Chapter 10: The Truth Behind the Two Envelopes
The original Project Nightglass report was not in Marcus Vale's office.
It wasn't in the historical repository, the restricted archive, or the government records system that had preserved the project's final authorization.
It had been removed.
The access history showed that the original file was opened six weeks earlier and transferred to an external storage device.
The device had been registered to an administrative workstation associated with the Assistant Secretary for Defense Logistics.
But the workstation's physical access records told a different story.
Marcus Vale hadn't entered the office that night.
Neither had General Reeves.
The only person who had entered the suite was Lieutenant Colonel Peter Shaw.
At 11:52 p.m., Shaw's badge had opened the door.
At 12:07 a.m., he had left.
At 12:14 a.m., the original report had been copied.
And at 2:14 a.m., the first suspicious access record appeared in the contingency archive.
I read the timeline twice.
Then I carried it to Bennett.
“Shaw removed the original report.””
“That's the strongest interpretation of the records,” she said.
“But we still need to establish who instructed him and whether he acted alone.””
“Have we located him?””
“Yes. He's been cleared for interview.””
“Then let's speak with him.””
Bennett shook her head.
“Not yet. The investigators are preparing the interview. We don't want to contaminate the evidence.””
I nodded.
She was right.
The investigation had already become a maze of reused credentials, forged signatures, and people claiming that someone else had authorized their actions.
The last thing we needed was another assumption.
At 9:00 a.m., Shaw entered the interview room.
He was a compact man in his late forties, with close-cropped hair and a face that revealed almost nothing. His uniform was neat, but he looked tired.
He sat opposite Bennett and the investigators.
I remained at the side of the room as the technical lead.
Bennett explained the purpose of the interview.
“Lieutenant Colonel Shaw, we're examining the removal of the original Project Nightglass report, the use of a dormant authorization channel, and the subsequent attempt to access the contingency-routing archive.””
Shaw nodded.
“I understand.””
“Did you enter the Assistant Secretary's office six weeks ago?””
“Yes.””
“Why?””
“I was assigned to transfer administrative records.””
“Did you copy the original Nightglass report?””
“No.””
The answer came too quickly.
Bennett placed the access timeline on the table.
“The system records show that a file associated with the report was transferred from the workstation during your visit.””
Shaw glanced at the page.
“I didn't know what the file contained.””
“Did you transfer it?””
He looked down.
“Yes.””
“Why did you initially deny it?””
“Because I was told the transfer had been authorized.””
“By whom?””
Shaw hesitated.
“General Vale's office.””
“Who specifically?””
“I was given instructions through an intermediary.””
“Name?””
“Victor Hale.””
Bennett exchanged a glance with the investigator.
“Did you know Hale was a former director of Project Nightglass?””
“Yes.””
“Did you know the project had been closed following a security failure?””
“Yes.””
“Then why did you transfer the report?””
Shaw rubbed his hands together.
“Hale told me the report was needed for a review of the original security weaknesses. He said the current archive might still be vulnerable and that the review had been approved at a senior level.””
“Did you see the approval?””
“No.””
“Did you verify it?””
“No.””
“Why not?””
He swallowed.
“Because I was told not to delay the transfer.””
Bennett's voice remained level.
“Who told you that?””
“General Vale's office.””
“Again, who specifically?””
Shaw looked toward the investigators.
“I never spoke to General Vale directly. I received the instruction through his administrative channel.””
“Did you know Eleanor Ashcroft?””
“Yes.””
“How?””
“She worked with a military family foundation. She had access to several events where senior officers and contractors met.””
“Did she ask you to help with the transfer?””
Shaw's eyes moved toward me.
“Yes.””
The room went still.
Bennett leaned forward.
“What did she ask you to do?””
“She said her son was involved in a legitimate security review and needed the relevant records. She told me the authorization had already been obtained.””
“Did you know Mitchell Ashcroft was being paid by Meridian Strategic Advisory?””
“No.””
“Did you know the review involved the contingency-routing archive?””
“I knew the archive was connected to the historical security review. I didn't know the current operation was involved.””
“Did you provide Eleanor with the original report?””
“No. I transferred it to a storage device under instructions from Hale. I don't know what happened after that.””
Bennett made a note.
“Where is the device now?””
“I don't know.””
“Who had access to it?””
“Hale, as far as I knew.””
“Did you receive payment?””
“No.””
“Did anyone promise you a promotion or other benefit?””
“No.””
Bennett sat back.
“Lieutenant Colonel, the access records show that your credentials were associated with an attempt to export the contingency archive at 2:14 a.m. the night the original report was transferred.””
Shaw shook his head.
“That wasn't me.””
“Can you explain the record?””
“My token was in my office.””
“Was anyone else able to access it?””
He hesitated.
“Yes.””
“Who?””
“My administrative assistant had access to the office.””
“Did she know your PIN?””
“No.””
“Could someone have used your token without your knowledge?””
“Yes.””
“Did you report it missing?””
“No.””
“Why not?””
“Because I didn't know it had been used.””
Bennett looked at the investigator.
“Preserve the token records and interview the assistant. We need to establish who had physical access.””
