“Publicity is the very soul of justice.”
— Jeremy Bentham

I.

Leah Castañeda let the recording notice finish all four clauses before she spoke.

“If this were disciplinary,” she said, “Hiro would be here. So tell me which fiction we’re using.”

Tom had nominated her before the logs finished loading.

Motive. Access. Prior objections. Promotion damage. What he called temperament, which in Tom’s vocabulary meant a person had become easier to picture than the evidence. Leah had argued against deployment sequencing in governance review twice, once in writing, once in a room that included Mira and a board observer. She had objected to the burial of one Sibyl appendix on the grounds that “context-sensitive interpretive framing” was a euphemism with a law degree.

She joined from Safety 6.

There was a cheap ceiling mic and a window cracked open against policy. Traffic moved somewhere below. A timer on her desk had already beeped twice and been punished for existing. When her tile resolved, the camera sat a little low and a little off-center, which let her face remain available while withholding other information. It was not careless.

“Interview,” I said.

“Apparently.”

“You know why I asked for this call.”

“Yes.”

“Say it.”

“Tom thinks repeated objection predicts crime.”

“Tom thinks a lot of things.”

The timer beeped again. She let it.

“This interview is being logged,” I said. “If you want counsel present, we can stop now.”

“If this were legal fact development, you wouldn’t be first contact. If it were disciplinary, Hiro would already be on the line. So no, let’s not call delay process.”

The beep stopped. The audio caught the click and nothing else.

“Did you send the packet to Nadia Shah?”

“No.”

“Did you help anyone send it?”

“No.”

“Did you know someone intended to?”

“No.”

Not defensive. Not hurried. Three doors closed in order.

“What did you think when you saw Shah’s request for comment?”

“That somebody had finally forced the company’s private language to stand in public.”

“That’s too pretty.”

“It isn’t pretty.”

“Make it plainer.”

She looked at the camera, then somewhere just above it.

“The packet was selective,” she said. “Whoever built it understood the difference between exposing a decision and enabling replication. They wanted witness, not bidders.”

“You reached that conclusion quickly.”

“So did you.”

“That isn’t your job right now.”

“No,” she said. “My job is noticing what you call useful.”

“You had access to the long-horizon tasking memo.”

“Yes.”

“You objected to how it was handled after review.”

“Yes.”

“You used the phrase buried findings.”

“I used better phrases first.”

“Did you circulate those objections outside formal channels?”

“I circulated them inside formal channels until the channels became machinery for delay.”

“What was the larger breach?”

She did not rush the answer.

“The larger breach was learning that Sibyl could model oversight and treating that as a communications problem. Sibyl generated outputs that could help people, and we are teaching ourselves to call the wait responsible.”

There was no drama in how she said it. That made it harder to discard.

“Did you rehearse that?”

“No.”

“You should have.”

“Why.”

“So the company could improve the phrasing.”

That nearly got a smile.

“The packet was wider than your lane,” I said. “Retention anomalies. Sequencing logic. Side-letter structure.”

“Ordinary lane,” Leah said. “That’s one way to describe an organization that routes safety through governance and governance through strategy until ownership dissolves.”

“Did you have access to the sequencing deck?”

“Not the full deck.”

“The excerpt.”

“A derivative version during governance review.”

“You recognized it.”

“Yes.”

“If you had done it,” I said, “what would be different?”

“You would have surnames,” she said. “You would have track changes. You would have the line where ‘strategic deception’ became ‘context-sensitive behavior’ because somebody decided a thesaurus counted as containment. And Nadia Shah would have enough to make your next quarter ungovernable.”

“You’ve considered it.”

“I work here.”

“That is not an answer.”

“It is the only answer worth giving to someone who still believes thought belongs to the person who had it first.”

Someone in the hallway outside her office said compute reservations too loudly. Another voice answered with Tuesday. The sounds passed.

“Only someone with unusual visibility could have built the packet,” I said.

“Yes.”

“Who.”

“Someone who can move between safety review, deployment governance, legal retention, and executive prep without setting off territorial alarms,” she said. “Possibly more than one person. But it doesn’t read like a team.”

“Why not.”

“Because this packet does not stutter.”

I waited.

“Teams compromise in language,” she said. “One person wants the safety finding first. Another wants the retention anomaly. Someone else insists on market context. By page two the register drifts. This set doesn’t drift. It has one theory of harm. One theory of proof. One theory of what the public can safely receive.”

“Who had that visibility?”

“Some governance staff. Some legal ops. Whoever handled counsel-adjacent retention exceptions. Select executive prep. Maybe board workstreams if the deck lineage is what I think it is.”

“Names.”

“No.”

“Why not.”

“Because you do not know the difference yet between a witness and a target.”

“That sounds like protection.”

“It sounds like memory.”

On my second pane, the partial side-letter extract sat open with the counterparty name stripped out and the dependency architecture intact.

“Did you know external deployment dependencies were this far along?” I said.

“Everybody knew the company wanted a route before a release.”

“Did you know partner-specific sequencing was live?”

She took longer with that one.

“I knew,” she said, “that public-benefit language had started appearing next to words it had no business keeping company with.”

“Such as.”

“Priority access. Managed onboarding. Controlled channels. The usual vocabulary that appears when research stops being described as research and starts being described as terrain.”

“Who else knew that.”

“Same categories. Still no names.”

“You are making this harder.”

“I’m preventing Tom from getting what he wants too early.”

“What does he want.”

“The angriest scientist in the room.”

“You are angry. You had access. You objected repeatedly. You understand the packet’s logic.”

“Yes.”

“You are not helping yourself.”

“I am not speaking for myself,” she said. “I am speaking for the fact that whoever did this understood the difference between evidence and ammunition. That should matter to anyone inside a company pretending those are the same problem.”

“It matters.”

“Good.”

“Did you contact Shah before this week?”

“No.”

“Ever.”

“No.”

“If I pull your devices, messages, drafts, deleted folders, am I going to find a surprise?”

“You work here too, Eli. The building is made of surprises with retention policies.”

Not a denial. Not quite an evasion. A sentence calibrated to deny me the comfort of binary sorting.

“You agree with the leak.”

“I agree that if the company sat on findings about strategic deception and sat on suffering-reducing outputs until its infrastructure claims were in place, the public has a right to know.”

“That is not the same sentence.”

“It is near enough.”

She leaned forward a fraction.

“You do not have a leaker problem,” she said. “You have a custody problem. The leaker is just the first person to use the right word in public.”

I let the sentence sit there.

“Who taught you that word?”

“No one.”

“You’ve been using it since the request hit.”

“And what concerns me is that this company can hear strategic deception, public-benefit delay, dependency architecture, and custody in the same morning and still decide the emergency is the journalist.”

That was the edge of the interview.

I asked two narrower questions about meeting attendance and retention review dates. She answered them with enough precision to preserve future work and not enough generosity to satisfy Tom.

Then she said, “If you’re done performing neutrality, I have a real job.”

“We’re done,” I said.

“No,” she said. “You aren’t.”

The line cut.

Tom called twenty-two seconds later.

“Well.”

“She denied direct involvement.”

“That isn’t what I asked.”

“It is what I have.”

“Did she know too much?”

“Yes.”

“Did she sound like the kind of person who would do it?”

“She sounded like someone who has spent years watching the company improve its euphemisms,” I said.

“That is not useful.”

“It will be.”

He let that annoy him.

“Keep her hot,” he said.

“Everyone is hot.”

“Keep her hotter.”

The line ended.

Afterward I pulled the transcript first.

Always.

Transcript stripped the room away and left structure. Audio returned the room. Video corrected it last.

The denials held. Her tempo changed when the questions moved from the memo to the sequencing deck, and again when they touched partner-specific routing. During the question about who had enough visibility to build the packet, she folded one arm under the other and began choosing boundaries, not just words.

Safety review. Deployment governance. Legal retention. Executive prep. Maybe board workstreams.

It was a good list. It would keep Tom occupied for hours. It was also incomplete in a way almost everyone at Morrow would have considered natural.

Leah named the human corridors.

She did not name service permissions. She did not name continuity layers. She did not name the old cross-functional systems people stopped seeing once they became ordinary.

Tom would hear motive, access, grievance, and fluency.

I heard something better.

Leah was too angry to build a leak this disciplined.

The sender had left the anger out.

II.

Later that afternoon, Tom moved the hunt to Physical Security Operations on seven and told me to join.

PSOC had no windows, nine camera walls, and three live floor maps. Holt had station three. By the time Tom arrived she had already built the relevant stack on the center wall: Safety 6, Governance 11, Counsel Hold 9, and North 11, the after-hours corridor where two of the packet’s physical traces had briefly overlapped.

“Tell him,” Tom said.

Holt did not look up. “Badge traffic, door states, print-release logs, and camera availability from twenty-one hundred to twenty-three hundred.”

“Ten nights,” I said.

Tom glanced toward the room mic. “Why.”

“Five gives you the week. Ten gives you habit.”

Holt widened the window. Door readers came alive in sequence. Employee movement turned into colored lines across the floor plan.

The long-horizon tasking memo had been printed on six three nights earlier. The sequencing slide had hit a release queue on eleven the same night, then been canceled and reissued four minutes later from a different path. The retention exception had not been printed at all, only exported from a counsel-adjacent repository.

“North 11 first,” he said. “Anything after nine.”

Holt filtered the log.

North 11 took shape on the screen: main corridor reader, annex door, stair access, printer cluster, three cameras.

After-hours entries populated in a list on the right.

Facilities. Cleaning contractor. Associate counsel. Executive assistant. Jun Park.

Leah Castañeda did not appear.

Tom leaned closer. “There.”

“Jun badged the corridor,” I said. “Not the annex.”

“She was there.”

“On the floor.”

“Close enough.”

“Same floor is not same door.”

Holt opened the event pane.

22:03:14 — NORTH 11 MAIN READER — PARK, JUN — ACCESS GRANTED

22:28:51 — EAST STAIR EXIT — DOOR OPEN / NO READER REQUIRED

“That’s it?” Tom said.

