Chapter 11
Chapter Eleven: The Deletions
The archive on Sub-Level 2 ran cold at sixty-seven degrees Fahrenheit, which was either optimal for document preservation or optimal for keeping people from staying too long. Cara had been here forty minutes. She'd stopped noticing the cold twenty minutes ago.
She was authorized to be in the archive. That was the true part. The rest required more careful framing.
The section she needed — Ferrara Capital Partners, LLC, registered as a subsidiary of Ferrara Group Holdings in the Delaware corporate filings she'd pulled four days ago — sat behind a secondary access credential system she had no authorization to enter. She'd found the gap while reviewing historical access logs: a service account issued to the internal audit team before her predecessor was terminated, never decommissioned, still active in the directory. The credentials predated her engagement by eight months. Technically, they existed outside her scope.
She'd used them at 11:47 p.m. on a Tuesday because no one would be reviewing the access logs until morning, and because she could not stop herself.
The files were physical — binders, accordion folders, six lateral filing cabinets spanning nearly two decades. The fluorescent lights buzzed faintly overhead. The clock on the wall read 12:14 a.m.
She pulled the first binder.
Ferrara Capital Partners had been incorporated eighteen years ago, four months after Marco Ferrara assumed the chairman seat following his father's health decline. On paper it was a real estate investment vehicle — land acquisition, development financing, limited partnership interests.
On paper.
Cara spread the transaction records across the archive table and started at the beginning.
The first five years were almost clean. There were anomalies in the origination documentation — loan-to-value ratios misaligned with the underlying asset appraisals, interest accruals that vanished between quarterly statements and then reappeared as equity conversions with no supporting resolution. Small things. The kind that would scan past an auditor looking for GAAP violations rather than patterns.
She was looking for patterns.
By year six the transactions had scaled. Money moving into the partnership from what the records labeled "strategic investor contributions" — no names, no individual K-1 disclosures, structures suggesting foreign beneficial ownership routed through nominee layers. The amounts were not modest. Forty-two million in a single quarter. Sixty-seven million the following year, structured as installment contributions timed to within forty-eight hours of specific municipal permit approvals in three different cities.
Permit approvals that Ferrara Group's development arm had applied for. And received, in each case, within the prior thirty-day window.
She wrote nothing down. She took no photographs. She read each document, closed it, moved to the next, storing the architecture of what she was seeing the way she'd learned to do during the federal receivership work — the paper trail was the evidence, and the evidence would still be here tomorrow, and what she needed now was the shape of the whole thing. She had been trained to hold large, ugly structures in her mind without flinching, and she was doing that now.
Two hours in, she reached the gap.
It wasn't a missing binder. The physical sequence was intact. The gap was a folder — quarterly transaction summaries, the label said, covering the most recent thirty-six months — and inside it were blank separator sheets and two index pages with every line item crossed out in black ink and stamped: ARCHIVED - SEE DIGITAL.
She found the digital terminal at the back of the section.
The FCP Holdings subfolder was empty.
The folder structure was intact. The subfolder names were intact. The modification timestamps on every directory fell within the same seven-day window.
Cara navigated to the file system metadata.
She was careful here. Metadata queries on an enterprise archive system generated their own access logs, and the wrong query in the wrong way would leave a signature. She'd worked in systems like this during her time at the federal level. She knew the read-only audit pathways that didn't trigger active-monitoring flags.
She ran the query she knew was safe.
Results in under three seconds.
Deletion event: confirmed. Scope: all files under FCP Holdings / Quarterly Summaries, spanning thirty-six months. Execution timestamp: fourteen days ago. Seven business days before she had set foot in this building.
The day her contract had been formally signed.
She looked at the timestamp for a long time without moving.
The access log was harder to pull without triggering an alert. She spent eight minutes working through the permission architecture before she found a read pathway through the legacy compliance portal — the same service account she'd used to enter this section. Old systems communicated in ways their current administrators no longer tracked.
The deletion had been executed under a single access credential.
She ran the credential ID against the executive directory.
One result.
Executive-level access. Director-tier authorization. A named account in the organizational hierarchy, issued to and held by one person. She looked at the account permissions, at the organizational chart mapping the account to its parent executive, at the name at the end of the chain.
She read the name twice.
She sat back in the sixty-seven-degree air.
The clock on the wall read 2:08 a.m.
At some point she became aware that the surveillance camera in the upper-left corner of the archive — she'd noted it when she came in, angled to cover the main filing rows — also partially framed the auxiliary terminal section. She had not been standing directly in frame during the metadata query. The angle covered the door.
The entry log would show her service account credential accessing this section. If anyone pulled the camera footage, they'd see her at the terminal.
If anyone pulled the footage, they'd also see that Salvatore Trevisi — whose badge ID she'd clocked on the access panel when she came through the exterior door, logged in at 11:52 p.m. in the main section, twelve rows over — had been in the archive the same night she was.
Different section. Same window.
She filed that.
She put everything back the way she'd found it. Binders in sequence. The empty folder in its proper slot. She logged out of the terminal through the natural session timeout rather than a forced exit, which would have left a different trace signature. She turned off the reading lamp at the worktable.
At the door she stopped and looked back at the room: six lateral filing cabinets, fluorescent lights, a clock that kept moving.
Eighteen years of records. Three years gone. The deletions executed on the day her engagement was formalized, under executive-level access, by one account, in a subsidiary her authorized scope hadn't covered.
She walked out.
In the elevator back to Sub-Level 1, she held her badge and tried to arrange what she knew into something with clean edges.
The criminal layer was real. Ferrara Capital Partners had been used — was almost certainly still being used, in whatever three years had now been erased — to route undisclosed capital contributions from unidentified beneficial owners in exchange for outcomes in municipal approval processes across three jurisdictions. The transactions were not small. The pattern was not ambiguous. It had been running for most of the period since Marco Ferrara had assumed the chairmanship of the parent company.
The deletions had been made before she arrived. By someone inside the organization, with the credentials and the technical access to execute a sweep of that scale without triggering internal compliance alerts.
Someone who'd known she was coming before she walked through the front door.
The evidence had been cleared from the archive — before her audit, before her access, before she'd had the opportunity to find it. Whoever had done this had not been trying to stay one step ahead of an outside auditor. The internal compliance architecture was separate from her engagement. Her audit wouldn't have touched these records through any authorized pathway. She'd gotten here through a loophole.
He'd swept the records before she arrived, using credentials that would show up in his organization's own internal logs. Using access that his own compliance team could trace back to him, if they looked.
The elevator doors opened.
Cara walked through and stood in the Sub-Level 1 corridor and turned the question over the way she would turn over any document that didn't scan — examining the face of it, the reverse, the edges, looking for the thing that was missing.
She had the metadata. She had the deletion logs. She had the account. She had a name.
The one thing she didn't have was the answer to the question that made everything else stop making sense: why would Marco Ferrara delete evidence of his own crimes from his own organization?
You might also like
