Chapter 15
Chapter Fifteen
EMMA
Coleman walked in, and I couldn’t remember a single word of what I’d planned to tell him.
As soon as I saw him, I knew he wasn’t the same version of the person who’d left earlier.
Then, he’d been short and controlled, holding himself together with the emotional equivalent of duct tape.
Whatever had happened at Gunner’s had loosened that.
He didn’t look better. He looked like a man who’d stopped pretending he was fine.
I wanted to go to him, close the distance, hold him, and tell him he didn’t have to explain. Instead, I stayed where I was and waited.
Luke was on his feet before I’d taken a full breath. “I have to make a call.” He picked up his phone from the table and stepped out the slider and onto the deck off the kitchen.
Coleman closed the distance between us, set his keys on the counter, and leaned his weight forward with his palms flat on the surface.
“Are you okay?” I asked.
“Hard day,” he said. “I’ll tell you about it, but not tonight.”
“Okay.”
He searched my face as though he’d expected me to push.
“I mean it,” I said. “Whenever you’re ready.”
He nodded once, straightened, and rolled his shoulders, then looked past me toward the table where Luke’s laptop sat open next to my files.
“What did I miss?”
“A lot.” I opened the slider and waved Luke in.
As he stepped inside, his attention moved from me to Coleman. Whatever he thought he saw, he kept to himself.
“What have you told him?”
“Nothing yet.”
Coleman straightened. “Tell me what?”
“While you were gone, Luke and I dug into the monitoring system Alice found on Treasury’s network. We traced who built it. It was Derek Mansfield.”
Coleman’s jaw tightened. “What for?”
“To protect Hartwell-era security archives. Classified files from the period when he was compromised and killed. If anyone touched those records, he’d know.”
“I’m not following. What’s the point?”
“That’s what we have to figure out. Whatever is in those archives, Derek spent months building a system to make sure nobody found it.”
“Show me what you have.”
Luke opened his laptop, and the three of us huddled over the screen. He walked Coleman through the surveillance architecture Alice had mapped, including the access triggers and alert thresholds.
“Each target points to the same set of records,” Luke said. “Security logs, authentication reports, and internal audit trails dating back to the years when Hartwell was active. Whatever Mansfield is hiding in those archives, he went to a lot of trouble to make sure nobody found it.”
“Has anyone examined what’s actually in them?” Coleman asked.
“No,” Luke said. “If his tripwire is still active, pulling those files could alert him.”
“Then, we need Alice to get in without tipping him off. Whatever he buried in there, we have to see it before he knows we’re looking.”
Luke picked up his phone.
Ten minutes later, we had the full team on screen. Alice and Admiral were at K19’s headquarters. Tex had joined from San Diego. Atticus was with Brenna, who had case files spread across the table in front of her.
I told them what Luke and I had discovered and that we needed Alice and Tex to get into those files without alerting him.
“Luke, you need the background on this,” Brenna said.
“Before Emma was named acting deputy secretary, James Hartwell held the cabinet position. What K19 uncovered was that a foreign intelligence service was blackmailing him, using evidence of financial misconduct from earlier in his career. They forced him to authorize illegal transfers from defense funds. By the time anyone figured out what was happening, he’d moved tens of millions of dollars. ”
“Mansfield was Chief of Security during that entire period,” Coleman added. “If there were warning signs that Hartwell was compromised, his department was responsible for catching them.”
“How sophisticated is his tripwire?” Atticus asked.
“Sophisticated enough,” Alice said. “He layered it across multiple access points. A standard login would flag him within minutes. Tex and I can get around it, but we need time.”
“How much time?” Atticus asked.
“Depends on what we find once we’re in. Give us an hour.” She turned to Brenna. “Start working with Soledad. If we find what I think we’re going to find, you’ll want warrants ready before Mansfield knows we’re looking.”
The call ended.
Luke stood and reached for his keys. “I have a couple of calls to make. I’ll grab food on the way back.”
Coleman put his arm around my shoulders, and I leaned into him. There was nothing to say that would change what was coming.
I closed my eyes against his shoulder. When I was nine years old, Derek Mansfield had put his hand on my head at a Fourth of July barbecue and told me I was smarter than half the people he worked with.
