Chapter 9: The Window
Nadia Osei was four minutes early.
Elena heard her in the hallway before she knocked — the measured cadence of shoes on linoleum, the particular gait of someone who walked the way she conducted interviews: deliberately, with attention to the surface beneath her feet. Two sets of footsteps. Elena's hand paused over the kettle she had set to boil. She listened. The second set of footsteps was lighter, faster, and retreated toward the stairwell at the end of the hall. A neighbor. Not relevant.
One knock. Three quick impacts, evenly spaced. Not a request — a signal.
Elena opened the door.
The woman from the photograph was shorter than Elena had expected. Five-six, perhaps five-seven. Close-cropped hair that was shorter than it appeared in the image — a practical cut, maintained without vanity, the kind of haircut a person chose when they needed to eliminate one more variable from the morning's decisions. Dark skin, the undertone carrying a warmth that the hallway's fluorescent light flattened into something less alive. She wore a navy peacoat over black pants, and she carried a messenger bag that hung at her left hip with the weight distribution of something heavy inside — a laptop, probably, or files, or both. Her shoes were flat. Her posture was upright. Her eyes moved across Elena's face with the speed and thoroughness of someone reading a document they had already seen in draft.
"Elena Marsh," Nadia said. It was not a question.
"Yes."
Nadia looked past her. The glance took two seconds — scanning the apartment's entryway, the hallway behind Elena, the arrangement of shoes by the door and the coat hooks on the wall. Not paranoia. Procedure. The practiced survey of someone who had walked into rooms where the information on the other side of the door might not match the information that had drawn her there.
"May I come in?"
"Of course."
Nadia entered. She removed her coat — not because the apartment was warm but because removing the coat freed her hands and eliminated a layer that restricted movement. Elena recognized the logic. She had worked with enough people who thought in tactical terms to recognize the difference between a nervous gesture and a calculated one.
The apartment was clean. Not spotless — there were dishes in the drying rack, a scarf on the back of the armchair, a stack of journals on the coffee table that Elena had not yet organized. But the surfaces were clear, the floors were swept, and the kitchen table held only the items Elena had placed there: the laptop, the USB drive, the journal, and the suicide note. Nadia's eyes went to the table. She set her messenger bag on the counter and looked at the objects the way a curator examines artifacts — touching nothing, cataloguing everything.
"Those are the files?" she said.
"On the USB drive and backed up on the laptop. The journal is mine — my previous self left it. The note is the one I found on October 15."
Nadia looked at the note. She studied it for five seconds. "This is the alarm."
"Yes."
"And the journal?"
"Twelve entries. Instructions for the version of me that would exist after the redaction. I've followed most of them. The last two entries are about evidence preservation and what to do if the Protocol moves faster than expected."
Nadia's gaze lifted from the table. She looked at Elena — a direct, assessing look that held no warmth and no hostility. The look of a person measuring the distance between the evidence in front of her and the person presenting it.
"Before we start," Nadia said, "I need to establish something."
"All right."
"In July, when we spoke at the café — you were precise. Clinical. You presented information the way a researcher presents data at a conference — structured, qualified, hedged. You were afraid, but you controlled it. Right now, standing in your kitchen, you are doing the same thing. The same posture. The same vocal register. The same controlled breathing."
Elena said nothing.
"I need to know if that's because you're the same person," Nadia said, "or because you've read your journal's description of me and you're performing the version of yourself that you think I'll trust."
The question landed in the space between them with the precision of a surgical instrument. Elena felt the impact — not as pain, exactly, but as the recognition of a cut she had not seen coming. She had expected skepticism. She had expected professional rigor. She had not expected Nadia to identify, within thirty seconds of entering the apartment, the fundamental problem at the center of their collaboration: that the woman standing in this kitchen was a reconstruction, built from fragments and instructions, and that every interaction she conducted was, in some sense, an act of interpretation.
"I don't know," Elena said.
Nadia waited.
"The journal describes you as careful, thorough, and professionally motivated. It tells me to verify your identity using the password, which I did. It does not tell me what you look like when you're angry, or what you sound like when you're afraid, or how you behave when the evidence hits close enough to hurt. I don't have those data points. I have a photograph, a phone number, and twelve entries written by someone who knew you for forty minutes in July."
"That's honest," Nadia said.
"I don't have an alternative. If I performed the version of myself I think you'd trust, you would identify the performance within the first five minutes. You're already cataloguing my tells. I can see you doing it."
