CHAPTER 47
Friday’s preliminary evidence report contained one hundred twelve pages and no villain.
Helena Rowe opened the restricted session by placing the knowledge ceiling on the screen.
“This report authenticates exactly twelve altered current values and an outbound mirror to Cinder Sports Analytics. It does not identify a responsible person, motive, medical method, historical vendor purpose, connection to A.R.P., or any other actor. No participant may brief beyond the evidence.”
Lena, Roman, Priya, Sloane, Warren, and Adrian acknowledged the limit. Victor joined only for the vendor and preservation segment as trusted CFO.
The server image showed postvalidation updates made through a service credential. Warren cautioned that service credentials could be invoked by automation, administrative tools, or a person operating through another system. Naming the credential did not name the actor.
The report listed thirty-seven people with some authorized relationship to the surrounding systems and no evidence that any one had used the credential. Warren refused to narrow the list through intuition.
“We can examine access patterns,” he said. “We cannot publish a suspect list based on proximity.”
Lena watched temptation harden Roman’s face. Coaches evaluated people by pattern every day. Security evidence required a different threshold.
“What about motive?” Adrian asked.
“The changes could affect workload perception, vendor testing, or an unknown process. Benefit is not yet established. We do not reverse-engineer guilt from who might gain.”
Helena required the speculative section removed from the version distributed beyond the core team. Leads remained privileged investigative material, not conclusions that could leak and ruin an innocent career.
Lena thought of how quickly her own mentor had turned communication style into a reason to distrust her. Process protected people most visibly when everyone wanted a name.
“Was the credential copied?” Roman asked.
“Unknown,” Warren said. “We found no proof of compromise and no basis to exclude it.”
The Cinder mirror had received the twelve altered points within seconds. The records did not establish why the mirror existed or what broader purpose, if any, it served.
“Can we terminate the vendor?” Sloane asked.
Victor reviewed the contract. “We can suspend all transfer immediately under integrity provisions. Full termination requires notice unless Helena invokes evidence risk. Finance has no objection to suspension.”
“Suspend,” Helena said. “Preserve contractual rights and records. No accusation in the notice.”
Victor authorized outside costs and instructed finance staff to route all invoices through an independent code. He asked whether the incident created a disclosure obligation to players or the league.
“Affected players receive appropriate notice through medical and legal process,” Priya said. “No private diagnosis travels with vendor notice.”
Helena added, “League reporting depends on confirmed scope. We preserve now and determine obligation under APFF rules without minimizing.”
Victor nodded. “Fund whatever review is required.”
He left for a board finance call, trusted and unsurprising.
Roman watched the door close. Future truth was not available to him. On this Friday, Victor was a competent executive helping preserve evidence. Anything else would be prejudice dressed as instinct.
Priya reported that affected players had received independent review. No player had been ordered to practice or cleared solely because of the altered values. The findings did not erase the seriousness; they defined current harm without inventing more.
The review recommended immediate controls that did not depend on solving attribution.
The Cinder mirror would remain suspended.
Postvalidation changes required two-person approval from the relevant authority, named source, and reason.
Service credentials would be rotated under independent custody.
Analytics and medical systems would compare authenticated states before any material workload output reached coaching.
“Does two-person approval slow correction during a game?” Roman asked.
“Medical source corrections do not route through your game model in real time,” Priya said. “Performance-input corrections that affect a live branch can invalidate the recommendation until authenticated. You still make the football choice without false current data.”
“So the safest emergency behavior may be silence.”
“Correct,” Lena replied.
Warren proposed automated alerts for any postvalidation change. Lena required the alert show the prior value, new value, source authority, and whether the change had propagated to a vendor. Helena required alerts themselves be preserved so an administrator could not clear the history.
Adrian asked whether the controls would label every legitimate correction suspicious.
“No,” Warren said. “They label every material correction attributable. Suspicion is a human conclusion. Provenance is a system fact.”
Sloane assigned owners and deadlines. No one wrote identify culprit as a control. Investigation remained open under Helena and Warren, bounded by evidence. Football did not receive a parallel inquiry merely because Roman disliked not knowing.
“When do we review again?” Sloane asked.
“When new authenticated evidence arrives or at the scheduled thirty-day control check,” Helena said. “Unchanged evidence is not permission to speculate harder.”
Roman wrote that down too.
Lena documented that the model’s source process had worked. Automatic retention exposed the alteration. The charter now required that protection institutionally rather than depending on her private design.
“What do we call Cinder in the risk register?” Sloane asked.
“Unresolved current-data vendor,” Lena said. “Not legacy conspiracy. Not A.R.P. successor. Not malicious actor until evidence supports it.”
Roman’s jaw tightened around the 2009 memory, but he left it as a controlled lead under Helena, uncorroborated.
Warren finalized the chain: raw server, forensic image, configuration export, access logs, Lena’s sandbox snapshot, model version history, Cinder mirror records, and synchronized hashes. No magic recovery. No single clue that solved the broader mystery.
After the signatures, Lena remained beside the risk register. CINDER SPORTS ANALYTICS glowed in restrained amber.
“You wanted a name,” she said to Roman.
“I wanted something I could remove.”
“Our rule.”
“I’m afraid unresolved danger will reach a player before we understand it.”
“So am I.”
“And you?”
Lena looked at the twelve markers. “I’m afraid discovery will become my identity. That people will remember the anomaly and forget the department I built.”
Roman did not tell her discovery made her brilliant. “Then the story remains what it is. Your system preserved truth. Your department also got fifty-four men through camp with better questions. Both belong to you.”
She turned toward him. “Correct attribution.”
“Basic ethics. No parade.”
They left the evidence room separately from the sealed files, carrying only the conclusion they were allowed to know.
Lena called her mother from the courtyard before returning to Week One work.
“We found a current data problem,” she said. “It is preserved. I cannot tell you private details, and we do not know who caused it.”
Marisol heard the limit. “Are players safe?”
“Medical reviewed the affected people independently. No decision rested solely on the altered values. The review continues.”
“Are you safe?”
The question had more than one meaning.
“Professionally, yes. Personally, I am tired of wanting an answer evidence cannot give.”
“Then stop asking the answer to arrive because you are tired.”
Lena leaned against the warm stone wall. “Roman said almost the same thing.”
“Do not blame me for his occasional wisdom.”
Her mother’s humor restored scale. The unresolved vendor was serious. It was not the whole day, the whole department, or the whole life Lena had built.
She returned upstairs and opened the Oklahoma City file.
Week One remained two days away.
The unresolved vendor entered the organizational risk register.
It did not enter their bed as a problem love could solve.