HS2032 + TL280LE-AU — Minimum Phase 1 Specification (Interim / Budget-Constrained)

A reduced specification with fewer zone expanders and only a single PIR; bay doors left unmonitored.

Same Grade 2 (not Grade 3) status as Option A — the panel/communicator correction does not change

grade. Not recommended as default; included for completeness if budget forces a phased build.

Limitations vs compound requirements:

Phase 1 cost (NZD incl. GST) — itemised:

Risks: Bay doors unmonitored — a significant security gap for an unattended facility, likely

unacceptable to FMG regardless of the grade question. Not recommended as the default.

---

Option C: DSC PowerSeries Pro HS3248 — Genuine EN 50131 Grade 3 Platform (If Grade 3 is a hard requirement)

New in this pass, added directly in response to Critical Finding 1. This is the DSC product line

that is actually certified to EN 50131 Grade 3, and it is genuinely available in NZ, but it comes

with real cost and fit caveats for a 12-bay facility that were not present in Options A/B.

Spec summary:

• Panel: DSC PowerSeries Pro HS3248 — confirmed EN Grade 3 compliant per

DSC's own PowerSeries Pro Grade 3 product page,

and per an NZ trade listing describing the matching enclosure as the

"PowerSeries Pro Grade 3 Metal Cabinet."

Important fit caveat: HS3248 supports up to 248 zones — this is a large-commercial-scale panel,

materially oversized for a 12-bay facility. DSC's Pro line also includes smaller HS3032 (32-zone)

and HS3128 (128-zone) variants documented in DSC's own

PowerSeries Pro reference manual

(titled for "HS3032, HS3128, HS3248"), but this pass could not find HS3032 or HS3128 listed for

sale by any NZ retailer — SWL's live PowerSeries Pro category page shows only the HS3248-based

base kit as an actual orderable NZ product

(SWL PowerSeries Pro category). If Grade 3

is confirmed as a hard requirement, HS3032 availability in NZ should be chased directly with SWL or

DSC's NZ/Oceania contact before assuming HS3248 is the only option — but as of this search, HS3248

is the only Pro panel this pass could confirm as genuinely orderable in NZ.

• Communicator: not yet resolved to a clean recommendation. The only Pro/Neo-compatible dual-path

LTE communicator confirmed live at an NZ retailer this pass is the

TL880LEAT-ANZ,

which is explicitly Alarm.com-branded. Alarm.com's own support documentation confirms that its app

connectivity, remote arm/disarm, and push notifications require an active, paid Alarm.com provider

subscription — without it, only local keypad arm/disarm continues to work. This directly

conflicts with the Phase 1 "no mandatory paid monitoring contract" constraint. A

subscription-free Pro-compatible dual-path communicator was not identified in NZ this pass — this

is a genuine open gap in the Grade 3 route, not a settled recommendation.

• Keypad: DSC HS2LCDPRO (confirmed listed at SWL)
• Zone expander: DSC HSM3408 (8-zone, confirmed listed at SWL)
• PIR/reed switches: same BV-501/LC-103-PIMSK/reed switch approach as Option A is expected to carry

over, but Pro-line-specific detector compatibility was not independently re-verified this pass.

Requirements compliance:

Phase 1 cost: Cannot be responsibly itemised this pass — every Pro-line component found at SWL is

POA with no public numeric price, and the communicator question above is unresolved. Do not budget

against this option until a written SWL quote and a resolved communicator recommendation exist.

What this locks in: the DSC Pro ecosystem, a different and likely more specialised installer

skill set than Neo, and (pending the communicator gap above) potentially an Alarm.com subscription

that was supposed to be optional under Phase 1 guidance.

NZ supplier: SWL PowerSeries Pro category — trade account required, POA throughout.

Risks:

• This option exists to answer "is there a genuinely Grade 3 NZ-available option" — it is not a

drop-in replacement recommendation. It has two unresolved gaps (fit/cost, and the

monitoring-contract-free communicator question) that would need closing before it could be

recommended over Option A.

• Should only be pursued if FMG's quote makes literal Grade 3 certification a hard requirement, not a

"nice to have."

---

Alternative Platforms Considered (Materially Better Grade 3 Option Check)

Beyond DSC's own Pro line (Option C), this pass checked for other Grade 3-capable platforms with NZ

availability:

• Bosch Solution 3000 — a genuinely NZ-available, commonly-installed commercial panel (confirmed

via multiple current NZ retailer listings, e.g.

Infotech Technologies

and an installed-package price of ~$1,015.60 + GST from a NZ installer found in this search), but

this pass could not confirm an EN 50131 Grade 3 (or AS/NZS 2201.1 equivalent-grade) certification

for the Solution 3000 specifically — Bosch's own literature and NZ retailer pages found in this

search describe it generically without a grade figure. Treat as unverified for Grade 3, not

recommended as a Grade 3 alternative without further confirmation directly from Bosch.

• Texecom Premier Elite and Risco Agility/LightSYS — both have genuine EN 50131 Grade 3

products in the UK/EU market (Texecom Premier Elite panels are explicitly sold as Grade 3 in UK

retailer listings), but this search found no evidence of an active NZ distributor or NZ retailer

stocking either brand — results were exclusively UK-market retailers and Texecom's own

distributor-locator page, which does not list NZ. Not recommended on NZ availability/local

service grounds, consistent with the guidance preference for suppliers with NZ service capability.

• Ajax — remains excluded on the same basis as every prior pass: Ajax's NZ-sold hub/detector

combination is EN 50131 Grade 2, not Grade 3, so it does not close the gap this section is checking

for.

