The data center on the thirty-first floor of Aldren Tower had been closed for six hours by the time Nolan arrived.

He stood outside the secondary access door and looked through the glass panel before he opened it. This was not caution. It was method.

The room beyond was dim -- emergency lighting only, a blue-white wash over rows of server racks that hummed at a frequency just below the threshold of discomfort. Nolan read the room the way he always read a room: surfaces first, then vectors of movement, then the story those two things told together.

The floor was polished concrete. Good for retention. He could see four distinct paths crossing the space -- maintenance rounds from the last eight hours, degrading at different rates depending on when they had been made. Two were nearly gone, pale smears of amber at the margins of his vision, burned down to almost nothing by time and the building's aggressive ventilation. One was perhaps three hours old, a clear amber line from the main door to the far server cluster and back, the round still bright enough to show him where the technician had paused at each rack. The fourth was different.

The fourth was seventeen minutes old.

Nolan opened the door.

The cold came for him immediately -- always did in data centers. Server farms ran cold by design, and Aldren Tower's infrastructure team kept this floor at fifteen degrees Celsius year-round. He had worn the base layer with the heating elements already running, the cardigan over that, the coat over everything. His gloves were in his coat pocket. He would need them within the next ten minutes. He always needed them sooner than he planned.

He followed the fourth path.

It moved differently from the maintenance rounds. The rounds were purposeful -- back-and-forth, efficient, the trace of someone who had walked this floor a hundred times and did not think about it. The fourth path wandered. It paused at three different server racks in the eastern row, each stop long enough to suggest uncertainty. It doubled back once near the cooling unit on the west wall, a hesitation or a second thought, before continuing to the north side of the room.

Someone who did not know this room had been in this room.

The trace ended at the emergency access door on the north wall -- a secondary exit that connected to the building's service stairwell rather than the main elevator bank. The door was closed. It appeared undisturbed. But on the push bar, at a height consistent with someone standing five-foot-ten and reaching with their left hand, there was a handprint.

Eleven minutes old, maybe twelve. The heat at the center was still clear and bright. The edges were already softening, the amber bleeding outward into the cool metal of the bar.

Nolan did not touch the bar. He photographed it with his phone -- ambient light mode, no flash, the same way he documented everything before he touched anything. He noted the time. Then he studied the pressure distribution in the print. The heel of the palm showed the highest concentration of heat, which meant the person had pushed hard, quickly, with weight behind the movement. They had been in a hurry when they left. They had not been in a hurry when they arrived -- the wandering pattern on the way in said otherwise.

Whatever had happened between arrival and departure had made them want to be somewhere else.

He followed the path backward from the bar, retracing the direction of travel to find where it originated. It led him to a maintenance terminal set into the wall near the cooling unit -- a hardwired workstation that existed for on-site system management, used by the data center's technical staff for hands-on diagnostics that could not be done remotely. The terminal had been used. The keyboard held a heat map of recent keystrokes: a login sequence, several command entries he could not decode from the pattern alone, and then at the very end, a compressed series of rapid inputs that had the shape of a deletion sequence. Short bursts, no pauses, the pattern of someone who had rehearsed the exact keystrokes in advance.

The session had lasted approximately four minutes. Four minutes was not enough time to extract meaningful data from this class of system. Four minutes was enough time to delete a specific file if you already knew where it lived and what you needed to type.

Nolan stepped back and looked at the full picture.

The path from the service door to the terminal was the most direct route between those two points, no detours. The person had come in through the secondary entrance -- bypassing the main access log -- gone straight to the terminal, done what they came to do, and left through the same door they had used to arrive. The wandering had been on the way in. On the way out, the path was a clean straight line.

Someone had come here nervous and left in a hurry.

He pulled his gloves on and got to work.

The terminal's on-screen log had been cleared. He expected this -- clearing the display was the first thing an unsophisticated intruder would try, and everything about this approach suggested unsophisticated. But clearing the screen did not touch the system log. He navigated to the local backup partition and found the session record intact: every command entered during the four-minute window, timestamped, clean. The deletion target was listed plainly in the command history.

MAINT-B4-2019-03-STRUCT-REVIEW.pdf.

A maintenance structural review. Sub-basement level four. March 2019.

