Claire asked whether the original seal had been intact.
Her attorney told her it had not.
She closed her eyes.
Nineteen years of work had taught her exactly why that answer mattered.
The disposal screen showed Claire's name.
The authentication records did not show Claire signing in.
That difference became the first serious dispute in the technical review.
Grant Bell, the city's systems administrator, initially told investigators that suspended accounts could not authorize new transactions. If Claire's name appeared, he assumed either her access had been restored or someone had used her credentials before suspension.
Priya asked him to distinguish the login account from the approval field displayed on the disposal form.
He stopped speaking and opened the system documentation.
The workflow allowed designated supervisors to route and certify documents on behalf of staff. A service generated the displayed approval using stored role information. Claire's personal access had been disabled, but the list of names available to the supervisory workflow had not been updated.
The system could represent an approval she had never performed.
That did not identify who exploited it.
It did expose why the printed name alone could not establish her involvement.
Investigators preserved the configuration, application records, and available security logs before anyone corrected the weakness. Bell wanted to fix the form immediately.
Priya asked him to document the existing condition first.
He looked embarrassed.
โI should have known there were two controls.โ
โNow we know. Let's keep the evidence of how they worked.โ
The request originated from an administrative terminal near Rusk's office. Several authorized users could access that area. A terminal location was not a fingerprint.
Rusk's attorney emphasized that point.
The investigators agreed with the limitation and kept working.
Door-access records placed Rusk in the administrative corridor. Session records showed a supervisory login linked to her assigned credentials. A nearby office camera documented who entered during the relevant period, although it did not show the keyboard.
Each source had weaknesses.
Together, they narrowed the explanation.
Priya also checked the time settings before placing the events on one chart. One system recorded in universal time, another displayed local time, and an exported report had rounded seconds. The correction changed a minor interval but not the central sequence. She retained a note explaining the conversion. An impressive chart was useless if the confidence of its presentation concealed how its times had been assembled.
An email from Rusk to a records assistant directed that the disposal retain Claire as the certifying technician because she had been the assigned custodian at intake.
The assistant replied that Claire was on leave and asked whether a current staff member should review the package instead.
Rusk answered that the field described responsibility for the original record, not current access, and instructed the assistant to proceed.
The statement did not make the required second review real.
It helped explain how its appearance had been manufactured.
The assistant, Lila Chen, gave an interview through counsel and supplied the correspondence. She had believed the lieutenant was resolving an administrative ambiguity. When the system accepted the form, she assumed the role rules were satisfied.
โDid you see the package?โ Gabriel asked.
โNo.โ
โDid you contact Claire?โ
โNo.โ
โDid you believe the form said she had approved disposal?โ
Lila read the printed declaration in front of her.
โI should have.โ
The answer was painful enough that she looked away before continuing.
Rusk's own approval appeared above the false certification.
The request was created two hours after the department coordinator forwarded notice of Naomi's visit.
That sequence suggested urgency with a purpose.
Investigators still checked ordinary alternatives: an earlier draft, a standing disposal calendar, a legitimate expiration date, a clerical copy from an unrelated package.
None explained why an active-hold item had been relabeled, why its transfer receipt was missing, or why a suspended technician's name was used in a current certification without her review.
Claire supplied evidence that she had been elsewhere during the relevant period, but Naomi did not let the case depend on proving every minute of Claire's afternoon.
The stronger question was what the system and witnesses established about the actual approval.
Bell corrected his initial statement in a supplemental interview.
He did not pretend he had always understood the distinction.
Naomi thanked him for being precise about the correction.
Afterward, he remained in the conference room looking at the workflow diagram.
The defect had existed for years without producing an obvious disaster.