Conclusion: DSC PowerSeries Pro (Option C) is the only platform this pass could confirm as both

(a) genuinely EN 50131 Grade 3 certified and (b) live and orderable through an NZ distributor today —

but with the fit, cost, and communicator-subscription gaps noted above. If those gaps cannot be

closed, there is currently no clean NZ-available Grade 3 alternative to recommend, and the practical

choice is between Option A (Grade 2, clean, affordable, but not literally Grade 3) and accepting the

open gaps in Option C.

---

Professional Monitoring Options — Phase 3 reference pricing (re-verified this pass)

Re-checked per the task's explicit instruction. Findings are consistent with, and refine, the prior

pass's corrected figures.

General NZ market band, re-confirmed this pass: basic activation-only professional monitoring

commonly runs $33–$48+GST/month, consistent with the range found in the prior pass. This remains

above the flat $30–50/month figure in the compound requirements' Phase 2 note at the top end, and

is now corroborated by two independently re-verified NZ providers (Allsafe and Matrix) rather than

one.

---

FIRE/SECURITY ALARM SEPARATION — RESTATED WARNING

Per the task's explicit instruction, this warning is restated in full. The security alarm (DSC

HS2032/HS2032-Pro, intruder detection) and any fire detection at the site must remain

architecturally and electrically separate. Do not wire smoke or heat detectors into the DSC

alarm panel as zone inputs. Doing so converts standalone fire detection into an interconnected fire

alarm system, which is a Specified System under the Building (Specified Systems) Regulations 2005 and

triggers an ongoing Building Warrant of Fitness obligation with annual IQP certification costs of

approximately $500–$2,000+ per year, indefinitely. This applies regardless of which alarm option (A,

B, or C) is chosen — the separation requirement is about system architecture, not panel grade. Any

future proposal to combine fire and security onto one panel must go through a formal Building Consent

Authority ruling first, not be adopted as a supplier convenience.

---

Recommended Option

Option A — DSC HS2032 + TL280LE-AU, Grade 2 — remains the practical Phase 1 recommendation, with

the Grade 3 gap now explicitly disclosed rather than silently carried forward.

Rationale:

1. Cost, NZ availability, installer familiarity, and app simplicity for Tom are all confirmed and

favourable. Roughly $3,100–$4,300 NZD incl. GST, DSC-certified NZ installers exist in the wider

BOP region, and the free PowerSeries Neo Go app satisfies the no-mandatory-monitoring-contract

constraint cleanly.

1. The requirements document's "Grade 3 equivalent" wording should be read as aspirational/

descriptive rather than as literal EN 50131 Grade 3 certification until FMG confirms otherwise —

this document cannot make that call for Ed, but it can and does flag, with a primary source, that

the confirmed platform is Grade 2, not Grade 3, so that decision is made knowingly rather than by

accident.

1. Option C (genuine Grade 3, PowerSeries Pro) exists as a real NZ-available fallback if FMG's

quote makes Grade 3 a hard condition — but it currently has an unresolved communicator/

subscription conflict with the no-monitoring-contract requirement, and no confirmed NZ numeric

pricing, so it is not a clean drop-in substitute today.

1. Bay door monitoring (all 12 bays wired to individual supervised zones) remains a non-negotiable

security baseline for an unattended facility regardless of which panel grade is chosen — this is

unchanged from every prior pass.

1. No materially better NZ-available Grade 3 platform than DSC's own Pro line was found — Bosch's

grade is unconfirmed, and Texecom/Risco have no found NZ distribution.

The one thing that would most change this recommendation: confirmation from FMG (still pending,

per v9) of whether literal EN 50131 Grade 3 certification is a condition of cover or pricing. If yes,

this document's recommendation shifts to needing Option C's gaps closed (fit/cost, and a

subscription-free Pro-compatible communicator) before a final choice can be made — Option A would no

longer be presentable as meeting the requirement.

---

Open Questions

1. Does FMG's insurance requirement mean literal EN 50131 Grade 3 certification, or is a

well-specified Grade 2 installation acceptable? This is now the single highest-priority open

question in this document — it determines whether Option A or Option C is the right answer, and it

cannot be resolved from public research. Confirm directly with FMG when the quote is available.

2. If Grade 3 is required: is DSC PowerSeries Pro HS3032 (32-zone, a better fit than the

248-zone HS3248) actually orderable in NZ? This pass could only confirm HS3248 as a live NZ SWL

listing. A direct call to SWL or DSC's NZ/Oceania contact number would close this.

3. If Grade 3 is required: is there a Pro/Neo-compatible dual-path communicator in NZ that does

not require an Alarm.com subscription for remote arm/disarm and push notifications? TL880LEAT-ANZ,

the only one confirmed live at an NZ retailer this pass, does require one. This is a genuine gap, not

a settled answer.

4. Correct upstream security-infrastructure.md's implicit Grade 3 claim for HS2032. This is a

Tier 3 document and cannot itself edit the Tier 2 compound requirements, but the discrepancy between

"Target grade: EN 50131 Grade 3 equivalent" and "Confirmed platform: DSC HS2032" (Grade 2 only) should

be flagged for the next integrate-security-infrastructure refresh.

5. Confirm the exact SKU for the TL280LE-AU vs "TL2080LE" naming discrepancy between SWL and Alarm

Warehouse NZ before ordering — treated as almost certainly the same product in this document, but

not confirmed to full certainty from public pages alone.

6. Confirm GST treatment of the $499 communicator price, and get written quotes (with GST stated)

from SWL and/or Alarm Warehouse NZ / DSC Alarms NZ for the full Option A bill of materials.

