Chapter 12 - NATHAN BROOKS
Nathan Brooks finally changed his story.
He had known about the baton.
More than he admitted.
Fourteen months earlier, Reed told him privately:
“I copied the export logs.”
Brooks warned:
“Do not keep them on the network.”
Reed placed module in baton.
Brooks knew.
Then Brooks discovered Gavin copying a vendor contact list.
One name:
Lisa Grant.
Brooks asked why.
Gavin said:
“Routine outreach.”
Brooks did not believe.
He opened device later using Reed’s admin session.
Added note:
LISA IS CLEAN.
Why?
Because Gavin had already created LGRANT profile.
Brooks wanted future investigator to know the file did not prove my participation.
Why not report Gavin?
He did.
To project security.
Who handled report?
Aaron Mercer, a civilian compliance officer.
He closed it as insufficient.
Where is Mercer now?
Patriot Continuity Foundation.
Another Margaret employee.
Pattern.
People connected to unresolved project concerns later landed inside same nonprofit ecosystem.
Did Margaret recruit them because they were conspirators?
Or because she recruited retired military logistics professionals?
Could be both.
Then Brooks said Margaret approached him after he left Army.
Offered job.
He accepted.
At first legitimate.
Foundation helped veterans enter contracting careers.
Then she asked him to review old procurement contacts.
He refused some requests.
Kept job anyway.
Why?
Money.
Healthcare.
Comfort.
Again, people rarely become compromised in one moment.
Then Brooks revealed the female voice.
“It is Margaret.”
He had heard her use same phrase:
“The wife is too clean.”
He remembered.
When?
Meeting with Gavin and Lucas eleven months earlier.
Brooks attended first ten minutes.
Margaret asked whether Lisa could be recruited legitimately.
Lucas said no.
Margaret said:
“Then do not contaminate her until we know the full token.”
He left.
Why not report?
He thought they were discussing sales outreach and access authorization.
Later he realized.
Did nothing.
Cowardice.
Then why hide note?
Guilt.
He knew my name was being inserted into evidence.
He wanted a breadcrumb.
Not enough courage to stop.
Enough to leave three words.
Then the biggest revelation.
Brooks said Sergeant Major Reed did not know Gavin planned to steal baton.
But someone else did.
Margaret.
How?
Brooks overheard Gavin:
“Mother says Reed takes it home tomorrow. Tonight is last chance.”
Mother.
Could mean Evelyn?
No.
They called Margaret “Mother” inside some messages?
Maybe not. Better "Mrs. Sloan". Let's avoid confusion. Brooks said Gavin: "Sloan says Reed takes it home tomorrow." Clear.
If Margaret knew theft timing, she was involved from beginning.
Her attorney denied.
Then forensic review of Margaret’s phone backup found deleted calendar:
D. REED PACKAGE.
Date baton disappeared.
Participant:
G.C.
L.T.
N.B.? Brooks said he wasn't there? Calendar maybe "NB?" no.
Location:
Her home.
Time:
10:30 p.m.
Baton disappeared around 8:40.
Gavin went to Margaret’s home afterward.
Cell location supported.
Ryan received baton next morning.
So likely chain:
Gavin steals.
Visits Margaret/Lucas.
Adds or reviews files.
Hands baton to Ryan.
That places Margaret much closer.
Then why put baton in Ryan’s home instead of destroy?
Because it was leverage and storage.
They needed original data.
Also could frame Ryan and me.
Multi use.
Then my secured phone audit revealed full damage.
The illegal access did not alter any assessments.
Good.
But it downloaded an audit-history map showing where evidence was stored.
Lucas wanted the master token to access historical versions.
He failed.
Then Redwood found one competitor bid leak had occurred through different source.
Not me.
Lucas already had another access route.
That meant I was not essential.
Why risk family operation to target me?
Because of something else.
The baton’s SUPPLIER_ACCESS file contained old export.
One record:
Project HAWKEYE.
Vendor cyber verifier:
Grant Secure Systems.
Data field:
Independent integrity key holder, Lisa Grant.
I had been designated years earlier as one of two independent validators for a legacy procurement audit archive.
I barely remembered.
It was a one year subcontract.
The key could verify whether old export logs were altered.
That was what they wanted.
Not only current bid information.
My cryptographic identity could authenticate the original baton data.
If I verified logs, Reed’s evidence became stronger.
If they stole my key, they might attempt to create a false verification trail.
Now I understood.
My value was not just access.
May you like
It was credibility.
Continue to the next part: Lisa discovers her old cryptographic certificate could authenticate whether the original procurement logs hidden in the baton were genuine.
