Chapter 13 - FORTY-EIGHT HOURS
Ryan had not betrayed me because he believed Evelyn was innocent.
He knew she helped conceal his father’s murder.
He knew Garrison arranged it.
He knew the same people planned to use him against me.
He chose money anyway.
The recording erased the final excuse.
No coercion could explain the moment after Garrison offered him a share of Northstar.
Ryan did not ask whether I would be harmed.
He did not ask whether Garrison could be trusted.
He asked for a percentage.
Garrison offered twenty.
Ryan negotiated for thirty.
They settled at twenty-five.
My life became a business term between them.
The Baton archive gave investigators enough evidence to obtain arrest warrants for Garrison, Ryan, Evelyn, and nine collaborators.
Caldwell began cooperating when prosecutors showed him the Original Sin folder.
Evelyn remained silent.
Ryan and Garrison disappeared.
The stolen replica drive they took from the training range contained a tracker.
It transmitted for nineteen minutes before someone discovered it.
The final location was a private airfield south of Waco.
Security footage showed Garrison boarding a small jet.
Ryan arrived separately.
The aircraft never took off.
Investigators found it empty inside a hangar.
A maintenance truck left the airfield during the search.
Its driver’s identity belonged to a soldier who died four years earlier.
Another stolen identity.
Another trusted gate opened.
At Northstar, the immediate crisis became financial.
The Department of Defense suspended our facility clearance pending review.
Without the clearance, most engineers could not access active projects.
Contract payments stopped.
The bank froze our credit facility because of the fraudulent transfer request.
Payroll was due Friday.
Seven days away.
Harold called an emergency board session.
“We have enough cash for three weeks at reduced operations,” Daniel reported.
“After that?”
“We miss payroll.”
A director asked whether insurance covered identity fraud.
“Not when the alleged fraud involves the chief executive and a sanctioned defense vendor,” Nolan said.
He had joined from the hospital against medical advice.
Harold turned toward me.
“The government has given us forty-eight hours to demonstrate that Northstar’s core systems were not knowingly involved in Lantern.”
“What happens if we fail?” I asked.
“Our contracts may be terminated for default.”
“Not suspended?”
“Terminated.”
Years of work could disappear in two days.
The company employed one hundred eighty-three people.
Many had families.
Mortgages.
Medical bills.
Security clearances tied to their careers.
My personal reputation mattered less than their future.
“What evidence does the review team require?” I asked.
“Complete access logs.”
“Certificate issuance history.”
“Vendor approval records.”
“Proof that the compromise originated outside authorized Northstar operations.”
“We have the eleven-second signature.”
“They call it persuasive, not conclusive.”
“Why?”
“Because the master time server was replaced last month.”
I looked at Daniel.
“Who authorized that?”
“Nolan’s account.”
Nolan sat straighter.
“I did not.”
“Invoice?”
“Meridian Technical Services.”
Another Caldwell-linked entity.
The compromised time server had been introduced through a routine maintenance contract.
It could allow prosecutors to claim the eleven-second gap was a Northstar defect rather than proof of inserted records.
“They planned the forensic defense,” I said.
“Long before the exposure.”
Harold nodded.
“They anticipated how we would prove the breach.”
“What evidence cannot be changed by the time server?”
Daniel answered first.
“External client logs.”
“Which clients?”
“Any system receiving our signed updates.”
“Lantern may have altered those too.”
“Not air-gapped audit repositories.”
Northstar maintained monthly compliance snapshots on write-once media stored with an independent records company.
The archives were designed for disasters and legal disputes.
They could show certificate history before the compromised time server was installed.
“Retrieve them,” I said.
Daniel’s face tightened.
“We tried.”
“What happened?”
“The records company says our account was closed three weeks ago.”
“By whom?”
“Your signature.”
“Of course.”
“Where are the archives?”
“Transferred to a destruction contractor.”
“Have they been destroyed?”
“Scheduled tomorrow morning.”
The forty-eight-hour government deadline was not our only clock.
Our cleanest evidence would be shredded in less than twenty-four hours.
The destruction facility was in Oklahoma.
Elena obtained an emergency preservation order.
Detective Ruiz contacted local authorities.
A team reached the facility at 6:10 p.m.
The Northstar containers were gone.
A driver collected them six hours earlier using valid release documents.
Traffic cameras tracked the truck south.
