Someone Knew the Perfect Time

1737 Words
Keira found the timing problem after she stopped looking at Relay 4 as a machine and put it back inside the freight network. The shutdown occurred at 16:42. She aligned that time with every significant route decision from the afternoon. Ironridge had closed a routine alternate path at 15:58 because road maintenance overran its window. Keira had approved a temporary replacement plan at 16:06. That replacement remained unusually effective until 16:18, when one contractor commitment removed the last cheap diversion option. A new block of capacity would have become available shortly after 17:00 as two tractors returned from the southern cycle. Relay 4 failed in the gap between those conditions. Keira shifted the failure ten minutes earlier in the model. The disruption cost less. More freight could move through the temporary reroute before it closed. She shifted it twenty-five minutes later. The returning tractors absorbed part of the backlog, and South Warehouse received fewer loads at once. At 16:42, the failure landed where the system had the least flexibility. Keira checked the conclusion against three weeks of Relay 4 history before she allowed herself to treat it as meaningful. The relay had carried higher load on two other days without failing. Weather had been worse once. Neither fact made deliberate timing certain. They did weaken the idea that ordinary strain had simply chosen the most expensive possible window by chance. Torin had moved to a secure connection from Blackthorn Hall by then. His face occupied one side of the review display while Keira worked from the Ironridge operations room. "How narrow is it?" he asked. Keira marked the useful disruption window between the closed reroute and the returning capacity. "About forty minutes if the goal is to maximize cost without trapping so much freight that everyone assumes sabotage immediately." She disliked the sentence as soon as she said it because it assigned a hypothetical goal to an unknown actor. Keira corrected the review note before anyone else could do it for her. SELECTED TIMING PLAUSIBLE. INTENT NOT ESTABLISHED. Torin read the revision and nodded once. Keira opened the internal distribution record for the 16:06 reroute change. The exact timing had not been public. Her logistics staff had received it. The affected warehouse supervisors had received it. Two senior Ironridge administrators had access to the revised schedule. Contractors received resulting assignments without the full reason behind them. The timing anomaly now carried a second implication. Anyone deliberately selecting 16:42 would need information about Ironridge's internal operating state, or access to enough fragments to reconstruct it. Keira did not name that as proof of an Ironridge insider. The information could have leaked, been observed indirectly, or been assembled from several sources. Torin did not push her toward a cleaner accusation. He opened Blackthorn's security work queue instead. "Then I want to know what someone would have needed from my side." Keira saved the timing analysis under the joint review. The status remained anomaly, not finding of sabotage. She attached the private reroute distribution list for preservation but kept personnel identities restricted to the Ironridge side until evidence justified broader disclosure. Torin accepted the boundary. The clock on the operations wall moved past midnight while Keira compared the 16:42 window one more time. The failure timing was wrong enough to investigate and still ambiguous enough to punish anyone who rushed the conclusion. She sent Torin the exact control interval he needed for the next check. Now Blackthorn had to determine whether the relay itself showed evidence of deliberate access during the same window. Torin reconstructed the relay shutdown from Blackthorn's access logs instead of starting with the incomplete credential name. The system should have handled a weather fault through automation. Primary control would degrade, the backup circuit would absorb more load, and an authorized technician could intervene if the relay failed to stabilize. At 16:41:52, the log showed a manual step between two automated safeguards. Torin pulled the maintenance protocol onto the review display. That step did not belong in an ordinary uncontrolled weather failure. The command itself was not destructive. It changed the relay's control state in a way an authorized technician might use during maintenance or troubleshooting. It appeared less than a minute before the abrupt primary-control transition Keira had isolated. Torin requested the credential packet. The trace was incomplete rather than blank. Enough data remained to show the system had accepted a credential. The identifier format did not match the current Blackthorn token standard cleanly. His security chief brought up the migration record. Four legacy credentials remained technically valid. Two belonged to outside service contractors whose replacements had not been completed. Two were internal service accounts scheduled for migration the following week. Torin's jaw tightened when he saw the list. "Those should have been retired." His security chief did not soften the answer. "Policy said they should be. The system says they were still active." Keira watched from the shared review screen. The finding gave Blackthorn an embarrassing internal failure before it gave them a saboteur. Old credentials had survived longer than intended. One of them could explain why the relay accepted an identifier that did not resolve under the current format. Torin did not close the evidence inside Blackthorn security. He attached the legacy-token status, the 16:41:52 manual command, and the incomplete credential trace to the