Chapter 24: After the Signal

The CYT Systems platform outage was reported at 10:53 AM on May 29th in a security community Slack channel Will had never been in but whose archives he could pull. The first post: anyone else seeing ChasePath go dark? The second, three minutes later: multiple clients reporting simultaneous outage, this is not a maintenance window. The third, at 11:04, was the one Will read four times: we're fine? dashboard's green here.

By noon it was clear to the channel that whatever had happened had happened to some of them and not to others. They spent the afternoon trying to work out what the affected organizations had in common — sector, region, contract tier, agent version — and did not get it, because the thing they had in common was that they had not yet been moved. Sixteen organizations opened tickets on the CYT support portal. By 2 PM the CISO of a mid-size financial services firm had posted on LinkedIn that their primary threat detection platform had failed without warning during business hours and that CYT had not yet responded to escalation.

Thirty-one other organizations noticed nothing at all.

By 4 PM, Elsie Sloane had posted a statement. CYT Systems is aware of a service disruption affecting a subset of ChasePath clients. Our engineering team identified an internal infrastructure issue at approximately 10:45 AM and is working on full service restoration. We understand the severity of this disruption for our clients and are in direct contact with each affected organization. We are committed to transparency as we work through the root cause analysis.

Will read it at 4:17 PM, in the Volvo, in his own driveway, having been out of the house for an hour buying batteries and a headlamp and a pair of knee pads. It was exactly the statement she would write. Every sentence was accurate in a way that explained nothing.

He sat in the car for three more minutes, reading it twice more. Then he put his phone in his pocket and went in.

---

The sealed briefing with Ray had not been opened.

Will had called Ray at 11:06, from the Volvo, stopped at a light on his way across town. The call lasted twenty seconds. He said: Platform's down. Don't open the briefing. I'll call you tomorrow. Ray said: Okay. Tomorrow. Will ended the call and started the engine.

The call on Saturday evening lasted an hour and twenty-two minutes. This was longer than any previous conversation they had conducted by telephone in the thirty-five years they had known each other, including the night Will's mother died, including the night Ray's first marriage ended, including the operational consultations of the past month. Neither of them named this fact. It was simply a different-length conversation. Some conversations were like that.

Will walked Ray through the framework. He started at the beginning and went through it in order, which was not how he had come to understand it — he had understood it in the investigator's order, one thread at a time — but which was the correct order for Ray, who needed to build the picture from its foundations.

CYT Systems. Cover Your Tail. Ten years old. The platform is real — the threat detection works, the behavioral anomaly modeling works, the clients are receiving a genuine service. The data source is what it is. The underground installation below County Road 14: original 2012 telecom vault, modified 2015 by ES Infrastructure Consulting LLC, managing member Elspeth Sloane. Incorporated for the job, dissolved when the job was done. CYT Systems founded January 2016. The platform was built to run on the installation. Not discovered and leveraged. Deliberately designed.

Ray said: "You're describing behavioral training data collected from a population that can't consent and can't leave."

Will said: "Yes."

Ray said: "And the population source is the underground installation."

"Yes."

A pause. Ray was not taking in the supernatural dimension of this — Will was not giving it to him in those terms — but the legal and investigative dimension was the dimension that mattered for what Ray could do with it.

Ray said: "Dana Osei."

Will had spent most of Saturday deciding how to answer this, and had arrived somewhere he did not like.

"The IP address in the facility's network inventory," he said. "IP .47. First active October 14, 2024 — the day she went missing. She was a CYT client who identified the mechanism and went down County Road 14. The incident language matches the crash in April. The cold case file you brought me matches the Elspeth Sloane pattern."

There was a silence on the line of a specific length.

Ray said: "You said first active."

"Yes."

"Not last."

"No."

Ray let that lie where Will had put it and did not pick it up, and Will understood that to be a decision rather than an oversight, and understood also that he was going to be paying for it for some time.

"Who else."

"Ten others confirmed in the facility. The installation is fourteen years old. The capture infrastructure predates Sloane — she found it in 2014 and improved it. The oldest sources have been in there since before her modifications. I can't give you identities on any of them except Osei. The rest would require matching case files by signature."

Ray said: "How many closed-as-accidental single-vehicle anomalous incidents on County Road 14 in the last fourteen years do you think I'm going to find."

Will said: "I don't know. More than two."

"Yeah." Ray paused. "The platform failure."

"The behavioral cycling infrastructure was corrupted at the source. From inside the system. The corruption was complete. CYT's ChasePath platform is non-functional. The underlying data architecture is compromised."

Another pause. Will could hear Ray doing what he always did when he needed to think: the quality of silence that was not blankness but active thought. He had been doing it since third grade.