Then she turned back to Shaw.
“Did you know that the original Nightglass report contained a warning about the dormant authorization channel?””
“No.””
“Did you know that the same channel was used to create the agreement signed under Colonel Ashcroft's name?””
“No.””
“Did you know the payment to Mitchell Ashcroft was connected to the current security breach?””
“No.””
He paused.
Then he looked at me.
“Colonel Merrick, I need you to understand something.””
I said nothing.
“Hale told me the purpose of the transfer was to identify the people responsible for the original Nightglass failure. He said the archive had been left vulnerable and that someone was exploiting the same weaknesses again.””
“Did he tell you who?””
“No.””
“Did he tell you why my name was on the list?””
“No.””
“Then why was my name included?””
Shaw looked down.
“Because you had access to the contingency archive.””
“That doesn't explain why my name was at the top.””
He swallowed.
“Hale said you were the only person who could identify whether the current routing changes were consistent with the original failure.””
I stared at him.
“So someone wanted my help.””
“Yes.””
“Then why did they hide the report?””
“I don't know.””
“Why did they use Mitchell's credentials?””
“I don't know.””
“Why did they send me anonymous messages instead of providing the evidence through the authorized channel?””
Shaw's face tightened.
“I don't know.””
For the first time, I believed he might be telling the truth.
Not because he looked frightened.
Because his answers were limited to what he could actually support.
He had transferred the report.
He had trusted the authorization.
He had failed to verify it.
Those were serious mistakes.
But they did not automatically make him the person who had designed the scheme.
The interview continued for another hour.
Shaw agreed to provide his communications and identify every person who had contacted him about Project Nightglass. He acknowledged that he had been careless with his credentials and that he should have questioned the instruction to transfer the report.
When the interview ended, Bennett walked me into the adjoining office.
“His account is consistent with some of the records,” she said.
“But we're not closing the inquiry.””
“Of course not.””
“We need to find the original report and establish whether Hale was acting alone.””
“And we need to identify who used the dormant authorization channel.””
“Yes.””
I looked through the glass at Shaw.
“He may have been part of the chain without understanding the whole scheme.””
“That's possible.””
“So was Mitchell.””
Bennett looked at me.
“Possibly.””
I nodded.
That was the truth I had been trying to hold onto since the first night.
People could make terrible decisions without understanding the full consequences. They could also use that lack of understanding as an excuse to avoid responsibility.
The investigators would have to determine where Mitchell's choices fell.
I couldn't decide it for them.
At 11:30 a.m., we received the first break.
Victor Hale had agreed to meet with the investigators.
He arrived at 12:15 p.m., carrying a leather briefcase and a folder of documents.
He was in his early sixties, with silver hair and the relaxed confidence of someone accustomed to being the most informed person in a room.
He greeted Bennett politely.
Then he looked at me.
“Colonel Merrick. I've heard a great deal about you.””
“I hope none of it was classified.””
He smiled faintly.
“Only your reputation.””
Bennett began the interview.
Hale admitted directing the transfer of the original Nightglass report. He said he had been hired by Northbridge Risk Partners to review the historical security failure and determine whether the current archive remained vulnerable.
“Who hired Northbridge?”” Bennett asked.
“An intermediary.””
“Name?””
“Dr. Helena Ward.””
“Did Ward authorize you to obtain the original report?””
“She said the authorization had been approved.””
“Did you verify that?””
“No.””
Bennett's expression hardened.
“You were the original project director. You knew the report was restricted.””
“I did.””
“Then why did you remove it?””
“Because I believed the review was legitimate.””
“Why was the review conducted outside the authorized government channel?””
Hale looked down.
“Because the official channel had failed before.””
“That doesn't answer the question.””
“No,” he admitted.
“It doesn't.””
He opened his briefcase and removed a sealed envelope.
“I brought this because I believe it explains the purpose of the review.””
Bennett didn't touch it.
“What is it?””
“The original Nightglass report.””
The room went silent.
Hale placed the envelope on the table.
“The full report, including the missing appendix. I retained a copy after the project closed because I believed the final review had been incomplete.””
“Why didn't you provide it when the current breach was discovered?””
“Because I didn't know there was a current breach until the export attempt was blocked.””
“Then why did you initiate the transfer six weeks ago?””
Hale looked at me.
“Because someone told me the same weakness had appeared again.””
“Who?””
“Dr. Ward.””
“Did she identify the person responsible?””
“No. She said the archive's access controls had been compromised and that a senior official wanted an independent review.””
“Which senior official?””
Hale hesitated.
“Marcus Vale.””
Bennett leaned forward.
“Did you speak with Vale directly?””
“No.””
“Then how do you know he was involved?””
“Ward told me.””
“Did you see written authorization?””
“Yes. An email from his office.””
“The same email that was used to authorize Meridian's review?””
Hale's face changed.
“I didn't know Meridian was involved.””
“Did you know Mitchell Ashcroft was being paid?””
“No.””
“Did you know his signature had been copied onto an agreement?””
“No.””
“Did you know Eleanor Ashcroft was arranging meetings?””
Hale stared at her.
“Yes.””
The answer was quiet.
