Chapter 11: The Audit

The Lore story broke on a Thursday. The Mast story broke on Friday — the journalist had needed an extra day to authenticate the Demmer payment trail. This was the correct journalistic instinct and Kael did not fault it.

By Saturday morning, two of Meridian's seven Grid architects were in the same news cycle. The city's civic commentary networks, which usually maintained the measured tone of official media, were processing both stories simultaneously and finding the combination hard to contain. Two separate Grid abuses. Two senior officials. One week.

Hessa had a radio in the commons. Kael listened to the civic summary on Saturday evening and counted the specific phrasing the commentary used: pattern of administrative abuse, calls for independent investigation, City Authority committee convened emergency session.

Lore had not resigned. His board had issued a statement of support and announced an internal review. The internal review was being conducted by Axis Corp's compliance office, which reported to Lore. Kael had anticipated this. It was the standard corporate response, designed to channel the pressure into a structure that could manage it.

Mast had also not resigned. She had issued a statement disputing the characterization of Demmer's employment as improper, describing him as an independent contractor in a standard consulting capacity. Demmer himself had not been located for comment. Mast's statement was the better legal strategy but the worse political one — the payment structure, once described in print, had a clarity that legal language could not fully obscure.

Neither of them had stepped down.

That was different from Rael. She thought about the difference. Rael had resigned within a week. Lore and Mast were holding.

The variable was public accountability. Rael was a minister, a public servant, accountable through an electoral mechanism. Lore was a corporate officer accountable to a board. Mast was a senator with two years remaining on her term and a coalition that had not yet abandoned her. Their structures of accountability were thicker. They had more institutional insulation.

She noted this. It meant the packages for Lore and Mast were not complete — exposure alone was not sufficient for people with adequate institutional protection. She needed to think about what it would take.

She was still thinking about it on Sunday morning when Pov came to find her.

"Fetch wants you," Pov said.

The terminal room smelled of the ozone that the old equipment threw off when it ran warm. Fetch was standing, which was unusual. He was looking at a printout — a paper printout from the terminal, which meant he had already read something he wanted to show her.

"The Axis Corp security audit ran," he said.

She had expected four weeks. It had been twenty-two days.

"The session token," she said.

"Still active. But they're running queries on orphaned credentials. They're looking." He handed her the printout. It was a fragment of a network monitoring log he had captured during his routine morning sweep. "This query ran last night from Axis Core."

She read the relevant line: AUDIT QUERY: ORPHANED ANALYST CREDENTIALS — CREDENTIAL CHAIN KM-4471-ALPHA — LAST ACCESS: [TIMESTAMP] — STATUS: UNDER REVIEW.

Under review. Not revoked. Under review meant someone had flagged the credential but not yet closed it. She had hours, not days.

"I need the terminal now," she said.

"It's yours," Fetch said.

She sat down. She had two more targets she had been preparing to approach with additional research — Cho and Calloway — and she had research she hadn't yet done, specifically on the biometric database and its architecture.

The biometric research was going to have to come from what she could pull in the remaining window before the credential was closed.

She thought about what Pov had found. The fifth data stream. The biometric capture synchronized with Axis smartband reads. Six years of accumulation.

She thought about what she didn't know yet: where the data went. The transmission was a burst — somewhere it was being received and stored. Finding that storage architecture was the question that would answer the larger question: what was the Grid for.

She had hours.

She started pulling.

---

She had three hours. She used them the way she used everything: without waste.

The biometric storage architecture was what she went looking for first, because it was the unknown that carried the most weight. She navigated to the Axis Core data architecture documentation — not the published infrastructure specs, which were the sanitized version, but the internal engineering documentation that the analyst division had read-only access to under the technical review provisions.

The documentation described six storage systems. Five were expected: citizen scoring data, event logs, administrative records, historical archives, backup redundancy. The sixth was labeled simply AUXDATA with a footnote that said see Grid Design Directorate for access protocol.

AUXDATA. Auxiliary data. A neutral name for something the standard documentation did not describe.

She searched AUXDATA in the system event log. It had been accessed by two credential types: GDD-series (Grid Design Directorate) and a credential type she had not seen before — SELC, no suffix number, just the four letters. SELC had accessed AUXDATA at regular intervals, every fourteen days, pulling batch exports of the full data set. The exports had been running for five years.

She searched SELC in the system staff directory and the credential registry. Neither returned a result.

SELC was not in the Axis Corp staff system. SELC was external.

Something outside Axis Corp was pulling regular batch exports of AUXDATA — the biometric database — every two weeks for five years.

She noted this and moved. She had two hours and forty minutes.

She navigated to the network traffic logs for Axis Core — a resource she had used once, eighteen months ago, during a connectivity investigation. The logs recorded outbound data transfers from the Axis network to external endpoints. She searched for SELC-authenticated transfers.

The log returned 130 results. Five years of biweekly transfers, consistent as maintenance clockwork. Each transfer went to the same external endpoint: an IP address in the 192.168-series that the Meridian city network assigned to city government infrastructure.

City government. SELC was pulling Axis Corp's unauthorized biometric database to a city government address.

She ran the IP against the city's published infrastructure registry. The registry was public, maintained by the City Authority IT division. The address was assigned to: Meridian Population Analytics Office.

She had never heard of the Meridian Population Analytics Office. She searched the City Authority's organizational chart — also public — and found it listed as a subdirectory under the Office of Urban Planning, two administrative layers removed from the elected officials. It had a budget line: 4.2 million credits annually. It had a single listed contact: an office email address. No named director, no staff list, no published reports.

It was a city government office that did not publicly exist.

She was down to two hours. She pulled the budget records for the Meridian Population Analytics Office from the City Authority's financial disclosure database, which was technically public but functionally obscure — the kind of database that required knowing it existed to find it. The office had been active for six years. It had received total funding of 27.4 million credits.

She searched the procurement records. The office had one vendor: Axis Corp. Every credit of its 27.4 million had gone to Axis Corp, in twelve monthly installments per year for six years.

Axis Corp was being paid by the city to send biometric data to the city. The payment went to Axis Corp. The data came back to a city office that did not publicly exist.

The loop was circular and deliberately obscured. The city was funding the collection of biometric data on its own citizens, routing the payment through Axis Corp to maintain the appearance that AUXDATA was a corporate function rather than a civic one, and receiving the processed data through a government office that had been designed not to be found.