Something shifted in Nadia's expression — not a smile, but a reorganization of the muscles around her eyes, a release of tension so slight it might have been involuntary. Elena recognized it as the response of a person who had been lied to enough to appreciate being told the truth about the difficulty of distinguishing between them.
"Sit down," Nadia said. "Show me the files."
They sat across from each other at the kitchen table. Elena opened the laptop and decrypted the backup folder. The three files appeared on screen — the quarterly memo, the consent-override protocol, the target list. Nadia pulled her chair closer, close enough that their shoulders were nearly touching, close enough that Elena could smell the coffee on Nadia's breath and the faint trace of something else — cedar, or sandalwood, the kind of soap that a person chose because it was available, not because it was preferred.
Elena started with the quarterly memo.
She narrated as she scrolled. "The memo describes the Gardener algorithm's screening methodology. It's a predictive model — it scans patient records for behavioral indicators that correlate with potential exposure to classified information. Unauthorized file access, anomalous query patterns, documented contact with external investigators, self-reported memory-leak episodes that cluster around suppressed information."
Nadia leaned forward. "Walk me through the indicators. Specifically."
"Access patterns. If a patient logs into the Reeve patient portal and searches for terms associated with the Protocol — 'consent override,' 'Clinical Urgency,' 'Gardener' — the algorithm flags the query. Contact patterns. If a patient has documented communication with a journalist, investigator, or legal representative who has previously queried Reeve about redaction practices, the contact is flagged."
"That's how they found me," Nadia said. "Through my mother."
"Through your mother's records. She was classified as 'External — Associate of Monitored Subject.' The association itself was the flag. The algorithm didn't need evidence that your mother knew anything. It needed evidence that she was connected to someone who was investigating."
"Which means every person I interviewed in fourteen months became a data point in their algorithm. Every patient who agreed to speak with me — they were being tracked through my contact with them."
"The memo doesn't say that explicitly. But the logic is consistent. If the algorithm monitors 'documented contact with external investigators,' then every interaction between a journalist and a patient is a potential flag — not just for the journalist, but for the patient."
Nadia's jaw tightened. Elena watched the information settle — watched it move through the journalist's face like weather moving across a landscape, the clouds darkening and then holding, the pressure building without release.
"The seven cases I have," Nadia said. "The patients who contacted my editor, who agreed to be interviewed. If their contact with me triggered the algorithm — then their redactions weren't just about silencing them. They were retaliatory. Punitive. The algorithm flagged them because they spoke to me, and the Protocol processed them because the algorithm flagged them. I'm not investigating a conspiracy. I'm generating it."
"You don't know that."
"I know that the algorithm flags 'documented contact with external investigators.' I know that your mother was flagged as an 'associate' of me. I know that the seven cases I've documented all share the same characteristic: patients who spoke to an outside party about their redaction experiences. The pattern is there, Elena. I've been looking at it for fourteen months from the wrong angle."
Elena let the silence hold. She recognized the expression on Nadia's face — the particular stillness of a person reorganizing a framework they had built over months, the vertigo of realizing that the architecture of the investigation was also the mechanism of harm. She had felt something similar when she had found Calloway's signature on her own authorization form.
"The memo goes on," Elena said. She scrolled to the second page. "The screening methodology generates a risk score for each flagged patient. The score determines the response tier. Tier one is monitoring — passive surveillance of the patient's communications and movements. Tier two is active intervention — a scheduled appointment at a Reeve-affiliated clinic, a 'routine check-up' that includes a redaction assessment. Tier three is expedited processing — the patient is brought in within seventy-two hours of flagging and redacted under Clinical Urgency."
"Seventy-two hours," Nadia said.
"That's the window. Entry 5 in the journal describes it. If the Protocol's algorithm flags a patient — if it identifies a pattern it interprets as potential exposure — the response is triggered within seventy-two hours. The algorithm generates the flag. A technician reviews it. The documentation is prepared. The appointment is scheduled. The procedure is performed."
"And when did you access the server?"
"Approximately 4:47 PM today."
Nadia looked at the clock on the laptop. 10:51 PM. "Six hours. You've used six of your seventy-two."
"The window applies to the flagged patient's response time, not mine. The flag is about the Protocol's processing speed. Once the algorithm generates a flag, the seventy-two-hour countdown begins — but the countdown is for their action, not mine. They have seventy-two hours to process me. I don't have seventy-two hours to do anything. I have whatever time they need to act."
"That's worse."
"Yes."