Bennett waited.
Hale exhaled.
“Eleanor contacted Ward. She said her son was interested in security work and wanted to be considered for a future assignment. Ward suggested that he could assist with the administrative review.””
“Why?””
“Because he was an officer with experience in operational planning.””
“Was the payment intended to buy his cooperation?””
Hale looked down.
“I don't know how Eleanor described it to him. But the payment was intended to compensate him for identifying the people with access to the archive.””
I felt my chest tighten.
“Who wanted the list?”” I asked.
Hale turned toward me.
“Ward.””
“Why?””
“She believed someone inside the archive was responsible for the original Nightglass failure. She wanted to identify everyone who could have accessed the relevant records.””
“Then why did she ask Mitchell to provide the list instead of using the authorized system?””
“Because she didn't trust the authorized system.””
“Did she have evidence that the system was compromised?””
“She believed the original report had been altered.””
“By whom?””
Hale looked at Bennett.
“I don't know.””
Bennett opened the envelope and removed the original report.
She turned to the final appendix.
The first page matched the restored copy.
The second contained the same corrective action plan.
But the third page was different.
It contained a table listing the original access credentials, the accounts that had remained active after the project closed, and the officials who had approved the exceptions.
One name appeared repeatedly.
Marcus Vale.
Not as the person who had initiated the original failure.
As the official who had signed the corrective action reports.
The same official who had certified that the dormant credentials had been revoked.
The same official whose office had later been used to authorize the Meridian review.
I looked at the table.
“Vale signed off on the deactivation.””
“Yes,” Hale said.
“But the credentials remained active.””
“Yes.””
“Did he know?””
Hale rubbed his forehead.
“I don't know.””
Bennett turned the page.
A handwritten note appeared in the margin.
Credentials retained for continuity testing. Authorization pending review.
The note was signed by Marcus Vale.
Dated eighteen months after the project had officially closed.
I stared at it.
The dormant channel hadn't simply been forgotten.
Someone had deliberately kept it available.
The next page contained a list of subsequent access events.
Several had been approved through Vale's office.
Others had been initiated by accounts associated with Northbridge Risk Partners.
The most recent entry was dated six weeks earlier.
The same week Mitchell accepted the payment.
The same week the first shipment was diverted.
The same week Eleanor arranged the meeting.
Bennett looked at Hale.
“Why was this information not included in the final report?””
“Because the appendix was never finalized.””
“Who decided that?””
“Dr. Ward.””
“Did you object?””
“Yes.””
“Did you report the missing appendix?””
“No.””
“Why not?””
Hale looked down.
“Because I thought Ward had authorization to retain it.””
Bennett closed the folder.
“Mr. Hale, you understand that your decision to retain restricted records outside the authorized system may itself be a violation.””
“I understand.””
“Will you provide the full original files, including the metadata and access history?””
“Yes.””
“Will you identify every person who contacted you about the review?””
“Yes.””
Bennett ended the interview.
Hale remained seated for a moment.
Then he looked at me.
“Colonel, I want to say something.””
I waited.
“When Nightglass was closed, I believed the system had been secured. I signed the final technical assessment because I was told the remaining access exceptions were administrative. I didn't verify that they had been removed.””
“You were the project director.””
“I know.””
“You had a responsibility to verify them.””
“I know.””
He looked down at the report.
“I spent two years telling myself that the system was someone else's responsibility. When Ward contacted me, I thought I had a chance to correct the mistake. I didn't realize the review itself had become another way to exploit the system.””
I studied him.
“Then you should tell the investigators everything you know.””
“I will.””
He stood and left.
Bennett carried the original report into the secure archive.
I returned to my desk.
The evidence was beginning to form a coherent picture.
Project Nightglass had identified weaknesses in the access system.
The corrective actions had not been fully completed.
Marcus Vale had certified that the credentials were revoked, but records showed that the dormant channel remained active.
Dr. Ward had retained the missing appendix.
Victor Hale had copied the original report.
Eleanor had arranged for Mitchell to provide the personnel list.
Meridian had paid him.
Someone had used the resulting information to target the contingency archive.
But one question remained.
Who had directed the actual shipment diversions?
The access records showed suspicious activity.
The financial records showed a chain of payments.
The authorization documents showed a pattern of deception.
None of that, by itself, proved who had ordered the diversions.
At 3:42 p.m., Bennett called me into her office.
“We've recovered a second set of records from Northbridge.””
“What's in them?””
“Communications between Ward and an unidentified client. The client appears to have paid for the review.””
“Can we identify the client?””
“Not yet. The records use an internal code.””
She turned the screen toward me.
The code was:
*ECHO-17.*
I had seen it before.
Not in the archive.
Not in the payment records.
In the shipment logs.
It appeared beside the fourth shipment, the one recorded as delivered even though the aircraft had never landed.
I leaned forward.
“That's not an administrative code.””
“What is it?””
“A contingency identifier. It was assigned to a route that should never have been activated.””
Bennett's expression tightened.
“Can you establish who assigned it?””
I opened the route history.
May you like
The identifier had been added to the shipment record after the original manifest was approved.
The change had been authorized by a