Nolan photographed the screen without moving his expression. He did not speculate yet. A maintenance document from 2019 in a data center backup archive was not inherently concerning -- these systems captured records from dozens of building systems automatically, and the archive contained years of routine documentation. It was possible this had been a misguided attempt at routine file cleanup executed in a spectacularly wrong way at a spectacularly wrong hour.

It was possible. He would verify before he wrote a word.

He moved to the badge access panel near the main door and removed the physical log card from the reader housing. Badge systems maintained a secondary physical record as a failsafe, kept local and separate from the digital log that a central terminal could modify. The card for tonight showed one entry: his own arrival, eleven minutes prior, authorized credentials.

No other badge entry.

Which meant the intruder had not used a registered badge. They had entered through the service stairwell by another method -- a cloned signal, a spoofed credential, or a legacy key override that the system did not log. That last option was the most significant because it implied physical access to a key set. The building maintained a master physical key system for emergency access, managed by the operations division. Getting into a service stairwell with one of those keys required either authorization or proximity to someone who had it.

He pulled the stairwell access controller log from the panel's secondary port. This controller ran on a separate local circuit and was not accessible from the building's central management network. The log showed a door event on the north wall emergency exit at eleven forty-seven PM -- two minutes after the terminal session had ended. Someone had opened that door from the inside.

No corresponding entry event from the stairwell side. The door had not been opened from outside using the same key. Which meant they had either entered through a different access point on the stairwell level -- there were three others in this building -- or they had been waiting inside the stairwell long enough that the door sensor had reset between their entry and their use of the exit.

He photographed the controller log. He cross-referenced all four timestamps in his notes: terminal session start, terminal session end, emergency door exit event, his own arrival. The sequence held. The picture it made was specific enough to report.

He sat at the corner workstation -- the one farthest from the server heat, where the thermal noise in his visual field was lowest and the space felt closest to empty -- and wrote the report.

Every sentence had a source. The terminal session record for the deletion attempt. The physical badge log showing no registered entry. The stairwell controller log showing the exit event. The timestamped photograph of the handprint on the push bar. He cited each one in turn.

The breach had occurred at approximately eleven forty-three PM. An individual had entered the facility via the service stairwell using a method that bypassed the standard badge logging system, consistent with physical key override access. They had accessed a maintenance terminal and entered a command sequence targeting a specific archived document for deletion: MAINT-B4-2019-03-STRUCT-REVIEW.pdf, a structural review file associated with sub-basement level four of the Avenport Central Complex underground network, archived March 2019. The deletion attempt had failed. The on-screen log had been manually cleared, but the local backup partition retained the full command history, and the target file remained intact in the backup server archive because the deletion command had been executed without the elevated permission credentials required to write to that partition.

The person had not known about the backup partition's separate permission structure. Or they had not known they needed different credentials to reach it.

Either way, the file was still there.

Nolan flagged it for preservation and added a note to retrieve it through proper channels in the morning. He read the report twice, adjusted the phrasing in two places, and sent it to the security team lead and the facility manager.

Then he sat for a moment longer and looked at the room.

The fourth path was almost gone. Another two minutes and there would be nothing left of it -- no record of the person who had walked this floor an hour ago, no trace of where they had stood or how long they had hesitated or how quickly they had moved when they left. That was what the photographs were for. That was what the logs were for. The evidence that would still exist next week, next year, in whatever proceeding this eventually produced.

He stood and moved toward the door.

His smartwatch vibrated against his wrist. He glanced at the display.

34.9 degrees Celsius.

He had stayed too long. The data center's environmental systems had been working on him steadily, and his base layer had been compensating adequately -- just barely adequately. He noted the number with the attention it deserved and did not give it more than that.

The lobby security officer nodded at him on the way out.

Outside, the air was cold and wet in the specific way Avenport managed in October, which was different from the engineered cold of the data center in the same way that the city itself was different from its buildings. The streets held the aftermath of rain -- standing water in the gutters, steam rising from the ventilation grates, the blue-gray shimmer of office tower glass reflecting traffic lights and nothing else. He stood on the sidewalk and activated the second heating pack from his inside pocket, holding it in both hands while his core temperature worked its way back toward something sustainable.

