Chapter 9 The Unedited Server
Rowan
The complete server image arrived inside two black evidence drives and one admission Switch should have made eight months earlier.
Lena’s conference room had been converted into a temporary forensic lab. Privacy film covered the windows. A camera recorded the evidence table. Two independent examiners worked from write-blocked copies while the originals remained sealed beneath transparent cases.
Nia sat on my left.
Knox sat at the far end because I had authorized his presence for identification. No cut. No club chair. No position close enough to imply he belonged beside me.
Switch remained standing until Lena pointed to the witness seat.
“State your role in creating and preserving this image,” she said.
He looked at the recording camera.
“I administered Wraithmoor Customs’ legal-review server.
On August seventeenth, after Knox reported suspected unauthorized copying by Celeste Marr, I isolated the server from the main network and created a bit-for-bit forensic image before any cleanup.
The image includes active files, deleted space, system logs, temporary data, local mail stores, and credential artifacts. ”
“Was the image altered?”
“No. The hash generated that morning matches the hash verified last night.”
“Was Breakwater House informed that the complete image existed?”
“No.”
“Why?”
“Club counsel classified the source as mixed privileged material and ordered a filtered incident packet. I prepared the packet and retained the full image under two-key encryption.”
“Did you know Rowan had requested return and deletion of the archive?”
“Yes.”
“Did you know Breakwater had not authorized Wraithmoor to retain it?”
“Yes.”
“Did counsel’s instruction prevent you from disclosing the existence of the image to independent counsel?”
Switch’s gaze dropped for one second.
“No.”
“Then state the reason.”
“I chose the club’s privilege position over Breakwater’s right to know the full source existed.”
The sentence remained in the room without defense.
Cooperation did not erase complicity. A clean handoff now did not make the eight-month delay clean.
Lena continued. “What access did Celeste retain after the breach was discovered?”
This was the question that had sat beneath every new use of the stolen files.
Switch answered directly.
“Her named Wraithmoor account was disabled twenty-two minutes after Knox reported the breach. Her remote certificate and physical token were revoked the same morning. She did not continue accessing the live server through that account.”
“Then how did she retain the records?”
“She had already exported them.”
One examiner projected a timeline.
Six days before Knox ended the affair, Celeste created a service credential labeled CASEbrIDGE LEGAL HOLD SYNC. CaseBridge was the document-review vendor Wraithmoor’s former counsel used for large productions. The name looked legitimate. The credential did not belong to CaseBridge.
Celeste had created it herself using administrative authority granted for litigation preparation. She disabled routine notification emails, directed exports to an external storage tenant she controlled, and marked the outbound jobs as legal-hold preservation.
Over four nights, the false service copied forty-three gigabytes.
The archive from Breakwater House.
Property files.
Donor schedules.
Security manuals.
Selected Wraithmoor records valuable enough to threaten the club if Knox exposed her.
“When I disabled her named account, the service job was no longer active,” Switch said. “The transfer had completed. Revoking access stopped future entry. It could not retrieve copies already outside our system.”
“Did you identify the false credential then?” I asked.
“No. I identified unusual legal-hold traffic but accepted Celeste’s prior description of the vendor process. The filtered incident review treated the exports as privileged work product.”
“When did you determine the credential was false?”
“Last night, after neutral counsel allowed examination of the registration record.”
“Could you have determined it eight months ago?”
“Yes.”
The access problem was no longer vague.
No one had forgotten to remove a fired attorney from a payroll system. Celeste had engineered an export before discovery and disguised it as authorized preservation. Switch had revoked her direct access promptly, then failed to test the explanation that made the stolen copy look legitimate.
He had preserved the evidence of that failure and kept it under club control.
“Your current cooperation does not remove you from review,” I said.
“I know.”
“You will submit your devices, account history, and administrative decisions to the independent examiner.”
“Yes.”
“You do not contact any person identified in the image.”
“Yes.”
“You do not delete, explain, or correct anything without counsel.”
“Yes.”
Lena recorded each condition.
The examiners began with deleted local mail stores recovered from the server’s unallocated space. Celeste had used a second mailbox tied to Gray Meridian Services. The visible account name was a random string. Its recovery address belonged to Victor Hale.