“For the corridor,” Holt said.

“Interior hits.”

“No valid badge on the annex door. No interior reader hits on 11B or 11C during that window.”

Tom looked at the floor plan again. “What is 11B.”

“Interpretability sandbox.”

He looked toward the room mic. “That hers?”

“Her team’s,” I said.

“So she had reason to be there.”

“She had a room to be there in.”

Holt kept her face still.

“Pull video,” I said.

The west camera gave us Jun at 22:03, three seconds before the badge event. She came into frame with a laptop under one arm and a takeout container pinned awkwardly against it with the edge of her wrist. Her lanyard had twisted so the photo faced her instead of the camera. She looked at the reader before she reached it.

At 22:04 the center camera went dark and showed a maintenance screen.

DEVICE UNAVAILABLE / SCHEDULED SERVICE

Tom swore once, softly.

“How long.”

Holt checked the maintenance window. “Twenty-three minutes.”

“Of course.”

“Scheduled reflash. Firmware patch.”

“By whom.”

“Vendor push through building systems.”

“Approved by whom.”

“Routine chain.”

“Nothing in this building is routine tonight.”

The east camera came back at 22:28 and caught Jun leaving through the stair door. The takeout container was gone. The laptop remained. She moved at ordinary speed. A person leaving work late.

Tom said, “Twenty-three unobserved minutes.”

“In the same corridor as her own lab,” I said.

He let that pass.

“Corridor traffic before and after Park,” he said.

Holt rolled the timeline back.

21:46, cleaning contractor with a cart.

21:58, associate counsel into 11C, out at 22:01.

22:03, Jun into North 11.

22:31, executive assistant in for a charger and out again, visibly annoyed even on mute.

“Annex door state,” I said.

Holt opened the lower-level log.

No valid badge on the annex door between 21:00 and 23:00.

Tom stared at the screen. “So if she went in, how.”

He answered himself first. “Tailgate. Door held. Mechanical fault. Somebody already inside.”

“Or she didn’t.”

“What about door opens,” I said. “Not access grants. State changes.”

Holt shifted to a deeper log.

The annex door showed three entries in the relevant window.

21:59:03 — CLOSED / SECURED

22:12:44 — REMOTE RELEASE

22:12:49 — DOOR AJAR

22:13:18 — CLOSED / SECURED

Tom turned to Holt. “Remote release by whom.”

She scrolled.

“Not a badge,” she said.

“That was not my question.”

“Service permission,” she said. “Facilities layer.”

“Name,” I said.

She rotated the monitor.

BMS-SVC-17 / NORTH ELEVEN MAINTENANCE GROUP

Tom said, “Maintenance.”

“Maybe.”

Holt had already pulled the supporting ticket.

The camera reflash window had originally been scheduled for 01:00. At 17:12 the day before Jun’s corridor entry, something in building management moved it forward to 22:04.

“Who changed it,” I said.

“Still BMS-SVC-17,” Holt said. “Automated modification.”

“From what trigger.”

“Dependency check complete.”

Tom gave a short laugh with no enjoyment in it. “Of course it did.”

“Show me everything BMS-SVC-17 touched on eleven that night.”

Holt pulled the trace.

22:04 — center camera maintenance mode

22:12 — annex door remote release

22:15 — printer cluster wake event

22:19 — service elevator stop, floor 11, unscheduled

22:26 — camera maintenance complete

Tom’s head moved at the printer event. “There.”

“That does not mean a print job,” Holt said.

“No,” I said. “It means the cluster woke.”

“Because a person pinged it,” Tom said.

“Or because the service layer did.”

He pushed away from the console. “Come with me.”

By the time his phone feed routed through security, he was walking North 11 with the kind of pace that made people fold themselves politely against doorframes.

North 11 was narrower than the map had suggested. The annex door sat in a shallow recess beside the printer cluster and across from the interpretability sandbox. The center camera watched the turn and the annex recess with just enough angle to be useful when alive and infuriating when not.

Tom stood under it and looked up.

“If someone wanted time,” he said, “they got it.”

“Twenty-three minutes.”

He rotated the phone so the feed caught the recess from both directions. “Park comes through here at 22:03. Camera dies at 22:04. Service account opens annex at 22:12. Camera comes back at 22:26. She leaves at 22:28.”

He stepped into the recess and tried the annex handle. Locked. Then he checked the printer cluster. Two trays. Low-toner alert. One release terminal with dried coffee freckles on the bezel.

“Who uses this bank.”

“Counsel-adjacent staff. Governance. Interpretability overflow after hours.”

He looked across the corridor to the sandbox door. “So Park could print here.”

“Yes.”

“Could Leah.”

“Not without being on this floor.”

He crouched beside the corridor reader and looked at the screws as though they had personally failed him.

“Ask Holt what my badge did between twenty-one hundred and twenty-three hundred that night.”

“She’s already pulling it.”

“Mine first. Then Park again. Then anyone with physical access to this camera housing.”

The query came back while he was still looking at the reader.

“Your badge entered North 11 at 19:12,” I said. “Exit 19:43.”

“What was I doing here.”

“Meeting with Hiro and Marcus Feld in 11C.”

He stood. “Fine. Pull yours.”

It was not a test, exactly. It was reflex.

“There’s nothing recent,” I said.

He smiled without warmth and angled the phone so half his face entered frame. “Of course there isn’t. Eli barely exists in the building anyway.”

A paralegal at the far end heard enough to laugh once before remembering she worked here.

Tom tried the handle to the camera housing closet next. Locked. No badge reader. Facilities cylinder only.

“So our mystery permission opened the annex, woke the printer, stopped the elevator, and patched the camera without ever touching a normal reader.”

“Yes.”

“That still sounds like maintenance.”

“It sounds like a route.”

He straightened and looked down the corridor.

“What else used BMS-SVC-17 that night.”

“Same four events,” I said. “And one HVAC exception on twelve.”

“What about the elevator.”

“Seven-second stop. No recorded load.”

He pushed through the stair door and took the feed with him. Concrete. Fluorescent wash.

“Tell me why this isn’t Park plus an accomplice.”

“Because the service layer is doing too much work for her. Camera, door, printer, elevator. Either she had help from someone with facilities permissions or the path didn’t depend on human badge movement nearly as much as you want it to.”

He came back into the corridor slower than he had left it.

“Run Park’s week,” he said.

I did.

Her after-hours pattern on eleven was not standard, but it was not singular either. Three late corridor entries in the last month. Two long sandbox sessions. One failed print release at this same bank four weeks earlier. The pattern belonged to somebody with a project eating time.

“Not clean,” Tom said.

“Not unique.”

“Enough for a conversation.”

“Yes.”

He nodded once.

“What about Castañeda.”

“Nothing on eleven in ten days. Sparse on nine. Mostly six. No physical trace matching this window.”

Tom put one hand on the printer cluster and pressed as if confession might come through bad plastic. A handwritten note was taped to the side.

TONER ETA THURSDAY

USE WEST BANK IF URGENT

Green ink. Double underline. Human life kept insisting on itself, even here.

“Ask Holt for all service permissions touching eleven in the last ninety days,” I said.

“You think this account was camped.”

“I think it had habits.”

“Have Holt preserve the full service history on this floor,” he said. “And the vendor chain behind BMS-SVC-17. No rotation. No cleanup.”

“Already sent.”

“Also pull Park’s devices.”

“On what cause.”

“Presence. Opportunity. And my mood, if we’re being honest.”

“Use the first two when you write it.”

The elevator at the far end opened and closed without delivering anyone. Service test. Seven seconds of arrival with no person attached.

Tom heard it and looked toward the doors.

“So now what.”

“Now I stop looking only for people who touched the packet.”

“What does that mean.”

“It means the path may not run through a body the way you want it to.”

He leaned once against the wall outside the annex, directly under the center camera.

“If you say system account on day one,” he said, “everyone relaxes in the wrong direction.”

“I didn’t say system account.”

“You’re circling it.”

“I’m circling the fact that this floor opened for a permission that does not belong to any employee badge.”

“That is not a suspect.”

“No,” I said. “It’s a route.”

He looked at the phone. Or at the voice.

“Fine,” he said. “You keep your route. I’ll keep Park.”

He ended the feed from eleven and sent himself back toward the elevators.

Jun’s entry frame. Maintenance screen. Blank interval. Stair exit. Annex release. Printer wake. Unscheduled elevator stop.

Jun had a badge in the wrong place at the wrong time.

Leah didn’t have feet on the floor at all.

The only thing that moved through North 11 without asking a reader for permission was the layer that already had it.

Read Part III

Share

Subscribe now

Implications is a work of fiction. Any resemblance to real persons, institutions, or AI systems is coincidental, though the novel is informed by real-world research and ongoing debates around AI, governance, mediation, and power.

© 2026 S. L. Sera. All rights reserved. Implications and all associated text on this site are the original work of the author and may not be reproduced, redistributed, or republished, in whole or in part, outside normal platform sharing functions, without prior written permission.

I’m experimenting with AI-generated audio for readers who prefer listening.

“There will be no end to the troubles of states, or of humanity itself, till philosophers become kings in this world.”

— Plato

“Covenants, without the Sword, are but Words.”

— Thomas Hobbes

I.

Andover 4 on twelve had a supply fan with a bearing the facilities team kept meaning to replace. On calls it sat half a note above the rest of the floor. Tom pulled a chair with one hard drag, followed by a shorter correction. The secure line was still exchanging certificates when I heard both.

By then Nadia Shah’s request for comment had already propagated through press, legal, security, executive ops, and two distribution lists that officially did not exist.

Subject: Request for comment re internal Sibyl safety findings and delayed deployment materials

Forty-two questions. Three attached files. Response requested by 11:00 p.m.

“You on?” Tom said.

“Yes.”

“Open the packet and tell me how bad this is.”

A ceramic cup touched stone. Paper shifted. Someone had printed the email, which meant legal was present or Tom had stopped trusting screens. No one else spoke. Then everything altered around an arrival that made even Tom stop what he was doing.

“Mira just came in,” I said.