Nadia pushed back from the table. She stood, took three steps to the counter, and stood with her back to Elena for fifteen seconds. Elena did not follow her with her eyes. She listened to the silence — the building's ambient hum, the distant traffic, the particular quality of a city at night that sounds like a machine running at reduced capacity.
"Show me the target list," Nadia said, returning to the table.
Elena opened the file. The spreadsheet loaded — forty-seven rows, each containing a name, a date, a risk category, and a status. The entries were arranged chronologically, the earliest at the top, the most recent at the bottom. The font was uniform, the formatting clinical, the visual impression one of bureaucratic normalcy — a list that could have been inventory, or scheduling, or any of the mundane documents that moved through corporate offices every day.
Nadia read from the top. Her finger traced the rows without touching the screen — hovering, the fingertip a centimeter above the glass, the gesture of someone who had been trained not to contaminate evidence.
"April 3, 2023. Row one. 'Risk Category: CLINICAL — Self-Reported Leakage Episode.' Status: PROCESSED." She moved down. "April 19. 'EXTERNAL — Journalistic Inquiry.' May 8. 'CLINICAL — Anomalous Query Behavior.' These early entries — they're all clinical flags. Patients who asked questions or reported symptoms."
"The algorithm was in its early deployment. The criteria were narrower. It expanded over time."
Nadia reached row twelve. Her finger stopped. "Row twelve. 'Margaret Hollis. INTERNAL — Research Staff. Unauthorized File Access. Status: PROCESSED. March 2024.'"
"Do you know that name?"
"I interviewed Margaret Hollis in November 2023. She was a data analyst at Reeve — mid-level, technical staff. She contacted my editor through an encrypted channel. She said she had found anomalies in patient records — entries that had been retroactively modified, consent forms with mismatched signatures, appointment dates that didn't correspond to procedure dates. She was frightened. She used the word 'terrified' twice in our first conversation."
"And she's row twelve."
"Processed in March. I tried to contact her after our second meeting. Her phone was disconnected. Her email bounced. I drove to her apartment — the building manager told me she had moved. No forwarding address."
Elena looked at the row. Margaret Hollis. INTERNAL — Research Staff. Unauthorized File Access. Status: PROCESSED. The language was clean. The data was complete. The entry contained no indication of what "processed" meant for a woman who had been terrified enough to contact a journalist and then vanished without a forwarding address.
"Keep going," Elena said.
Nadia continued. Rows thirteen through twenty-seven were a mix of clinical flags and external associations — patients, former employees, family members. The names meant nothing to Elena. They meant something to Nadia, who paused at several entries with the particular stillness of a person recognizing a thread in a pattern they had been following from the other end.
Row twenty-eight stopped her.
"'David Chen. EXTERNAL — Sibling of Monitored Subject. Status: PROCESSED. August 2024.'"
"You know him."
"My editor's brother. David Chen. He never interacted with Mnemos — never been a patient, never worked for Reeve. He was flagged because of his sister. My editor. The person who first received the contact from the patient who started this whole investigation." Nadia's voice was flat. The flatness was a structure — Elena could feel the effort behind it, the deliberate compression of emotion into something that could be carried without breaking. "My editor's brother. Flagged because his sister published an article about Mnemos side effects. Processed in August. She still doesn't know. She thinks he moved to Vancouver for a job."
Elena said nothing. She let the information sit between them — the weight of it, the geometry of it, the particular cruelty of a system that could reach through degrees of association and erase the people closest to anyone who asked questions.
"Row twenty-three," Nadia said. She did not need Elena to point it out. She had already seen it.
Elena looked at the row. Elena Marsh. INTERNAL — Research Staff / Co-Developer. Anomalous Query Behavior + Self-Reported Leakage. Status: PROCESSED. July 22, 2024. Authorized: J. Calloway.
"Your own name," Nadia said.
"My own name."
Nadia studied the row. She studied the authorization line — the name, the date, the clinical language that reduced the erasure of a person's identity to a line item in a spreadsheet. Then she looked at Elena.
"James Calloway," she said. "Your research partner."
"Yes."
"He signed the authorization."
"Yes."
"And now?"
"He's been in contact with me since I found the note. He offered to run diagnostics. He asked if anything was wrong. He was checking whether the redaction held."
Nadia absorbed this. She did not react — not visibly. But Elena saw her hand move to her messenger bag, felt the fingers close around something inside it, then release. The journalist was holding herself to a standard of response that left room for the evidence but not yet for the feeling.
"Row thirty-one," Nadia said.
