Chapter 106
The Desk at the Gate
Two essential suppliers have turned away, breakfast inventory is falling, and my authority to sign a replacement contract is frozen.
The vendor lockout protected restricted rooms. By six fifteen, it is also keeping clinic supplies, food, cleaning chemicals, and authenticated safety parts outside Wondervale's gates.
"Open the credentials," Jonah says. "My team can sort the legitimate vendors after they enter."
He stands in the east security office with a printed contract index under one arm. Dev blocks the door to the badge controls without touching him. June has brought three night-shift delegates. Councilwoman Hart observes from the city desk because the access failure touches the public audit, the subsidy agreement, and the closures her engineers are monitoring.
"We revoked the credentials because the system cannot distinguish legitimate users from copied profiles," Dev says. "Opening them first defeats the order."
"Then enjoy explaining empty kitchens and an employee clinic without medication."
Jonah uses a real supply crisis as leverage.
I cannot buy a new verification service during the seventy-two-hour standstill. Dev can issue emergency safety instructions under the authority delegated before the freeze. Camille Brooks can protect employee health and personnel data. Existing staff can receive goods if we establish who is arriving, what they carry, and who ordered it.
"We build a manual vendor desk," I say. "One entrance. Individual identity verification. No contractor badges. Every delivery inspected and escorted to a named recipient."
Jonah gives a short laugh. "There are hundreds of active agreements. Only procurement knows the renewal status, insurance limits, approved drivers, substitutions, and receiving rules. The line will reach the highway."
"Your delegation is suspended," Hart says. "Identify records if asked. You do not control the desk."
He places the index on the table. "Then you are choosing amateurs."
June opens her binder. "The people receiving the supplies know who delivers them."
Her delegates begin naming contacts procurement's index does not show. A kitchen lead has the food distributor's dispatch number and the names of two regular drivers. The clinic coordinator knows the medical courier's license plate and the insulated cases used for temperature-controlled orders. Because she resolves wrong shipments after procurement closes for the day, a maintenance planner has direct numbers for three manufacturers.
Floor workers know current routes that procurement's index misses, though their knowledge remains incomplete.
We divide the security office into four stations. June's members create a supplier contact sheet from department records and personal work contacts, with consent before any private number is copied. Dev defines inspection categories. Hart assigns two city observers who may witness the process without directing Wondervale employees. Security verifies government identification against supplier confirmation obtained through independently sourced phone numbers.
Jonah watches us work. "You still need the contract terms."
"We need enough verified authority to receive essential goods under existing agreements," I say. "Disputed substitutions wait outside."
Rina sends a read-only contract export through the employee trust. The procurement system created the underlying records. Legal operations holds the signed agreements; the trust's export preserves contract numbers, active dates, approved categories, and amendment history. Its vulnerability is obvious: procurement entered much of the data, and an active status does not prove a specific shipment complies.
We label the export a routing aid rather than truth.
Hart requires an incident record for every admission. The desk records the verifier, call time, source number, driver identification, vehicle plate, purchase reference, seal condition, recipient, and escort. Supplier confirmation cannot authenticate the contents of a sealed box. Department staff must inspect quantities and product identifiers before acceptance.
At 6:42, the food distributor returns.
The regular driver presents his license. The kitchen lead recognizes him, but recognition is supporting evidence, not clearance. Security calls the dispatch number from the distributor's public account page instead of the number he provides. Dispatch confirms his route and truck plate. The purchase order matches a current food agreement in the legal export. Dev's inspector compares the trailer seal to the number issued by dispatch.
Its seal is intact.
The driver receives a paper escort pass valid only from the gate to central receiving and back. It carries no electronic door permissions. A kitchen employee rides with security to accept the load.
The line behind him begins to move.
A chemical supplier fails confirmation because the person answering its public number cannot locate the order. We hold the truck outside despite a correct-looking invoice. A parts courier arrives under a subsidiary name absent from the contract export. June's maintenance planner reaches the manufacturer through a warranty contact; legal operations confirms the subsidiary in a signed amendment. The shipment enters after Dev opens the outer packaging and matches serial ranges to the order.
