Chapter 18: The Clean-Room Log
Policy SR-12.4 was two and a half pages long and it saved my life, in the sense that a life can be a reputation.
It required three clocks. One on employee access. One on controlled-material movement. One on the clean-room airlock. Three systems, three vendors, three sets of administrators, all pinned to the same reference time. And a rule at the bottom in plain language: if any two of them disagreed by more than thirty seconds, safety opened a deviation review and preserved every source log for ten years.
My mother wrote the first version of that policy. Mina wrote the version that survived her.
There was no deviation review anywhere in Sterling's incident file.
The source logs, however, still existed. All three of them. Ten-year retention does that.
What Sterling's investigation had used instead was a compiled access summary — one page, produced by quality, containing a single relevant sentence.
Scientific lead present through final controlled handling.
No badge number. No escort record. No source system named. One sentence, and Nathan had approved it as sufficient.
The custodian pulled the three logs out of three archives while the safety supervisor confirmed there was no patient-identifying material in any of them. We put them on a neutral screen in the review room and went through it with the whole committee watching.
"None of this speaks to the study decision," Celeste said.
"It speaks to who could physically be in the room," I said.
He loaded my access record first.
18:41 — research permissions suspended.
19:03 — badge disabled.
Nothing after that. Not a failed swipe, not a door held, not a single event.
Then the controlled-material log for the lot Sterling's report was built around.
21:32 — lot accepted into secure preparation.
22:08 — internal transfer confirmed.
Then the airlock. Both events, within three seconds of the material log.
My badge appeared nowhere in any of it, because my badge had been dead for two and a half hours by the time that lot came through the door.
"A supervisor can admit somebody manually," Celeste said.
"Manual admission generates an escort record," the safety supervisor said. "Named escort, timestamp, both badges."
There wasn't one.
"Then she could have set it up earlier and let it run."
"That's a different claim," I said. "Your report doesn't say I set something up. It says I was present through final handling. Those are two different sentences and only one of them is in the file."
The audit chair laid the old summary next to the three logs.
"Who wrote present?"
The document properties gave up a quality analyst's name. The approval route ran through legal and through Celeste's founder office. The analyst had left Sterling three years ago and would have to be approached independently, through the committee, which Rhea said twice for the minutes.
Nathan came up on the conference screen. "Supervision can be remote."
The custodian put up the remote-session log.
Every session on my account terminated at 19:11.
"Telephone," Celeste said.
"Preserve the call records," I said, and watched her not like that answer. She had been offering possibilities. I kept turning them into collection requests.
The clean-room administrator came down and confirmed what the policy already implied: three independent hardware clocks, one reference service, and no synchronization fault logged that week or that month. My father asked whether someone could have altered all three.
"Not from one account," she said. "And the compliance mirror logs configuration changes on all three systems."
There were none.
Then the audit chair asked the question the whole morning had been walking toward.
"Could Dr. Sterling have been physically inside the controlled area after 21:32?"
"Not without a second badge, an escort entry, or a security override."
"Do any of those exist?"
"No."
The corridor cameras were gone — ninety-day retention under the policy in force then, long expired. Celeste reached for it immediately.
"So you can't prove she wasn't nearby."
"Nearby isn't inside," the audit chair said. "And your company's published conclusion says inside."
My father was looking at the timeline and not at me. Five years ago he stood in front of a camera and said I had remained in control of the AURORA process through the final disputed steps. That one sentence is what allowed everything that happened afterward to be filed under my name.
Three independent clocks had just made that sentence impossible.
Celeste pointed at the badge on the 21:32 entry. Two initials.
"Who's L.D.?"
The directory turned up a laboratory operations manager who had left Sterling four years ago. I didn't know who had instructed him. I didn't know what he'd been told. I didn't know whether the lot in his hands that night was the lot in the report.
"Contact him through the committee," I said. "Don't publish the initials."
Celeste actually turned to look at me. "Why are you protecting him?"
"Because a badge entry isn't a confession. I've seen what this company can do with one field and a convenient name."
The audit chair agreed and had it minuted.
Sterling had built its conclusion by filling every gap in the record with me. I was not going to clear my name by filling the same gaps with somebody else's.
The screen sat there with my dead badge on one side and the 21:32 entry on the other.
They could argue about what I intended for as long as they liked. On the night their report puts me inside that room, every independent door in the building had me on the outside of it.