Five Years of Orders

"The file is vulnerable in two ways," Dev continues. "Both source histories were exported from Wondervale databases, and one system permits authorized users to amend descriptions after installation. We preserved audit logs, but neither export proves which label is genuine. Physical authentication and laboratory testing are pending."

A reporter calls out, "Are the rides unsafe?"

"We cannot prove the installed parts' identities or testing histories," Dev says. "That uncertainty is why they are closed. We have not identified a mechanical failure."

The union technician places the lockout sheets beside Dev's table. She created them at 6:05 this morning after verifying each attraction's isolation points; Dev countersigned at 6:19, and the municipal inspector accepted custody at 6:27. The paper originals remain in sealed station boxes, while the city holds scanned working copies. Their vulnerability is operational rather than forensic: a lockout proves no one should energize the rides now, but it says nothing about who handled the components before closure.

"Can management reopen without your approval?" Ana asks.

"Operations can issue an order," the technician says. "My crew will not remove a lock while identity and test history remain unresolved. Our labor agreement protects that refusal."

The answer transfers practical control. My signature closed the rides; it cannot erase the workers' independent safety duty.

The distinction will frustrate anyone who wants a cleaner headline. It is also the only honest answer.

Ana keeps the purchase order raised. "Director Vale, did cuts for your wage and benefits program cause procurement to buy cheaper replacements?"

The question lands exactly where Jonah aimed yesterday. If I answer first, the briefing becomes a debate between an executive defending his reforms and a reporter holding paper. I look at Dev.

He opens the source-history panel. "The earliest conflicting order predates Director Vale's current tenure by three years. The later relabeling entry predates the reform budget vote by fourteen months. Those timestamps were created by the maintenance systems when the records were entered. City custody began last night. Their vulnerability is that user credentials may have been shared or cloned, which is under investigation. The chronology does not support a claim that this year's reform budget caused the purchases."

Rina takes the microphone before relief can become a victory speech. "Chronology also does not clear current management. Wondervale continued relying on inherited records. The question is who created, approved, altered, and relied on each entry."

She turns to Ana. "May we inspect the document without taking possession?"

Ana brings the order to the side table. Cameras remain several feet away. Rina puts on gloves because the sheet may be original; Dev starts a contemporaneous observation log. He states the time, location, participants, and the fact that Ana retains custody.

"I received this from a source whose identity I will protect," Ana says. "I will describe provenance to independent investigators under a reporter-shield protocol, but not to Wondervale."

"Then Wondervale does not own your chain of custody," Rina says. "We can document visible features, not declare it authentic."

The order was created by BrightSpan Industrial Supply at 3:14 p.m. on October 16, five years ago, according to the printed transaction line. A procurement approval code and an electronic receiving stamp appear beneath it. The description reads adaptive guest-restraint prototype, inclusive design trial. The serial listed is HF-8814.

The price is almost three times the amount shown for a standard component in the surviving vendor catalog. Rina refuses to call it an overcharge. The catalog was created six months later, under different volume terms, and its custodian is BrightSpan itself. She records the comparison as a lead and requests the quote file that would establish what Wondervale was offered on the purchase date.

Ana is the present custodian. Its vulnerabilities are immediate: we do not know who printed it, when it left its prior custodian, or whether the paper is the original output. The order can direct an inquiry. It cannot finish one.

"Can you compare it to company records now?" Ana asks.

Rina opens the procurement index supplied to the employee trust under the city's preservation order. She searches the transaction number, vendor, serial, approval code, and date. Each query returns nothing.

"Absence from an index is not proof it never existed," she says. "The index may be incomplete, the record may have been removed, or this document may be false. Who created the export we are searching?"

Nico answers from the technical table. "The records team generated it at six twenty yesterday under the preservation order. Two employees witnessed the export, and the city received the hash at six thirty-one."

"Custodian?"

"City oversight. Wondervale retains a read-only working copy."

"Vulnerability?"

"The export begins with the current database. If an order was deleted before preservation, the index will not contain it. Backups require separate recovery."

Rina records that limitation beside the failed searches. Then she asks Dev to compare the receiving code with the attraction maintenance archive.

The code belongs to a North Service intake station that closed two years ago. Its daily register survives on paper because the mechanic who ran the station distrusted software. The register is now sealed in the city archive after the subsidy inquiry. We cannot reach it from the stage, and I cannot order Hart's office to produce it.

"Request independent comparison," I say.

Rina submits the request through the municipal portal while cameras watch. The portal timestamps it and assigns custody to Hart's records officer. This is slower than sending an assistant into a file room. It prevents my title from becoming the chain of custody.

Questions continue. How many parts are affected? Dev says fourteen records require comparison, while only two attractions are closed. Who approved BrightSpan? Procurement records name a vendor committee, but approval histories remain contested. Will employees lose pay? Camille repeats the reassignment order and gives workers a direct reporting line if a supervisor cuts hours.

Ana asks the question I expected Jonah to plant. "Why should the public trust an investigation funded by the company under investigation?"

Rina answers. Her contract is held by the employee legal trust. Municipal oversight controls copies of the evidence. Dev's licensure requires him to report material safety findings regardless of employment. Wondervale pays costs but cannot terminate either inquiry.

"And Director Vale?" Ana asks.

"He controls park access and operating decisions," Rina says. "He does not control my findings."

I let the sentence stand. Yielding the microphone is not symbolic if the person holding it can contradict me.

Hart's records officer calls Rina through the secure line twelve minutes later. The North Service register has been located. It was created by station clerk Walter Ames on the same October date, written in ink throughout his shift, and transferred to Diane Mercer during an archive consolidation three years ago. Diane logged it into the corporate archive; the city took custody last week. Its vulnerability is a missing page immediately after the entry we need.

The surviving line records a BrightSpan delivery under Ana's transaction number and shortens the item description to prototype equipment. A procurement coordinator who now reports to Jonah supplied the receiving initials.

Rina does not announce fraud. "We now have a disputed purchase order and an independently held intake register that share a transaction number. That supports expanding the preservation scope."

Hart appears on the briefing screen from city hall. "Municipal oversight is extending its inquiry to five years of procurement records involving BrightSpan, adaptive-equipment classifications, and the approval code shown today. Vendors will receive preservation notices. Wondervale will provide system backups under supervision."

The consequence moves through the plaza. Jonah's attempt to blame the reform budget has opened years he expected to remain closed.

Ana waits until the cameras turn toward Hart, then asks Rina to look at the reverse side of her purchase order. A faint routing box shows three destinations. Two are familiar: North Service intake and Harbor Flight maintenance.

The third is an archive code Rina has already searched.

"That repository contains no purchase order under this number," Rina says.

Ana lowers her voice. "Then you should ask who removed it. My source found this copy in a file Wondervale says never existed."