Pregnant By The Rival Alpha

The Investigation Stays Open

Keira's first custody proposal offended both packs for opposite reasons.

She created two incident evidence sets containing the Ironridge route revision, the Blackthorn maintenance interval, the relay access sequence, the shutdown diagnostics, and the metadata needed to verify where each record came from.

Each set received a checksum and timestamp before anything moved.

One copy would remain under Ironridge custody. One would remain under Blackthorn custody. A third encrypted copy would be written offline and stored outside both live operational systems.

The Ironridge objection came first.

A senior administrator looked at the duplicated data package. "You're creating another place for protected Ironridge records to leak."

Keira narrowed the package in front of him. The Blackthorn copy contained only the incident-scoped records already authorized for joint review. It did not contain the broader Ironridge distribution list or unrelated logistics history.

"If this copy changes later, their checksum catches it," she said. "If theirs changes, ours does."

The administrator read the field list and remained unhappy with the principle rather than the scope.

Blackthorn's security objection arrived through Torin minutes later.

Soren's concern went the other direction. Duplicating evidence doubled the live systems an attacker might target, and the investigation already assumed someone understood both organizations better than they should.

Keira added the offline archive in response. It would remain disconnected from both active networks after verification and could be opened only under a logged joint procedure.

Torin reviewed the revised plan.

"Who holds the offline copy?"

Keira proposed neutral physical custody under two sealed keys, one designated by each pack. Neither keyholder would receive standing access to the contents.

Torin removed a line that would have allowed either pack to retrieve the archive alone during an internal emergency. "If one side can open it by declaring an emergency, the second key is decorative."

Keira agreed and deleted the exception.

The first evidence set was generated from the frozen Ironridge and Blackthorn records.

Keira watched the checksum populate on Ironridge's copy.

Torin's records officer generated the Blackthorn copy from the same approved source set.

The values matched.

The offline archive was written and verified against both.

Keira signed the Ironridge receipt. Torin signed the Blackthorn receipt through the secure channel. The offline custodians signed only for the sealed media and checksum, not for access to the files.

For the first time, the investigation had three independently verifiable copies of the same raw evidence.

The Ironridge administrator who had opposed the arrangement asked what happened if Blackthorn refused to release its copy later.

Keira pointed to Ironridge's own matching set and the offline archive. No single refusal could erase the record or leave the other side unable to prove what had existed at the time of preservation.

Torin's security chief asked the reciprocal question about Ironridge alteration.

The answer was the same.

Keira saved the custody receipts beside the investigation protocol.

Mirrored copies solved disappearance and unilateral alteration.

They did not solve who should be allowed to touch the records going forward.

She opened the current access lists.

Ironridge's was eleven names.

Blackthorn's was six.

Torin looked at both lists and went still.

The evidence now had redundancy.

The next vulnerability was permission.

Torin looked at the two access lists and stopped at Ironridge's eleven names.

Keira saw where his attention landed. "You don't get to decide which Ironridge officials are trustworthy."

Torin pointed to Blackthorn's six names and told her to choose the smallest Ironridge group that genuinely needed raw access rather than inheriting permissions from ordinary policy.

Keira disliked the distinction because it was reasonable.

Ironridge's standing permissions had been designed to prevent one person from hiding or rewriting important operational records. Senior supervisors, records staff, logistics administrators, and legal officers held overlapping access for good institutional reasons.

An insider-sensitive investigation changed the cost of that redundancy.

Keira opened each Ironridge role and asked the only question that mattered for raw evidence: did this person need to see or alter the underlying records to perform their current function?

Three logistics staff dropped to summary access. Two administrators retained the ability to see the immutable audit log without opening raw incident files. One warehouse systems specialist remained on the list because Keira needed technical verification of the route records. The records officer stayed because someone had to manage the archive under procedure.

That left six.

Torin pointed to the supervisory accounts inherited from ordinary Ironridge policy.

Keira checked the permissions and found those accounts could move, replace, or administratively reclassify archived records even though any direct content alteration would break the hash.

She removed automatic raw access and gave the supervisors audit visibility instead. Keira retained analysis access, while the records officer, systems specialist, and legal observer kept only the permissions their specific functions required.

Torin updated Blackthorn's side at the same time.

Soren retained security-investigation access. Dax remained available for infrastructure interpretation without automatic download rights. Two technical investigators received bounded access to the relay records. The Blackthorn records officer remained responsible for custody. Torin kept authorization authority but removed himself from routine file editing.

Keira noticed that choice.

"You could leave yourself full access."

"I don't need it to read the findings."

He moved his own permission to read plus authorize, with no unlogged editing path.

Keira did the same for her role where possible. Her logistics analysis required working copies, but the preserved evidence set itself became read-only after each verified addition.