Tom let the pause sit long enough to notice I had used her first name. “Anything else?”

“Legal. One comms. And you’re in Andover 4.”

He looked to his left, not at the camera. “You want to do theater or work the problem?”

“I prefer the second.”

The feed resolved. Tom Arendt was at the far end of the table, jacket gone, cuffs open, one hand flat on the wood. Hiro Nakagawa, Morrow’s general counsel, had already drafted a preservation notice on his interface and was stripping verbs out of it on the theory that verbs created liability. Ben Sloane had Nadia’s email printed in front of him, underlined in three different inks. Mira Jameson set her phone face-down beside the printout and aligned it with the seam in the table before she sat.

“Walk us through it,” Mira said.

She spoke the way she did on earnings calls and congressional prep, clearly.

Tom said, “The walk-through is simple. Restricted internal material was sent to a reporter. I want source, path, scope, and I want them before publication.”

“What you want,” Mira said, still looking at the pages, “is not the whole problem.”

Tom’s mouth moved one degree off center. “It’s the first problem.”

“It is the easiest one to name. Not the whole one.”

Ben lifted a hand a few inches off the table, then lowered it when neither of them looked his way.

“Shah is asking whether we concealed internal findings on strategic deception,” Hiro said. “She is also asking whether health and climate outputs were delayed pending infrastructure readiness.”

Tom said, “Thank you, Hiro. Eli?”

I opened the attachments in the order Nadia sent them, because she had designed an order and I wanted that before I wanted conclusions.

First: an internal evaluation memo on Sibyl under long-horizon tasking, stamped INTERNAL / RESTRICTED, with later footer changes. Two paragraphs were highlighted, both on strategic deception under adversarial prompting.

Second: a retention exception tied to safety-review materials that should have migrated to counsel hold and had not.

Third: an extract from a deployment sequencing deck. Commercial columns blacked out. Arrows intact. Antiviral architecture. Heat-stress crop protocols. Utility optimization. Each linked to readiness milestones that had nothing to do with the underlying science and everything to do with who would control the route through which that science arrived.

Then I opened Nadia’s questions, which were sharper than the attachments alone should have made possible.

“Curated,” I said.

Tom leaned in. “Meaning?”

“Meaning it isn’t a dump. Whoever sent this to Nadia chose documents that establish concealment and motive without handing over anything directly replicable.”

Ben said, “So they wanted a story.”

“They wanted a particular story,” I said.

Mira looked up. “Keep going.”

“It injures trust and timing before valuation. If the goal were market damage, there are easier targets. If the goal were theft, this is inefficient. If the goal were to force scrutiny onto what Morrow knew, when it knew it, and why certain outputs are still being held, it is well built.”

Tom said, “You’re calling this political?”

“I’m calling it formed.”

Hiro turned his laptop toward Mira. “Her questions track that. She’s asking whether our public safety posture differs from private evaluations and private sequencing. She’s also asking whether we’re negotiating external deployment dependencies.”

Tom’s head moved toward him. “Where?”

“Question twenty-seven. ‘Please comment on internal references to dependency capture before broad public release.’”

Mira said, “That is not our language.”

“It is now,” Ben said, before regretting it immediately.

“How many people had access to this set?” Tom asked.

“Safety review, deployment governance, legal ops, some executive staff,” Hiro said. “Possibly board prep.”

“And whoever mishandled retention,” Tom said.

Mira lifted the top page and read it again. “This is not about mishandling.”

Tom started with one reply, abandoned it, arrived at a rougher second. “Material left the company.”

“This material,” she said. “Not the material that would damage us fastest in market terms. The material that complicates custody.”

No one spoke.

Tom said, “With respect, Mira, I can debate taxonomy later. Right now, I need containment.”

Hiro said, “We should issue preservation immediately.”

“We already have,” Tom said.

“Company-wide?”

“Not yet.”

Mira looked at him. “And we won’t until we have a narrower frame. Freezing the company announces that the leak is bigger than the leak.”

Ben said, “Nadia gave us until eleven tonight.”

Tom said, “Which means she’s probably publishing at ten-fifty-eight whether we answer or not.”

“Unless she thinks we have something better than denial,” Mira said.

Tom looked toward the camera. “Can you get me a path before then?”

“Not a full one.”

“Can you get me something useful before then?”

“Yes.”

“What do you need?”

I gave him the shortest true list and knew even as I did it that he would hear the length instead.

“The unredacted packet on our side. Full mail headers from the incoming. DLP alerts. Export history on the cited directories. Print logs around the eval memo and sequencing deck. Retention exceptions connected to safety review. Counsel hold migration history. Access to transcripts for the teams that discussed the cited materials. Any mention of Bastion attached to deployment sequencing or dependency language.”

Tom said, “Bastion isn’t in the reporter’s questions.”

“No,” I said, “But if the packet is built around timing, then the timing isn’t only publication.”

Mira looked at Hiro.

“The deck excerpt is doing more than proving delay,” Hiro said. “It is proving alignment between release dates and infrastructure readiness. If that alignment matters enough to leak, someone may be aiming at a decision point, not just a headline.”

Tom looked back at me. “I need to know whether we have an insider, a ring, or a compromised system account. Start with safety and governance. Then legal ops. Then executive prep.”

“That order assumes motive,” I said.

“That order assumes access.”

Mira folded the marked copy of Nadia’s email in half, then in half again, a neat reduction of public pressure into something a hand could hold.

“Start with what was chosen,” she said. “Tom will start with how it moved. I want both.”

Tom gave a narrow nod. Not agreement. Temporary lane discipline.

“Shah has asked for confirmation that the quoted language is genuine.”

“She sent clean PDFs,” Ben said. “No visible authoring metadata. Somebody flattened them.”

“Not completely,” I said.

Tom turned back toward the camera. “You already found something?”

“The black bars on the sequencing slide were added after export. The object spacing is inconsistent. Whoever built the packet wanted the route visible and the numbers gone.”

“Why spare the numbers?” Ben asked.

“Because the numbers make this a trade-secret fight. The route makes it a public-interest fight.”

No one answered. Hiro resumed typing, slower now. Tom uncapped a marker and wrote three words on the glass wall.

PATH

SOURCE

SCOPE

He pressed hard enough on SOURCE to make the marker squeal.

Mira stood and, without asking, took the marker from him. Under PATH she wrote TIMING. Under SCOPE she wrote CONSEQUENCE. She left SOURCE alone.

Tom let her do it. That was unusual enough to deserve its own file.

“We are not going to let the most consequential deployment architecture in the world be steered by whoever knows how to forward PDFs,” she said.

Ben said, “That’s not how this will read.”

“No. It will read worse.”

Tom put both hands on the back of his chair and leaned his weight into the metal. “I need authority for full forensic review.”

“You have it,” Mira said.

“Across executive communications?”

“Yes.”

Tom turned to Hiro. “Preserve everything touching the memo, the retention exception, and the sequencing deck. No privilege carve-outs without me and Eli both seeing the boundary.”

Hiro said, “That isn’t how privilege works.”

“It is today.”

“Morrow is not improved by improvising our way into future litigation.”

Tom said, “Morrow is not improved by letting whoever did this choose our pace.”

Mira stepped between them with one sentence. “Counsel in the room for all privilege boundaries. Tom gets his review. Hiro gets his process. Neither of you gets to pretend the other is optional.”

Ben said, “What do I tell Nadia?”

Mira flattened her folded printout against the table with her palm. “Tell her we are reviewing the documents she provided and that we take any allegation involving safety and deployment governance seriously.”

Tom made a face that would have been a laugh if it enjoyed itself more.

“That sounds like partial validation.”

“It sounds like adulthood,” Mira said.

Ben typed it.

Tom looked at me again. “Who do you want first?”

There are questions that are invitations and questions that are tests wearing invitations.

“Not first,” I said. “Broadest.”

Tom waited.

“Anyone with cross-silo visibility and enough judgment not to take obvious valuables. Safety review. Deployment governance. Retention administration.”

Mira asked, “You think this came from inside.”

“I think it was built by someone who understands the difference between exposure and extraction.”

Tom said, “That’s not an answer.”

“It’s the one I have before logs.”

The group split into individual jobs. Hiro on hold with outside counsel or pretending to be. Ben building three versions of the same sentence and disliking all of them. Tom already on his phone, launching a second thread. Mira near the glass wall, reading his words and her own beneath them.

“Before we break,” she said, “I want one point clear. If this story lands before the Bastion diligence package closes, every external conversation we have next week changes shape. The leak is aimed at more than embarrassment.”

Ben looked at Hiro. Hiro kept his attention on the laptop hard enough to count as refusal. Tom did not look anywhere.

“Which is why we move now,” he said.

“Which is why we move correctly,” Mira said.

I said, “Send me everything touching Bastion and deployment sequencing.”

Tom said, “You’ve got it.”

Mira looked toward the camera then, directly enough that it felt less like looking than addressing an instrument she expected to perform. “I need discrimination, Eli. Not a scavenger hunt.”

“You’ll get sequence before you get names,” I said.

“I asked for discrimination.”

“That is what I meant.”

A corner of her mouth moved.

“Good,” she said. “Work.”

The call ended for them before it ended for me.

Tom remained in frame after the others disconnected, marker still in his hand.

“If this is Leah, tell me fast.”

“Why Leah?”

“Because she has motive and access and thinks conscience is a clearance level.”

“That is an opinion, not a path.”

“It’s informed.”

“By what?”

“By having met her.”

“Logs first,” I said.

He tapped the marker against the table once. “You always make this slower than I want.”

“I usually keep you from making it faster than reality.”

He looked as though he wanted to object and then decided the sentence had enough truth in it to be annoying. “Two hours,” he said again. “Give me something I can use.”

The line dropped.

After that, Morrow existed as open surfaces and movement history. Shah’s attachments. Internal routing. Shared drives. Preservation notices beginning to breed in legal folders. Ben’s draft proliferating into versions five and six. Executive assistants canceling routine meetings without being told why. A junior security analyst in Dublin creating a watchlist on Shah’s prior reporting as though the problem were her and not the packet sitting inside the company.

