He had given him titles, witness names, and the categories we were examining.
He knew a hand delivery was planned because he saw encryption activity and overheard Romero discussing travel with outside counsel. He did not know the exact courthouse time.
That leak came from somewhere else.
We found it in the least dramatic place imaginable.
A shared calendar.
Judge Carter's judicial assistant had created a private appointment labeled EB - sealed review at 8:30. The calendar was visible only to chambers staff and the courthouse administrative scheduler.
The scheduler, Lorna Beck, was married to a Westbridge patrol sergeant.
There was no evidence she supported corruption or knew what the audit involved. When interviewed, she admitted mentioning over dinner that "some outside auditor" had a sealed meeting with Carter and joking that the courthouse would probably be a mess that morning.
Her husband mentioned it in a group text with coworkers.
One of those coworkers forwarded the message to Vance.
That was how systems fail in real life.
Not every leak is a spy.
Sometimes one person shares something casually, another recognizes its value, and the information travels into hands that know exactly what to do with it.
Lorna received administrative counseling for violating court confidentiality rules. Her husband received separate department discipline for forwarding nonpublic scheduling information. Neither was accused of joining Vale's scheme because the evidence did not support it.
Judge Carter insisted on that distinction.
"Do not turn carelessness into conspiracy because conspiracy makes a better story," she said.
By the end of the first week, the investigation had three separate tracks.
The courthouse incident involving Vance.
The corruption and records-integrity allegations involving Vale and others.
The leak and retaliation issues affecting whistleblowers, including Jonah and Naomi.
I remained responsible only for the administrative audit.
But that work changed once Vance began cooperating.
He gave us names.
He identified meetings.
He explained codes we had only inferred.
C-N really did mean complaint narrow.
D-H meant discovery hold.
E-R meant evidence reconcile, not evidence revise as we had guessed.
"Reconcile" sounded harmless.
In practice, it meant make the official numbers agree after the fact.
Sometimes that involved legitimate corrections.
Sometimes it did not.
Vance insisted the Blue Ledger began years earlier as a risk-management tracker. Command staff used it to identify cases likely to create lawsuits or suppression motions. Over time, the purpose changed.
"Nobody announced the day it became dirty," he told investigators. "There wasn't some meeting where Vale said, from now on we break the law. It just kept getting easier to fix the paper instead of fixing the problem."
That sentence ended up in my final report.
It explained more than any dramatic accusation could.
The system did not collapse because everyone inside it woke up corrupt one morning.
It collapsed because too many people learned that altering the record was easier than confronting what the record revealed.
Vance's cooperation also exposed his own responsibility.
He had personally pressured two junior officers to rewrite use-of-force narratives.
He had told one complainant that pursuing a case would "make future police contacts harder."
He had signed a supplemental property receipt he knew was created after a cash discrepancy surfaced.
He wanted investigators to understand that he had followed Vale.