Chapter 131
Two Signatures on the Reserve
At 6:07 a.m., the benefits carrier asks Wondervale to return authority over the reserve before it will pay a single claim.
At 6:09, Elliot refuses.
I make him prove the refusal does not leave workers with funded accounts and unpaid doctors.
The emergency meeting takes place in Camille Brooks's compliance office because Elliot still lacks ordinary system access. Rina appears for the employee trust, while I represent covered workers under the workforce compact. Elliot speaks for Wondervale only within his retained public authority. No one has unilateral access to the reserve.
Harbor Mutual's contract administration unit created the demand at 5:54 and delivered it to Wondervale, the employee trust, and city purchasing pool at the same time. The carrier retains its source notice; Hart's office holds the received copy. Its vulnerability is interpretation. The notice cites a cancellation clause but does not identify which act triggered it.
"Separate the money from the permission," Rina says.
The benefits reserve sits in a trustee account created after executives waived bonuses and Wondervale protected core care. The bond trustee is custodian. Bank confirmations show the required balance cleared overnight. They can prove funds are present and restricted. They cannot force a carrier to adjudicate claims.
The release process currently requires a Wondervale benefits officer and Harbor Mutual administrator. Wondervale and Harbor established that structure before Rina's termination and before Jonah's plan surfaced. A compromised company account could reroute instructions; a hostile carrier could withhold approval while pointing at management.
"We need dual control on our side," I say. "One company signer and one employee signer."
Elliot looks at me. "You?"
"The trust selects an authorized representative and can replace them. I would only hold the position."
He accepts the correction. Personal cooperation must become governance or it disappears when our names do.
Rina drafts a reserve-control amendment. Payments may leave only for validated benefits claims, continuity premiums, or approved administration. Wondervale provides one signature through Camille's independent office. The employee trust provides the second. The carrier receives claims money only after both confirm the batch total and destination. Neither signer sees protected medical detail beyond what the role requires.
The employee trust creates the amendment at 6:31 from the existing trustee agreement. The trustee will hold the executed original. Vulnerability: an amendment can govern release of funds but cannot rewrite Harbor Mutual's carrier contract without consent.
June's delegate group refuses to elect a co-signer until it sees what the signer can access. Rina demonstrates the proposed dashboard with test data. The worker representative can see batch number, total amount, destination, covered count, exceptions count, and validation attestations. Names, diagnoses, provider notes, and individual charges remain masked. If the totals fail, the signer can reject the batch and enter a reason visible to the trustee, compliance, and city pool.
"Can management split one batch into smaller ones until a sample passes?" I ask.
Rina adds a sequence control. Every carrier batch number must be unique, and rejected claims cannot disappear from the next reconciliation. Daily exception counts still reach the employee trust when no money moves.
At 7:02, the trustee's technical team creates the dashboard and tests it against a synthetic batch. System logs remain in trustee custody. The view can expose inconsistencies in received data, but its source dependence leaves any claim Harbor never submits invisible.
Delegates approve the role only after that limitation appears in the amendment.
Camille searches the cancellation clause cited in the demand. Harbor claims Wondervale failed to give timely notice of material procurement and ownership investigations, allowing immediate suspension and cancellation after a short cure period.
"We notified them when their parent acquisition was confirmed," Elliot says.
"That is a different notice," Camille replies.
The carrier points to the five-year procurement expansion, the device warrants, and Jonah's return. It says those events increased fraud exposure and required formal service through a named contract address.
Wondervale Communications emailed operational updates. Rina sent audit notices. Hart's pool sent preservation instructions. None may satisfy the contract method.
The cancellation clause is real. It was drafted by Harbor and accepted in the thirty-day bridge binder after employee observers negotiated coverage protections. The city purchasing pool holds the executed binder. Its vulnerability is buried process: the service address appears in an administrative exhibit added after the coverage terms, and the observers focused on benefits, networks, and continuity rather than legal notice.
"Who was responsible for service?" I ask.
Camille reads the responsibility chart. Contract administration, reporting through procurement during the bridge period.
Jonah's chain.
That fact does not prove he blocked notice. It explains where to audit.
Camille pulls the legal-service register preserved when all vendor credentials were revoked. Her compliance team created the export under city observation at 6:42. Hart's records officer becomes custodian of the sealed copy. Vulnerabilities: the register records outgoing notices processed through the service desk; an employee could serve by another lawful route, and an omitted entry does not prove no attempt occurred.