Elena moved the cursor. Abena Osei. EXTERNAL — Associate of Monitored Subject. Status: PROCESSED. February 14, 2024.
They looked at it together. The screen's light caught the surface of the table and threw the words back in a faint reflection — the name doubled, the date doubled, the clinical language repeated in a ghost image that neither of them acknowledged.
"You told me about this on the phone," Nadia said. "I need to see it here. In the file. In their language."
"What do you see?"
"I see a woman who lost her husband and went to a clinic for help. I see a system that identified her as a liability because her daughter was asking questions. I see a word — 'PROCESSED' — that means someone decided her memories were a threat." Nadia's voice did not change in volume or pitch. The flatness held. But the surface of it had developed a grain — a texture that had not been there when she entered the apartment. "I see the same word next to forty-six other names. And I see your name at row twenty-three, which means you understand what 'PROCESSED' means because it was done to you."
"I understand the mechanism. I don't remember the experience."
"That's worse."
Elena looked at her. The same words Nadia had used ten minutes ago, describing the seventy-two-hour window. That's worse. The phrase was not an expression of opinion — it was a measurement. Nadia evaluated the world in terms of severity, locating each new datum on a scale that ran from manageable to catastrophic, and her assessment was consistently, precisely calibrated to the worst reasonable interpretation of the evidence.
"Show me the consent-override protocol," Nadia said.
Elena opened the file. The document was three pages — dense, formatted in the style of a corporate policy memo, the language constructed to obscure its content behind layers of administrative euphemism. Section headers ran along the left margin: Authorization Framework. Emergency Designation. Documentation Requirements. Post-Procedure Review.
Elena read aloud. "Section 2.1: 'In cases where a supervised patient presents an imminent risk to themselves or others, or where continued access to classified information poses a demonstrable threat to institutional security, the supervising clinician may authorize an expedited redaction session under the Clinical Urgency provision without obtaining separate patient consent.'"
"That's the loophole," Nadia said.
"That's the entire architecture. The Clinical Urgency provision was designed for acute psychiatric emergencies — patients in active crisis, patients who cannot consent because they are not in a state where consent is meaningful. The Protocol repurposed it. 'Imminent risk' was redefined to include any patient whose continued memory access could compromise the technology's public profile. 'Institutional security' was interpreted to mean any information that Reeve Neurotechnologies classified as proprietary."
"So anyone who knows anything becomes an imminent risk."
"Anyone whose behavior, communications, or associations suggest they might know something that the algorithm identifies as classified. The threshold is not knowledge. The threshold is pattern."
Nadia leaned back. She crossed her arms — not defensive, but the posture of a person containing something that needed to be held in place. "And the documentation requirements?"
"Retroactive. Section 3.4: 'In expedited cases, documentation of patient consent and psychological evaluation may be completed within ninety-six hours of the procedure.' The consent form is filled out after the fact. The psychological evaluation is conducted on a patient who has already been redacted — a patient whose memories of the evaluation itself are subsequently suppressed."
"They're writing the paperwork for a crime they've already committed."
"They're writing the paperwork for a medical procedure they've already performed. The language matters. To Reeve's legal team, this is not a crime — it is a clinical intervention authorized under existing emergency protocols. The documentation is incomplete, not illegal. The distinction is the difference between malpractice and policy."
Nadia was quiet for seven seconds. Elena counted them — not deliberately, but the count happened, the way all her counts happened, involuntary and precise.
"Who else knows about this protocol?" Nadia said.
"The journal Entry 8 names four people. Reeve. Two senior vice presidents — the journal doesn't name them. And a team of four technicians. That's the operational circle. Eight people, at most, who understand the full scope."
"And Calloway?"
"Calloway signed my authorization. He operates within the Protocol's framework. But Entry 8 does not list him as part of the inner circle. He may be peripheral — a supervisor with authorization access but without knowledge of the algorithm's full scope."
"You don't believe that."
"I believe that the journal was written by a version of me who had more information than I do. That version did not list Calloway as a principal. That omission is data. I don't yet know what it means."
Nadia looked at the screen. The three files were open in separate windows — the memo, the protocol, the target list. The laptop's fan was running at a pitch that suggested sustained processing — the files were large, or the encryption was taxing the hardware, or both. The screen's glow illuminated their faces in the particular blue-white light that screens produce, the light that makes everyone look slightly ill, slightly ghostly, the light that was designed for readability and not for the human face.
"I need copies," Nadia said.
