Chapter 47: The Cold Backup
Mina had not carried a backup out of Sterling.
She had kept an index showing where the safety system sent one.
The next morning, her lawyer produced that index with an authorization application at the neutral custodian's policy vault. Both were administrative records. Neither contained a participant name, a safety entry, or the contents of any log.
Sterling's outside counsel still called them an unauthorized copy.
"Dr. Park retained a route to regulated information after her role changed," he said.
"A route is not the information," her lawyer replied. "And she requested access through the required custodian."
The index listed a retention destination, an acknowledgment date, and a custody reference. It did not contain a password, access credential, or instruction for reaching the archive. Mina could identify the record the custodian should request. She could not retrieve it herself.
The records auditor opened the accident-year retention appendix already preserved under the review. Its rule was direct: at the end of each day, the safety system sent a read-only image of its log content and version sequence to an independent offline archive.
The policy was not a newly discovered alternative to records we had already used.
David Ren's compliance mirror had shown metadata about controlled files, including the 2:17 approval-field event. The Meeting Forty-Four folders existed in three different board and legal backups. The door logs showed physical access.
This archive preserved the content and version history of the safety log itself.
The distinction mattered because the receipt from Mina's export proved the file had one hash during the incident week. The offline image could show which protected version the independent archive received without relying on Sterling's current file.
"Did Dr. Park ever possess the offline image?" the auditor asked.
"No," Mina said.
"Did you download its contents?"
"No."
"What did you keep?"
"The system acknowledgment index and my request for authorized retrieval."
Her application had been filed after the accident-week export generated the offline-archive acknowledgment. It asked the independent custodian to preserve the relevant date range for any authorized future comparison. It did not ask for patient content to be sent to her.
Nathan appeared on the restricted line. "A historical policy does not prove the archive functioned on the day in question."
"The policy alone does not," Rhea said. "The holder's register can."
The archive holder confirmed the reference through its own custody register. The entry showed a daily image received, sealed against later editing, and retained under the safety schedule. No one at Sterling could rewrite that register from the company system.
The holder also confirmed that Mina's old application had never resulted in delivery to her. It remained a request awaiting the independent authorization now before the panel. The distinction converted Sterling's accusation into a custody fact: she knew the mirror existed, but the archive had kept it.
That still did not prove the image differed from the current log.
It proved the image existed and could be retrieved lawfully.
The custodian prepared a narrow access order. Only an independent comparison team could open the two version histories. Participant fields would remain masked. The parties would receive event types, time ranges, account categories, and a statement of any difference—not the underlying safety narrative.
Celeste objected in writing that Evelyn would turn any ordinary archive discrepancy into another accusation.
I accepted the same limit imposed on everyone else. I would see the comparison report, not the protected log. If the versions matched, the finding would say so.
Mina signed nothing beyond the authentication of her own index and application. She had not become a public witness. She had not claimed the archive proved misconduct.
Before noon, the independent archive transferred the authorized image directly to the comparison custodian. Sterling supplied its current safety log through the same sealed process.
The two protected histories were placed in separate evidence containers.
The comparison order took effect at nine the next morning.