They added independent append-only access logs on both sides. Downloads, copies, attempted edits, reclassification, or permission changes would generate mirrored events visible to the other pack's designated observer.

An Ironridge administrator objected as soon as his ordinary supervisory access disappeared.

"Those are Ironridge records. I should not need Keira Vale's permission to inspect them."

Keira gave him access to the audit log and the approved paired findings. "You can verify the investigation exists, that the records are intact, and every person who touches them. Raw access requires a case-specific reason while insider compromise remains unresolved."

The administrator did not like the answer.

He could not accuse Keira of hiding the existence of the evidence because the audit log showed every preservation event.

Blackthorn received a nearly identical objection from one of its senior offices. Torin applied the same rule.

By the end of the review, both institutions had fewer raw-data users than their normal policies would have allowed and more visibility into every access event.

Keira compared the mirrored logs.

No one on either side could delete a record without creating an event. No one could expand the access circle quietly. No one could alter one copy and rely on the other side never seeing the mismatch.

The protocol still depended on people obeying it.

Now disobedience would leave evidence.

Keira saved the named access list.

Torin countersigned the reciprocal version.

The custody structure was finally workable.

The next test arrived almost immediately from people powerful enough to expect an exception.

The first exception request reached Keira before the named access lists had been active for an hour.

Ironridge council leadership requested the raw route-revision records for an emergency briefing. The request came from an office that would normally have received them automatically.

Five minutes later, Torin's secure window flashed with a Blackthorn request for the full maintenance packet from a senior security office.

Keira looked at the paired requests.

Neither was improper under ordinary procedure.

Granting either one would make the new custody rules meaningless before they survived their first test.

She opened the protocol. Leadership already had the paired factual summary and read access to the immutable audit log. Raw evidence required a recorded need tied to the investigation.

"Summary only," Keira said. "If they want raw access, the exception gets justified in writing and mirrored to Blackthorn."

Torin applied the same condition to his request.

The pushback came immediately.

The Ironridge council office argued that leadership could not be denied Ironridge's own operational records during an active security investigation. Keira sent back the audit log showing exactly what was preserved and who held access, then asked which investigative task required the raw route-revision file.

No task came back.

The request went inactive.

Blackthorn's senior security office withdrew its own raw-data demand after Torin required the same written justification and reciprocal notice.

Keira checked the access log.

Nothing had changed.

The evidence sets still matched. The access circle remained intact. The first attempt to use ordinary rank as an exception had produced a record instead of expanded permissions.

Keira added one final section to the protocol while the lesson was still fresh.

Any attempt to alter, destroy, reclassify, selectively release, or compel access to incident evidence would generate immediate notice through the direct investigative line to the other pack. The notice would identify the request, authority used, records affected, and whether the action succeeded.

Torin read the clause.

He changed one word in the response timing from "promptly" to "immediately."

Keira accepted the edit.

Both sides signed.

The secure review channel received a new permanent designation under their offices rather than under the expired Relay 4 emergency desk. It remained incident-specific, with no standing authority over unrelated pack systems.

Keira watched the header change.

JOINT RELAY 4 INVESTIGATION: ACTIVE.

No broken relay required the connection to stay open now. Freight had been restored. Patrols had returned to normal posts. The temporary route permissions were gone. Keira and Torin were choosing to preserve the channel because the evidence still required both sides.

Torin's secure window stayed open beside the new header.

Keira checked the final custody state one more time. Ironridge and Blackthorn held matching verified copies. The offline archive matched both. Named raw-data users were restricted by function. Every access change appended to mirrored logs. Neither side could secretly compel, delete, or selectively release evidence without creating a notification obligation.

The structure could still be violated by someone willing to leave evidence of the violation.

That was as close to certainty as either institution could offer while insider compromise remained possible.

Keira saved the protocol.

The original freight emergency had ended with the corridor functioning and the ceasefire intact.

The incident review had ended its first phase with something more durable than a theory: a cross-pack investigative channel designed on the assumption that either institution might contain someone they could not yet trust.

Torin looked at the paired knowledge findings on the shared screen.

Protected Ironridge logistics timing.

Restricted Blackthorn maintenance timing.

One interference event that appeared to require both.

"Someone had access to both sides," he said.

Keira kept her eyes on the evidence rather than the suspect models.

"Or someone knew how to collect from both."

Neither answer named a culprit.

The distinction mattered because it kept the next investigation open to a cross-pack actor, cooperating insiders, or an outside network instead of forcing a convenient betrayal too early.

Keira closed every file except the investigation dashboard.

That one stayed open.

Whatever had happened at Relay 4, it had left Keira and Torin with a direct line, mirrored evidence, and a reason neither pack could investigate alone.