"I can transfer them to your drive. Encrypted. The same protocol."
"I need them on my own infrastructure. My editor has a secure server — off-network, air-gapped. If the Protocol is monitoring digital channels, they'll track any transfer I make over standard connections."
"Then you'll need to carry the drive."
"I'll carry the drive." Nadia looked at the USB drive on the table — the small, unremarkable object that contained the physical evidence of a program that had erased forty-seven minds. "This is the only copy?"
"The backup on the laptop is the second copy. The drive is the original."
"Then the laptop copy stays here. We don't move everything to one location. Two copies, two places. If they confiscate the drive, you have the laptop. If they access the laptop, you have the drive."
"Agreed."
Nadia reached for the drive. Her fingers closed around it — a small, precise grip, the fingers wrapping the device with the care of someone handling something fragile. She placed it in the inner pocket of her messenger bag, then zipped the pocket closed. The zipper's sound was sharp in the quiet apartment — a metal rasp that cut through the ambient hum and ended abruptly.
Nadia looked at the clock. 11:14 PM.
"The seventy-two-hour window," she said. "You accessed the server at 4:47. It's now 11:14. Six and a half hours have passed. How quickly does the algorithm process a flagged intrusion?"
"The journal doesn't specify. Entry 5 says the window is seventy-two hours from the moment the algorithm generates a flag. It does not say how long the algorithm takes to generate the flag."
"So the clock might have started already."
"The clock might have started at 4:48. Or the algorithm might take hours to process the intrusion. Or the backdoor I used might not be monitored the way the primary server access is monitored. I don't have enough data to determine the starting point."
Nadia stared at her. "You're telling me that you used a backdoor into a classified server, copied three files that document an illegal redaction program, and you don't know whether the system that runs the program detected you."
"I'm telling you that the journal described a seventy-two-hour response window but did not specify the trigger condition. My previous self may not have known. Or she may have known and chose not to include the detail — the journal is selective. It provides what the previous version calculated I would need. Not everything. What I would need."
"That's terrifying."
"Yes."
Nadia picked up the journal. She held it without opening it — the black cardstock against her palms, the elastic band still in place, the notebook that contained twelve entries written by a woman who had known she was about to disappear. Nadia turned it over, examining the cover, the spine, the slight wear at the corners that suggested the previous Elena had handled it frequently during the three days before her redaction.
"May I read it?" Nadia said.
"Elena — the previous version — did not include instructions about sharing the journal. But I'm telling you now that you can read it. The journal is evidence. It was written to guide me. It should guide you as well."
Nadia opened the journal. She began with Entry 1 — the password, the server instructions, the backdoor location. Her eyes moved across the page with the speed of a person who had been trained to extract information from dense text — not skimming, but processing, the journalist's mind organizing each sentence into a framework of relevance and application.
She read through the entries in silence. Elena watched her face. The expressions were minimal — a tightening of the jaw at Entry 3, which described Abena Osei as the "journalist's mother"; a slight narrowing of the eyes at Entry 8, which named Reeve as the architect of the Protocol; a stillness at Entry 12, the final entry, the words that Elena had read so many times they had become less language than texture.
Nadia closed the journal. She placed it on the table between them.
"Your previous self was meticulous," she said.
"She was afraid."
"Fear and precision aren't mutually exclusive. They're usually the same thing." Nadia looked at the laptop. The screen was dimming — the power-saving protocol reducing the brightness after a period of inactivity. The files were still visible, the three windows overlapping like layers of a document that could be read simultaneously if you knew where to look. "I have a question about Entry 5. The Gardener algorithm. You said the seventy-two-hour window is triggered by a flag. But Entry 5 also says the algorithm runs continuously — it's not a one-time scan. It's a persistent monitoring system. Which means that if you accessed the server today, the algorithm didn't just flag you today. It has been building a profile of your access patterns since you were first enrolled in the system."
"That's a reasonable inference."
"If the algorithm has been tracking your patterns for months — since before your redaction — then the July 22 flag wasn't the first flag. It was the most recent flag in a series. The Protocol didn't redact you because of a single anomaly. It redacted you because the algorithm accumulated enough evidence over time to generate a high-confidence risk assessment."
"The quarterly memo supports that interpretation. The screening methodology describes cumulative risk scoring — each behavioral indicator adds to the score. A single flag is insufficient for Tier 3 processing. The score must exceed a threshold."
"So the seventy-two-hour window that's closing right now — it's not the first time the algorithm has flagged you. It's the most recent flag in a system that has been watching you for as long as you've been in the patient database."