7. Confirm a Rotorua-specific DSC installer. Bay Security Solutions (Papamoa) remains the only

confirmed DSC installer within reasonable distance of Hamurana.

8. Merlin opener AUX terminal integration — still unconfirmed pending the on-site opener model

(unchanged open item from prior passes, not re-investigated this pass as it is outside this pass's

specific re-verification scope).

9. Cellular carrier and signal strength for the TL280LE-AU SIM at the Hamurana site — confirm

before provisioning; not independently tested this pass.

---

Access Control System Options

Requirements Loaded

This is a full, formal re-run. Per the invoking prompt, the Tier 2 compound requirements were supplied directly, embedded in the prompt (an extract of .claude/knowledge/integration/security-infrastructure.md, v9, dated 2026-08-05), and used as the sole requirements input -- no individual Tier 1 documents were read. .claude/knowledge/strategic-context.md and context/guidance.md were also read for budget envelope and operational-preference context.

Key constraints from the v9 compound requirements extract:

• Phase 1 gate hardware (EasyGate Wireless Keypad, 433.92 MHz RF, HCS101 rolling code) and Merlin E840M bay keypads are already installed. No data interface, no audit log. No Phase 1 sourcing action for the gate itself -- this entire document addresses Phase 2, a future purchase.
• Phase 2 adds a wired Wiegand or OSDP reader at the gate, wired to a central access control panel. Candidates: Inner Range Inception, Hikvision DS-K2602-G (successor to discontinued DS-K2602), ICT Protege WX (NZ-manufactured). This session's task explicitly required re-verifying all three from scratch and checking for anything new.
• PoE reader/panel power: TL-SG116P PoE switch confirmed purchased and installed at the shed with ample headroom -- no separate switch procurement needed for Phase 2.
• Panel must provide: remote code management without a site visit; five-field per-event log (timestamp NZ-local DST-aware; bay/zone ID; customer identifier not full name; event type granted/denied/opened/closed; session duration where capturable); CSV minimum export, JSON via API preferred; 12-month on-system retention minimum, 24 months recommended.
• PDF-only export is disqualifying.
• Offline capability is mandatory: all credential decisions made locally on the controller; internet outage must not prevent gate operation. Cloud-only credential validation is disqualifying.
• Individual PIN per customer (not shared codes).
• Integration with at least one NZ/AU self-storage management software platform required. Candidates: PTI StorLogix, Noke Smart Entry, AccessEzy. Software platform selection is still Gap 7 -- open.
• Gate fail-mode (fail-secure vs fail-safe) pending a Rotorua Lakes Council BCA ruling (Gap 3). Panel/relay hardware must be configurable either way.
• Phase 1 budget ~$1,500 NZD incl. GST -- in practice a Phase 2 capital envelope, since the EasyGate is already installed at no cost.

---

Phase 1 Status (unchanged, no sourcing action)

EasyGate Wireless Keypad and Merlin E840M bay keypads are already installed and require no Phase 1 procurement. This document addresses Phase 2 panel sourcing only, and is not urgent for the Phase 1 soft-launch date.

---

Phase 2 Budget: ~$1,500 NZD incl. GST (capital, panel + reader + install)

---

Research Method (this session)

This session used WebSearch to identify candidate pages, then WebFetch to pull live page content and confirm price/stock/status text, for every specific product named below. Where a page returned empty content or timed out, this is recorded explicitly rather than silently treated as "no data." The main methodological change from the prior pass: this session deliberately searched for live retail benchmarks on AU/US/international sites that show an actual displayed price, rather than only checking NZ trade sites that are known to gate pricing behind login. This produced two materially important new findings (Inner Range Inception and Hikvision, below) that revise this document's cost picture again, in the same direction as the prior session's revision (upward).

One reseller found reachable in the prior session, rocksecurity.com.au, now fails DNS resolution entirely (getaddrinfo ENOTFOUND) -- dropped from the active source list as unreliable.

---

What Changed Since the Prior Pass (2026-08-05, v9-based, same-day re-run)

