April Snow Chapter 20
Posted on Mon 20 April 2026 in Dead Signal
Chapter 20: After the Signal
The CYT Systems platform outage was reported at 10:47 AM on April 19th in a security community Slack channel Will had never been in but whose archives he could pull. The first post: anyone else seeing ChasePath go dark? The second, three minutes later: multiple clients reporting simultaneous outage, this is not a maintenance window. By noon, seventeen of the forty-seven affected organizations had opened tickets on the CYT support portal, which had also gone down. By 2 PM, the CISO of a mid-size financial services firm had posted on LinkedIn that their primary threat detection platform had failed without warning during business hours and that CYT had not yet responded to escalation.
By 4 PM, Elsie Sloane had posted a statement. CYT Systems is aware of a service disruption affecting ChasePath clients. Our engineering team identified an internal infrastructure issue at approximately 10:45 AM and is working on full service restoration. We understand the severity of this disruption for our clients and are in direct contact with each affected organization. We are committed to transparency as we work through the root cause analysis.
Will read it at 4:17 PM, in the Volvo, in his own driveway, before he went inside. It was exactly the statement she would write. Every sentence was accurate in a way that explained nothing.
He sat in the car for three more minutes, reading it twice more. Then he put his phone in his pocket and went in.
The sealed briefing with Ray had not been opened.
Will had called Ray at 11:22 AM from the Demonbreun parking structure, still two levels down from the street. The call lasted forty seconds. He said: Platform's down. Don't open the briefing. I'll call you tonight. Ray said: Okay. Tonight. Will ended the call and started the engine.
The call that evening lasted an hour and twenty-two minutes. This was longer than any previous conversation they had conducted by telephone in the thirty-five years they had known each other, including the night Will's mother died, including the night Ray's first marriage ended, including the operational consultations of the past month. Neither of them named this fact. It was simply a different-length conversation. Some conversations were like that.
Will walked Ray through the framework. He started at the beginning and went through it in order, which was not how he had come to understand it — he had understood it in the investigator's order, one thread at a time — but which was the correct order for Ray, who needed to build the picture from its foundations.
CYT Systems. Chase Your Tail. Eleven years old. The platform is real — the threat detection works, the behavioral anomaly modeling works, the clients are receiving a genuine service. The data source is what it is. The underground installation below County Road 14: original 2012 telecom vault, modified 2015 by ES Infrastructure Consulting LLC, managing member Elspeth Sloane. Incorporated for the job, dissolved when the job was done. CYT Systems founded January 2016. The platform was built to run on the installation. Not discovered and leveraged. Deliberately designed.
Ray said: "You're describing behavioral training data collected from a population that can't consent and can't leave."
Will said: "Yes."
Ray said: "And the population source is the underground installation."
"Yes."
A pause. Ray was not taking in the supernatural dimension of this — Will was not giving it to him in those terms — but the legal and investigative dimension was the dimension that mattered for what Ray could do with it.
Ray said: "Dana Osei."
"The IP address in the facility's network inventory — IP .47, first-active October 14, 2024. She was a CYT client who identified the mechanism and drove down County Road 14. She died in a single-vehicle incident with the same anomalous language as the crash in April. The cold case file you brought me matches the Elspeth Sloane pattern."
"Who else."
"Ten others confirmed in the facility. The installation is twelve years old. The capture infrastructure predates Sloane — she found it in 2014 and improved it. The oldest sources have been in there since before her modifications. I can't give you identities on any of them except Osei. The rest would require matching case files by signature."
Ray said: "How many closed-as-accidental single-vehicle anomalous incidents on County Road 14 in the last twelve years do you think I'm going to find."
Will said: "I don't know. More than two."
"Yeah." Ray paused. "The platform failure."
"The behavioral cycling infrastructure was corrupted at the source. From inside the system. The corruption was complete. CYT's ChasePath platform is non-functional. The underlying data architecture is compromised."
Another pause. Will could hear Ray doing what he always did when he needed to think: the quality of silence that was not blankness but active thought. He had been doing it since third grade.
Ray said: "The clients whose security posture depended on ChasePath."
"I know."
"Those are real organizations with real vulnerabilities."
"I know. I spent three weeks knowing that."
Ray was quiet.