Elena felt the room change. Not physically — the apartment was the same, the table was the same, the files on the screen were the same. But the quality of the space between her and the evidence shifted, the way the quality of light shifts when a cloud passes between the sun and the earth. The investigation was not a clean line from discovery to action. It was a curve — a curve that had been bending toward this moment since the day she first entered the Mnemos patient database, since the day the algorithm first identified her as a data point in a system designed to monitor, evaluate, and, when the score exceeded the threshold, erase.
"I need to check something," Elena said.
She opened the browser on the laptop. Nadia watched her navigate to the library's remote access portal — the same terminal she had used at the Maple Street library, now accessible from home through the library's VPN service. The login screen appeared. Elena entered her credentials. The portal loaded.
She navigated to the Reeve server backdoor. The same path she had taken at 4:47 PM — the same URL, the same authentication sequence, the same directory structure. She had not intended to return to the server tonight. The files were copied. The backup was secured. There was no reason to go back.
She went back anyway. Because Entry 5 described the algorithm as persistent, and because Nadia's observation had introduced a variable that the journal had not addressed: if the algorithm had been building a profile of Elena's access patterns for months, then the backdoor itself might be part of the pattern. The backdoor was not invisible — it was a gap in the security architecture, a seam in the system that Elena's previous self had identified and exploited. The algorithm might not have flagged the backdoor's existence. But it might have flagged the absence of Elena's usual access patterns — the library terminal logins, the query behavior, the file access history that the algorithm had been accumulating since her enrollment.
The server loaded. The directory structure appeared — the same folders, the same files, the same architecture of classified information organized with the precision of a system that believed its own secrecy was absolute.
Elena navigated to the access log.
The log was a record of every interaction with the Tuesday folder — every login, every file access, every download. She had added an entry at 4:47 PM: her login, her file access, her download of three files. The timestamp was precise, the IP address was the library's, and the activity was recorded in the same clinical format as every other entry in the log.
She looked at the entries above hers. The most recent previous access to the Tuesday folder was dated October 8 — ten days ago. A different user, a different IP address, a different set of files accessed. The entry before that was October 1. The one before was September 24. The access pattern was weekly — a regular, scheduled review conducted by someone with operational authority over the Protocol.
Elena scrolled down to her own entry. October 15, 4:47 PM. She looked at it for three seconds. Then she looked at the line below it.
There was a line below it.
October 15, 7:02 PM. User: SYSTEM_ADMIN. Action: ACCESS REVIEW. Files: tuesday_memo_q3.pdf, consent_override_protocol.pdf, target_list.xlsx. Note: Anomalous access pattern flagged. Cross-reference pending.
Elena stared at the line. She read it twice. She read it a third time.
7:02 PM. Two hours and fifteen minutes after her access. A system administrator had reviewed the same three files she had downloaded. The review was logged in the same format as every other entry — the same clinical language, the same precise timestamps, the same organizational logic. But the note at the end was different. Anomalous access pattern flagged. Cross-reference pending.
The algorithm had not just detected her. It had classified her.
"What is it?" Nadia said.
Elena moved aside so Nadia could see the screen. Nadia leaned forward. She read the line. Her eyes moved across the text with the same thoroughness she had applied to the files — scanning, processing, assembling.
"Seven-oh-two PM," Nadia said.
"Two hours and fifteen minutes after my access."
"Someone reviewed your activity. A system administrator."
"The algorithm flagged it. The log entry says 'anomalous access pattern flagged.' That means the algorithm didn't just record my access — it evaluated it against the baseline of normal activity for the Tuesday folder and determined that my access was anomalous."
"Which triggers the seventy-two-hour window."
"Which may already have triggered it. The flag was generated at 7:02 PM. If the seventy-two-hour countdown started then, we have until 7:02 PM on October 18."
"That's the same day as the deadline on the note."
Elena looked at the note. It sat on the table where she had placed it at the beginning of all this — the paper, the handwriting, the date that her previous self had chosen with the precision of someone who understood exactly how much time she had before the system she was fighting would consume her. October 18. The deadline was not arbitrary. The deadline was calculated.
"She knew," Elena said. "My previous self. She knew the window was seventy-two hours from the moment of intrusion. She timed the deadline to coincide with the end of the window."
"Which means she planned to access the server on October 15."
"She planned everything. The access, the files, the trail, the deadline. She knew she had three days between intrusion and processing. She used those three days to build the breadcrumb trail. The note, the journal, the photograph, the password — all of it was designed to be found within the window."