1. Inner Range Inception: a live AUD price benchmark was obtained for the first time across three sessions, and it confirms the prior pass's suspicion that the carried-forward $550-750 NZD controller estimate was badly understated. MTSS (Modular Technology & Security Solutions, AU) lists the bare Inception Controller (SKU IR-996300AU) at AUD $1,538.99, Controller Kit 3 (small enclosure, battery, SIFER-ready) at AUD $1,851.99, and Controller Kit 6 (medium enclosure, battery, EliteX keypad, SIFER-ready) at AUD $2,795.99. Converted at an approximate current AUD:NZD rate of ~1.08, the bare controller alone is roughly NZD $1,660 -- already at or above the entire Phase 2 budget before a reader, cabling, or install labour is added. These items are listed as "currently unavailable for purchase" at this specific reseller (a stock/reseller issue, not a product discontinuation -- see point 2). Source: https://mtss.com.au/collections/inner-range
2. Inner Range Inception is confirmed as a live, actively developed, current product, independent of pricing. A trade press article, "Inner Range's Inception Turns 10: A Decade of Evolution" (Defsec, June 2026), confirms the platform's continued active development and market position ten years after its May 2016 launch. Source: https://defsec.net.nz/2026/06/02/inception-turns-ten-decade-of-evolution/
3. Hikvision DS-K2602-G: confirmed as a live, current, in-stock, orderable product with a genuine live price this session, not merely an international benchmark. DZ Electrical Products (Australia) lists the DS-K2602-G/A at AUD $1,020.02 inc. GST, confirmed "In stock." Source: https://dzelectricalproducts.com/products/114-100. Converted at ~1.08 AUD:NZD, this is roughly NZD $1,102 for the controller alone -- a materially different, and more concrete, data point than last session's US retail benchmark (USD $499.99-$776.00), though in the same rough order of magnitude once currency and import margin are considered. This session also found a second AU retailer, Ness Corporation, whose listing for the same part number (114-100, DS-K2602-G/Aust) now says "Sorry -- this product is no longer available" (https://ness.com.au/114-100) -- so availability is retailer-specific in AU, not universal, but the product is confirmed live and orderable through at least one channel.
4. A newer Hikvision Pro Series model, the DS-K2602T, was found to exist alongside the DS-K2602-G, both currently listed on Hikvision's own official global/US product pages (distinguishable by URL structure from the us-legacy.hikvision.com/.../discontinued-products/ path used for the true end-of-life DS-K2602 non-G model). B&H Photo's own product association describes the DS-K2602T as a "Replacement for Hikvision DS-K2602-G," which may signal an eventual model transition, but the -G variant remains separately listed and orderable today, not redirected or delisted. This is worth flagging to whichever installer quotes Option B: confirm at quote stage whether DS-K2602-G or DS-K2602T is being supplied, and price/spec both if possible. Sources: https://www.hikvision.com/us-en/products/access-control-products/controllers/Pro-Series/ds-k2602t/, https://www.hikvision.com/us-en/products/access-control-products/controllers/Pro-Series/ds-k2602-g/ (both resolve as current Pro Series product pages, not legacy).
5. ICT Protege WX: still no price obtained, now across three consecutive sessions. PRT-WX-DIN-1D is confirmed a current, actively firmware-updated product on ICT's own official site (https://www.ict.co/products-solutions/our-hardware/protege-din-rail/protege-wx-din-rail-controller/), with 2 reader ports independently configurable for Wiegand (up to 1024 bits) or RS-485/OSDP -- directly relevant to this project's reader requirement. But every commercial listing checked this session again withholds price: Tiger Security NZ ("Call or email for price," unchanged), Group One NW (North America, price gated behind login, and "0 in stock"), and two newly checked NZ integrators, Rigid Security (https://rigidsecurity.co.nz/brands-ict-protege-wx/, invites contact for a quote, no price) and Security NZ (https://www.securitynz.co.nz/protege/, no price). AccessControl.co.nz's product pages for the related Protege GX line (a different, higher tier than WX) also show no price. This is now confirmed, not merely suspected, as a structural market characteristic: no ICT Protege dealer anywhere checked across three sessions publishes online pricing for this product family.
6. Atlas Gentech has traded as "Wesco Anixter" since a September 2023 rebrand, while continuing to operate the atlasgentech.co.nz domain, product catalogue, and legal entity (Atlas Gentech (NZ) Limited) unchanged. This does not change any finding above but is recorded for completeness, since a name-only web search on "Atlas Gentech" could otherwise wrongly suggest the business no longer exists. Source: https://atlasgentech.co.nz/atlas-gentech-is-now-wesco-anixter, https://defsec.net.nz/2023/09/11/atlas-gentech-rebrands-as-wesco-anixter/
7. PTI StorLogix / Option C: the NZ/AU distributor identity has likely changed since this document was last built, and a new product name raises a fresh compliance question that needs to be resolved before Option C's offline PASS can be taken as still current. PTI's ANZ web presence is now unified under ptistoragesecurity.com.au ("PTI Storage Security -- Australia, New Zealand & Greater Asian Regions"), with a dedicated "PTI Storage Security -- NZ Distributor" Facebook page (https://www.facebook.com/PTIdistributorNZ/), rather than the previously-cited SecureIT NZ / Sentinel Self-Storage Systems, neither of which could be corroborated as current PTI channels this session. Hardware naming has also shifted: alongside the previously-known FalconXT system controller (still referenced), PTI now also markets a "CloudController," described on its own page as "cloud-native... without a dedicated onsite PC," "real-time data and remote management," "centralized site operations" (https://www.ptistoragesecurity.com.au/accesscontrol/, https://www.ptistoragesecurity.com.au/cloudcontroller/). This wording is exactly the kind of phrasing that would fail this project's offline/local-credential-decision requirement if CloudController turns out to be PTI's default or now-preferred hardware for new ANZ deployments. This is a new, unresolved compliance flag, not yet a FAIL -- the previously-verified local-decision behaviour was tied to FalconXT specifically, and FalconXT still appears to exist as a current product, but a written confirmation is now needed that (a) FalconXT (not CloudController) is what would actually be quoted for this site, and (b) FalconXT genuinely makes credential decisions locally with no cloud dependency for gate operation during an outage. See Option C below and Open Questions.
8. Noke: re-checked, same conclusion as the prior pass, with the Noke Ion offline claim now corroborated from a second source. Janus International's dedicated Noke Ion page confirms: "If the internet goes down in a facility, existing tenants can still unlock their units using Bluetooth and the smartphone app... activity and audit data is stored locally on each Nokē device," syncing to the cloud once connectivity returns, with existing customers "synced manually or via bulk CSV uploads" (https://janusintl.au/noke-smart-entry/noke-ion-hardwired-smart-lock/, corroborated via search). This does not change Noke's status for this specific sourcing task: Noke Ion remains a Bluetooth-app-based smart lock with no keypad interface, not a Wiegand/OSDP PIN reader, so it does not fit the "wired reader at the gate" architecture this document is sourcing against, and it requires every customer to carry a smartphone. NokePad (the older, mesh/cloud line) still has no documented offline mode. Not advanced, unchanged reasoning from the prior pass.
9. AccessEzy (Alarmquip): the TLS certificate mismatch on accessezy.com found last session is confirmed to persist, resolving to a certificate belonging to robinsonindustries.com.au -- this is a stable characteristic of the vendor's hosting, not a one-off glitch. This session instead reached Alarmquip's own domain directly (alarmquip.com.au/access-control/), which confirms PIN keypad hardware using 4- or 6-digit codes and "on site software providing a full history report of user movement," but still does not state whether credential decisions are made locally (offline-capable) or centrally, nor does it name an export format (CSV/JSON/PDF/API). Status unchanged: UNCONFIRMED, not assessable against Options A-D without direct vendor contact.