My father had laughed, and my mother had told him not to give me any ideas.
I could still hear their voices on the screened porch, the cicadas outside, and the sound of ice clinking in glasses.
When Luke returned an hour later, he had his laptop under one arm and a bag in the other. “I got crab in case anyone wants some.”
Before Coleman or I could respond, Alice messaged, saying they had information and were ready to reconvene.
“We’re in,” she said once everyone had joined the videoconference.
“We bypassed the tripwire without flagging Mansfield. Here’s what we found.
The archives are intact except for one file.
A security report that should have existed between two others in the sequence has been modified and reclassified so it wouldn’t show up in a standard search.
The original report documented anomalous access on authentication servers under Mansfield’s authority, the kind of flag his department was supposed to investigate.
The anomalies it documented started showing up two weeks before K19 uncovered that Hartwell was behind the thefts. ”
“The modification timestamp on the file is three weeks after Hartwell’s death,” Tex added. “Mansfield didn’t touch it during the investigation. He waited until everything was closed, and then went in and altered it.”
“Based on the timeline, the report crossed his desk as a routine flag,” Brenna said. “His department gets dozens of those. There’s no indication he investigated it or escalated it. The only reason to alter it afterward is if he realized what he’d missed and decided to bury it.”
“Which turned negligence into a federal crime,” Atticus said.
Brenna nodded. “Tampering with classified documents would have ended his career on its own. The cover-up made him a criminal.”
“There’s more,” said Alice. “I ran Mansfield’s name and credentials against the Hartwell money trail Tex and I mapped during the original investigation.
He has offshore accounts connected to Hartwell’s network.
The payments were routed from entities controlled by the same people who’d blackmailed Hartwell, layered across three jurisdictions, into accounts registered under shell names that trace back to him.
The money started flowing after Hartwell’s death, just under two million over three years, structured to stay below reporting thresholds. ”
“Why, though?” I asked.
“They lost their asset when Hartwell died,” Tex said. “Mansfield gave them a replacement. The head of security controls who goes where, who sees what, and which investigations get flagged. They weren’t paying him to keep quiet. They were paying him to keep watching.”
“Every step he took made it worse,” Brenna said. “He missed the report, buried it, took the money, and then built the surveillance system to make sure nobody ever discovered any of it. Each decision trapped him more than the last.”
“Is this enough for an indictment?” Atticus asked.
“Chain of custody is clean on our end,” Alice said. “The credential traces, the modification timestamps, and the financial records are all documented.”
“A defense attorney will argue someone else used his credentials,” Brenna said.
“Not with Luke’s badge-in logs,” Tex countered. “Every modification lines up with periods when Mansfield was the only senior security official in the building, using his hardware, his login, from his office. And the offshore accounts are in shell names that trace directly to him.”
“If we arrest him tonight, Treasury’s entire security operation is compromised,” Luke said.
“He controlled the cameras, the badge system, the access logs, all of it. If he was willing to alter classified archives and take foreign money, we have no way of knowing what else he’s been hiding in those systems. We don’t know who in his department knew or what they’ve been covering up on his behalf.
Emma has been walking through that building daily, trusting that security was protecting her, and it wasn’t. ”
“Joan Matthews is his second-in-command,” I said. “She runs badge access, surveillance monitoring, and incident reports. Everything Mansfield set policy on, she executed. If he was altering records and building hidden surveillance, she either knew about it or she should have caught it.”
“Which means we can’t trust her either, not until Alice can clear her,” said Atticus.
“I agree. I’ll add her credentials to the audit, but that adds time,” she responded.
“So Monday morning, I walk into a building where the head of security has been arrested, his deputy is under investigation, and the entire department is in chaos.”
“K19 handles your security,” Atticus said. “That doesn’t change. As for the building, I’ll have a team ready to step in if Treasury requests support during the transition.”
“Naomi will have no choice but to accept it,” I said. “She can’t run a confirmation hearing without a functioning security department.”
“Brenna, where are we with the DOJ?” I asked.
“We’re ready to move. FBI agents can be at Mansfield’s house within the hour.” When no one spoke up with a reason why not to, she made the call.