10. Sergei
SERGEI
The building had gone quiet the way it only did after midnight, when Ruben had finished his rounds of the upper floors and the elevators stopped answering on the first call. I stood behind my desk for a long moment after the door closed behind Elena, listening to nothing in particular.
The garage-camera feed still sat there, glowing faint blue on my second monitor. I closed it without looking at it again.
I sat down and ran the conversation back from the beginning, the way I ran every negotiation back afterward, checking the seams for anything that might come apart under pressure later.
I had opened with the photograph, then let her try her cover story and let it fail on its own weight rather than interrupting her, because a person who talked herself into a lie's collapse remembered the collapse more thoroughly than a person who was merely told the lie had failed.
I had waited for the truth instead of demanding it, and offered the deal only after she was too tired and too frightened to negotiate it downward.
Every step had been sequenced. Every pause had done work.
I could not find the flaw in it. I turned it over twice more, looking for the place where I had gotten lucky instead of correct, the place it could have gone differently if she had been harder, or smarter, or less afraid for her brother.
I did not find one. The absence of it sat in my chest like a stone I had swallowed on purpose.
I had put more care into a five-minute pitch to a data thief than I had put into the Halcyon-Drummond renewal, a hundred-and-forty-million-dollar contract I had closed in under an hour with three bullet points. That was the flaw.
I caught myself rereading the same line of my own notes for the third time, and closed the file instead of finishing the thought.
I picked up my phone and called Ash instead, because there was actual work now, work I could put my hands to.
Ash answered on the second ring, which meant he had not been asleep. "It's after midnight," Ash said. "This better be either a fire or a felony."
"Neither," I said. "I need a folder built. Tonight."
"You couldn't have said that at six p.m. like a person with a functioning circadian rhythm?"
"I didn't have the requirement at six p.m."
There was a pause, the particular quality of a pause I recognized from years of these calls, the sound of Ash sitting up and reaching for a keyboard. "Okay. Talk to me. What kind of folder?"
"A sanitized analytics tree. Client-facing dashboards, quarterly projections, the kind of thing that looks like it matters but doesn't actually move anything if it walks out the door. I want it to look complete. Complete enough that nobody who sees it goes looking for the real version."
"So, a decoy?"
"A controlled leak," I said. "There's a difference."
"Sure there is." Ash's typing had already started, the rapid uneven clatter of a man who had worn the letters off half his keys years ago and no longer needed to look down to find them. "Give me the access model. Who's allowed to touch it?"
"One account. I'll give you the credential in a minute. Everyone else gets flagged."
"Flagged how? Silent alert, or do you want it to look broken if the wrong person opens it?"
I considered that for a second. "Silent. If it looks broken, it looks deliberate, and deliberate makes people curious. I want it to look like an ordinary folder that happens to be watched."
"Copy that. I'll build it on a segmented share so it doesn't inherit permissions from anything real, then we honeytoken the subfolders, a couple of the file names, maybe a fake API key buried in one of the model docs, something that pings us the second it's queried outside the one account.
You want trace-tagging on individual files too, or just folder-level? "
"Both. If something moves, I want to know which file moved and where it went, not just that the folder was opened."
"That's more build time. How much time do I actually have?"
"Until morning."
"You have until whenever the account you're setting this up for expects to log in and start pulling files," Ash said. "Whose account is that, exactly?"
I didn't answer directly. "Start with the trace-tagging," I said. "I'll send you the folder taxonomy in ten minutes."
We worked through it the way we had worked through a hundred smaller problems over the years, Ash naming the pieces while I approved or rejected them, the two of us building something invisible out of things that looked, on the surface, like ordinary corporate infrastructure.
Ash suggested nesting the honeytokens three levels deep so a cursory look wouldn't trip them by accident.
I told him to make the top-level folder boring on purpose, unremarkable file names, dates that looked routine, nothing that would draw a second glance from someone skimming a shared drive.
Ash asked if I wanted a kill switch built in, something that could wipe the whole tree remotely if it ever needed to disappear fast. I said yes, and gave him a two-word phrase to trigger it, and Ash typed it in without asking what it meant.
Somewhere around the twentieth minute, Ash stopped typing.
"You good?" Ash said.
"Working on the architecture," I said.
"That wasn't the question."
I looked at the second monitor, at the empty space where the garage feed still had been an hour before, at my own reflection faint in the dark part of the screen.
I found that I did not have a ready answer, which was, in itself, unusual enough to notice.