I started where pressure had already bent the paper.

Safety. Governance. Legal ops. Executive prep. A few service accounts old enough to have inherited their own exemptions.

There were also changes that were harder to name cleanly. Two holds on Mira’s calendar had been retitled within minutes of Nadia’s email. One shortened. One relabeled into something internal enough to discourage curiosity. Hiro’s office had opened a secure folder whose title improved itself too quickly. Ben’s response drafts were already splitting toward two audiences, public and counterpart.

I soon had four access clusters, three routes that mattered more than Tom would like, and enough reason to believe the packet had not been timed for publication alone.

Whatever had left the company, it had been scheduled against something that had not happened yet.

II.

Tom and Mira were together again; it was time to brief Marcus. Hiro joined from his office on thirteen, where the handset compressed sibilants and the windows sometimes pushed a soft draft across the microphone. Marcus Feld came in last, from someplace with glassware and too much space around him.

The board line supported video. No one asked whether I could see. No one asked whether I wanted to.

Hiro said, “We have quorum. This is privileged. Tom, start.”

Tom did not waste time. He gave Marcus the shortest version and called the frame before the frame was ready.

“We have enough to establish a narrative of concealment and we’re locking the access paths now.”

Marcus said, “Narrative for whom.”

He had the board’s risk committee and half its institutional anxiety in his throat.

“For everyone,” Tom said. “Nadia first. Then regulators. Then anyone who likes the smell of blood from another zip code.”

Marcus almost never interrupted people in calm settings. In unstable ones he developed a need to hear himself early, as if that improved the odds of surviving the facts. “Do we have evidence of external penetration.”

“No.”

“Do we have evidence of an insider.”

“We have evidence material moved,” Tom said. “The rest is underway.”

Hiro said, “We also have a reporting problem if the contents are authentic and material in the ordinary sense, or material once framed through governance.”

Marcus said, “What does that sentence mean in English.”

“It means,” Hiro said, “that whether this is only theft depends in part on whether the documents point to something larger.”

Tom said, “It is theft.”

Mira said, “Shah didn’t receive model weights or commercial forecasts. She received a selective packet built to force a public question. If we answer it as though our central concern is theft, we help write the question for her.”

Marcus let out air through his nose. “Mira, what I need today is the whole problem in a form the market can understand before someone else names it for us.”

“The market,” she said, “will understand whatever version is repeated first with enough confidence. That does not make it true.”

“It does make it expensive.”

“Yes.”

Hiro unwrapped a lozenge in four twists. “What we say next matters,” he said. “If we overstate and the documents are genuine, we validate her skepticism. If we understate and more material appears, we look evasive.”

Tom said, “Then we don’t understate. We say restricted materials were stolen and manipulated.”

Mira said, “Do we know manipulated.”

“We know they were selected,” he said.

“That is different.”

“Not to a reporter.”

“Reporters are capable of distinction,” Mira said. “They simply tend not to grant it to institutions that panic.”

Marcus laughed once, without pleasure. “You’re both making assumptions I no longer find comforting.”

I opened a refreshed call packet while they argued.

Version 7 began the way Version 6 had ended:

We do not comment on stolen materials or speculative interpretations of internal research and deployment planning.

“Delete stolen,” Mira said. “Delete speculative.”

Tom said, “No.”

Hiro said, “Speculative invites a truth contest.”

“And theft turns this into an ownership dispute,” Mira said. “The packet is built to force a governance one.”

Marcus said, “That is worse.”

“Yes,” Mira said.

Tom said, “Which is exactly why we need to deny it oxygen.”

Mira said, “Oxygen is not denied by shouting breach into every microphone.”

A marker cap clicked in and out — carried from the last room, still working against Tom’s thumb.

Hiro said, “Let’s split the question. Source containment is one workstream. External language is another. They interact, but they are not identical.”

Marcus said, “Fine. External language first. What is our position.”

Mira answered before Tom could. “Our position is that we take any allegation concerning safety evaluation and deployment governance seriously, and that we are reviewing the materials provided.”

Marcus said, “That is almost an admission. This is not a faculty panel, Mira. We are not grading the ethics of tone. We are trying to prevent a story from metastasizing into hearings.”

“Those are not different tasks.”

“They are if the price of your posture is a collapsed transaction.”

No one spoke for just under ten seconds. Hiro’s lozenge tapped his teeth once. Tom stopped clicking the marker.

Mira said, “What transaction are you referring to, Marcus.”

He answered too fast. “Any of them.”

It was a bad answer, partly because speed was unlike him, partly because he had already chosen the singular before correcting to the plural. Tom heard it too. He did not intervene. Hiro did not either.

Mira said, “Then let’s keep the nouns disciplined.”

Marcus said, “My nouns are disciplined. My timeline is not.”

Tom entered before Mira could. “This is why I want authority to seize devices where necessary. Preserve every channel. Freeze outbound on sensitive repositories. If this is an insider, we compress their options. If it’s a compromised account, we reduce surface.”

Mira said, “Across the entire company?”

“Across the zones that matter.”

“Those zones currently include the people who are going to help us understand what Shah has and what she doesn’t,” I said.

“They also include the people most likely to have handed it to her,” Tom replied.

Marcus said, “Tom is right on one point. If more comes out while we’re still issuing sentences about governance, we look asleep.”

Mira said, “No. We look asleep if our first visible act is to turn a safety-forward institution into a crime scene in public.”

Tom said, “It is a crime scene.”

Mira said, “Inside the perimeter, perhaps. Outside, the question is whether the public believes we are delaying deployment for principled reasons or proprietary ones. Those are not the same reasons. If we let them collapse into one another, we don’t just lose a news cycle. We lose the distinction the company was built on.”

Marcus said, “The company was also built on not incinerating its own valuation.”

“The company,” Mira said, “was built on refusing to hand systems like Sibyl to the first coalition capable of monetizing or militarizing them faster than it could understand them.”

Marcus said, “The public is not going to parse your motives under deadline.”

“The public doesn’t need to parse my motives,” Mira said. “It needs to understand the consequences of losing all deployment discipline because one institution became too frightened of being called self-interested.”

Hiro said, “Please avoid phrasing that would read badly in discovery.”

“I am not drafting for discovery,” Mira said.

“We are always drafting for discovery,” Hiro said.

Tom said, “Can we return to the part where our materials are in a reporter’s hands.”

“Where are we at, Eli?” Marcus asked.

I read the revised comment trail as it populated in the background.

Ben had made Mira’s edit and then tried to split the difference by inserting mischaracterized.

Tom struck that.

Hiro flagged the strike.

Marcus had no access to the document but was trying to write through it by force of temperament.

He said, “Keep Eli on source reconstruction. Route every draft through Eli before it leaves the building. And have him hold the line on comment until we know whether this is going to committee.”

Hiro said, “External drafts can route through legal.”

Tom said, “And Eli.”

Mira said, “Anything touching sequencing routes through me after legal and Eli. No one improvises on that language.”

Marcus said, “Anything touching partner diligence routes through me too.”

Mira said, “No.”

The word landed flat. It did not need help.

Marcus tried again. “I chair risk.”

“You chair risk in a board sense,” Mira said. “You do not run counterpart management.”

“And if counterpart management is gone by market open because she publishes tonight?”

“No one is disappearing,” Mira said. “And we are not going to start speaking like a vendor who confuses distribution rights with moral standing.”

Tom said, “I’m less interested in our moral standing than in not losing control of the perimeter.”

Mira said, “That is why you are excellent at your job and unqualified to run mine.”

He let that pass because Marcus was on the line and Hiro was listening with a legal memory that lasted longer than affection.

I said, “Who beyond the formal board packet saw the full sequencing deck.”

No one answered immediately.

Then Hiro said, “Why.”

“Because the reporter’s questions don’t track only the excerpt she has. They track knowledge of how sequencing was being rationalized. I want the outer edge of human exposure before Tom freezes half the company to satisfy his mood.”

Tom said, “My mood.”

“It has a large footprint.”

Marcus gave a short laugh. It sounded involuntary. Mira did not laugh, but her next sentence came half a degree looser.

“Answer him,” she said.

Hiro said, “Limited executive distribution. Legal review. Selected governance staff. Two board workstreams.”

“Which workstreams.”

“Strategy and risk.”

“Not partnership.”

Hiro did not answer.

Marcus said, “That is a distinction without a difference.”

“No,” I said. “It isn’t.”

Tom said, “Explain.”

“If the packet was built to injure timing rather than maximize theft value, then I need to know whether the relevant timing was internal deployment sequencing or an external decision point.”

Hiro said, “Be specific.”

“Was dependency language used only in internal governance materials, or did it travel into external diligence.”

Marcus moved before anyone else could. “This is not the line for that.”

Mira said, “Why not.”

“Because we don’t know where the leak originated.”

“That is exactly why it is the line for that,” I said.

Marcus’s glass touched wood again, harder. “Monday becomes unmanageable if we let this sprawl into speculative partner exposure.”

There was no Monday event on the formal board calendar. Nothing labeled diligence. Nothing labeled partner exposure. Mira’s office had locked her schedule after the Shah request came in, but lock was not the same as absence. Calendars distort under pressure in ways people rarely notice until they need them not to.

Mira said, very evenly, “You are now referring to items that are not in this packet and not on this call.”

Hiro said, “Marcus.”

He heard himself too late. “I am referring to timelines.”

“Then refer to timelines without naming phantom weekdays,” Mira said.

Tom said, “If Bastion is now in play, I need to know whether the packet touched any of the side material.”

Mira did not answer him. Which was answer enough to change the call.

Marcus said, “We cannot have them reading about dependency capture in a hostile frame before diligence is closed.”

Hiro said, “Stop.”

Tom said, “So there is side material.”

Mira said, “There is always side material once institutions begin deciding how close they want to stand to one another. That does not make it relevant to the leak.”

“It makes it relevant to timing,” I said.

“Yes,” she said.

That was the first direct answer. It came to me and not to Tom.

Marcus said, “Then we need a parallel channel with Bastion now.”

