Chapter 9
Lumen House had excellent instructions and one unacceptable control.
Connor found it during the technology review with Tessa Lin.
The property stood on a quiet lane north of the city, a modernist rectangle of limestone, steel, and laminated glass leased in full for the Society program.
No residents remained inside. No housekeeper would arrive unexpectedly.
The safety staffer would occupy a separate service room beyond the intimate suite, outside sightline and sound range.
Tessa wore her hearing aids, a black sweater, and the expression of an engineer who preferred objections before deployment.
"Show me the state map," Connor said.
She handed him a printed diagram rather than a tablet.
The glass suite could be opaque, transparent, or directional through switchable interlayers and controlled lighting.
Physical indicators appeared on both sides.
Green meant the agreed visible state. Amber meant hold. Red meant opaque and closed.
"Power loss?"
"Opaque. Mechanical screen deploys from both sides if the interlayer fails visually."
"Network?"
"None in the room control path. Wired relay, no remote access."
"Logs?"
"State changes only during audit, then disabled before use. No room content. The credential records exterior and approved common-space entry."
"Sound?"
"Life-safety sensors cannot reconstruct speech. No passive microphone."
Connor inspected the gallery wall. One close button sat near the standard-height rail, reachable but awkward from the chair Tessa had placed for testing.
"This assumes the watcher stands to stop."
Tessa followed his gaze. "You're right."
"I want a second close control at seated reach. Independent, not paired to Amina's transition pendant."
"Agreed. Bilateral?"
"Both sides. Someone inside may be seated too."
Tessa marked the diagram. "We will add them before rehearsal. Anything else?"
Connor walked the accessible route between gallery and interior.
No stair. No narrow pinch point. Grip-safe floor.
Two exits. A bed platform low enough for transfer and high enough that standing from it did not require a heroic quadriceps speech.
Chairs at different heights. Water. Blankets.
A visible temperature display with physical buttons.
"Who sees Amina's health information?" he asked.
"Only what she approved. You will receive current encounter needs at threshold. I audit the system, not her body."
"And your wife?"
Tessa looked at him. "Knows nothing about the process after nomination."
"Good."
The proposed transition script read: Amina asks, Do you both agree to continue as planned?
Connor crossed it out.
"Too collective," he said. "At each exchange, ask each person separately about the new role. Amina answers for herself. Julian answers for himself. I answer for myself."
"Send the wording to Mira."
"I also want my wall-close tested under directional state, not just transparent."
Tessa nodded. "We can do that now."
They spent two hours making the glass behave without pretending technology could make people behave. Connor closed it from the gallery. The panel clouded to dense silver-white. The green light went red on both sides. No image remained visible.
He opened it only after Tessa, positioned inside for the systems test, said, "Green."
At the end, Tessa handed him a paper review sheet.
"You are thorough," she said.
"You sound surprised."
"I am surprised by everyone. It keeps the audits useful."
Connor signed only the systems he had tested.
On the train back to Queens, he opened Amina's message.
Thank you for adding the seated control.
He typed, It was necessary.
Three dots appeared, vanished, returned.
I can still appreciate necessary work.
He considered the distinction. Then he answered.
You're welcome. This was part of choosing my own exit, not a service performed for you.
Her reply came a minute later.
Understood.
Connor wanted to believe her. More accurately, he wanted to see what she did when understanding cost her something.
The cost appeared sooner than expected during the accessibility route review.
One passage between the gallery and the changing area met code minimum but forced a tight turn around a decorative cabinet.
Tessa proposed removing the cabinet. The property manager objected because it contained building controls.
"Then the controls move or the route changes," Connor said.
"The average user can pass," the manager replied.
"There is no average body entering this program. The route must work for the named participants and emergency equipment."
Tessa measured again. A secondary wall could be opened to create a wider straight path, but the change required carpentry and a new fire-door inspection.
"That delays rehearsal three days," she said.
Connor called Amina with Tessa present and permission to share the route issue.
"I can make the current turn with my cane," Amina said after reviewing dimensions. "Probably."
"Probably is not the approved condition," Connor replied. "It also affects the safety route."
The first plan mattered to her. He heard it in the pause.
"Change the route," she said. "Move rehearsal."
"Do you want to know cost?" Tessa asked.
"Yes."
The Society covered the accessibility correction under its venue agreement, not as a favor to Amina. The property owner accepted part of the cost because the change remained after lease. No romantic lead paid.
The revised inspection occurred three days later. Amina walked it at her natural speed, turned without catching the cane, and approved.
Connor noted what she had done. She had accepted inconvenience when a permission and access principle became real. He did not call it proof that every future choice would be ethical. He let it count as one piece of conduct.
After the audit, Tessa removed the testing log in Connor's presence. They compared the transition count before deletion and confirmed the room-content field did not exist.
"People like the phrase no recording," Tessa said. "They often forget deletion verification is different from trusting a promise."
"And no content collected is better than perfect deletion."
"Exactly."
Connor signed the revised audit. He trusted systems more when their limits were physical, visible, and boring.
He then tested the brass ring signal from every planned position.
Seated in the gallery, three taps on the chair arm were visible through transparent glass but not necessarily in directional state.
The dropped ring produced a clear local floor sound inside each room but could not be relied upon across the barrier.
"The wall-close control remains primary for the gallery," Connor said. "The ring is supplementary."
Tessa documented the accessibility-specific hierarchy. Amina's pendant could set planned transitions but could not override a man's close control. A close action required a fresh verbal threshold before reopening.
They tested indicator visibility under low and full light. Electric violet reflected beautifully in the glass and reduced red contrast at one angle. Tessa changed the housing and added tactile shapes. Beauty moved around safety, not the reverse.
"Will the upgrade become Society standard?" Connor asked.
"If final audit supports it," Tessa said. "Not every participant uses color the same way. Bilateral text and tactile states will accompany color."
Connor appreciated that accessibility was not Amina's private favor. The system would improve because named users exposed assumptions. It would remain optional to choose observation, never optional to make the chosen controls usable.
On departure, Tessa sealed the printed state map for Amina's review. No intimate content existed. The most important technology artifact was a diagram of exits.
Connor stayed ten minutes to review the accessible interface with Tessa under a paid Society scope. She had placed the controls at a range usable from standing or seated positions and included a cabled handheld unit that could rest beside the platform.
"Amina did not ask you for this work," Tessa said. "The Society did. Invoice the Society."
"I intend to."
They tested the text labels with the screen reader disabled and enabled, then with the display covered.
Tessa deliberately introduced a fault. The glass defaulted to opaque from the interior, transparent from neither side, and unlocked the exit.
The system announced failure without announcing who had pressed what.
"Can house staff determine which participant closed?" Connor asked.
"Only that a safety state occurred. The event log retains device health and time, not identity or room content. Retention is thirty days unless an incident requires preservation. All three will approve that distinction."
Connor marked it for review. Minimum data did not mean no accountability. It meant collecting the fact required for safety without turning private behavior into a permanent asset.
Outside, Julian asked whether Connor wanted coffee. Connor wanted to say yes and also wanted the first meeting with Amina to remain undiluted by immediate group processing.
"Another day," he said. "Today I want to think alone."
Julian nodded. "Send a time if you choose one."
The ease of the answer made future friendship more plausible than instant intimacy would have.