Daniel considered the question.
“Perhaps they believed you would act before checking.”
Mitchell flinched.
“You think I'm stupid?”
“I think they expected you to be in a hurry.”
“That isn't the same thing.”
“No.”
Daniel's voice softened slightly.
“But you did act before checking.”
Mitchell looked down.
“I thought I was doing the right thing.”
“I believe you.”
The answer surprised him.
Daniel continued.
“People who want to manipulate an institution rarely begin by asking someone to do something that sounds obviously wrong. They give them an instruction that sounds urgent, official, and important. They rely on the recipient's desire to be useful.”
Mitchell said nothing.
“Then they make the consequences of questioning the instruction seem more dangerous than the consequences of obeying it.”
Brooks listened without interrupting.
Daniel looked at Mitchell.
“You were responsible for checking the alert. But you were not necessarily the person who created the situation.”
Mitchell's jaw tightened.
“That's supposed to make me feel better?”
“No. It is supposed to help you understand what happened.”
Before Mitchell could respond, Brooks's desk phone rang.
She answered.
“Sergeant Brooks.”
A man introduced himself as the airport communications supervisor. He had reviewed the preliminary routing records and found an anomaly.
“The message was not generated through the standard incident-notification system,” he said.
Brooks straightened.
“Where did it originate?”
“We are still tracing the route. It appears to have entered through an administrative relay.”
“Which relay?”
There was a pause.
“That is the unusual part. The relay identifier belongs to an extension that was decommissioned several months ago.”
Brooks felt her pulse quicken.
“Can a decommissioned extension still transmit messages?”
“Not under normal circumstances.”
“Could it be a display error?”
“It could. But the routing record contains a valid authentication token.”
“Whose token?”
“We haven't confirmed the owner.”
“Then do not speculate. Preserve the record and escalate through the approved technical-security process.”
“Understood.”
Brooks ended the call.
Daniel watched her.
“A dead extension,” he said.
Brooks looked at him sharply.
“How did you know?”
“I didn't. I heard you ask whether a decommissioned extension could transmit.”
“Does that mean anything to you?”
“Not yet.”
He reached into his pocket, then stopped before removing his phone.
“I have a contact who can verify whether the message format resembles anything used by the office overseeing my assignment. I would like to make a call.”
Brooks considered it.
“Can you do that without exposing any sensitive information?”
“Yes.”
“Then use your own device. Keep the conversation limited to verifying the message format and the existence of an authorized instruction. Do not send documents or credentials.”
Daniel nodded.
He stepped toward the far end of the room and placed the call.
The person who answered was a woman.
“Mercer.”
“It's Daniel.”
A silence followed.
“You were supposed to be airborne by now.”
“I know.”
“What happened?”
“An airport officer received an instruction to intercept me. The message contained my location and demanded that my bag be secured.”
The woman's tone changed immediately.
“Did they open it?”
“No.”
“Who has seen the contents?”
“No one.”
“Daniel, listen carefully. Do not connect that device to any external network. Do not send me photographs of the notification. Do not provide the airport with operational documents.”
“I wasn't planning to.”
“Who is handling the incident?”
“Sergeant Elena Brooks. She has verified my credentials and is preserving the messages.”
Another pause.
“Is she alone?”
“An officer named Ryan Mitchell is present.”
“Did Mitchell send the messages?”
“No evidence of that.”
“Good. Don't accuse anyone without evidence. What was the sender designation?”
“INTEL-OPS.”
The woman went silent.
Daniel waited.
When she spoke again, her voice was lower.
“That designation should not be used for an operational instruction of this kind.”
“Can you confirm whether an authorized alert exists?”
“I can confirm that I have no record of one. That is not the same as confirming that none exists anywhere.”
“I understand.”
“Did you receive a reference number?”
“An invalid one.”
The woman exhaled slowly.
“Daniel, where are you right now?”
“At the airport.”
“I know that. I mean, are you in a public area?”
“No. We're in an administrative room.”