Will said: "The Meridian final report is going to document the Critical finding and recommend immediate decommission of the undocumented west-segment server. It will recommend against ChasePath reinstallation in any configuration pending a full data-source audit. That recommendation is going to propagate through the security community once it goes to Ostrander. CYT's clients will move to other platforms. It will take months."
"And in those months."
"Their security teams know their own networks. They built their posture around ChasePath, which means they don't rely on it as the only layer. They'll increase manual monitoring. They'll bring in other tools. They'll be more exposed than they were, and less exposed than they'd be with no security at all. It's not clean."
"No."
"It's what it is."
Ray said: "The documentation."
"At the offsite archive. Photographs, site documentation, facility layout, the network inventory with IP .47, the permit chain for ES Infrastructure. The sealed briefing has the overview and the Sloane permit connection." A pause. "It's not prosecution-ready yet. She told me so herself. She wasn't wrong."
"She told you."
"At the meeting." A beat. "She's not going to run. She has no reason to. Without evidence of what the installation actually is — not just that it exists, but what it contains — the documentation is a record of an unusual underground server facility and a complicated corporate structure. Circumstantially rich. Not actionable yet."
Ray said: "But eventually."
"Eventually."
"Then I have a sealed briefing I'm going to put in a specific drawer," Ray said, "and a cold case I'm going to formally reopen on a theory I can articulate without the parts you can't give me, and a corporate filing search I'm going to run on ES Infrastructure and every entity Elspeth Sloane has touched. And I'm going to find a pattern in the County Road 14 cold files that is going to look like exactly what it is."
Will said: "Yeah."
"How long."
"I don't know. Six months. A year. Longer if she moves fast."
Ray said: "The meeting. She wasn't running when you left."
"No."
"She's going to rebuild."
"Or pivot. She knows the cycling infrastructure is compromised. If she tries to rebuild ChasePath on the same mechanism, she knows the mechanism has been breached. If she abandons the platform entirely, she's a consulting firm with no competitive advantage. She has to find something to do with the installation. The installation is still there."
Will said it again, more quietly: "The installation is still there."
Ray was quiet.
Will did not say: and whatever is still in there is still in there. He did not say: the loops are gone and the equipment is idle but the facility is powered and the most degraded sources didn't have anywhere to go when the clock stopped. He said: "Whoever found that site in 2014 because she was specifically looking for a site with that property — she still knows where it is."
Ray said: "Who else knows."
"You. Me." A pause. "Nobody else who can do anything with it."
He could hear Ray sitting with this sentence.
He said: "The person who was with me at the crash site. That night. I'm not going to explain that part."
Ray said: "I've seen you talking in parking lots."
"I know."
"And in your car."
"I know."
"That's all I have to say about that."
Will said: "Thank you, Ray."
"I'll be in touch," Ray said. "Take care of your house."
The call ended. Will sat at his desk with the phone on the surface in front of him and looked at it for a moment. Then he looked at George, who had been positioned behind the chair since the call started — thirty-three pounds of still Maine Coon, back to the wall, eyes on the room. Keeper-of-the-Small, in the position he occupied when something needed occupying.
Will said: "Okay."
George blinked. Then he went to eat.
Two days later, a second statement appeared on the CYT Systems website. The platform failure was attributed to an infrastructure configuration error introduced during a routine maintenance cycle. The investigation was complete. Service restoration was ongoing. The company was evaluating enhancements to its internal review processes to prevent recurrence.
No mention of external interference. No mention of Will Hardin. No mention of Elspeth Sloane, or of ES Infrastructure Consulting, LLC, or of the underground installation below County Road 14.
Will read it the way he had read the first one. Then he put his phone down and finished his coffee.
Angie said, from near the desk: "She's pivoting."
"I know."
"The installation is still there. I can feel it from here." She paused. "The loops are gone. But whatever was in there — the most degraded ones — they're still there. Not looping. Not coherent enough to loop. Just..." She found the word. "Static. Like the neighborhood fragments, except they're inside hardware."
He looked at his coffee cup.
"They were inside the loops for years," she said. "When the loops stopped, they didn't have anywhere to go. They didn't know how to go. Whatever they were before the loop is—" She stopped. "I don't know if there's enough left. But they're still in there."
He said: "Okay."