incident-scoped joint record. His security chief looked at him. "All of it?" "All of the incident-relevant record. Names stay restricted until we establish need." Keira received the packet seconds later. She aligned Torin's manual command with her freight timing analysis. The result was tighter than either anomaly alone. Someone or something had used a recognized credential path immediately before the shutdown, during the same expensive freight window she had already flagged. It still did not tell them intent. An authorized technician could have intervened for a legitimate reason and made the situation worse. A contractor using an outdated token could have followed an old procedure. The incomplete log could still reflect damage during the failure rather than concealment. Keira added those possibilities to the review note. Torin did not object. Then he opened the actual maintenance work orders for the hour surrounding the event. No scheduled task called for that manual control step at 16:41. The technical lead at Relay 4 confirmed no technician on site had reported making it. That removed the easiest legitimate explanation without proving who had acted. Keira updated the finding. MANUAL INTERVENTION CONFIRMED. AUTHORIZATION PURPOSE UNRESOLVED. Torin read the wording before it was committed. "Keep purpose unresolved." "I am." The exchange ended there. Keira noticed what he had done more than what he had said. Blackthorn's most uncomfortable evidence had reached her because Torin had chosen a joint record over institutional advantage. She saved the packet with the timing anomaly. The review now had a human or administrative hand inside the relay failure. The remaining question was what that hand had known before it acted. By midnight, each pack had produced an explanation that placed the uncomfortable part of the evidence somewhere else. Ironridge's version centered on Blackthorn maintenance failure. Legacy credentials had remained active past policy. A manual command had entered the system. From an Ironridge political perspective, that was enough to argue that Blackthorn's own weak control had caused the crisis. Blackthorn's preliminary security assessment went the other direction. The failure timing had exploited a private Ironridge freight window. Whoever acted appeared to know exactly when Ironridge had the least routing flexibility. That made Ironridge access look like motive and opportunity combined. Keira read both drafts on the shared screen. They were useful stories. They were not findings. The Ironridge council representative handed her a statement that turned the expired Blackthorn credentials into a causal conclusion. Keira opened it beside the actual access record. "Negligence remains possible," she said. "The timing does not let us call it the cause yet." The representative pointed to the expired credentials. "Their control failure is documented." Keira moved the causal language into an unresolved-possibilities section. The credentials being active was documented. A negligent technician causing the shutdown was not. Across the channel, Torin's security chief had sent him a draft calling Ironridge tampering the leading explanation. Torin read the conclusion aloud once. "The timing requires Ironridge information." His security chief agreed. Torin changed the sentence. "It requires access to Ironridge information. That is not the same thing as Ironridge acting." Keira looked up from her own statement. The distinction was exactly the one she had made about Blackthorn's credentials. She finished stripping the negligence conclusion from Ironridge's draft. Torin removed the direct Ironridge accusation from Blackthorn's. Neither political audience was likely to thank them for the edits. The joint review now held four facts Keira was willing to defend without qualification. Weather had stressed Relay 4 before the failure. A manual intervention occurred immediately before the abrupt shutdown. The credential identity remained unresolved. The timing coincided with an unusually vulnerable Ironridge freight window. She added a fifth line only after Torin agreed with the wording. DELIBERATE INTERFERENCE PLAUSIBLE. ATTRIBUTION NOT ESTABLISHED. That was stronger than where they had begun and weaker than what either pack wanted to announce. Keira saved it. The Ironridge representative looked at the unresolved attribution line. "How long do you intend to keep this open without naming a suspect?" Keira turned the question around operationally. "Until the evidence tells us what knowledge the interference required and where that knowledge could have come from." Torin opened the maintenance-access distribution records on his side. Keira reopened the private Ironridge reroute history on hers. If someone had selected 16:42 deliberately, the timing required more than the ability to touch Relay 4. It required knowing when the disruption would hurt. If someone had entered the relay during a particular service state, the access might also require information Ironridge did not possess. The easy accusations had been removed from both reports. That left them with a more difficult question and less political cover. Keira closed the public-facing drafts without sending either one. Only the joint factual finding remained current. Torin looked at the time on his side of the secure connection. "We stop here tonight." Keira almost objected, then realized she had read the same credential line twice without absorbing it. She saved the review state. "For tonight." The investigation remained open with deliberate interference leading the theory and no pack allowed to turn suspicion into attribution yet.
Free reading for new users
Scan code to download app
Facebookexpand_more
  • author-avatar
    Writer
  • chap_listContents
  • likeADD