Chapter 10: 2:17 A.M.
The external auditor joined by video at 2:04 in the morning, and thirteen minutes later he found the thing that five years of my life had been waiting for.
His name is David Ren. His firm maintains Sterling's compliance mirror, which is a piece of infrastructure nobody in that company had thought about since it was installed: an independent, read-only ledger recording when controlled files are created, opened, and revised. It cannot see clinical content. It records events, not meanings. It is, for that reason, almost impossible to argue with.
Anneke asked him one question to start.
"When was Dr. Evelyn Sterling's access revoked?"
He put up a timeline built from three separate systems with three separate administrators.
18:41 — research permissions suspended.
19:03 — building badge disabled.
19:11 — all remote sessions terminated.
I didn't need the screen for that evening. My badge went red at the third-floor door with four people watching through the glass, and I stood there and swiped it twice more like an idiot before I understood, and then Nathan met me in the lobby holding my coat.
"Now the metadata on the disputed record," Rhea said.
Nathan objected that it hadn't been established the record related to Leah Morgan.
"We don't need her identity," Anneke said. "Use the record number out of your own incident report. Page eleven."
David entered it, and a version history came up, and the room went quiet in stages as people worked out what they were looking at.
The final entry was stamped 2:17 a.m.
Change type: approval field revised.
Account: Safety Administration Service.
More than seven hours after every permission I possessed had been switched off, in three systems, by three administrators.
Nathan leaned toward his camera. "Service accounts execute automated updates."
"Some of them do," David said.
"Was this one automated?"
"No. The mirror flags automated processes separately. This entry is flagged user-initiated."
Celeste pushed back from the table. "Somebody could have used her credentials."
"Her credentials were terminated. A terminated credential produces a failed authentication event, and there are none on this account after 19:11."
"Then the timestamp is wrong."
He put up the synchronisation records for the badge system, the research platform, and the mirror, across that entire week. The largest drift between any two of them was four seconds.
Not seven hours. Four seconds.
My father asked the first useful question anyone from my family asked all night.
"What changed, exactly?"
David looked to Anneke, who said metadata only, and he opened the comparison.
Before 2:17, the approval field was empty.
After 2:17, it contained two characters.
E.S.
The initials I used on internal study reviews for nine years. The initials that run through Sterling's investigation like a watermark. The initials that convinced a regulator, an industry, and eventually most of my former colleagues that I had personally approved a record which was created after they took my badge off me.
David enlarged the comparison without exposing anything clinical underneath. The earlier version carried no approval attachment at all. The later version referenced a review note bearing my initials — and the review note itself was not stored with the record, or anywhere else in the controlled index.
"Can an approval reference exist without its source document?" Anneke asked.
"You can type text into a field," David said. "Typing it doesn't cause a document to exist."
Ms. Vale ran the search anyway, for completeness, and found nothing.
For five years I had argued from memory, from printed warnings, from the order in which meetings occurred, from my own account of my own conduct. And every single time, Sterling had answered with the approval field, and the approval field had always been there, and a thing that is always there feels like a fact.
It had a creation time. It had a creation time in an independent ledger my father's company had paid for and forgotten about.
Nathan asked whether an archive migration could have inserted historical initials.
"No migration was scheduled that night."
"Could an administrator have backfilled an approval during incident reconciliation?"
"Technically, an authorised user could revise the field."
"Then this proves nothing about intent."
Every word of that was chosen. Not: it didn't happen. Not: I didn't know. Only that intent had not yet been proved, which was true, and which was the only true thing available to him.
Anneke ordered the service-account credentials, the administrator assignments, and the complete version history preserved by an outside custodian. My father objected to another firm inside Sterling's systems and not one director supported him, which I think was the moment he understood the shape of the rest of the night.
Rhea imposed the limit herself, before anyone asked her to: the custodian would wall off all participant content and report only access events, versions, and authorised approvals unless a later order widened it. Leah Morgan's medical life was not going to become an open folder because my name had finally started coming clean.
Celeste stared at my initials, four inches high on the monitor.
"You could have set this up before your access ended."
"Then there would be an instruction somewhere," I said. "An email, a ticket, a handover note. Preserve those too. Preserve all of mine."
David locked the export and issued a verification number, and read it out, and Ms. Vale wrote it into the minutes.
At 2:17 in the morning I had no badge, no session, no permission, and no lawful authority anywhere inside Sterling Biotech.
Somebody put my initials into that field.