---

Options

Option A: Inner Range Inception + Wiegand/OSDP Reader

Spec summary

Inner Range Inception is an Australian-manufactured (Melbourne) access control and alarm panel. The controller runs its own web-based management interface locally -- credentials are stored on the controller and access decisions do not depend on the internet; internet is required only for remote management access. Confirmed this session as a current, actively developed product (10-year anniversary trade coverage, June 2026).

• Controller: Inner Range Inception (base unit, expandable). Confirmed current-model SKUs and starter-kit variants at Atlas Gentech/Wesco Anixter NZ (atlasgentech.co.nz) and Allsafe Security NZ (allsafesecurity.co.nz); both gate price behind login/contact. Confirmed live AUD retail pricing at MTSS (AU, see below) -- unavailable for purchase at that specific reseller currently, but this confirms the product line and price order of magnitude.
• Reader at gate: Inner Range OSDP reader, EliteX keypad, or any Wiegand-compatible PIN keypad.
• EasyGate remains wired in parallel as backup, or is removed; gate motor relay wired from the Inception output.
• Per-customer PINs managed via the Inception web UI; PIN add/remove does not require a site visit.
• Access log stored on the controller; exportable as CSV. Native fields: timestamp, door/zone name, user credential reference, event type. Session duration requires an exit reader or door contact.
• REST API available for external software integration.
• UPS: 12V DC with lead-acid backup battery on the controller (included in kit variants); gate motor needs a separate UPS circuit.
• Network: Ethernet or optional WiFi. PoE is not the standard power path for the base controller (typically runs from the 12V/battery supply) -- confirm at quote stage whether the specific model/reader combination ordered requires PoE.
• Offline behaviour: PASS -- all credential decisions made locally.

Requirements compliance

Phase 2 cost (NZD incl. GST) -- revised this session with a live AUD benchmark

This is the single most consequential finding of this pass for Option A: the previously carried-forward $550-750 NZD controller estimate is now confirmed, via a live AUD benchmark, to have been understated by roughly a factor of two to three. Option A should now be read as clearly exceeding the Phase 2 budget, not merely "unconfirmed."

Phase 2/3 upgrade path

Add OSDP readers at individual bay roller doors in Phase 3 for native bay-level logging. Inception scales to multiple doors without controller replacement.

What this locks in

Inner Range ecosystem for access control; future readers/keypads should be Inner Range or OSDP-compatible. Does not lock in any self-storage software platform.

NZ suppliers

Atlas Gentech / Wesco Anixter (atlasgentech.co.nz, distributor -- Auckland/Wellington/Christchurch); Allsafe Security NZ (allsafesecurity.co.nz, confirmed this session to carry Inception, no price shown). JD Security NZ (jdsecurity.co.nz, certified Inner Range installer per the prior session) was not independently re-checked this session -- carry forward with that caveat. Coda Systems: dropped from the active supplier list (not found across three consecutive sessions).

Risks

• Now confirmed, not merely suspected, to exceed the $1,500 Phase 2 budget on the controller alone, before reader, cabling, or labour.
• 24-month log retention auto-delete is not native; requires a scripted external process.
• No out-of-box integration with any of the three named self-storage software candidates.
• AUD benchmark price is from a reseller currently showing the item as unavailable for purchase -- a firm NZ quote is still required to confirm actual landed cost.

---

Option B: Hikvision DS-K2602-G (successor to discontinued DS-K2602) + Wiegand/OSDP Keypad

Spec summary

The DS-K2602 previously evaluated is confirmed discontinued (still listed on Hikvision's own legacy/discontinued-products page). The DS-K2602-G is confirmed this session as its live, current, orderable replacement: 2-door IP access controller, TCP/IP and RS-485 communication, 100,000 cards / 300,000 events capacity, encrypted communication, tamper-proof housing. A newer Pro Series sibling, the DS-K2602T, also exists and is separately current -- confirm which variant is actually being quoted (see finding 4 above).

• Controller: Hikvision DS-K2602-G. Confirmed in stock and orderable this session at DZ Electrical Products (Australia): AUD $1,020.02 inc. GST, "In stock" (https://dzelectricalproducts.com/products/114-100). A second AU retailer, Ness Corporation, shows the same part as "no longer available" (https://ness.com.au/114-100) -- availability is retailer-specific, not universal, in AU. Atlas Gentech/Wesco Anixter NZ is confirmed to stock the Hikvision access-control category generally (product catalogue structure references DS-K2602-G and DS-K2604-G), with pricing gated behind trade login; the specific DS-K2602-G product page could not be independently pulled this session (returned as not present in fetched content, which may reflect a JS-rendered catalogue rather than an absent listing).
• Reader at gate: Hikvision outdoor PIN keypad (model to be confirmed at quote).
• EasyGate can remain as backup or be removed; gate motor relay wired from the DS-K2602-G output.
• Per-customer PINs managed via iVMS-4200 or controller web UI; remote management requires LAN/VPN access.
• Access log stored on controller; exportable CSV from iVMS-4200 or web UI. ISAPI REST API available and documented for third-party integration.
• UPS: 12V DC with standard battery backup input.
• Network: TCP/IP -- confirm whether the specific unit/reader combination ordered draws power via PoE or via a standard 12V DC plug pack.
• Offline behaviour: PASS -- credentials stored locally.