He was good at this part. The management and the waiting.

He thought about the file while he waited.

MAINT-B4-2019-03-STRUCT-REVIEW. Sub-basement four, structural review, March 2019. The sub-basement numbering system with the B designation was specific to the Avenport Central Complex network -- the interconnected underground infrastructure that ran beneath the financial district's primary cluster. Aldren Tower used standard basement levels. Whoever had targeted this file had not come for anything in this building specifically. They had come because this data center's backup system happened to hold a copy of something from somewhere else.

He walked toward the subway station with his hands wrapped around the heating pack. Steam rose from every grate he passed.

He thought: someone with operations-level physical key access had entered a secured data center at eleven forty-three in the evening and attempted to delete a single archived document. They had chosen this method -- physical, manual, risky -- which suggested they either did not have the digital access to reach the file remotely, or they had reason to avoid leaving a digital trail. They had made an error that someone with better information-systems knowledge would not have made.

The combination was specific. Physical access, digital inexperience. Infrastructure background, not information-technology background.

On the train, he opened the project file for Avenport Central Complex on his tablet and confirmed what he half-remembered from this afternoon. The 2017 to 2019 infrastructure upgrade had used a self-healing concrete compound in select foundation sections of the underground network, including sub-basement four.

The product designation was Ceres-9.

He looked at the name. The train moved through the dark tunnel beneath the city and the windows showed him only his own reflection, pale and still against the black.

In the morning he would read the file.

He would find out what a structural review of sub-basement four had concluded in March of 2019, and why someone had decided tonight -- years later, with a physical key and a maintenance terminal and a deletion command they did not have the credentials to complete -- that the right response to the document's continued existence was to make it go away.

The heating pack had stabilized him by the time he reached his stop. 35.4 degrees. He filed this under acceptable.

He walked home through streets that the rain had washed nearly clean. Near his building, on the glass of the corner shop at shoulder height, there was a palm print -- someone who had leaned there to read their phone in the last fifteen minutes. He noted it and kept walking.

He noted things and kept walking. That was most of it, really. The noting and the keeping going and the careful work of turning what he saw into something that would hold up in the light of day.

He went inside and set three alarms for the morning and was asleep within six minutes.

He was good at sleeping too. When you spent your days cataloguing everything, you learned to turn it off cleanly at the end.

Most days.

The dream, when it came, was the usual one: not the hospital, not the fever, not the six days he could not fully account for. Just a room. Just surfaces. Just the amber light of everything anyone had ever touched, layered and overlapping until the room itself was unreadable, until he could not find the floor for the traces of everyone who had walked it.

He woke at 6 AM to the first alarm, 35.8 degrees, the apartment at exactly the temperature he had set it to. The heating elements in the mattress pad had done their job. The city outside the window was still dark and wet. A new day in Avenport, which meant rain on the forecast and twelve hours of cold surfaces and other people's thermal histories writing themselves across everything he looked at.

He got up, made coffee, and began to think about sub-basement four.

The project file said that the Central Complex underground network ran beneath seven city blocks in the financial district, connecting the foundations of fourteen major buildings through a shared infrastructure layer. The network included the subway integration points, the district cooling and heating trunk lines, the fiber optic backbone for the financial district's communications infrastructure, and the original 1970s load-transfer foundation system that had been built to allow the towers above to share structural loads across the network rather than carrying them independently.

That last part was the relevant part.

A load-transfer foundation system was only as strong as its weakest member. If a component in the underground network began to fail, the load it had been carrying did not disappear -- it redistributed. To adjacent components. To columns and beams that had been designed for their own loads, not for the addition of someone else's.

He read this and drank his coffee and thought about a structural review from March 2019 that someone had decided this week to erase.

He thought about Ceres-9.

He thought about the fact that the file was still in the backup archive, intact, waiting for him to retrieve it through the correct channels on the correct morning.

Then he got dressed -- base layer first, then the cardigan, then the coat -- and went to do exactly that.

The city was beginning to wake around him as he walked, trails of heat rising from every person he passed, layering themselves on every surface they touched. A man who had leaned against a bus shelter wall to check his watch. A woman who had gripped a lamp post while adjusting her shoe. Two children who had run their hands along a fence for an entire block, leaving a bright continuous line at a height that made Nolan think of how recently someone had been small enough to find that satisfying.