There is no service entry for the procurement inquiry, Jonah subpoena, device warrants, or ownership conflict.
Rina checks the carrier's designated portal receipts. Harbor Mutual created those server logs and provides them through the city pool. They show no formal notice either. The logs can establish what the portal received, not whether Harbor learned the facts elsewhere.
"They knew," Elliot says. "Their counsel attended two hearings."
"Contractual service requires more than knowledge," Camille says. "The cure period begins only after valid cancellation notice reaches us."
She turns the binder to the carrier's own duty. Harbor must serve any cancellation through the city purchasing pool, Wondervale compliance, and employee trust. Today's message reached all three electronically. The exhibit requires certified service and a statement of cure deadline.
Harbor provided neither item.
Harbor invoked a clause without completing the notice that would activate it.
Camille finds another failure in Wondervale's own chain. The procurement service desk received three internal reminders to assess formal notice. A junior administrator created the reminders after city hearings, and the preserved task system timestamps them. Each task was reassigned to Jonah's office, then closed with the note handled by counsel. No counsel receipt is attached.
The city holds the task export. Its vulnerability is meaning: closing a task does not prove notice was withheld, and the phrase may refer to advice outside the system. Camille adds the administrators and counsel liaison to the witness list rather than naming sabotage.
"Could we cure now?" Elliot asks.
"Yes," Camille says. "Service today starts whatever cure period the clause lawfully permits. It does not validate Harbor's defective cancellation."
She serves a complete notice package through the designated address, portal, and certified courier. The package identifies the procurement inquiry, warrants, ownership conflict, and existing preservation orders without disclosing protected witnesses. Wondervale compliance creates the notice at 7:49; Hart's office and the employee trust hold matching copies. Its vulnerability is lateness. Proper service now cannot erase the carrier's argument that Wondervale should have served earlier.
Camille calls carrier counsel on a recorded city line. "Are you suspending claims, canceling the binder, or requesting cure? Those are three different acts."
Counsel calls the demand a conditional cancellation and asks Wondervale to restore company-only reserve control as assurance.
"The binder does not require company-only control," Rina says.
"Your proposed employee co-signature creates administrative risk."
"It creates an auditable release path," I reply. "Name the claim batch it prevents you from paying."
The carrier cannot. Reserve funding is complete, and the pending batch has already passed ordinary eligibility review. Harbor wants control before processing it.
Elliot could threaten litigation or replace the carrier. Both actions would take longer than the claims waiting today. He asks the city pool to issue a compliance determination instead.
Hart's contract officer reviews the binder on the call. She confirms Harbor's cancellation notice is deficient and the agreement contains no requirement for company-only control. Immediate claim payment still requires the dispute process, but Hart can reject the control demand and preserve the cure clock.
We execute the reserve amendment without Harbor's signature because it governs the trustee side. Camille signs for Wondervale compliance at 8:02. The employee trust elects me as interim co-signer for seven days after a recorded delegate vote, with two alternates and automatic expiry. I sign at 8:17. The trustee accepts the amendment at 8:26.
Elliot signs a separate acknowledgment relinquishing any claim that the worker co-signature is advisory. He cannot revoke it, substitute himself for Camille, or direct my vote. The corporate secretary files the acknowledgment with the board and the sale data room so every bidder sees that benefits governance now includes enforceable worker authority.
"This may lower bid values," Rina says.
"Then the old values assumed employees had no hand on their own benefits money," I reply.
The consortium model absorbs the control as a permanent obligation rather than a temporary crisis measure.
This governance is irreversible unless both Wondervale compliance and the employee trust amend it through the same recorded process. Elliot's office cannot remove the worker signature. My elected role cannot move money without Camille.
The first claims batch contains 312 payments. Rina verifies only totals, destination accounts, and carrier batch identifiers. Camille checks the eligibility certification. I confirm the employee trust's independent sample review. We sign the reserve release together at 8:44.
My signature controls release. The sample covers employment types, dependents, prescriptions, behavioral health, and ongoing treatment. Two rows lack the carrier validation stamp. I reject the batch at 8:38, forcing Harbor to restore the attestations and preserve the first version. The corrected batch returns six minutes later with the same total and two claims marked for individual review.
The trustee log records both versions. Harbor cannot erase the incomplete batch when it presents the correction later.
The trustee transmits the funds to Harbor's claims account.
For four minutes, the payment status reads accepted.
Then every claim changes to administrative hold.
Harbor has the money and freezes the claims while contesting notice.