"That's not an answer."
He looked up. "No," he said. "It's not." He set the cup down. "It means I'm noting it and I'm not going to be irresponsible about it and when I have something more than noting it I'll say so."
She looked at him for a moment. Then: "Okay."
Cat came through from the kitchen, crossed the main room without apparent intention, and settled on the windowsill. He oriented himself toward something outside that was not visible to Will. This was how he usually oriented himself.
Will went back to his desk.
The Meridian final report was submitted on April 24th.
It documented: visitor credential provisioning without identity verification (Low–Informational); legacy API endpoint on customer portal (Medium); outdated SMB dialects on four machines (Low); VLAN provisioning error, corrected on request (Low). And: an undocumented server in the west IT closet with no asset tag and no Meridian inventory record, actively connected to the west segment, generating one-directional cyclic traffic on a non-standard interval. Critical. Remediation: immediate physical decommission pending hardware provenance audit. Full review of west-segment network isolation. ChasePath platform: engagement findings indicate third-party behavioral data integration of unclear provenance; platform should not be reinstated in any configuration pending independent audit of data collection practices.
That last paragraph was not something he could make stick in any proceeding. It was the truest thing in the report. He submitted it anyway.
Harlan Ostrander called him an hour later. "This is a significant finding."
Will said: "Yes."
"I'll need to escalate this."
"Yes."
"The recommendation about ChasePath."
"Page twelve. It stands."
A pause. Then: "Good work, Hardin."
Will thanked him and ended the call.
He named the folder on April 26th.
Late morning, coffee going cold at the desk, George behind the chair in the specific position he occupied when he had assessed the duration as long and had settled in accordingly. Cat on the kitchen counter. Angie near the laptop, in the particular half-present orientation she had when she was listening to something in the network below the neighborhood infrastructure.
Will looked at the desktop. The Meridian/CYT folder was filed, complete, final. He looked at it for a moment. Then he opened a new folder.
He typed: Hardin Investigations.
He didn't make a big deal of it. He moved the CYT case subfolder into it. He opened a new document inside and wrote: Active cases. He left it blank for a moment, cursor blinking. Then he opened another document and wrote: County Road 14 victims — full cold case count. He went to work.
He was twenty minutes into the County Road 14 research when Angie said: "The infrastructure."
"I know."
"It's not going away because the loops stopped."
"I know."
"She can rebuild if she finds another mechanism. Or use what's already in there — the static. Try to stabilize them, reverse what the loop collapse did." A pause. "They're not useful as a behavioral data source at this point — there's not enough variation. But they're still people. Or what's left of people. And she knows where they are."
Will looked at the folder. Hardin Investigations. He looked at the blank Active cases document.
She said: "There are still people in there."
He said: "I know." He looked at the screen. "We'll get them."
From the kitchen: Cat yelled.
Will looked up. Angie looked in that direction. George, behind the chair, shifted his ears but did not move.
Will said: "What."
Another yell from the kitchen, with the particular register Cat used when something needed handling and was not being handled.
Will got up.
The thing in the kitchen was George's water bowl, which had been empty for some time and which Cat had decided was now a matter requiring escalation. Will filled it. George appeared from the main room and drank with the unhurried thoroughness of a cat who had been waiting for this but had made no comment about it.
Cat returned to the counter. He did not look at Will.
Will said: "You're right. It was empty."
Cat did not acknowledge this assessment. He had made his position clear; his position had been addressed; he had moved on. He was already orienting himself toward the window again. The thing outside that wasn't visible to Will.
Angie was in the kitchen doorway, looking at George.
She said: "He's going to do that every day forever."
Will said: "Yes."
George finished drinking. He crossed the kitchen floor and went back to his position behind Will's chair — the position he had occupied during the Ray call, during the CYT research, during the morning after the intruder, during whatever came next. Back to the wall. Facing the room.
Will went back to his desk.
He looked at the screen: County Road 14 victims — full cold case count. He looked at the folder. He looked at the blinking cursor in the blank Active cases document. He reached for his coffee, found it cold, drank it anyway.
Through the window, Nashville went about a late-April morning. The installation below County Road 14 was still powered. Whatever was left in it hadn't gone anywhere. CYT still had it.
Will put the coffee cup down.
He had work to do.