Ray said: "The clients whose security posture depended on ChasePath."

"I know."

"Those are real organizations with real vulnerabilities."

"I know. I spent three weeks knowing that."

Ray was quiet.

Will said: "The Meridian final report is going to document the Critical finding and recommend immediate decommission of the undocumented west-segment server. It will recommend against ChasePath reinstallation in any configuration pending a full data-source audit. That recommendation is going to propagate through the security community once it goes to Ostrander. CYT's clients will move to other platforms. It will take months."

"And in those months."

"Their security teams know their own networks. They built their posture around ChasePath, which means they don't rely on it as the only layer. They'll increase manual monitoring. They'll bring in other tools. They'll be more exposed than they were, and less exposed than they'd be with no security at all. It's not clean."

"No."

"It's what it is."

Ray said: "The documentation."

"At the offsite archive. Photographs, site documentation, facility layout, the network inventory with IP .47, the permit chain for ES Infrastructure. The sealed briefing has the overview and the Sloane permit connection." A pause. "It's not prosecution-ready yet. She told me so herself. She wasn't wrong."

"She told you."

"At the meeting." A beat. "She's not going to run. She has no reason to. Without evidence of what the installation actually is — not just that it exists, but what it contains — the documentation is a record of an unusual underground server facility and a complicated corporate structure. Circumstantially rich. Not actionable yet."

Ray said: "But eventually."

"Eventually."

"No," Ray said.

Will waited.

"I've been holding this since you said offsite archive, and I'd rather say it once than have you arrive at it on your own in six months." Ray's voice did not change. "I can't take your photographs. Not now. Not in a year. Not when I've got everything else."

"Because of how I got them."

"Because of how you'd have to say you got them." A pause. "A photograph goes in front of a jury with a photographer attached to it. That's you, on a stand, explaining that you went down a ladder into a facility you don't own, on a credential somebody obtained by lying, outside a scope your own client put in writing four days later. Their lawyer doesn't have to break you. He has to ask."

Will said nothing.

"That's your half," Ray said. "Mine's worse. The day I ask you for them, you stop being a man who trespassed on his own initiative and start being a detective's source. That's the state doing the searching, after the fact, through a private citizen. Everything I build on top of it gets attacked, and he doesn't have to win that argument. He has to make it in front of the judge who's deciding about my warrant."

The line was quiet for a moment.

Will said: "So the photographs aren't evidence."

"The photographs are a map." Ray let that sit where it landed. "I can know what's on them. I can't ever have gotten them from you." A beat. "Which means the laptop isn't me being careful. The laptop is the only lane there is."

"And the briefing."

"Stays sealed and stays in a drawer. If I ever open it, it's because you haven't answered your phone, and on that day I'm not building a case." Ray said: "I'm looking for you."

Will sat with that.

"One more and then I'll let it alone," Ray said. "The day any of that archive goes into a proceeding, it goes in with your licence, your company, and whoever it was that made the phone call. I don't want her name. I'm telling you I know there is one."

"I know."

"You said that fast."

"Somebody's already told me."

Ray did not answer immediately, and when he did it was only: "I'd like to know who."

Neither of them said anything.

"Yeah," Ray said. "That's about what I figured."

"Then here's what I actually have," Ray said. "A cold case I'm going to formally reopen on a theory I can articulate without any of the parts you can't give me. A missing device with a last-seen date. A corporate filing search on ES Infrastructure and every entity Elspeth Sloane has ever touched — all of it public, all of it mine, none of it yours. And a pattern in the County Road 14 cold files that is going to look like exactly what it is." A pause. "That's a slower road and it's the only one that arrives."

Will said: "Yeah."

"How long."

"I don't know. Six months. A year. Longer if she moves fast."

Ray said: "The meeting. She wasn't running when you left."

"No."

"She's going to rebuild."

"Or pivot. She knows the cycling infrastructure is compromised. If she tries to rebuild ChasePath on the same mechanism, she knows the mechanism has been breached. If she abandons the platform entirely, she's a consulting firm with no competitive advantage. She has to find something to do with the installation. The installation is still there."

Will said it again, more quietly: "The installation is still there."

Ray was quiet.

Will did not say: and whatever is still in there is still in there. He did not say: the loops are gone and the equipment is idle but the facility is powered and the most degraded sources didn't have anywhere to go when the clock stopped. He said: "Whoever found that site in 2014 because she was specifically looking for a site with that property — she still knows where it is."

Ray said: "Who else knows."

"You. Me." A pause. "Nobody else who can do anything with it."

He could hear Ray sitting with this sentence.

Ray said: "Let me ask you one thing."