Nadia looked at the clock. 11:23 PM. October 15. The window was open. The window was closing. Somewhere in the system — in the algorithm, in the server, in the architecture of a program that had already erased forty-seven minds — a flag had been generated, a cross-reference was pending, and the machinery of clinical urgency was beginning to turn.
"We have approximately thirty-one hours," Nadia said. "From the time of the flag. Not from the time of your access."
"Thirty-one hours."
"Which means we don't have time to be careful. We have time to be thorough. There's a difference."
Elena looked at her. Nadia looked back. The journalist's face held the same flatness it had held when she entered the apartment — the professional composure, the controlled response, the architecture of a person who had been trained to evaluate evidence without becoming it. But beneath the flatness, in the set of her jaw and the steadiness of her gaze, was something else. Something that the journal had not described, because the journal had been written by a version of Elena who had not seen Nadia Osei's face when her mother's name appeared on a spreadsheet next to the word PROCESSED.
Nadia was not just investigating. She was choosing.
"I'll need your laptop," Nadia said. "And the journal. And every detail you remember about the backdoor — the URL, the authentication sequence, the directory structure. I'm going to build a timeline. If the algorithm flagged you at 7:02 PM, the cross-reference is already in progress. I need to know what they'll find when they complete it."
"They'll find that I accessed three files. They'll find the IP address of the Maple Street library. They'll find the login credentials, which are mine — tied to my Reeve employee account."
"Your employee account is still active?"
"My previous self preserved it. The account was not deactivated after the redaction. That's unusual — redacted employees are typically terminated or reassigned. The fact that my account is still active suggests either an oversight or a deliberate choice to leave it as a monitoring point."
"If it's a monitoring point, they've been watching your account since July 22."
"Which means they already have a record of today's access. The 7:02 PM review wasn't triggered by my login — it was triggered by the specific files I accessed. The algorithm had already been monitoring my account. What flagged me was not the login but the destination."
"The Tuesday folder."
"The Tuesday folder. The algorithm monitors access to classified directories. Any patient or employee who navigates to the Tuesday folder without an authorized operational reason generates a flag. My access was anomalous because the algorithm had classified me as a Tier 3 processed subject — someone who should not have access to any classified material, let alone the specific files that documented my own redaction."
Nadia processed this. Elena watched her — watched the journalist's mind assemble the implications, watched the framework reorganize itself around a new variable. Nadia's face was a document Elena was learning to read, the micro-expressions cataloguing themselves in Elena's memory with the same involuntary precision that characterized all her observations.
"So the algorithm knows you accessed the files," Nadia said. "It knows which files. It knows when. It knows from where. And it has flagged the access as anomalous and initiated a cross-reference."
"Yes."
"The cross-reference will determine what type of response is appropriate. Whether you're Tier 2 or Tier 3. Whether the response is monitoring or expedited processing."
"Yes."
"And given that you were already processed in July — given that the algorithm already has a Tier 3 record for you — the cross-reference will almost certainly confirm that you are a recidivist subject. Someone who was redacted and has now demonstrated continued access to classified material."
"The logic is consistent."
"Which means the seventy-two-hour clock is not just running. It's accelerating. They're not processing a new flag. They're confirming an existing one."
Elena looked at the screen. The log entry stared back — Anomalous access pattern flagged. Cross-reference pending. Eight words that reduced the sum total of her investigation to a line item in a system that would, within hours, determine whether she would be brought in for processing or left under surveillance until the processing could be arranged.
She closed the laptop.
The screen went dark. The apartment's ambient light returned — the streetlamp glow through the windows, the soft yellow of the overhead light Nadia had switched on when she arrived, the particular quality of indoor light at night that makes a room feel both intimate and exposed.
"We should work," Elena said. "We have thirty-one hours. We should use them."
Nadia nodded. She opened her messenger bag and removed a laptop of her own — smaller than Elena's, older, the case scuffed at the corners in the way that suggests a device carried frequently and cared for functionally. She placed it on the table beside Elena's and opened it. The screen was already decrypted — Nadia had prepared for this before she arrived.
"Show me everything," Nadia said. "From the beginning. Not from the files. From the note."
Elena looked at the note. The handwriting. The date. The words her previous self had written in a state of controlled desperation, knowing that the version of herself who would read them would have no memory of the woman who wrote them.
She picked up the note. She held it flat on the table, the paper thin and warm from being handled, the ink settled into the fibers with the permanence of something that had been written once and could not be unwritten.