The first relevant thread began nine days after the false export completed.
Victor wrote:
The successor right is viable if interruption and commingling can be documented. We need the full schedules, not the summaries.
Celeste replied:
You have them. Do not move until the club has committed to containment. If Kane discloses early, the acquisition fails.
A second message followed two hours later.
He will not disclose early. Frame the alternative as charter exposure and he will choose the table before he chooses the wife.
I read the sentence twice.
Knox did not move.
The message did not prove Celeste had controlled him. It proved she had studied the preference he demonstrated to her and built a plan around it.
“She was right,” he said.
Lena looked toward him. “Answer only when asked.”
“I asked for identification, not commentary,” I said.
His jaw tightened once. “Understood.”
I should have felt satisfaction at the correction.
Instead I remembered a hotel recording in which Celeste had praised him for being decisive while he complained that my boundaries made him feel like a threat inside his own marriage.
He had offered her the map before he offered her the files.
“What exactly did you tell her about me?” I asked.
Lena shifted toward Knox. “Answer factually.”
He did not look away. “I told her you made me ask before the club used anything connected to Breakwater. I described that as distrust. I told her you had stopped attending some functions because you were tired of being asked for favors that became expectations. I said you cared more about professional separation than standing beside me.”
The words were not new in substance. I had heard pieces in the affair messages. Hearing him assemble them without euphemism altered their weight.
“What did she say?”
“That you were building a life that did not need me.”
“And you believed her.”
“I believed the version that justified what I wanted.”
“What did you want?”
“A place where my authority was admired and no boundary made me feel smaller.”
Nia’s pen stopped.
Knox continued before silence could make the answer sound brave. “That was entitlement. You were not reducing me. You were limiting what I could take from you and your work. I treated the limit as rejection.”
Celeste had not invented his resentment. She had validated it, recorded it, and converted it into a forecast.
I turned back to the evidence screen. “Continue.”
The examiners opened an attachment labeled SUCCESSOR CONDITIONS.
It contained the unreleased option, my two requests for release, donor restrictions, account information, and a column titled Pressure Sequence.
1. Trigger donor review.
2. Generate financial overlap allegation.
3. Interrupt operations.
4. Document visible resident removal.
5. Exercise successor option below market value.
Beside the third item, Celeste had written:
Emergency protocol produces a predictable exterior movement if alarm begins in Zone Four.
Nia’s hand closed around her pen.
The false alarm had not been improvised after the financial attack began. It had been built into the acquisition plan.
An attached map showed the old front-courtyard evacuation point. The image predated our privacy-screen revision by fourteen months. If June had not changed the route, every resident would have emerged into direct view of the service station.
“Purpose?” Lena asked the examiner.
“Likely to establish visible interruption, identify occupants, or both. The document does not specify the intended evidentiary use.”
The next thread did.
Victor wrote:
Saints can create a nonburn event. No injuries intended. We need bodies outside and vehicles leaving.
Celeste responded:
Use a contractor layer. No direct contact. The property has children.
A third participant entered the thread under initials C.W.
I want proof Tessa works there. You said her file was included.
The room narrowed.
Nia leaned toward the screen. “Open the attachment list.”
The examiner did.
A PDF named TW_RELOCATION appeared beneath the message.
My body knew what it was before the file opened.
Tessa’s intake summary filled the screen.
Former legal name.
Protective-order number.
Prior county.
The first six digits of her temporary phone.
A note stating that she had accepted transitional employment in the Breakwater laundry while learning commercial route management.
Across the bottom, someone had added her Wednesday loading schedule in red.
The alarm disappeared from memory and returned as sensation.
Strobes.
A child screaming.
A wrist bent wrong.
Tessa saying somebody gave me to him.
The conference room lost depth. The evidence screen seemed close enough to touch and too far away to read. My lungs worked, but air stopped arriving where it should.
A chair moved at the far end.
Knox stood, then stopped before taking one step.
“What do you need?” he asked.
Not Are you all right.
Not Let me help.
A question with no claim inside it.
“Back up,” I said.