“Because I saw the original.”
“When?”
“Before I was arrested.”
“Where?”
“At Meridian.”
Laura waited.
Eleanor drew a breath.
“Two days before Adrian died, he called me into his office. He showed me a spreadsheet containing payments to companies that did not appear in our approved vendor register. He said someone had been using Meridian's name to move public money through consulting contracts.”
“Did you make a copy?”
“No. I didn't have permission to access his executive files.”
“Then how did you know the prosecution's spreadsheet was different?”
“Because Adrian printed a summary for me. It showed six companies and a list of payments. One of the companies was Northbridge Advisory. The prosecution's version includes a transfer to Northbridge on September 12. Adrian's printout did not.”
“Could it have been added later?”
“It could have. But if it was added later, someone must explain why it appears in a file supposedly extracted from the original records.”
Laura studied her notes.
“Who else saw the summary?”
“Adrian. Me. And, I believe, his executive assistant, Rachel Kim.”
“Have you told the police?”
“I tried.”
“What happened?”
“They said I was inventing a story to protect myself.”
Laura rubbed her forehead.
“Did Adrian say who was responsible?”
“No. He said he was going to meet someone after work and that he needed to verify the last few payments first.”
“Who was he meeting?”
“I don't know.”
“Did he mention Northbridge?”
“He said it was a company that had never provided a service to Meridian. But the invoices were approved by someone with executive-level access.”
“Who had that access?”
“Adrian. The chief executive, Robert Kessler. And Thomas Whitaker.”
Laura's pen stopped moving.
“Thomas Whitaker?”
“He was Meridian's government liaison before he became the courthouse administrator. He helped negotiate some of the city's infrastructure contracts. I don't know how much authority he had over the financial system, but his name appeared on several approval chains.”
Laura looked at her notes again.
“Why didn't you tell me this earlier?”
“I did. You asked me to identify everyone who might have had access to the records. I gave you the list.”
“I remember. But you didn't mention Whitaker's connection to the consulting contracts.”
“I didn't know he had become courthouse administrator until I saw him at the first hearing.”
Laura sat back.
For several seconds, the only sound in the room was the ticking of the wall clock.
Then Laura said, “Eleanor, if Whitaker is connected to the transactions, we need to establish that connection carefully. We cannot accuse him based on a name in an approval chain.”
“I am not asking you to accuse him.”
“What are you asking?”
“Preserve the logs. Obtain the original files. And make sure the person who changed them cannot change them again.”
Laura picked up her phone.
“I'll file an emergency motion seeking an independent forensic review. I'll also request that the court preserve every access record associated with your case, including administrative logins, file version histories, and any backup copies.”
“Will the judge grant it?”
“I don't know.”
Eleanor looked at her lawyer.
“Then ask someone who can.”
Laura frowned.
“What do you mean?”
“An outside authority. Someone who does not answer to this courthouse.”
Laura did not respond immediately.
Then she began making calls.
At 11:02 a.m., the inspector general's office received Helen Park's report.
At 11:14 a.m., an investigator named Rebecca Sloan called the courthouse.
At 11:27 a.m., she arrived with a second investigator and a forensic specialist.
Rebecca was in her early fifties, with short brown hair and a calm manner that made people speak more carefully around her. She had spent eighteen years investigating government procurement fraud, records manipulation, and misconduct by public officials.
She did not begin by asking who was guilty.
She asked what had been preserved.
Helen showed her the audit trail, the system logs, and the record of the terminated session.
Rebecca read each document before asking a question.
“Who had administrator privileges at 12:43 a.m.?”
Helen displayed the account list.
“Four accounts had the relevant permissions.”
“Names.”
“Thomas Whitaker. Victor Hale. My own account. And a system service account.”
“Were all four active last night?”
“The logs show activity from Whitaker's account. They also show the service account generating a new file hash after the replacement.”
“Can the service account modify evidence independently?”
“No. It can perform routine processing tasks, but the initial replacement requires an authorized user.”
“Can you determine which physical workstation accessed the file?”
“Possibly. We need the raw network records and the authentication server logs.”
“Have they been preserved?”
“I started the process. The first session was terminated remotely.”
Rebecca looked at the time stamp.
“Who terminated it?”
“The command came through an administrator account.”
“Which one?”
“Whitaker's.”
Rebecca made a note.
“Has anyone spoken to him?”
“Not yet.”
“Good. Don't alert him until we have secured the records.”
Samuel sat at the far end of the room, feeling as if the floor had shifted beneath him.
Rebecca turned toward him.
“You're Samuel Brooks?”
“Yes.”
“Your credentials were used to certify the altered file?”
“Yes.”
“Did you perform the certification?”
“No.”
“Did you authorize another person to use your account?”
“No.”
“Have you ever shared your password with anyone in the courthouse?”
“No.”
“Has anyone asked you to certify a file without reviewing it?”
Samuel thought about the previous month.
There had been a late afternoon when Victor Hale asked him to approve a batch of routine evidence uploads. Samuel had been working through a backlog and had told Hale he would review them the following morning.