Something about the pattern was familiar.
Reed stood.
“You’re looking too far outside.”
The engineer stopped.
“What?”
“That pattern is not pushing through your perimeter.”
He pointed.
“Something trusted is handing traffic outward.”
Derek said:
“He has no authority to touch our systems.”
Reed ignored him.
“Check building-services integration and any vendor sandbox that shares maintenance credentials.”
The engineer looked uncertain.
Vivien looked at Reed.
“Can you help?”
He hesitated.
“I can look.”
“You have authority from me.”
Reed followed them.
The operations room was colder than the conference area.
Rows of monitors displayed system health, authentication events, sandbox status, network segmentation, and internal alerts.
People typed too fast.
That worried Reed.
Panic makes intelligent people skip steps.
He sat at an empty terminal.
“Read-only access first.”
The lead engineer, Maya Chen, looked at him.
“You need admin to isolate.”
“Not until I understand what I’m isolating.”
That caught Vivien’s attention.
Emergency power was available to him.
He still asked for less.
Maya granted read-only log access.
Reed worked.
Not magically.
Not alone.
He asked questions.
“What changed since Friday?”
“New vendor build.”
“Who owns maintenance integration?”
“Facilities automation team.”
“Credential rotation?”
“Sunday.”
“Any exception windows?”
Maya searched.
“There’s one.”
“Show me.”
The exception appeared ordinary.
That was why it was dangerous.
A dormant maintenance account had been reactivated.
An alert rule tied to one unusual transfer path had been disabled.
A scheduled credential refresh later that afternoon would have affected Hartwell’s own response window if the issue remained unresolved.
Reed pointed.
“This is your door.”
Maya leaned closer.
“That account should be retired.”
“Apparently not.”
The team isolated the vendor path.
Traffic stopped.
Then resumed through a secondary route.
Reed shook his head.
“Someone anticipated the first containment.”
Maya said:
“Can you trace it?”
“Your team can.”
He looked at her.
“I’m not replacing you. I’m showing you what pattern I recognize.”
That sentence changed the room.
Maya stopped treating him as an intruder.
They worked together.
High level.
Careful.
No unnecessary changes.
Preserve evidence.
Separate suspicious nodes.
Rotate credentials in sequence.
By twelve thirty-seven, unauthorized movement had stopped.
At twelve forty-two, the validation environment stabilized.
At twelve forty-eight, the team confirmed no live public emergency system had been affected.
Then came the second problem.
Who approved the exception?