He read all of it the way he read everything: automatically, at the edge of his attention, the way a musician hears street noise as rhythm.

He turned his collar up against the rain and walked toward the Central Complex.

There was a structural review waiting for him there, and a name written across the project roster that he had looked at once the night before and then looked away from, the way you looked away from something you were not ready to examine yet.

Leah Merrick.

He had time to think about one thing at a time. He was good at that too.

The walk to the Central Complex took twenty minutes at his pace, which was not a slow pace but was not a rushed one either. Rushing spent heat. Heat was a resource he managed the way other people managed money -- with attention to what was coming in, what was going out, and what the balance looked like at the end of the day.

At the main security desk he signed in with the morning officer and collected his temporary contractor badge. He had a permanent access credential on order -- the project was large enough that a visitor pass for every entry would create its own documentation problem -- but for now he signed his name in the physical log and noted the time and took the badge lanyard without being asked twice.

The backup archive access took forty minutes to arrange through the correct channels. He filled out the formal request, cited the incident report from the night before, and waited while the data center's security coordinator reviewed the chain of custody documentation and confirmed his authorization level. This was the part that other auditors found frustrating: the waiting, the forms, the deliberate slowness of institutional process.

Nolan did not find it frustrating. The deliberate slowness of institutional process was what made his documentation bulletproof. Every step he took through official channels was a step that could be verified independently by anyone who needed to verify it later. If this ever went somewhere larger than a security incident report -- and he was beginning to think it might -- he wanted every piece of his process to be clean enough to survive any scrutiny that followed.

The file arrived in his secure review queue at 8:47 AM.

He opened it.

STRUCTURAL ASSESSMENT REPORT -- AVENPORT CENTRAL COMPLEX UNDERGROUND NETWORK, ZONE B4. Prepared by the engineering firm Calloway and Strand on behalf of the Central Complex Operations Division. Dated March 14, 2019. Marked: INTERNAL REVIEW -- NOT FOR EXTERNAL DISTRIBUTION.

He read it carefully.

By the time he finished, the rain outside the window had shifted from intermittent to steady, and his coffee had gone cold, and he understood why someone had wanted this document to disappear.

Not because it was damning on its face. The language was careful, the conclusions hedged in the way engineering reports tended to hedge when the data was ambiguous. But what the data said, read plainly, was this: in the areas of sub-basement four where Ceres-9 had been applied between 2017 and 2019, the self-healing mechanism had performed as designed at the surface level. Visible cracks had sealed. The material had behaved exactly as its specification promised.

But the internal stress readings -- taken at three monitoring points embedded in the concrete during the original installation -- told a different story. At two of the three monitoring points, the internal pressure had continued to build after the surface cracks had sealed. The sealing mechanism had worked. The underlying cause of the cracking had not been resolved.

The report noted this as a finding requiring follow-up monitoring. It recommended quarterly sensor checks at the affected zones and a reassessment within six months. It noted that the risk level was currently assessed as low, with the caveat that continued low-temperature cycling -- the freeze-thaw stress of Avenport winters -- could accelerate the internal pressure buildup over time.

The report had been filed in March 2019.

Nolan checked the Central Complex maintenance records for sub-basement four from March 2019 through the present.

There were no quarterly sensor check records. There was no six-month reassessment. There was no documentation of any follow-up action related to the findings in this report.

There was, instead, a series of minor maintenance entries -- routine notations in the log, filed by the operations team -- that mentioned small repairs to concrete surface areas in B4 over the past four years. No detail. No photographs. No connection to any monitoring program.

He sat with this for a long time.

Then he opened a new document and began to write.

This report would be longer than last night's. It would cite the structural assessment, the maintenance log gaps, the missing follow-up records, and the security breach attempt that had targeted the document in the first place. It would cite every source. It would make every connection explicit rather than implied.

It would not speculate beyond what the evidence supported.

But what the evidence supported, read plainly, was the beginning of something he needed to understand better before he could name it fully.

He added one more item to his morning task list, below the report: request access to the current sensor readings from the B4 monitoring points, if the monitoring points still existed and were still operational.

He wanted to know what they said now.