Requirements compliance

Phase 2 cost (NZD incl. GST) -- revised this session with a confirmed live AU retail price

This session's confirmed AU in-stock price (~NZD $1,100 converted) is higher than last session's US-retail-derived estimate (NZD $825-$1,320) at the low end but broadly consistent at the mid-point -- the two independent international benchmarks now agree reasonably well, which increases confidence that the controller-only cost is genuinely in the ~NZD $1,000-$1,300 range, not the ~$280-420 originally carried forward two sessions ago. Option B remains the option with the strongest evidence of relative affordability among the three named Phase 2 hardware candidates, but the full installed package is still evidenced to exceed $1,500.

Phase 2/3 upgrade path

Upgrade to a 4-door DS-K26xx model if more than 2 zones are needed, or consider the DS-K2602T sibling model if it proves better priced/stocked at quote stage. Add Hikvision OSDP-capable readers at individual bays in Phase 3. Direct NVR integration for access-triggered recording if Hikvision cameras are co-sourced.

What this locks in

Hikvision ecosystem for access control; some ecosystem tie-in with cameras if co-sourced. Does not lock in self-storage software.

NZ suppliers

Atlas Gentech / Wesco Anixter (atlasgentech.co.nz, confirmed to carry the Hikvision access-control category; DS-K2602-G-specific page not independently pulled this session -- confirm directly). Seadan Security and Hills (previously named) not re-verified this session.

Risks

• Full installed package cost is now evidenced (not merely estimated) to exceed the $1,500 budget once a keypad, cabling, and install labour are added to the confirmed controller price.
• Model transition risk: a newer sibling (DS-K2602T) exists; confirm which is actually being supplied at quote stage.
• NZ-specific price for the controller itself still not obtained -- only an AU retail benchmark.
• 24-month log retention auto-delete not native.
• No out-of-box self-storage software integration.

---

Option C: PTI StorLogix Cloud + PTI Storm Keypad (Self-Storage Native)

Spec summary

PTI Security Systems (US manufacturer) makes the dominant purpose-built self-storage access control platform in NZ/AU. This session found the ANZ distribution and product-naming picture has moved on from the previous pass and needs re-confirmation before ordering (see What Changed, point 7, above).

• Hardware: PTI keypad at gate (previously "PTI Storm," current ANZ marketing now foregrounds "AP1 & AP1+ Smart Keypads" and "ProEdge Smart Latch" -- naming not independently reconciled this session), back to a local controller. The previously-verified local-decision hardware is the FalconXT system controller, still referenced on PTI's current ANZ site. A newer product, CloudController, is also now marketed, described as "cloud-native... without a dedicated onsite PC" -- this is a new, unresolved compliance question (see below), not yet confirmed to retain the same local-credential-decision behaviour as FalconXT.
• Credentials stored locally on FalconXT -- gate operates during internet outage (PASS for offline, but only if FalconXT specifically is what is quoted; CloudController's offline behaviour is unconfirmed this session).
• All five required log fields native, including session duration (per prior-session vendor documentation, not independently re-verified this session).
• Remote management via StorLogix Cloud portal; CSV and REST API export, used natively by Storman.
• Ongoing SaaS subscription required: indicative $80-$180/month NZD (operating cost) -- not independently re-verified this session.

Requirements compliance

Phase 2 capital + operating cost (NZD incl. GST) -- indicative, unconfirmed this session

Exceeds the $1,500 capital budget, plus an ongoing subscription. Only worth the premium if Gap 7 resolves to Storman or Sievert Storageman.

What this locks in

PTI ecosystem and a permanent StorLogix Cloud subscription.

NZ suppliers

ptistoragesecurity.com.au (unified ANZ brand, confirmed live this session); "PTI Storage Security -- NZ Distributor" (Facebook page found, no named NZ company or direct contact obtained this session). SecureIT NZ and Sentinel Self-Storage Systems (previously cited): not corroborated this session -- treat as needing direct re-confirmation, not as confirmed current channels.

Risks

• Exceeds Phase 2 capital budget by a confirmed (not estimated) margin, before the subscription is even counted.
• New this session: the NZ distributor contact point has apparently changed and was not re-confirmed; the previous SecureIT NZ / Sentinel names should not be relied on without direct verification.
• New this session: PTI's product naming now includes a "CloudController" option whose offline/local-credential behaviour is unconfirmed -- any quote must specify FalconXT explicitly, and the offline claim should be re-verified in writing before this option is treated as PASS.
• Proprietary RS-485 at the reader level reduces future flexibility versus OSDP.
• US company; NZ support is via resellers whose identity needs re-confirmation.

---

Option D: ICT Protege WX (NZ-manufactured) + Wiegand/OSDP Reader

Spec summary

ICT (Independent Control Systems Ltd) manufactures the Protege range in New Zealand. Protege WX is positioned for small-to-medium commercial sites -- an appropriate scale match for a single-gate, ~12-bay facility. Confirmed this session as a current, actively firmware-updated product on ICT's own official site.