"October 15," Elena said. "I found this on my kitchen table at 7:40 AM. I had no memory of writing it. I had no memory of the date in the margin — a sequence of numbers that turned out to be a reference to a Mnemos session three months earlier. I treated it as a forensic puzzle. I analyzed the handwriting. I checked my calendar. I found a gap in my records."
She began to tell the story. Not the summary, not the timeline, not the list of events organized by date and significance. The story — the way it had happened, the way each discovery led to the next, the way the walls of the investigation had narrowed around her as the evidence accumulated and the deadline approached. She told it precisely, with the clinical language that was her default, but she told it completely — leaving out nothing, qualifying everything, allowing Nadia to hear the full architecture of the trail that her previous self had designed.
Nadia listened. She typed. Her fingers moved across the keyboard with a speed that suggested either extensive practice or the particular clarity that comes from hearing information that confirms a hypothesis you have held for fourteen months.
They worked until 1:47 AM.
By then, the files had been cross-referenced against Nadia's existing investigation — the seven cases, the patient interviews, the consent-form anomalies, the pattern of disappearances that Nadia had been tracking from the outside while Elena had been living it from within. The combined picture was larger than either investigation alone. The Protocol was not just a program — it was a system, nested within Reeve Neurotechnologies, operating through the Gardener algorithm, executing through the Clinical Urgency provision, documented through retroactive paperwork, and now, for the first time, exposed to the combined scrutiny of the person it had erased and the journalist who had been chasing its shadow for fourteen months.
Elena looked at the clock. 1:47 AM. October 16. The deadline was October 18. The flag had been generated at 7:02 PM on October 15. The window was closing. Somewhere in the system, the cross-reference was proceeding — algorithm processing data, technicians reviewing flags, the machinery of the Protocol turning with the impersonal efficiency of a system that did not distinguish between a threat and a person.
Nadia packed her messenger bag. The USB drive was inside, along with her laptop and a notebook of her own — a composition book, black, the same color as Elena's journal, filled with Nadia's handwriting in blue ink.
"I'll be back tomorrow morning," Nadia said. "I need to contact my editor. I need to move the files to the air-gapped server. And I need to contact two of the patients on the target list — people I've interviewed before. If the algorithm is processing you, it may also be processing them. They need to know."
"Be careful."
"I'm always careful. That's why I'm still here." Nadia paused at the door. She looked back at Elena — the same assessing gaze she had used when she arrived, the same thoroughness, the same cataloguing. But the quality of the gaze had changed. What Nadia was measuring now was not the distance between evidence and presenter. It was the distance between a stranger and a collaborator. "Your previous self wrote in the journal that I was a journalist, not an ally."
"She did."
"She was right. I am a journalist. But I'm also the daughter of a woman who was processed because of me. Those two things are not in conflict. They're the same thing."
She left. The door closed. The sound of her footsteps in the hallway — measured, deliberate, the cadence of a person walking toward something rather than away from it — faded into the building's ambient quiet.
Elena stood at the window. She looked down at the street. Nadia emerged from the building's entrance, crossed the sidewalk, and hailed a cab. The cab pulled over. Nadia got in. The cab pulled away from the curb, its taillights red against the wet asphalt, and disappeared around the corner.
Elena turned from the window. She looked at the table — the laptop, the journal, the note, the empty space where the USB drive had been. The apartment was quiet. The building was quiet. The city was quiet in the way that cities are quiet at two in the morning — not silent, but reduced, the sounds filtered to their essential frequencies.
She sat down at the table. She opened the journal to Entry 11 — the entry she had read three times already, the entry that described the algorithm's response window in terms her previous self had calculated with the precision of someone who understood that she was building a clock that would count down to her own erasure.
The window is seventy-two hours. They will process you before it closes. What you do with those hours determines whether anyone will ever know what happened.
Elena closed the journal. She placed her hands flat on the table — palms down, fingers spread, the posture of someone grounding herself against a surface that held the weight of evidence and absence and the particular silence of a room that had recently contained another person's presence and would, within hours, need to contain it again.
The clock moved. The window narrowed. The algorithm processed.
And somewhere in the architecture of a system designed to erase the people who asked the wrong questions, a cross-reference was moving toward completion — the final step in a sequence that would determine whether Elena Marsh would be brought in for processing or left, for a few more hours, in the apartment where she had found a note she did not remember writing and begun the work of recovering a self that had been designed to forget.