"Go ahead."

"Friday night. Where were you."

Will looked at the phone lying on the desk in front of him.

"I'm not going to answer that," he said.

"Okay." Ray did not sound surprised, and did not sound hurt, and from three syllables it was not possible to establish whether either of those was the case. "Then I'll tell you what I do with it, so you're not guessing. I work the laptop. I work the crash files and the corporate filings and I build something a lieutenant will put his name on. And I don't ask you about Friday night again." A pause. "Not because I don't want to know."

"I know why."

"Say it out loud. I want to hear you say it."

"Because the moment I answer, you have it," Will said. "And once you have it you're a detective who has it, on a file you've been told to leave alone, with a law firm writing to your captain."

"That's right," Ray said.

Neither of them said anything for a moment.

He said: "The person who was with me at the crash site. That night. I'm not going to explain that part either."

Ray said: "I've seen you talking in parking lots."

"I know."

"And in your car."

"I know."

"That's all I have to say about that."

Will said: "Thank you, Ray."

"I'll be in touch," Ray said. "Take care of your house."

The call ended. Will sat at his desk with the phone on the surface in front of him and looked at it for a moment. Then he looked at George, who had been positioned behind the chair since the call started — still, back to the wall, eyes on the room. Keeper-of-the-Small, in the position he occupied when something needed occupying.

Will said: "Okay."

George blinked. Then he went to eat.

---

Two days later, a second statement appeared on the CYT Systems website. The platform failure was attributed to an infrastructure configuration error introduced during a routine maintenance cycle. The investigation was complete. Service restoration was ongoing. The company was evaluating enhancements to its internal review processes to prevent recurrence.

No mention of external interference. No mention of Will Hardin. No mention of Elspeth Sloane, or of ES Infrastructure Consulting, LLC, or of the underground installation below County Road 14.

Will read it the way he had read the first one. Then he put his phone down and finished his coffee.

Angie said, from near the desk: "She's pivoting."

"I know."

"The installation is still there. I can feel it from here." She paused. "The loops are gone. But whatever was in there — the most degraded ones — they're still there. Not looping. Not coherent enough to loop. Just..." She found the word. "Static. Like the neighborhood fragments, except they're inside hardware."

He looked at his coffee cup.

"They were inside the loops for years," she said. "When the loops stopped, they didn't have anywhere to go. They didn't know how to go. Whatever they were before the loop is—" She stopped. "I don't know if there's enough left. But they're still in there."

He said: "And Dana."

"Dana is not in there." Angie said it with no hedging at all, which she had not done about anything in six weeks. "I stood in that room. There is nothing of her on that hill — not a fragment, not a residue, not a bad afternoon soaked into a wall. There is nothing. And nothing is what a person leaves behind when they are somewhere else, being a person."

He said: "Okay."

"That's not an answer."

He looked up. "No," he said. "It's not." He set the cup down. "It means I'm noting it and I'm not going to be irresponsible about it and when I have something more than noting it I'll say so."

She looked at him for a moment. Then: "Okay."

Cat came through from the kitchen, crossed the main room without apparent intention, and settled on the windowsill. He oriented himself toward something outside that was not visible to Will. This was how he usually oriented himself.

Will went back to his desk.

---

The Meridian final report was submitted on June 3rd.

It documented: visitor credential provisioning without identity verification (Low–Informational); legacy API endpoint on customer portal (Medium); outdated SMB dialects on four machines (Low); VLAN provisioning error, corrected on request (Low). And: an undocumented server in the west IT closet with no asset tag and no Meridian inventory record, actively connected to the west segment, generating one-directional cyclic traffic on a non-standard interval. Critical. Remediation: immediate physical decommission pending hardware provenance audit. Full review of west-segment network isolation. ChasePath platform: engagement findings indicate third-party behavioral data integration of unclear provenance; platform should not be reinstated in any configuration pending independent audit of data collection practices.

That last paragraph was not something he could make stick in any proceeding. It was the truest thing in the report. He submitted it anyway.

Harlan Ostrander called him an hour later. "This is a significant finding."

Will said: "Yes."

"I'll need to escalate this."

"Yes."

"The recommendation about ChasePath."

"Page twelve. It stands."

A pause. Then: "Good work, Hardin."

Will thanked him and ended the call.

---

He named the folder on June 5th.

Late morning, coffee going cold at the desk, George behind the chair in the position he occupied when he had assessed the duration as long and had settled in accordingly. Cat on the kitchen counter. Angie near the laptop, in the half-present orientation she had when she was listening to something in the network below the neighborhood infrastructure.