The next truck exposes a different weakness. A refrigeration vendor appears on the active-contract export, its driver clears dispatch, and the plate matches the route. June's food-service delegate recognizes the company but asks why it is delivering a replacement compressor instead of performing the quarterly inspection scheduled on her floor calendar.
He shows an amended work order. Procurement approved the substitution yesterday under Jonah's delegated queue. Legal operations confirms the amendment exists, but Dev cannot find a current certification for the replacement model. The vendor says the model is equivalent. Its sales sheet says it is equivalent. Neither document is a safety acceptance record.
"The kitchen loses cold storage if we wait," Jonah says.
"The kitchen loses more if an unverified compressor fails after we load it," the delegate replies.
She calls the backup storage site and secures temporary capacity under an existing mutual-aid arrangement. No new purchase is required. Dev places the compressor in a sealed hold area and asks the manufacturer for the certification package. The vendor desk records a rejected installation without rejecting the driver or accusing the supplier of fraud.
We create a fifth station for unresolved goods. Security can verify a person while safety rejects a product. Legal can confirm a contract while the receiving department rejects a quantity. Staff can now record each decision without forcing every problem into a single approved-or-denied box.
Jonah points to each delay as proof that procurement is indispensable.
June points to each corrected contact as proof that procurement never held the whole operation.
"Your index lists the central switchboard for North Lake Foods," she tells him. "It closes at five. Receiving has used the night dispatch line for four years."
"An undocumented workaround is not governance."
"Then document the work instead of pretending it does not exist."
Hart asks the city observers to add the discrepancy to the public process log. The omission establishes no misconduct, but it does show that the official vendor directory lacked a contact essential to after-hours continuity.
I assign June's group authority over the floor-contact column for the duration of the emergency desk. Dev owns safety acceptance. Legal operations owns contract status. Security owns identity and escort. No single station can admit a delivery.
Jonah's refusal leaves the split desk operating beyond his control, and its divided authority keeps mine in check.
At seven twenty, a clinic courier returns with three insulated containers. The clinic coordinator recognizes the case labels. Security verifies the driver's identity through the pharmacy's public dispatch line. The shipment reference appears in the purchasing export, and the receiving temperature indicators remain within range.
Camille joins by video from the clinic. She reads the outer product list while a nurse checks the tamper seals. Antibiotics, epinephrine, glucose supplies, and routine employee prescriptions are present. Patient names remain inside the clinic's protected receipt system; the vendor desk records only category, count, and acceptance.
"Essential medical delivery restored," Hart's observer says.
"One delivery," Camille corrects. "Do not turn a partial receipt into a restored supply chain."
Her precision changes the incident notice before anyone publishes it.
By eight, food, waste-removal supplies, laundry chemicals, clinic goods, and two safety-part shipments have entered through manual inspection. Every admitted person leaves through the same gate and surrenders the paper pass. Security reconciles the passes against escorts in public view.
Hart's observers publish the first two-hour summary before management drafts a press release. It reports twelve arrivals, seven admissions, three holds, and two turnaways. The summary identifies reasons by category rather than supplier name because disputed goods have not been adjudicated. The city clerk creates the public copy at 8:04 and retains the source sheet. Its weakness is human entry: observers witnessed the desk but did not independently inspect every box.
June asks each receiving department to countersign its own line before the next summary. Her amendment makes the people who use the goods part of the record instead of anonymous endpoints beneath a security decision.
The manual process runs slower than electronic credentials. Workers management once treated as endpoints now make and sign the receiving decisions.
Jonah closes his index. "You cannot run this for seventy-two hours."
"Then we improve it with the people doing the work," I say.
Before I can request one, June's delegates begin a second shift roster. With Hart arranging rotating observers, Dev moves the desk into a heated service tent so drivers do not crowd the employee entrance. They make the system viable without waiting for my order.
The clinic coordinator calls Camille again. This time, Camille does not put her on speaker. She listens, asks for the packing list, and compares it to the order confirmation already held in the clinic system.
Her expression changes.
The medical courier delivered almost everything on the essential list.
The employee clinic's insulin is still missing.