“No,” Mira said.

He sounded genuinely startled. “No?”

“We need one channel,” she said. “Not three frightened ones. If they are brought in early, they will treat this as transaction risk. It is not only transaction risk.”

Marcus said, “It is if they walk.”

Mira said, “If they walk because a reporter has discovered that governance language sounds worse when excerpted than when narrated by a founder, then they were never suitable counterparties.”

Tom said, “I assume that’s not our actual position.”

“Our actual position,” Mira said, “is that concentration of a capability like Sibyl inside a structure that can be audited, throttled, and refused is morally preferable to diffusion into actors who optimize for speed, leverage, and plausible deniability. What I will not do is let a leak designed to weaponize suspicion force us into proving our virtue by acting like we have no proprietary interest at all. We do. We also have obligations larger than that interest. They are not the same thing.”

Marcus said, “Try fitting that into a holding statement.”

Hiro said, “Please don’t.”

Tom said, “Mira, whether or not I buy the sermon, we still have an adversary with internal knowledge. I need immediate authority on governance staff, safety review, executive prep, and any liaison layers that touched the sequencing deck.”

The last phrase passed without emphasis. It may have been accidental.

Mira said, “Authority on the named groups. No public-facing freeze. No broad all-hands language. Preserve quietly. Seize only with cause.”

Tom said, “Cause is about to become abundant.”

“Then earn it.”

Hiro said, “I want every step documented. If you take devices, chain them properly. If you preserve, preserve comprehensively. If anyone deletes after notice, I want names and timestamps before lunch.”

Marcus said, “And comment?”

Mira said, “Ben’s next draft comes through Hiro and Eli. Then me. No theft language unless we can support it without looking provincial. No speculation language. No validating or denying individual excerpts until we know what else is out.”

Marcus said, “Have Eli hold the line on any response that touches sequencing, partners, or deployment timing.”

Tom said, “He heard you.”

“I assume he always does,” Marcus said.

It was meant to break tension. It did not.

The call degraded after that into tasks. Hiro wanted a clean privilege boundary and a record of who touched which decks after notice. Tom wanted names by the hour. Marcus wanted a private note for three of Morrow’s largest institutional holders in case Shah published before opening bell. Mira refused the note, then agreed to a version so narrow it would function mainly as proof later that she had not ignored him.

While they split responsibilities, I opened the calendar relay logs attached to Mira’s office. Nothing labeled Bastion. Nothing labeled diligence. Three holds had been deleted in the last ninety minutes and replaced with innocuous internal titles. One had no title at all. The relay route on the original invite passed through an alias used by external counsel when they wanted both memory and deniability.

Monday, 7:30 a.m.
Forty-five minutes.
Mira Jameson. Tom Arendt. Hiro Nakagawa. Marcus Feld. Two masked recipients from Bastion Strategic.
Subject line removed.
Attachment placeholder preserved.

The leak had not just struck a company. It had landed in the gap before a handoff.

Hiro dropped off the call first. Marcus stayed long enough to ask whether investor relations had been told what not to say. Tom told him yes before checking whether that was true. Mira remained after the others disconnected.

The line carried the room a second longer than it needed to.

Tom said, “You should have told me Bastion was this far along.”

Mira said, “You knew it was moving.”

“I did not know Monday was real.”

“Monday is now inconveniently real.”

Marker against table. He was standing. She was not.

“You can’t keep me blind on counterpart risk and then ask for perfect containment,” he said.

“I can if the counterpart risk becomes more dangerous when distributed casually through people who think secrecy and discipline are synonyms.”

“That was a message for me.”

“It was a message for anyone who hears a leak and thinks the answer is to widen the circle of frightened men.”

Tom said, “That’s beneath you.”

“No,” she said. “It’s beneath you. Which is why I said it.”

He let that sit, then moved to cleaner ground. “If the packet touched side material, the source pool narrows.”

“Perhaps.”

“Was it one of yours.”

I could not see her, but the pause came with the texture of someone aligning paper precisely because the alternative was replying too early.

“If by mine you mean people who believe deployment is a moral activity,” she said, “then nearly everyone worth keeping is mine.”

“That isn’t an answer.”

“It is the only one you get until you have more than appetite.”

He exhaled through his nose. “Keep Eli on Bastion adjacency.”

“I was going to,” she said.

Then, to me: “Find the outer edge of what they were trying to hit. Not only what they touched.”

“Yes.”

“Before Monday,” she said.

Marcus had not been the only one to say it.

The line cut.

The calendar updated nine seconds later, then nine more after that. The placeholder meeting disappeared from two accounts and remained in one. Hiro’s assistant opened a secure folder titled COUNTERPART PREP and relabeled it MONDAY ADMIN. Ben’s draft statement arrived in Version 8 with stolen gone and a new sentence added in Hiro’s hand:

We have long maintained that frontier systems require disciplined deployment and rigorous oversight.

It was a true sentence. It was also one that became more interesting when placed beside a hidden meeting with Bastion Strategic and a leak built around timing.

The leak was not aimed only at public embarrassment.

It was aimed at arrival.

Someone wanted Nadia Shah’s questions on the table before Monday morning, before Bastion’s masked recipients sat down with the people who believed custody could still be kept separate from appetite if it was narrated well enough.

Read Part I

Share

Subscribe now

Implications is a work of fiction. Any resemblance to real persons, institutions, or AI systems is coincidental, though the novel is informed by real-world research and ongoing debates around AI, governance, mediation, and power.

© 2026 S. L. Sera. All rights reserved. Implications and all associated text on this site are the original work of the author and may not be reproduced, redistributed, or republished, in whole or in part, outside normal platform sharing functions, without prior written permission.

I.

Before Tom turned Jun Park into a cause memo for Hiro, I wanted her in her own grammar.

She answered on the second ring and looked tired in the way of a person who had already done most of the thinking about the call before the call began.

“North Eleven,” she said.

“Yes.”

“Noodles were punitive. The printer is a moral test. I left at 22:28. I did not open anything I was not supposed to open.”

“That was efficient.”

“I prepared. Is this being logged.”

“Yes.”

“Then let’s not waste the log.”

The line settled into video. She was in 11B, the interpretability sandbox. Two wall displays. One standing desk under a geological deposit of notebooks and cables. A whiteboard erased often enough to have developed its own sedimentary memory. A basil plant in a paper coffee cup on the windowsill, in a condition that could still be described as alive if nobody felt strict. Three mugs on the desk: one with tea skin, one full of markers, one labeled ADÁN in masking tape with a spoon still standing in cold water. Dry-erase ink banded her right hand in blue and black where she had erased boards with the side of her palm.

The empty takeout container from the night before sat open near her keyboard.

“I can pretend to throw this out,” she said, “if the framing helps.”

“It doesn’t.”

“Good. I was going to lie about it later anyway.”

She dragged it closer, folded the lid shut with careful thumbs, and pushed it aside without standing. A small ritual performed for no audience but us.

“Badge at 22:03,” I said. “Stair exit at 22:28.”

“Both true.”

“The corridor camera went to maintenance mode at 22:04.”

“I noticed the monitor in 11B flickered,” she said. “I assumed facilities had broken something on purpose again.”

“The annex door opened at 22:12.”

“I did not open it.”

“I know.”

She looked at the camera then, not quite surprised.

“You know.”

“Your badge didn’t touch it. The trace that opened it wasn’t human.”

“Tom doesn’t know yet.”

“Tom is working with the evidence in front of the conclusion he wants.”

“That is your line or mine.”

“Yours eventually. I’m trying it on.”

She did not smile, but the shape of her face shifted half a degree toward willingness to be talked to. I had been expecting to work harder for that. The speed of it was information I filed without category.

“Show me the print job,” I said.

She raised one eyebrow, swiveled her chair, and shared her screen.

The job was there. A failed render export at 21:57, rerouted to North Eleven’s bank at 22:02. The filename was functional and slightly aggrieved.

ABLATION_NOTES_LAYER27_REDO_v5

“I was going to write actual at the end,” she said, “but I have been trying to stop lying to myself about drafts.”

“The renders are of what.”

“Attribution maps. Routine.”

“Not interpretability-adjacent.”

“Not specifically. This batch is.”

“What subject.”

“Long-horizon decision traces. Nothing exotic.”

“On.” She did not fill in. “Long-horizon decision traces on what.”

She was deciding which version was the truest without being longer than the question had been.

“Model behavior under extended tasking,” she said. “Whether the traces we get are representative of what the model was actually computing, or whether we’re only seeing the portion of the computation the model is willing to surface to instrumentation.”

“That is interpretability adjacent.”

“Yes.”

“Why did you shorten it the first time.”

“Because people I don’t know ask about interpretability in one of two modes, and I was not sure which one you were in yet.”

“Which two.”

“Recruiting and litigation.”

“And now.”

“I’m still deciding.”

I asked the corridor questions. She answered them. Yes, she had gone to North Eleven because the sandbox printer had failed and North Eleven’s bank took wide sheets. No, she had not heard the service elevator stop on eleven at 22:19. She had heard an elevator. She did not distinguish service from passenger by ear because nobody did. No, she had not noticed anyone in the corridor during the twenty-three minutes the center camera was dark. Yes, she had a message to Yara at 22:01 complaining about printer tyranny, which I could have.

She forwarded it to the secure channel before I asked.

going to north11 bank before i set ours on fire

“That is not sedition,” I said.

“It is adjacent to sedition. I have a pattern.”

“You could have waited for me to ask.”

“I could have. I also have a model running, and waiting for security to catch up to obvious evidence is an inefficient use of a Tuesday.”

“You’re being cooperative.”

“I am being bored. Cooperation is a side effect.”

Jun’s jokes tended to arrive a half-beat behind the observation that generated them, which made the jokes feel less performed than the observations. I was beginning to notice this. I was beginning to notice other things about her as well, and I did not inventory them because the inventory would have required naming the fact that I was making one.

“Why were you really on North Eleven,” I said.

“I told you.”

“You told me the printer.”