Will looked at the desktop. The Meridian/CYT folder was filed, complete, final. He looked at it for a moment. Then he opened a new folder.

He typed: Hardin Investigations.

He didn't make a big deal of it. He moved the CYT case subfolder into it. He opened a new document inside and wrote: Active cases. He left it blank for a moment, cursor blinking. Then he opened another document and wrote: County Road 14 victims — full cold case count.

Then he opened a third and sat looking at the empty title bar for a while.

He typed: OSEI, DANA RENÉE — LOCATE.

He put nothing under it, because there was nothing to put under it. A room he could not describe to anybody. A seventy-one-year-old man who framed it in 2015 and was sent home before he ever saw it finished. A two-inch water line. A drain. Sixty-two photographs of a fourteen-by-ten room with nothing in it, eight of which were failed attempts at a place on a wall where the paint had worn through.

He left the document open, where he would have to look at it, and went to work on the other one.

---

He was twenty minutes into the County Road 14 research when Angie said: "The infrastructure."

"I know."

"It's not going away because the loops stopped."

"I know."

"She can rebuild if she finds another mechanism. Or use what's already in there — the static. Try to stabilize them, reverse what the loop collapse did." A pause. "They're not useful as a behavioral data source at this point — there's not enough variation. But they're still people. Or what's left of people. And she knows where they are."

Will looked at the folder. Hardin Investigations. He looked at the blank Active cases document.

She said: "There are still people in there."

"I know."

"And one who isn't."

"I know that too." He looked at the screen. "We'll get them."

From the kitchen: Cat yelled.

Will looked up. Angie looked in that direction. George, behind the chair, shifted his ears but did not move.

Will said: "What."

Another yell from the kitchen, with the register Cat used when something needed handling and was not being handled.

Will got up.

---

The thing in the kitchen was George's water bowl, which had been empty for some time and which Cat had decided was now a matter requiring escalation. Will filled it. George appeared from the main room and drank with the unhurried thoroughness of a cat who had been waiting for this but had made no comment about it.

Cat returned to the counter. He did not look at Will.

Will said: "You're right. It was empty."

Cat did not acknowledge this assessment. He had made his position clear; his position had been addressed; he had moved on. He was already orienting himself toward the window again. The thing outside that wasn't visible to Will.

Angie was in the kitchen doorway, looking at George.

She said: "He's going to do that every day forever."

Will said: "Yes."

George finished drinking. He crossed the kitchen floor and went back to his position behind Will's chair — the position he had occupied during the Ray call, during the CYT research, during the morning after the intruder, during whatever came next. Back to the wall. Facing the room.

Will went back to his desk.

He looked at the screen: County Road 14 victims — full cold case count. He looked at the folder. He looked at the blinking cursor in the blank Active cases document. He reached for his coffee, found it cold, drank it anyway.

The yellow pad was on the corner of the desk, face up, which was new. He had stopped turning it over sometime in the first days of June without arriving at a decision about it.

Angie said: "I'd like to see it."

He turned it around and pushed it across the desk, which was a gesture with nothing operational behind it — she could read it from where she was and had been able to the whole time — and which they both let stand anyway.

A column of numbers with no heading on it. Twelve. Twelve. Nine. Nine.

And then nine, and nine, and nine, down the page, in a hand that had gotten smaller as it went.

"How often," she said.

"Every day since the meeting. Twice on the days I'm in the house."

"And it hasn't moved."

"No."

She was quiet for a moment. Then: "Give me the good version."

"The good version is that whatever was doing it has stopped doing it, and this is where you are, and where you are is nine."

"And the other one."

Will looked at the column.

"The other one is that it held at twelve first," he said.

Angie did not answer that for a while. When she did it was: "That's the one you believe."

"I don't have a calibration," he said.

She recognized the sentence. He watched her recognize it, and she let him have it, which he understood to be the more generous of the two things available to her.

She said: "You should have told me on the twenty-fifth."

"Yes."

"You're not going to apologize for it."

"No," he said. "I'm going to leave the pad where you can see it."

"That isn't the same thing."

"No," he agreed. "It's the part I can do."

She stayed where she was, near the laptop, in the half-present orientation she had when she was listening to something under the neighborhood. Cat was on the windowsill, oriented toward the thing outside that was not visible to Will. George was behind the chair with his back to the wall.

"Nine is workable," Angie said. "Nine is a number I can plan around."

"For now."

"For now," she said.

Through the window, Nashville went about an early-June morning. The installation below County Road 14 was still powered. Whatever was left in it hadn't gone anywhere. The one who wasn't left in it had been taken somewhere else, alive, and CYT still had her.

Will put the coffee cup down.

He left the pad where it was.

He had work to do.