Its location transponder stopped near the Red River.
We searched highway footage.
The truck crossed back into Texas.
It entered a recycling plant owned by a company in Garrison’s financial network.
By the time officers arrived, a fire had consumed part of the warehouse.
Workers claimed an electrical fault.
The Northstar archive containers stood near the center of the blaze.
Most media was destroyed.
“Not all,” an investigator said.
One case had been removed before the fire.
Security footage showed a female employee placing it inside her car.
The woman’s name was Dana Walsh.
She had worked at the recycling facility for four months.
Her previous employer was Liberty Shield.
Officers went to her apartment.
It was empty.
Her phone was disconnected.
The surviving archive was gone.
Garrison had predicted we would seek independent logs.
He placed someone at the final destination before the breach was exposed.
We were following paths he prepared.
“We need to stop reacting,” I said.
Elena closed the fire report.
“What do you propose?”
“Give him something he does not expect.”
“Such as?”
“A public surrender.”
Daniel stared at me through the screen.
“No.”
“Hear me.”
“You want to resign?”
“I want to announce that I am selling my Northstar shares.”
“To whom?”
“A buyer Garrison believes he can control.”
Harold understood first.
“Grant Caldwell.”
“Caldwell is under arrest,” Elena said.
“His investment group is not.”
“If the board announces negotiations with Caldwell’s firm, Garrison may contact whoever he believes can complete the purchase.”
“Ryan.”
“Yes.”
“Ryan needs the company transferred to receive his twenty-five percent.”
Harold leaned back.
“You are asking us to pretend the board has abandoned you.”
“The public already believes it.”
“Employees may panic.”
“They are already panicking.”
“The market value will collapse.”
“It already has.”
Elena watched me.
“And while Garrison focuses on the sale?”
“We retrieve the archive he missed.”
“What archive?”
I thought of the company’s earliest years.
Before professional records storage.
Before secure facilities.
When Northstar operated from my apartment, I made backups myself.
I stored them in the one place Ryan considered meaningless.
“My mother’s house.”
My mother died seven years earlier.
Her home in Plano remained in a family trust.
Ryan visited only twice.
He disliked the small rooms and old furniture.
After her death, I could not bring myself to empty the attic.
Boxes from Northstar’s first projects remained there.
Among them were original certificate enrollment records.
The primary token later hidden inside Evelyn’s baton had been registered using a root key created during those first years.
If the old root logs survived, they could prove when my certificate was duplicated.
No compromised time server could change them.
Elena immediately arranged protection around the house.
We drove there after midnight.
Dust covered the furniture.
My mother’s clock still hung above the kitchen doorway.
It had stopped at 3:18 years ago.
I climbed the attic stairs carefully because of my ribs.
Daniel joined by video while officers carried down boxes.
We found old invoices.
Hard drives.
Printed audit reports.
Then I opened a plastic container labeled TAXES.
Inside was the original hardware root device.
My mother had written a note across the lid.
CLAIRE’S COMPUTER THINGS.
DO NOT THROW AWAY.
I laughed for the first time in days.
Then I cried.
Only for a minute.
Daniel connected the device through a secured reader.
The logs opened.
They showed every certificate derived from the original root.
My legitimate token.
Backup devices.
Testing certificates.
And one unauthorized duplicate created fourteen months earlier.
The duplicate enrollment came from my home network.
It used Ryan’s laptop.
The biometric approval was not mine.
It belonged to Evelyn.
Direct evidence.
Immutable.
Independent of Northstar’s compromised systems.
We had what the government needed.
Then Daniel noticed another entry.
A second unauthorized root certificate had been created the previous night.
After the Baton archive opened.
“Who created it?” I asked.
The identity field appeared.
DANIEL KIM.
Daniel’s face went pale.
“That was not me.”
“Where did it originate?”
He traced the enrollment.
The request came from inside the protected apartment where I had stayed.
Only five people knew the location.
Leah.
Elena.
Ruiz.
The federal prosecutor.
Daniel.
A hidden device was found beneath the bedroom desk.
It had copied credentials from every secure call I made.
Someone in the five-person circle had planted it.
The root certificate was active.
And in forty-eight hours, it would automatically replace Northstar’s entire authentication authority.
May you like
If that happened, every legitimate employee credential would fail.
The attacker would own the company’s identity from the inside.