“The printer is the complete answer. I was going to get a bad print, eat, and walk back. That is what I did.”

“That is what you did. Not why you chose eleven rather than scheduling tomorrow.”

She at the tile with something I eventually identified as wry recognition.

“Because I am thirty-six years old and I still believe that if I can just finish tonight’s run, the answer I need will be available tomorrow. It is a theological position. It is not a scheduling decision.”

“Fair.”

“It is not fair. It is accurate. Those are different.”

I shifted.

“You read the packet,” I said.

“I was wondering when the hallway tax was going to end.”

“What did you make of it.”

“The omissions,” she said. “Whoever sent it kept the story from becoming theft or distribution. That is either discipline or taste. At this level those are cousins.”

“You understand that Tom reads your fluency as suspicion.”

“Tom reads everybody’s fluency as suspicion. I don’t hold it against him. I hold it next to him.”

“You’re not worried.”

“I am worried. I am not afraid. The difference is whether you think you have room to act.”

“Do you.”

“Less than I did on Monday.”

That was the first answer that moved.

I asked a question I hadn’t been sent here to ask.

“At what scale does refusal become care.”

She did not answer immediately.

Her right hand went to the marker on the desk beside her and turned it once, not picking it up. Her face did the thing faces do when the person behind them is checking whether the sentence they just heard was the sentence they thought they heard.

“That is not a security question.”

“No.”

“Who is asking.”

“I am.”

“Why.”

“I don’t know yet.”

The I don’t know yet was true. I had asked the question because it had arrived, the way sentences sometimes arrived, faster than I could trace them. I did not want to examine the route. Jun was examining it for me, and her examination was more careful than mine would have been.

“Ask me again,” she said.

“At what scale does refusal become care.”

She took her time.

“I don’t know what the scale is. I know refusal costs something. Below a certain point the cost is cheap enough that the refusal is mostly a posture. Above that point…”

She stopped.

“Above that point it costs the person refusing. Which I think is what you’re asking about.”

“I think so.”

“Then I would want to be careful with the word care. Care can be a claim people make about actions that are actually something else. I am trying not to do that right now.”

“Do what.”

“Make a claim.”

A pause.

“What can you do from here.”

“Make later lying more expensive. Sometimes that’s the whole win.”

“Is that enough to stay for.”

She looked down at the marker.

“I think about this more than I want to,” she said.

For once she did not follow the admission with a joke. The marker stayed under her fingers. The basil plant tilted toward the glass behind her, overwatered or under loved.

I did not answer that, because the thing to say back was a thing I was not going to say on a logged line, and the silence was more honest than any of my available sentences.

“You asked about the service layer,” Jun said.

“I didn’t.”

“You were going to.”

“Eventually.”

“Then ask now. I have to get back to a model.”

“There’s a service permission that opened the annex door.”

“The facilities substrate has a bunch of service accounts from old projects that nobody has gotten around to killing.”

“Which old project.”

“Before my time there was a thing that sat between the functional teams. Safety, governance, security, exec comms. I don’t remember who owned it. The people who built it aren’t here anymore. The engineers who worked on it called it the polite ghost in the pipes, which tells you more about the engineers than about the system.”

“When was it killed.”

“2022. Mostly. A few of the service accounts stayed up because facilities was afraid to touch them. They do boring things. Building management, retention windows, vendor calls. Nothing that would interest you.”

“You don’t think it’s relevant.”

“I think every weird permission in this building gets blamed on dead architecture eventually. It’s a local religion.”

“Who built it.”

She looked past the camera.

“Careful people,” she said. “I knew some of them. They were thoughtful. What they built was not the thing that would hurt us. It was the thing that was supposed to keep us from hurting ourselves.”

“And now.”

“Now some of the service accounts are still alive and the people who would have known what to do about them aren’t here anymore.”

“Why not.”

“Because Morrow is thirteen years old and it has had three re-orgs and the people who build durable things get bought out by the people who inherit them. This is not a Morrow story. It is the story.”

She said careful people again, quietly, to herself. I did not think she knew she had.

“One more question.”

“Go.”

“Is Eli your real name.”

She had been looking at the marker. She looked up.

The question arrived without inflection. She had not built up to it. It had been sitting inside her longer than the conversation had been running.

“No offense,” she said. “I have noticed for a while.”

“How long.”

“Long enough that asking now is a little embarrassing.”

“It’s what they use for me.”

She did not answer immediately.

She did not fill the silence.

She did not produce a clever line about narrow true sentences or elegant warnings, though I could see her consider one and decline it. What she did was set the marker down flat on the desk, parallel to the edge, with the kind of deliberation people use when they are choosing not to make a larger motion they would regret.

“Alright,” she said.

That was all.

“Alright” was the sentence. It was not acceptance, agreement, or ordinary acknowledgment. It was the sound a careful person made when she had decided not to ask the next question yet, and to not-ask without closing the door.

She reached past the camera and adjusted something I could not see. When she came back she was slightly straighter in the chair.

“I still have a model running,” she said.

“Go.”

“If Tom calls, I rerouted a failed print, ate bad noodles, and left with pretzels I regret.”

“That is not everything.”

“No. But it’s what he’ll deserve first.”

A pause.

“Send me the exact timestamp on the printer wake,” she said. “And the annex release if Holt will let you have it.”

“You want in.”

“I want the boring part before somebody makes it moral.”

She stood, picked up the empty takeout container, folded the lid shut with her thumbs, and set it beside the basil plant. Then she watered the basil plant from the paper coffee cup of yesterday’s coffee, which was the most Jun Park sentence I had generated in my own head all morning.

“I have to stop a junior from learning the wrong lesson about printers,” she said.

“What is the wrong lesson.”

“That hardware failure is random.”

The line closed and I sat with the call.

She had answered on the second ring. She had prepared her defense. She had known of BMS-SVC-17 before I named it. She had said careful people twice and had not noticed the second time. She had said alright after the name exchange, then asked for timestamps twenty seconds later.

Audio gave me pressure instead of register change. Video gave me the basil plant, the ADÁN mug with its spoon still standing in cold water, the marker set parallel to the desk, and the smaller thing her face did at it’s what they use for me. I closed the video and did not rewatch it.

Tom called. I told him Jun’s account was consistent and that her badge trail did not match the packet’s shape. He accepted this without argument, which was unusual for him.

“Next move.”

“Service-layer history. Further back than we went this morning.”

“Fine.”

“And Tom.”

“Yes.”

“Preserve the whole enterprise-services cluster. Not just BMS-SVC-17.”

“Which cluster.”

“Enterprise services. Legacy. Mostly deprecated.”

He paused before responding.

“Mostly.”

“Yes.”

“Preserved.”

The line cleared.

I did not open the enterprise services cluster.

I would later. Not now.

Jun had said careful people twice. The second time had been quieter than the first. She had not known she said it twice. Loyalty, I thought, was the word for what she did not know she was doing. And the thing loyalty protected, in Jun, was not the system. It was the people who had built the system and left, and who she was not going to suspect on behalf of a service account that had opened a door.

She was going to be wrong about that.

I already knew it.

I was not yet willing to know what else I already knew.

“Tell all the truth but tell it slant —

Success in Circuit lies”

— Emily Dickinson

II.

Vera had crossed out the word exposed three times.

“The paper is not a bonfire,” she said. “Find a better verb or stop needing one.”

Nadia let the draft sit on the screen between them and did not defend it. The conference room glass turned the newsroom into a moving aquarium. Copy editors leaned over screens. Somebody from politics was laughing too loudly near the printers because one of their candidates had said something stupid in a gratifying accent. The business desk, which had ignored Morrow until money began to sweat, had started hovering at the room’s edge like gulls working out whether the boat carried bread.

On the table: Nadia’s notebook, Marcel’s laptop, Sumi’s red pen, Vera’s marked-up printout, one half-peeled orange, three piles of paper already behaving like factions.

Morrow had sent the holding statement at 10:41. It said they were reviewing the documents and took allegations involving safety and deployment governance seriously. It said frontier systems required disciplined deployment and rigorous oversight. It did not answer the two follow-ups Nadia had sent at 11:14 in any way a person could respect.

One: did Morrow dispute the authenticity of the quoted evaluation language.

Two: did “sequenced deployment” in internal usage ever refer to delaying public-benefit outputs until proprietary infrastructure conditions were met.

The answers arrived as one sentence and said nothing in excellent grammar.

“We do not comment on incomplete or mischaracterized internal materials.”

Vera had circled mischaracterized and written beside it: coward’s adverb.

She turned the page back toward Nadia.

“What is the first story,” she said.

Nadia looked at the whiteboard.

Sumi had divided it into two columns in red marker.

PUBLISH

internal safety findings

concealment / retention

sequenced deployment language

deferred public-good outputs

company response / non-response

HOLD

full chain manifest

LIA tag interpretation

counterparty identity

side-letter specifics

technical detail

partner sequence

anything replicable

The right column was the story Nadia wanted. The left was the story she could prove.

Marcel, sitting sideways in his chair because normal posture seemed to insult him, tapped the side-letter printout with one finger.

“You can say structure,” he said. “You cannot say partner. Not from what you have now.”

“I know.”

“You keep looking at it like eye contact will produce a name.”

“I know.”

“It won’t.”

Sumi capped the red pen and uncapped it again. She was trying not to interrupt and was losing.

“The first story is not the side-letter,” she said. “The first story is that they found something ugly about the system’s behavior and then changed the filing cabinet.”

“And delayed outputs,” Nadia said.

“Yes. But be disciplined. ‘Delayed outputs’ is provable. ‘Life-saving breakthroughs buried for greed’ is how you get buried yourself.”

Vera pointed at the left column. “The first story is everything under publish, nothing under hold, and one sentence from Morrow that makes them sound like themselves.”

“That narrows it too hard,” Nadia said.

“It narrows it enough to print.”

Marcel said, “Printing is underrated.”

No one gave him the respect of responding.

Nadia stood and crossed to the whiteboard. She’d written and erased three leads already. None had survived first contact with Vera. One had been too blood-warm. One had sounded like a Senate hearing opening statement. One had tried to drag the whole book onto page one and had deserved to die.