• Controller: Protege WX DIN-rail controller, SKU PRT-WX-DIN-1D, single-door web-enabled controller. Confirmed this session, direct from ICT's own product page: 2 reader ports, each independently configurable for Wiegand (up to 1024 bits) or RS-485; RS-485 readers support OSDP configuration for additional security (ICT Application Note 254 referenced for OSDP setup detail). This directly satisfies the project's Wiegand/OSDP requirement at the reader-port level.
• Starter kit (from prior sessions, not re-verified this session): PRT-WX-KIT-AB, 1x WX-DIN controller, 2x TSEC DESFire card readers (card-only, not PIN-capable -- a PIN-capable reader must be separately specified for this project).
• Local web UI for PIN/credential management; NZ-manufactured hardware and NZ-based technical support network.
• Log export and API: ICT's own product page did not, this session, surface the specific CSV/JSON export field set or session-duration capture in the content retrieved -- this remains unconfirmed in detail across three sessions, though ICT's general open-API/SDK positioning is well documented in prior sessions' marketing material.
• Offline/local decision-making: consistent with Protege's on-premises deployment mode per ICT's own material; not independently confirmed to controller level this session.
• Pricing: still completely unobtained, now across three research sessions. Checked again this session: Tiger Security (unchanged, "Call or email for price"), Group One NW (login-gated, and shows "0 in stock" for this specific part in North America), Rigid Security (invites a quote, no price shown), Security NZ (no price shown). This is now a confirmed, repeated market characteristic for this product family specifically, not a search-tooling gap.

Requirements compliance

Phase 2 cost (NZD incl. GST)

Still not available. This is now a confirmed, persistent gap across three research sessions -- not an estimate, and not treatable as budget-fitting or budget-exceeding until a quote is obtained. Given this session's finding that both other priced/priceable options (A and B) turned out to exceed budget once a genuine benchmark was found, Option D's price should not be assumed to be either cheaper or more expensive than those without a direct quote.

Phase 2/3 upgrade path

An NZ-manufactured ecosystem with a broad NZ integrator network -- attractive on supply-chain and local-support grounds. Protege WX scales via additional DIN-rail modules without a full controller swap.

What this locks in

An NZ-manufactured ecosystem with a broad NZ integrator network, but this option still carries materially more open compliance questions than Options A-C, and a confirmed-persistent pricing gap that the other options do not.

NZ suppliers

Tiger Security (tigersecurity.co.nz); Rigid Security (rigidsecurity.co.nz); Security NZ (securitynz.co.nz/protege); AccessControl.co.nz; Allsafe Security (allsafesecurity.co.nz, install/service reference only); Liquid AV; Insight EDS.

Risks

• No pricing obtained across three sessions -- treat as a genuine market gap requiring a direct sales conversation, not a self-serve web quote.
• Compliance against the five-field log spec is still inferred from general product marketing, not confirmed.
• The confirmed starter-kit readers are card readers (DESFire), not PIN keypads -- a PIN-capable reader must be separately specified and priced.

---

Candidates Reviewed and Not Advanced

Noke Smart Entry -- re-checked this session, same conclusion as the prior pass, now with a second corroborating source for the Noke Ion offline claim. Two distinct product lines exist: NokePad (older, cloud/mesh-connected, no documented offline mode -- unchanged) and Noke Ion (newer, hardwired, confirmed genuine offline Bluetooth-unlock via a phone-cached digital key, with activity/audit data stored locally on-device during an outage). Neither fits this document's requirement for a wired Wiegand/OSDP PIN keypad reader at the gate: NokePad has no confirmed offline mode, and Noke Ion has no keypad interface at all (Bluetooth-app-only, requiring every customer to have a smartphone). Not advanced, for architectural fit rather than a compliance failure in Noke Ion's case specifically.

AccessEzy (accessezy.com, part of Alarmquip Security Systems) -- re-checked this session. The TLS certificate mismatch on accessezy.com found last session persists (resolves to a certificate for robinsonindustries.com.au) -- confirmed stable, not a transient glitch. Alarmquip's own domain (alarmquip.com.au) confirms live PIN-keypad hardware (4/6-digit codes) with on-site history reporting, but still does not state offline/local-credential behaviour or export format. Not excluded, but still not assessable against Options A-D without direct vendor contact (1300 552 520).

---

Bay Roller Door Logging: Proxy Approach (all Phase 2 panel options)

Unchanged from prior passes -- not independently re-verified this session. None of Options A-D provides native bay-level logging without replacing the 12 Merlin E840M roller door openers. The recommended proxy remains: surface-mount door contacts (reed switches) on each roller door, wired to spare zones on the DSC HS2032 alarm panel, logging door open/close events with timestamp.

Indicative cost (unconfirmed, carried forward): reed switches x12 ($120-$200) + cabling/labour ($500-$800) + HS2032 zone programming ($100-$150) + zone expanders if needed ($0-$360) = $720-$1,510.

---

Gate Motor Controller Integration and Fail-Mode

Unchanged. The existing gate motor accepts a dry-contact relay input. All four Phase 2 panel options provide a relay output wireable to either fail-safe or fail-secure; final configuration depends on the pending Gap 3 BCA ruling. Hardware for all options can be wired either way at installation time.

---

Self-Storage Management Software Integration (Gap 7 -- still unresolved)

For Phase 2, manual CSV export remains an acceptable interim approach regardless of which panel is chosen. If Storman or Sievert Storageman is selected once Gap 7 resolves, Option C (PTI StorLogix) becomes materially more attractive despite its higher capital cost and ongoing subscription -- subject to the new NZ-distributor and CloudController/FalconXT questions raised this session being resolved first.

---

Recommended Option

This entire document is a Phase 2 purchase. No Phase 1 access control sourcing action is required, and none of this is urgent ahead of the Phase 1 soft launch, which is unaffected.

