Chapter 76: Locked at 4:06
At 4:06, the incident zone stopped accepting credentials.
The access-control board changed from green to red across scheduling, controlled storage, and the reception-linked terminal. Safety maintenance remained available through separately verified roles. Everything else required the external auditor.
Julian watched his own executive credential turn red.
"Leave it that way," he said.
The auditor tested the boundary with a harmless access request from each disabled role. Every one returned the same result: EXTERNAL REVIEW REQUIRED. The test created its own record and confirmed that no executive exception remained hidden behind the display.
Mercer Nova's security director had proposed an exception for him. Julian refused before I needed to object. The chief executive could receive audit findings under the same distribution rule as the board. He could not enter the locked systems to look for an answer himself.
The investor call began six minutes later.
Julian told them an unauthorized schedule change had been caught before execution, a sealed research set had moved to the wrong controlled location, and external audit had taken custody. He did not describe the materials, expose a credential name, or promise that the incident was harmless.
"Was the project sabotaged?" one investor asked.
"Intent is under review."
"Did your controls fail?"
"One access path was used improperly. Other controls detected and contained the events."
"When will work restart?"
"When the independent safety and custody conditions are met."
The answers lowered no risk estimate. They did something more useful. They prevented a future record from proving the company had said certainty where none existed.
In the command room, the auditor divided the preservation work into four lanes: system roles, visitor credentials, physical movement, and reception issuance. Each lane had a different custodian. No employee could quietly reconcile the records before the outside team saw them.
Mercer staff received a preservation notice that protected wages and ordinary work while forbidding deletion or private interviews about the incident. A security failure did not give management permission to frighten employees into matching a theory.
I reviewed only the scientific impact lane.
The affected work remained paused. The sealed material remained isolated. The original validation record stayed intact. No participant had entered the research process.
The auditor asked whether I wanted to know the name on the transfer request.
"I already saw it."
"Do you want the badge history now?"
"When it is authenticated."
At 4:32, the visitor registry returned a verified issuance record. Sterling had held a legal meeting at Mercer Nova two weeks earlier. Nathan Cole attended as the company's chief legal officer and received a temporary visitor badge.
His signature appeared on the issue receipt.
That proved he received it.
The meeting exit checklist said every visitor credential should have been destroyed at reception. Nathan's badge number appeared on the expected-destruction list.
The completion field was blank.
Mercer security searched the physical disposal record. Other visitor badges from the meeting showed scanned destruction confirmations. Nathan's did not.
The blank did not prove someone saved the badge. It proved reception could not demonstrate the required final step.
"Who handled his checkout?" Julian asked.
The auditor covered the personnel field.
"That identity remains under employment review. You will receive the finding when the reception chain is complete."
Julian accepted the restriction even though the missing event came from his own company.
I noticed because five years earlier Conrad would have called that restriction an insult to his authority. Julian treated it as proof the audit did not belong to him.
The lockdown log completed at five. No unauthorized attempt had crossed the red boundary after 4:06.
That was the visible result.
The schedule could not be changed again. The material could not be moved. The badge history could not be corrected after the fact without creating a new record.
At the bottom of the registry report, the auditor wrote the next question:
ISSUED TO NATHAN COLE. DESTRUCTION NOT CONFIRMED.
The badge had his name.
The person who used its number still did not.