Chapter 13 - THEY WANTED MY NAME, NOT MY PASSWORD
The certificate had expired years earlier.
That did not make it useless.
Historical digital signatures can remain verifiable after certificates expire.
My old Grant Secure certificate was one of two validation anchors used during the modernization project.
The other belonged to an independent government auditor.
If both signatures matched, investigators could establish that certain export logs existed in a particular state years ago.
Reed’s copy contained logs showing unauthorized extraction.
Who performed extraction?
Gavin Cole’s service account.
That was why Gavin wanted the baton.
Could he simply delete evidence?
Not once copies existed.
Could he challenge authenticity?
Yes.
He had.
For over a year.
If he obtained my old private key material or a valid recovery path, he might produce confusing artifacts.
Not perfect forgery if investigators were careful.
But enough to muddy litigation.
Delay.
Raise reasonable questions.
Lucas cared because old exports included his procurement contacts.
Margaret cared because her foundation had received consulting data sourced through Gavin.
Brooks cared because he stayed silent.
Ryan cared because he possessed baton.
Everyone had different exposure.
The network was not one mastermind controlling all.
It was a collection of people aligned by fear.
Margaret became organizer because she understood relationships.
Then the master token plan made sense.
My current secured phone contained access to archived company identity escrow.
Not the old private key itself.
But enough to request recovery review.
Two human approvals would still be needed.
Who were approvers?
My chief technology officer.
And former escrow officer.
One had retired.
Name:
Peter Lawson.
Where did he work now?
Patriot Continuity Foundation as part time cybersecurity adviser.
Of course.
Margaret had recruited one of the people needed for recovery.
She had me on one side.
Lawson on the other.
If they got my authenticated request plus Lawson approval, they could reconstruct certificate material.
Could my CTO stop?
Yes.
Current policy required.
But an older escrow process, still available for legacy recovery, may have been vulnerable.
My company immediately disabled it.
No compromise occurred.
Then Peter Lawson cooperated.
Margaret asked him six months earlier:
“If Lisa loses her phone, could you restore her old certificates?”
He answered generally.
“Yes, with approvals.”
She asked:
“Would she need to be present?”
He said:
“Usually.”
He thought she was asking about executive contingency planning for charity board.
He never approved anything.
Another fragment.
Then Lawson produced an email Margaret sent him:
At gala, Lisa may need help accessing legacy account.
Be available.
So the gala was supposed to be final recovery attempt.
Get me there.
Create network proximity.
Trigger request.
Lawson standing nearby.
Maybe social engineer approval.
I was not going to gala.
Evelyn demanded five thousand partly to secure sponsor access and force a family argument that could get me there.
Maybe Ryan planned:
“Mom is embarrassed. Please come fix it.”
I had done that before.
They knew.
Then the assault ruined it.
The baton struck the person whose identity they needed intact.
Irony.
Then prosecutors? We should not close legal yet. Continue investigation.
Gavin Cole disappeared after the attack.
His home empty.
Car found near Austin airport.
No flight.
Lucas Trent remained through counsel.
Margaret remained free pending investigation.
Ryan and Evelyn faced domestic criminal processes plus separate investigative exposure.
Protective order.
I filed for divorce.
No hesitation.
Ryan sent message through lawyer:
I never wanted you hurt.
I believed him.
That was not enough.
He did not swing baton.
He built the room where his mother could.
Then Bennett brought me one final technical result.
The old export logs were authentic.
My historical public certificate verified one copy.
No need to recover private key.
Why had everyone believed they needed my master token?
Because Gavin misunderstood cryptography?
Partly.
Or someone lied to him.
Then investigation found instruction from Margaret to Gavin:
Lisa recovery is not for authentication. That is the cover.
I stared.
“Then what was it for?”
Next line:
Need access to Archive C.
Archive C.
My company had no Archive C.
I asked my CTO.
He went silent.
“What?”
“Not current company.”
“What is it?”
He pulled an acquisition file.
Five years earlier, Grant Secure bought a tiny cybersecurity firm called Covenant Trace.
Its founder died.
Most systems retired.
One archive transferred under restricted legal hold.
Internal label:
C ARCHIVE.
What did it contain?
Historical defense procurement breach reports.
Including one investigation from twelve years earlier.
Name:
PATRIOT CONTINUITY.
My blood went cold.
Margaret’s foundation name existed inside an archived cyber investigation years before she ever met Ryan’s debt problem.
May you like
This was older than the baton.
Continue to the next part: The real target may be a dormant cyber archive Lisa inherited years ago containing an investigation named after Margaret Sloan’s foundation.