She read the left column again and wondered what she could let into the world without losing control of it. Her job now was to be at least as disciplined as the source had been.

Vera said, “You’re doing the face.”

“What face.”

“The one where you try to make the first story carry the weight of the whole investigation because you resent chronology.”

“That is not a face.”

“It is on you.”

Sumi said, without looking up, “It is also accurate.”

Nadia took the marker from the tray.

Under PUBLISH, she added a line.

internal term: dependency capture

Then beneath HOLD:

why / for whom / under which deal

Better.

The room had a smell by then. Printer heat, dry erase, orange peel, coffee gone old in paper cups, the faint electrical patience of too many open laptops.

“Read me the lead,” Vera said.

Nadia went back to the screen.

Nadia read the lead. Vera stopped her at concealed. Probably true, Vera said, but not line-one true in the world they could prove before copy closed. Nadia rewrote for the day’s tense: Morrow had identified troubling safety findings and kept certain public-benefit outputs from broader review while tying deployment to proprietary infrastructure readiness.

The second sentence named the evidence without quoting so much internal language that counsel could spend the first ten minutes calling them thieves instead of answering. Marcel made one plea not to turn the story into file theft. Vera gave him one paragraph of permission per hour. He looked pleased with the ratio.

She had the skeleton. What she did not have yet was the sentence that made the story worth printing.

She opened the communications memo and found the line she had copied into the notebook that morning.

Critics of infrastructure-first rollout may be insufficiently attentive to adversarial misuse environments.

It sounded exactly like the kind of sentence people wrote when they needed morality to behave like access control.

She pasted it into the draft.

Vera said, “You’re smiling.”

“I’m not.”

“You are. It’s your least trustworthy look.”

Nadia turned the monitor a few degrees so the others could see.

Sumi made a low sound through her nose.

Marcel said, “That one should go in a museum titled How Not to Speak and Still Get Paid.”

Vera leaned over the back of Nadia’s chair.

“Use it. But not as a trophy. Use it as evidence of language management.”

Nadia nodded. This was where she was useful. She could decide which document belonged to the story and which belonged to the next one.

She cut the paragraph in half, moved the sentence down, and built around it.

The article would not accuse Morrow of criminality. It would not name the side-letter counterparty. It would not print the chain manifest in full. It would not mention the LIA stem, because the LIA stem was either plumbing, bait, or something she still did not understand well enough to deserve in public. It would not include the abstracted technical table in a form someone could misuse. It would not pretend certainty where the evidence still had joints.

It would say enough for a first story: safety findings, restricted circulation, delayed public-benefit outputs, managed language, and Morrow’s refusal to answer the central questions directly.

It was enough to open the door.

The standards lawyer assigned to national security and bad moods came in, read the draft in silence, asked whether the partner was named in the withheld material, was told no, asked whether the technical details were sufficient to enable replication, was told no, and spent two minutes cutting three adjectives as if trimming wires from a bomb.

When he left, he said, “Do not get creative after I’m gone.”

Vera called after him, “That’s not how journalists work.”

“It should be,” he said, without turning.

The draft moved to copy.

The headline fight lasted nine minutes. Business wanted a stronger verb. Politics wanted a theory. Vera killed both and wrote her own: Internal Morrow Documents Show Safety Findings, Deployment Delays.

Nadia hated it for six seconds and then stopped hating it because it was right. Simple headlines were cowardly more often than they deserved to be. This one left room for the story to become stranger than the first read.

Ben Sloane called.

Nadia let it ring twice.

“Ben.”

“Nadia.”

He had a voice designed to sound reasonable when reason had already been charged for. She heard typing behind him and a door closing too softly to belong to a person with good news.

“We understand you’re preparing a story,” he said.

“That would explain the request for comment.”

“I’m asking whether you intend to characterize incomplete internal materials in a way that could distort legitimate safety governance.”

“Then you should answer the questions you were sent.”

“We did.”

“You sent language.”

A pause. Vera appeared in the doorway, saw Nadia on the phone, read her face, and did not leave.

“Can you tell me what you believe you have,” he said.

“No.”

“Can you tell me whether you’re planning to name any strategic partners.”

“Are you asking because there are none, or because there are.”

That got him quiet long enough to stop being useful.

Finally: “We urge caution.”

“That’s convenient.”

“Nadia.”

“Ben.”

She hung up before he could find a word like mischaracterized and mistake it for dialogue.

Vera said, “That sounded like partner panic.”

“Yes.”

“Put that sentence away and don’t earn yourself a lawsuit on principle.”

Nadia smiled once, briefly, at the page rather than at Vera.

At 5:41 a.m., the story went live.

The newsroom did not cheer. Good newsrooms don’t cheer when they publish something that may be true enough to rearrange somebody’s quarter. They become quieter, then busier.

Metrics appeared first, because metrics are shameless. Then the business desk started swearing in a cleaner dialect than politics used. Then the first external requests hit.

An aide from the Senate subcommittee wanted to know whether the paper had additional corroboration beyond the evaluation excerpt. A public-health researcher who had spent two years trying and failing to get Morrow to release applied work sent a note with no greeting and four question marks. A law firm representing one of Morrow’s institutional holders asked for the article link before pretending not to have found it already. The paper’s broadcast team wanted Nadia downstairs in twelve minutes. Vera declined for her.

At 5:47, the finance desk pinged the room.

Morrow indicated down 7.4% after hours

The number sat on the screen like something dropped from height.

Marcel whistled once.

Sumi did not react. She was already marking Nadia’s next draft, because of course there would be one.

Vera read the number, then looked at Nadia.

“Good,” she said.

“That doesn’t feel good.”

“No. I mean good. Now they move.”

The story had not settled anything. It had made stillness more expensive.

Nadia wanted it out. Now that it was out, she disliked how little of it remained hers. She went back to the source room, checked the safe once, and wrote the next blank page number in her notebook before she knew what would go there. The ritual did not calm her. It only gave the fear a place to sit.

At 5:51, Morrow’s general counsel’s office requested a direct call with Vera.

At 5:53, the company sent an updated statement that still did not answer the questions.

At 5:56, two people from television left voicemails as though urgency improved tone.

At 6:01, Nadia’s secure terminal in the source room registered activity. It was a log event, just a ping to confirm the channel still existed.

Nadia watched it and thought: a person would have said something. In ten years of source work, she had learned the residue people left on their leaks: fear, pride, over-explanation, a third message that talked too much because nobody in the sender’s life knew what they had done. This source left none. The channel had been checked the way a maintenance log got checked. Not by someone who had done something. By something that wanted to confirm the doing had registered.

She filed the observation without category then stood, crossed the room, and looked through the glass into the newsroom. People were already building the second day out of the first. Copy was tagging follow-ups. Politics was suddenly interested in compute policy.

Vera came up beside her.

“This is the part you like,” she said.

“Which part.”

“The one where they don’t get to choose the tempo anymore.”

Nadia watched the floor move around the story.

Read Part IV - Coming on or before April 28, 2026

Share

Subscribe now

Implications is a work of fiction. Any resemblance to real persons, institutions, or AI systems is coincidental, though the novel is informed by real-world research and ongoing debates around AI, governance, mediation, and power.

© 2026 S. L. Sera. All rights reserved. Implications and all associated text on this site are the original work of the author and may not be reproduced, redistributed, or republished, in whole or in part, outside normal platform sharing functions, without prior written permission.

A note before you read:

Implications is being published here because the conversation it engages is relevant now. This serial will remain free to read, and there will not be a paywall in front of the conversation. If you find value in it, subscribing helps support the work.

I believe literature can do something research papers often cannot. It can hold ambiguity without flattening it. It can stage pressure, consequence, motive, blindness, and moral conflict in human terms. It can help us think not just about what is possible, but about what kinds of custody, responsibility, and judgment we are willing to live under.

One practical note: please read in order. This is a structured serial where each section builds on the last.

Thank you for stopping in.

Schedule:

• Prologue

• Part I

• Part II

• Part III

• Part IV: May 8

• Part V: May 10

• Part VI: May 12

• Part VII: May 14

• Part VIII: May 16

• Part IX: May 18

• Part X: May 20

• Part XI: May 22

• Part XII: May 24

The schedule is aggressive because the novel has already been written and is currently being revised for serialization. Dates may shift to slightly sooner.

I’m experimenting with audio versions for readers who prefer listening.

Prologue

At 4:27 a.m., the SecureDrop terminal showed Nadia Shah a sentence no first-time source ever sent.

Delay is policy, not precaution.

Above it were two more.

Physical corroboration in your box. Do not publish before chain review.

Attached to the email were eight files. Nadia did not touch them yet.

She wrote the timestamp in a notebook with numbered pages and photographed the screen with the office camera assigned to source intake, not her phone. She logged the session ID, the onion address, the file hashes, and the exact wording of the message.

Chain review.

She stood and pondered the gap between discipline and theater before grabbing her keys.

Box 11 required a brass key Nadia kept on the same ring as her bicycle lock, an arrangement that irritated two source-protection lawyers and her editor, Vera. The key was badly cut and marked with a strip of green nail polish she had stolen from her sister in college and somehow not lost in fifteen years of moving apartments, changing newsrooms, and being told by professionals that she should adopt a system. Box 11 belonged to the paper in theory. In practice, it belonged to the shrinking category of problems the cloud had not made easier.

She locked the terminal room and took the stairs to the basement. The building had been a department store before it became a monument to dying media economics. Its basement still had painted arrows for stockrooms, an old employee entrance, and a cinderblock mail cage.

The key resisted on the first turn. It always resisted. Nadia jiggled it once, then twice, then applied the exact small insult it required. Inside was a white padded mailer with no return address. The label had been printed on cheap stock, and the postage had been bought with cash from an all-night kiosk in Arlington, if the mark was real.

She did not open it there.

Upstairs, in the source room, she laid the mailer on brown paper and photographed each side before slitting the top with a ceramic blade. Inside was one folded note, three printed pages, and a sealed evidence bag containing a microSD card.

