Maya did not interrupt. She understood that if the board wanted to punish Cole simply because his conclusion could not yet be proven wrong, it would repeat the mistake she was challenging. A careful review needed to tolerate uncertainty long enough to test it. The question was whether the evidence he had personally certified justified the action he had already taken against her.
Mercer nodded to the analyst seated beside him. The display changed to a chronological view of the original access history. The analyst explained that the first suspicious export had been initiated through the central administrative gateway while Maya's account remained active. That gateway had created or used a delegated account token carrying her username, although her assigned devices and authenticated sessions showed no corresponding initiation. The event had occurred before her termination, and its provenance was still being investigated.
"Do you know who initiated the gateway process?" Cole asked.
"Not conclusively," the analyst said. "We're examining the administrative authorization history and the available independent records."
"Then we do not know that Williams didn't authorize it."
"That is correct," Mercer replied. "We also do not know that she did. The original report treated account attribution as personal attribution without supporting that distinction."
The analyst described how the investigation had continued beyond the disputed export. The HR action had disabled Maya's access, triggering Appendix K's independent preservation. After that cutoff, the administrative record showed additional activity associated with the case packet, including a new credential delegation event and changes to the documents used to characterize the alleged leak. Because those changes occurred after she could no longer use county systems, they could not be explained as ordinary activity from her own active account.
A commissioner near the far end of the board table raised his hand. "Is the later delegation event necessarily connected to the original export?"
"We have not made that final determination," the analyst answered. "It is part of the same administrative environment and concerns overlapping records, but the events must be examined individually as well as together."
Mercer moved to the confidentiality acknowledgement. Its electronic history appeared beside a high-resolution comparison of the signature image and a much older performance review. The two signatures were identical, including minor flaws that would have been extremely unlikely to recur naturally. He explained that the submitted form lacked the secure authentication token and corresponding signing event required for a valid county electronic acknowledgement.
Cole responded that the department sometimes scanned paper forms into electronic archives. Mercer agreed. He then asked whether a paper original had been produced for this particular acknowledgement, and the analyst answered that none had been located despite requests to records management and command administration. The absence did not settle every possibility, but it meant the document could not be authenticated in the form Cole had certified.
"Someone may have reconstructed it from an earlier paper form," Cole said.
"That is one possible explanation," Mercer replied. "It would still require the earlier form, a legitimate reason for reconstruction, and an accurate statement of when the new file was created. None has been supplied."
The room grew quieter. Cole had an explanation for the signature, but it relied on records he could not produce. Maya thought about the way her father had asked whether she could prove her innocence. She had been unable to produce a reassuring object that morning; now Cole faced the same problem with evidence he had used to end her career.