He described three independent controls designed to work together. The first verified the source and timing of committed funds. The second ensured contract promises matched what the company had actually approved. The third checked that a transaction's recorded risk classification did not change merely because a senior executive wanted a smoother presentation. All three were documented. All three had been modified or bypassed in different places. Whoever made those changes had preserved the outward appearance of compliance while removing part of its substance.
"How far does it reach?" Vivian asked.
"I don't know. That should worry you more than any number I could guess."
Dana Price wrote that sentence down.
At ten fifty-nine Callan stopped. He had promised an hour. It had already become longer, but he had set aside a little room in his afternoon and was willing to finish answering their immediate questions. Vivian looked at the page of notes she had taken, then at his resignation envelope resting beside the cardboard box.
"I won't ask you to decide your future today," she said. "I will ask whether you're comfortable with Samir leading a technical review in the meantime."
"Samir knows more of the system than anyone else besides me. Nadia understands the client logic. Let them work together. Give them direct access to risk and legal, not through growth."
"Agreed."
"And don't make them promise not to talk to each other. A system like this fails fastest when everybody is afraid to ask a question."
Vivian nodded. "Agreed again."
He stood and lifted his cardboard box. For an instant, Vivian seemed about to offer to have someone carry it, then thought better of it. The box contained the humble remnants of work he had completed without acknowledgment. He was entitled to carry it himself if he wanted.
At the door, he turned back. "There is something I should tell you about the exception process."
"Please."
"Blaine didn't invent the culture that made this possible. He learned what behavior the company rewarded. You need to find out why it was rewarded."
He left before Vivian could thank him. She watched the doors close and found herself wondering why the sentence unsettled her more than the suspicious payment authorization. It was because one problem could be traced through a system. The other ran through people she had appointed, meetings she had chaired, and reports she had chosen to accept.
She gathered the folder and called an emergency session with Dana, Marcus, the chief risk officer, and the independent audit team. Within an hour, new approvals involving the altered Lantern rule had been paused pending verification. Existing obligations were not abandoned; they were reviewed individually with contingency plans, legal scrutiny, and direct communication to affected clients. Vivian authorized temporary funding for an external operations team so the company would not repeat its dependence on one exhausted specialist. She ordered the security team to preserve relevant records without searching personal devices beyond the company's legitimate authority. And she told human resources to suspend all adverse employment actions connected to people who had raised concerns about the model.