This session's central finding is that the $1,500 Phase 2 budget does not appear to be achievable for a full installed package in any of the three named hardware options (A, B, D), and the one option confirmed to exceed it outright (C) remains confirmed to do so. Two of the three previously "cheap because unpriced" options (A and B) were found this session, via genuine live retail benchmarks rather than estimates, to carry controller-only costs already at or above the entire $1,500 envelope -- Option A's bare controller alone converts to roughly NZD $1,660, and Option B's confirmed in-stock AU price converts to roughly NZD $1,100. Once a keypad, cabling, a door contact for session duration, and installation labour are added, both options' realistic installed totals land in the ~$1,800-$2,600 range. Option D remains completely unpriced after three sessions and cannot be assumed either way.

Revised recommendation: treat the $1,500 figure as a starting placeholder that this session's evidence suggests will need to be revised upward with Ed/Jenny before Phase 2 is committed, rather than continuing to search for an option that fits it. Concretely:

1. Option B (Hikvision DS-K2602-G) remains the option with the best-evidenced relative affordability -- its confirmed AU in-stock price (~NZD $1,100 converted) is the lowest hard number found for any controller across all options and all three sessions, and it is corroborated by two independent international benchmarks (this session's AU figure and last session's US figure) that broadly agree. It is the recommended lead option to take to a firm NZ quote, on relative cost grounds, while accepting that the full installed package will likely exceed $1,500.
2. Option D (ICT Protege WX) remains attractive on NZ-manufacture, NZ-support, and confirmed Wiegand/OSDP reader-port grounds, but its price is a genuine unknown after three sessions -- it should be quoted in parallel with Option B specifically because it is the one option whose cost could still plausibly land either above or below Option B's, and only a direct sales conversation will resolve that.
3. Option A (Inner Range Inception) should be treated as the least likely to fit budget on this session's evidence -- its live AUD benchmark is the highest of the three priced/benchmarked options. Keep as a fallback only if B and D both fail to deliver a workable quote, or if its fuller alarm-integration capability becomes independently valuable.
4. Option C (PTI StorLogix) remains confirmed to exceed budget (known capital range plus mandatory subscription), and now additionally carries two new open questions from this session (NZ distributor identity, FalconXT-vs-CloudController offline behaviour) that must be resolved before it could even be re-considered. Only revisit if Gap 7 resolves to Storman or Sievert Storageman.

Concrete next action, revised this session: request simultaneous written, itemised quotes (hardware + install) from (a) Atlas Gentech/Wesco Anixter for a DS-K2602-G package, explicitly asking them to also quote the DS-K2602T alternative, and (b) a Protege WX integrator (Tiger Security, Rigid Security, or Security NZ) for a PRT-WX-DIN-1D package with a PIN-capable reader substituted for the DESFire card readers in the standard starter kit. Compare on a like-for-like, confirmed basis, and take the outcome back to Ed/Jenny with an explicit statement that the $1,500 envelope is unlikely to be met by either -- do not order against any indicative range in this document.

Caveat carried forward: if Gap 7 resolves to Storman or Sievert Storageman, Option C should be reconsidered despite the higher capital and subscription cost, once its two new open questions (distributor identity, CloudController vs FalconXT) are resolved.

---

Privacy Compliance Notes

Unchanged from prior passes, not independently re-verified this session. The customer privacy notice must name access log management for resource consent evidence as a purpose from day one. The electronic log must contain only the five minimum fields -- no full customer names. None of Options A, B, or C (D unconfirmed) provides native 24-month auto-delete with a litigation-hold exception; a scheduled script that archives monthly, deletes records older than 24 months, and skips any record flagged for preservation must be built and tested before Phase 2 goes live.

---

Items Blocked Pending External Input

---

Open Questions

1. Obtain a fixed-price NZD quote for the Hikvision DS-K2602-G (and, for comparison, DS-K2602T) package from Atlas Gentech/Wesco Anixter -- the highest-priority action, now that a live AU in-stock benchmark (~NZD $1,100 converted, controller only) exists but no NZ-specific figure has been obtained.
2. In parallel, obtain a written compliance statement (five-field log, offline behaviour, export formats) and a firm quote for ICT Protege WX from a NZ integrator (Tiger Security, Rigid Security, or Security NZ), explicitly substituting a PIN-capable reader for the DESFire card readers in the standard starter kit.
3. Take this session's finding back to Ed/Jenny: does the $1,500 Phase 2 budget need to be revised upward, given that the two best-evidenced options now indicate a realistic installed cost of roughly $1,800-$2,600?
4. Has the BCA issued a ruling on the gate fail-mode (Gap 3)?
5. Which self-storage management software is preferred (Gap 7)? If Storman or Sievert Storageman, revisit Option B/D vs Option C before ordering.
6. How many zones are currently active on the DSC HS2032 alarm panel?
7. Can AccessEzy (accessezy.com, via Alarmquip) provide technical detail on offline behaviour and export/API format sufficient to compare it against Options A-D?
8. Is remote LAN access (VPN or port forwarding) in scope for the Lightwire installation, so that remote code management is actually usable once a Phase 2 panel is installed?
9. What is the EasyGate's current customer capacity (max PIN count)? Relevant only if Phase 2 procurement is delayed and Phase 1 customer growth approaches the EasyGate's limit in the meantime.
10. For Option C (PTI StorLogix): is FalconXT or CloudController the hardware that would actually be quoted for this site, and does the confirmed offline-PASS still apply to whichever is offered? Who is the correct current NZ distributor contact -- ptistoragesecurity.com.au / the NZ Distributor Facebook page, or is SecureIT NZ / Sentinel Self-Storage Systems still valid?
11. For Option B: confirm with the installer whether DS-K2602-G or the newer DS-K2602T sibling model is actually being supplied, and get both priced if possible.