Chapter 20 Inside The Building #2
"Security will audit systems, not people," I said. "No personal devices. No personal accounts. No content search. Outside counsel controls any identification if the audit finds unauthorized extraction. Morrow is prohibited from profiling employees."
Simone's pen stopped above the page.
"Malcolm agreed?"
"Malcolm received an instruction."
"There is the CEO."
"Did you believe I had misplaced him?"
"I believed you were at risk of turning consent into a personality transplant."
"I remain capable of command. I am becoming selective about its target."
Her gaze held mine.
"That matters," she said.
The approval reached me before I could prevent it.
"The newsletter's questions suggest a current employee provided records," I said. "Do you know why someone would go outside the independent review?"
The smallest pause entered the room.
"Because the review is controlled by structures the company created," she said. "Even independent counsel is being paid by Blackwell. Trust does not arrive because a retainer uses the word independent."
"What would create it?"
"Let affected people select one committee member. Publish the review mandate. Give employees a protected channel operated by a firm that has never represented Blackwell. Promise findings cannot be buried by privilege unless a court requires it."
Each recommendation was ready.
Simone was always prepared. That did not make the pause disappear.
"You have thought about this," I said.
"It is my job."
"It is also personal to you."
Her expression cooled. "I stood in the lobby with Celeste. You know that."
"I do."
I moved to the chair opposite her desk and sat rather than standing over her.
"I am not asking you to identify a source," I said. "I am asking whether the company has made the safe channel credible."
"No."
"Then I will change it."
"You cannot purchase credibility in one afternoon."
"I can stop demanding it before it is earned."
The tension in her shoulders remained.
"What happened this morning?" I asked.
"I told you it was complicated."
"That described your morning. It did not answer the question."
"Am I required to answer?"
"No."
The word cost me.
I allowed it to stand.
Simone looked at the closed door, then at me.
"I had a conversation about Celeste's privacy," she said. "I cannot give you the content because it was not mine."
"With her solicitor?"
"That is part of the content."
The refusal was precise.
I did not like it.
Dislike was not evidence.
"All right," I said.
"You trust me?"
"I trust that you will protect Celeste even from me."
Pain crossed her face so quickly I might have imagined it.
"You should," she said.
The answer sounded like warning.
I wanted to press. I wanted every hidden fact placed on the desk where I could classify it. I wanted to know why she had arrived tired, why the newsletter request made her guarded, and why trust looked painful when I offered it.
Control offered a familiar solution.
Ask security which calls left her office. Review building logs. Compare the timing of the verification request with her secure-device activity. Morrow could model the rest without reading a single message.
The thoughts arrived fully formed because I had built the machinery that made them possible.
I rejected each one.
"The protected channel will be redesigned," I said. "You will not lead it."
Her chin lifted. "Why?"
"Because you are personally connected to Celeste and professionally connected to me. The work would force you to trade one confidence against another. Recommend three independent firms. The committee chooses one without either of us."
She considered the structure.
"That is correct," she said.
"I know."
"Do not become smug."
"It is all I have left."
The line almost restored her smile.
Almost.
I stood.
"Wednesday remains yes?" I asked.
"Yes."
"If what happened this morning affects that answer, tell me before six."
"I will."
I left without asking for reassurance.
At five forty, outside counsel approved the revised audit protocol.
At six ten, Helena circulated a draft charter allowing affected people to nominate an independent committee member.
At seven, Morrow projected a thirty-eight percent chance that full disclosure of the protocol failures would deepen the immediate reputation loss.
I approved disclosure.
At eight twenty-three, the first system audit report arrived.
No external intrusion. No altered records. No bulk export from the accounts of seventy-two employees.
One account had accessed all eleven separation files over four months through ordinary job permissions. The pattern matched the employee's assigned responsibilities. No policy violation appeared.
Outside counsel withheld the name under the protocol I had ordered.
Malcolm called within two minutes.
"We can identify the account if you authorize escalation," he said.
"Was the access permitted?"
"Yes."
"Was data exported?"
"Not through company systems."
"Was anything altered or deleted?"
"No."
"Then there is no security basis for escalation."
"The access pattern still narrows the source."
"That is not our purpose. Close the identity inquiry. Continue the integrity audit."
"Conrad."
"That was an order."
He became silent.
"Understood," he said.
I ended the call.
The board chair called before I could close the report.
"Security says you terminated source identification," she said.
"I terminated an identity inquiry unsupported by a security violation."
"The distinction will be difficult to explain if confidential records publish tomorrow."
"Then explain that Blackwell investigated system integrity and found no unlawful access, export, alteration, or intrusion."
"You cannot know there was no export. An employee could photograph a screen."
"An employee could also remember a procedure, speak to counsel, or retain records relating to their own work. Possibility is not cause."
"This board has a duty to protect corporate information."
"It also has a duty not to retaliate against protected activity."
"You sound like Ms. Hale."
The observation carried more accusation than compliment.
"Ms. Hale is not part of the investigation."
"That was not my point."
"Then make your point without using her name to reduce my judgment."
Silence followed.
The chair changed tactics.
"Investors will ask whether you have lost control of your own building."
"Control does not require knowing every private thought inside it."
"That is a recent philosophy."
"Recent does not mean false."
"And if the newsletter publishes private employee information?"
"We seek an injunction limited to the private information, notify affected people first, and provide counsel. We do not call truthful evidence confidential merely because it is damaging."
"You are willing to let an employee challenge the chief executive anonymously."
"I am willing to let an employee report a system failure without being hunted through seventy-three personal lives."
The old version of me would have heard weakness in the sentence. I heard cost. I was accepting a challenge I could not answer through force and leaving the challenger free to remain unknown.
"The board may direct a broader investigation," she said.
"Not through Blackwell security. The independent committee now controls retaliation risk. If the board wants broader action, submit the request to outside whistleblower counsel and place every vote in the permanent record."
"You are putting the board under review."
"The board approved the structure. Accountability that stops at the chief executive is branding."
Her exhale reached the line.
"Send me the protocol," she said.
"Outside counsel will send it."
"Conrad."
"That boundary is not negotiable."
The call ended.
At nine twelve, Simone sent one message about Wednesday dinner.
The address arrives at six. Do not bring security inside.
I replied before searching the address.
Understood.
Then I stopped myself from asking for the neighborhood.
She had given me forty-six hours of uncertainty.
The fact that I could endure it did not make the waiting pleasant.
It made the waiting hers to impose.
The unnamed employee remained inside my building, carrying knowledge of a system I had allowed and distrust I had earned.
I opened the original list of seventy-three names one final time.
The document had already been restricted, but a copy remained in my meeting cache because executive systems assumed I might want anything I had once seen.
I deleted the cached copy and instructed technology to change that default for protected investigations.
Convenience had preserved suspicion after authority withdrew it.
Then I removed myself from the distribution for every identity-level report. Outside counsel would notify me only if verified misconduct required executive action.
The decision created a blind spot by design.
For most of my career, I had treated blind spots as failures. This one was a boundary with architecture behind it.
I could command security to find the person by morning.
Instead, I commanded the company to become safer than silence.
For the first time in my career, not knowing who had challenged me felt less dangerous than proving they had been right to hide.