"It's been a long night," I said, which was true and also nothing.
"It's been a long night for both of us, and I'm not the one who sounds like he's reading off a script he wrote for himself," Ash said.
"You don't have to tell me what happened.
I've got a decent guess, and it isn't my business until you make it my business.
I'm just saying you sound like a man holding a door shut with his foot. "
"I'm fine, Ash."
"That's the least convincing four words I've heard you say since you told the Drummond people the renewal wouldn't affect headcount.
" There was a beat, and then his tone softened, the joking mostly gone out of it.
"I'll finish the honeytoken placement. Send me the account credential when you've got it, and I'll have the whole tree live before you're out of that office. "
"Thank you," I said, and meant it in a way that surprised me slightly, and we let the call go quiet on technical matters again until it ended a few minutes later with nothing further said about how I sounded.
I spent the next stretch of time doing the part of the work that was genuinely mine to do, opening a blank directory template and building the tree by hand, because I did not trust anyone else with the naming convention, not even Ash.
I labeled the root folder with an internal project code, Aegis-Lite, chosen so anyone who stumbled across a reference to it in an email or a ticket would read it as a minor internal security initiative and nothing more.
Then I built four subfolders under it. Quarterly modeling summaries.
Three client portfolios I had already decided were disposable enough to sacrifice in small, believable doses.
A set of projection spreadsheets with numbers close enough to real to survive scrutiny and wrong enough to be useless to anyone building a prosecution on them.
And a folder of internal memos written in a register I did not normally use, slightly more hedged, slightly more anxious, the voice of a company that thought it might be in trouble and didn't yet know how much.
I wrote three of those memos myself, dating them across the past two months, backfilling a paper trail that would look, to a federal task force reading it six weeks from now, like an organic sequence of internal concern rather than something assembled in one sitting, hours after everyone else had gone home.
I set the single authorized account, the one Elena would use, with read and limited-copy permissions and nothing else.
Every other credential in the building, including my own, would trip a silent flag the instant it touched the folder.
I tested the logic twice, opening the tree from my own admin account and watching the alert route itself quietly to a private channel I had set up for exactly this purpose, visible to myself and to Ash and to no one else, not even Vadim, not yet.
I would decide later how much of this Vadim needed to know. Vadim's kind of security did not usually intersect with folder permissions, but it might, eventually, if any of this went the way my least generous instincts told me it could.
By the time the tree was built and tested, it was well past midnight, and the office around me had gone utterly hushed, the kind of hush that made the hum of the server closet down the hall sound loud.
I got up and walked to the window, because my legs wanted something to do that my hands no longer had a task for. My office looked out on the alley behind the building, a slot of brick and fire escape and a single sodium light that stained everything the color of weak tea.
I had specifically kept this office when the floor was reassigned two years ago, over the objections of a facilities manager who could not understand why the CEO would choose the alley view over the harbor suite two doors down, and I had told him it was about sightlines to the loading entrance. That had been true, as far as it went.
Tonight the alley gave me nothing back. I watched a delivery truck idle at the far end of it for almost a full minute before pulling away, its taillights sliding red across the wet brick, and I found myself standing there afterward with no memory of watching it leave, only of watching it arrive.
I put my palm flat against the glass, which was cold in the specific way glass got cold once the heat had gone out of the building for the day, and I counted primes without deciding to, seventeen, nineteen, twenty-three, twenty-nine, the habit older than the company itself, older than most things I still carried from before I'd built anything worth protecting.
I got to thirty-one and lost the thread of it, which almost never happened.
I stood there a while longer anyway, watching the empty alley do nothing, because it seemed important to give the stillness a chance to work on me the way it usually did, and it seemed important, in some way I did not examine closely, that it wasn't working tonight.
Eventually I went back to the desk. I checked that the Aegis-Lite tree had synced correctly, sent Ash the final credential, confirmed the honeytoken pings were live and routing where they should.
I closed the laptop lid partway, then opened it again to check one more time that the single authorized account matched the one I'd promised Elena, character for character, because a typo in a credential was the kind of small failure that could unravel a large plan, and I was not going to be the reason this one came apart at a seam that trivial.
I glanced at the corner of the screen. It read one o'clock.
Satisfied, I closed the lid the rest of the way and locked the screen with my thumb against the reader.
"This was the strategic play," I said out loud, to the empty office, in the voice I used for closing arguments in rooms full of people who needed to believe me, and for tonight, at least, it was enough to believe it myself.