“Then stay there while the supervisor verifies the incident. Do not attempt to resolve this yourself.”
“I have no intention of doing that.”
“I'm serious.”
“So am I.”
She paused.
Then she said something that made Daniel's expression change.
“Did you receive a call before the alert?”
“Yes.”
“What did the caller ask?”
“Whether I had the original.”
For several seconds, the woman did not speak.
“Daniel,” she said finally, “there is something you need to understand. If someone knows about the original document, the problem is no longer limited to the procurement records.”
“What does that mean?”
“It means the person who sent that message may know more about your assignment than they should.”
“Do you know who it is?”
“No.”
“Then tell me what you do know.”
“I know that the document you are carrying was never supposed to leave the review office without a separate chain-of-custody record.”
Daniel closed his eyes briefly.
“I know.”
“Did you make a copy?”
“Yes.”
“Where is it?”
“Not with me.”
The woman's breathing changed.
“Good.”
“Why?”
“Because if the original is compromised, the copy may be the only independent record of what happened.”
Daniel looked toward Brooks.
She was watching him, but she did not move closer or attempt to listen.
“Can you verify the sender?” he asked.
“Not through this call. I'll use the approved process.”
“Understood.”
“And Daniel?”
“Yes?”
“Do not trust anyone who claims the matter has already been cleared.”
The line went dead.
Daniel lowered his phone.
Brooks approached him.
“Was that a verification call?”
“It was a warning.”
“Can you tell me what it means?”
“Not completely.”
“Can you tell me whether the notification was authorized?”
“The person I contacted has no record of an authorized instruction matching what happened here.”
Brooks nodded slowly.
“That is consistent with what we found.”
Daniel looked down at his bag.
“The original document was never supposed to leave the review office without a separate chain-of-custody record.”
Brooks's expression tightened.
“You brought it anyway?”
“I brought records necessary for an authorized review. I did not know someone would attempt to intercept me.”
“Where is the chain-of-custody documentation?”
“In a separate file.”
“Is that file in the bag?”
“No.”
Brooks considered the answer.
“You said earlier that the bag contains documents related to your work.”
“It does.”
“But the original is not the only copy.”
“No.”
“And the copy is somewhere else.”
“Yes.”
Brooks let out a slow breath.
“That gives us some room to investigate without making assumptions about what is inside your bag.”
Daniel nodded.
“Exactly.”
Then the phone rang again.
This time, Brooks answered.
She listened for only a few seconds before her expression changed.
“Repeat that,” she said.
The caller repeated the information.
Brooks picked up her pen.
“Do not alter the records. Preserve the complete transmission history. I will document the time of this call.”
She ended the conversation and looked at Daniel.
“The technical team has identified the account associated with the authentication token.”
“Who owns it?”
Brooks hesitated.
“According to the archived personnel record, the account belonged to a senior airport security administrator.”
“Belonged?”
“The administrator died six months ago.”
The room fell silent.
Mitchell stared at her.
Daniel slowly raised his eyes.
“What was the administrator's name?” he asked.
Brooks looked at her notes.
“Thomas Avery.”
Daniel did not move.
For the first time since the encounter began, the composure he had maintained so carefully appeared to fracture.
“Thomas Avery is dead,” he said.
Brooks nodded.
“That is what the personnel record says.”
Daniel looked toward the door.
“Then someone has access to an account that should no longer exist.”
He picked up his bag.
“And they know exactly what I am carrying.”
CHAPTER 5 — THE MAN WHO DIED SIX MONTHS AGO
Thomas Avery had been a senior security administrator responsible for coordinating access-control records, communications permissions, and interdepartmental notifications at the airport.
He had not been a police officer. He had not been an investigator. His job had involved the systems through which authorized personnel communicated with one another.
According to the public notice circulated after his death, Avery had died following a medical emergency at home.
The personnel file contained no indication of misconduct.
No disciplinary action.
No unresolved security violation.
His account, however, had never been fully removed from the archived communications system.