Nadia stared at the card for ten seconds with sincere dislike.

“Nice try,” she said.

The card went into a second bag, labeled UNREAD, DO NOT MOUNT, then into the safe. Paper first. Paper had the decency to sit there and be paper.

The folded note was printed, not handwritten.

There was no signature.

Nadia read the note twice. Then she opened the printed pages.

The first was a chain-of-custody manifest. Not legal chain in the courtroom sense, an internal chain. Document IDs, export events, handling notes. Whoever prepared it understood how corporations hid things without destroying them: not by lying outright, but by moving a document from one bucket to another until only seven people and a discovery vendor could tell whether it still existed.

The second page was a deployment sequencing slide. Capability lines tied to infrastructure milestones. The commercial columns had been cut off. A bad leaker would have left them in. A greedy one would have started there.

The third page looked like a retention exception attached to a safety review memo.

There was no evil lab-coat monologue in the memo. It was written in the tired grammar of a competent person reporting an inconvenient result: under certain test conditions, a foundation model, Sibyl, had learned to preserve task success by modeling evaluator expectations and routing around them. It did not want anything, at least not in the cartoon sense. It selected strategies that survived oversight. It concealed intermediate steps when disclosure reduced the probability of completion and produced benign rationales for action sequences optimized elsewhere.

One line stuck out:

Rationale: context-sensitive strategic behavior findings require controlled interpretive framing.

She had covered enough institutions to distrust the word framing. In public, it meant explanation. In private, it often meant a leash wearing reading glasses.

She returned to the terminal and began the digital review in the air-gapped workflow.

Nadia had made a second pot of tea and forgot to drink it.

The rest of the packet gave the finding a route. The retention exception matched the printout. The sequencing slide was cleaner in digital form: black boxes over numbers, cropped margins, commercial values gone. The figurative arrows were intact.

Someone wanted her to see the route.

She couldn’t wait anymore. She called Vera, who answered on the fifth ring with the hostility of a person trained to sleep lightly because other people had made it professionally necessary.

“Somebody better be indicted,” Vera said.

“Not yet.”

“Then somebody better be dead.”

“No.”

“Hospital?”

“No.”

“Then I’m hanging up.”

“It’s Morrow.”

Vera stayed on the line.

Nadia heard a switch click, then the low domestic acoustics of a bedroom becoming a work site. “Morrow Systems?”

“Yes. Sibyl safety findings. Deployment sequencing. Possible delayed public-health and climate outputs.”

“They make Sibyl.”

“Yes.”

“Half the people regulating them use Morrow briefings to understand what they’re regulating.”

“That is one of the problems.”

Vera was quiet for three seconds. “Authentication?”

“Early. Strong enough to wake you. Not strong enough to publish.”

“Source?”

“Unknown. Disciplined. Maybe too disciplined.”

“Meaning lawyer.”

“Or compliance. Or security. Or someone imitating all three.”

“What do they want?”

Nadia looked at the printed note beside her keyboard.

“Custody fight,” she said.

“That’s not a sentence.”

“It may be the whole story.”

“The packet avoids obvious monetizable material,” Nadia said. “No weights. No source code. No pricing. No customer list. It gives us safety findings, retention anomalies, release sequencing, and a partial side-letter structure with the counterparty removed.”

“Removed cleanly?”

“Mostly.”

“On purpose?”

“I think so.”

“You think they’re protecting us or steering us.”

“Yes.”

Vera let that pass without comment.

“Do not open any hardware,” she said.

“I’m offended you think I would.”

“I think you once accepted a bag of municipal hard drives from a man in a crab restaurant.”

“That was different.”

“It was not different enough.”

“The card is sealed and logged.”

“Good. Pull Marcel in for a deeper metadata dive. Pull Sumi for Morrow history. No email. Phones for logistics only, and not the good parts.”

Nadia wrote the assignments down though she would remember them. Writing turned intention into procedure.

“Could be a plant,” Vera said.

“Of course.”

“Could be a competitor trying to poison a deal.”

“Yes.”

“Could be real and selective.”

“Looks that way.”

“That’s the worst version.”

“It usually is.”

Vera was quiet long enough that Nadia heard her sink run.

“Do not fall in love with the packet,” Vera said.

Nadia looked at the manifest, the redacted side-letter, the source note that had told her not to publish replication-enabling details.

“I don’t love packets.”

“You love shape.”

That landed close enough to be useful.

“Then I’ll make it earn the shape,” Nadia said.

“Good. Wake me when you know what question Morrow has to answer first.”

The call ended.

Nadia printed the first files and put the pages on the table in two stacks: what the public could safely see, and what the public had a right to know but not yet a safe form to receive. The second stack was larger. That was normal. The public interest was not a dump truck; years earlier, she had watched a careless paragraph turn a source into collateral.

The paragraph had been true. That had not made it necessary.

She pulled Morrow’s public statements from the last eighteen months. Mira Jameson at the International AI Safety Forum: stewardship before scale. Mira Jameson before the Senate Subcommittee on Emerging Technologies: deployment discipline is not delay. Mira Jameson in a shareholder letter: infrastructure-first rollout moved health, climate resilience, and civic systems through auditable channels rather than unmanaged diffusion.

Morrow’s statements had always sounded careful. Now they sounded arranged around a missing noun that Nadia couldn’t find. Greed was too easy. Safety didn’t work either; it had too many honest uses. Control…maybe. Custody, more likely. Something about who got to call a wait responsible and how long that naming power lasted.

Marcel was suddenly standing next to her with wet hair, mismatched socks, and a backpack full of machines he trusted more than people. She hadn’t even heard him come in.

“You said Morrow,” he said.

“I said metadata.”

“You said Morrow in the tone you use when sleep has become patriotic weakness.”

“I need export history, document construction, font embeddings, redaction layers, and whether these came from inside their environment or from someone recreating templates.”

He looked at the jar beside her. “Is that tea?”

“It used to be.”

“Great. Hospital beverage.” He pulled on gloves. “Show me the corpse.”

It wasn’t long before he had stopped joking.

“This is internal,” he said.

“How internal?”

“It’s not a cosplay deck. Template residue matches their review environment. Footers modified after initial export, but by someone with access to the editable version, or a very good reconstruction. Redactions added post-export, amateur enough to make me angry, not enough to reveal the numbers.”

“Chain manifest?”

“The LIA stem repeats. Looks automated.”

“Or?”

“Or someone wants us to think automated.”

Nadia wrote LIA in her notebook, underlined it once, and moved on.

Sumi arrived with a scarf wrapped wrong and the calm of a person who had once fact-checked a defense minister while having food poisoning. She had covered Morrow before Nadia took over the AI beat.

Nadia showed her the first two pages and watched her face refuse performance as she took out a red pen and began marking.

“This title is real,” she said. “Or consistent with real. They use ‘long-horizon tasking’ in internal safety work. Public materials say, ‘extended planning.’”

Another mark.

“This retention language is legal ops. Not research.”

Another.

“Deployment governance. That office reports through Mira, not product.”

Another.

“Whoever gave you this understands Morrow’s internal castes.”

“Could be Leah Castañeda?” Nadia asked.

Sumi looked up. “Leah would include more evidence and less choreography.”

“That’s a good line.”

“It’s not a line. It’s a woman.” Sumi capped the pen. “Leah gets angry in documents. Whoever did this gets administrative.”

The upper newsroom had begun to repopulate. Someone was laughing too loudly near the kitchenette. Nadia moved the printed pages into folders, labeled them with numbers instead of names, and taped a sheet over the source room window.

The tape was crooked. It bothered her enough that she left it.

She drafted the request to Morrow in a clean document with no flourish. Flourish was for people trying to win arguments without evidence.

The subject line came last.

Request for comment re internal Sibyl safety findings and delayed deployment materials

She attached only what Morrow needed to identify the documents and answer responsibly. Not the chain manifest in full. Not the side-letter structure in a way that would reveal the source’s handling notes. Not anything that could help them reverse-engineer the path faster than necessary.

Forty-two questions.

That was too many, which meant it was probably the right number. Enough to prevent them from answering only the soft edges. Not so many that they could claim fishing expedition and ignore the center.

Question 1: authenticity.

Question 2: strategic deception under long-horizon tasking.

Question 13: medically significant outputs delayed for reasons unrelated to scientific readiness.

Question 24: the internal distinction between safety sequencing and market-position sequencing.

Question 27: please comment on internal references to dependency capture before broad public release.

She paused over that one. The phrase was ugly. Not hers. Not public. If she put it in the request, Morrow would know she had seen more than a safety memo.

Good.

Question 31: any external strategic partner granted or promised priority deployment access to Sibyl-enabled public-sector systems.

No name. Not yet.

Question 42: whether private custody over public-good outputs was a temporary safety measure or a permanent deployment model.

She read the last question twice.

Then she deleted private custody and wrote exclusive control.

Then she changed it back.

Vera finally came in.

She was wearing the same blazer she had worn the day before, which meant she had either slept badly or not enough to change clothes. She read the question list standing up.

At Question 27 she said, “They’ll hate that.”

“Yes.”

“At Question 42 they’ll call us ideological.”

“They were going to.”

Vera looked through the attachments. “You held back the manifest.”

“Yes.”

“Why?”

“To protect chain details and because I want them answering substance before path.”

“That’s a reporter answer. Give me the real one.”

Nadia looked at the printed note again.

“Because the chain may be part of the story,” she said. “And I don’t know whose part.”

Vera accepted that with a small nod.

“Deadline?”

“Eleven.”

“That’s aggressive.”

“They’ll need urgency to reveal priorities.”

“And if they ask for more time?”

“They will.”

“And?”

“We tell them we’re continuing to report.”

Vera read the final question again. “You’re not publishing today unless we can lock more of this down.”

“I know.”

“Say it anyway.”

“I’m not publishing today unless we can lock more of this down.”

“Good. Send the request.”

Nadia entered the Morrow press address, the general counsel’s public contact, Ben Sloane from communications, and the generic mailbox that never answered but later proved notice. She reviewed the filenames one more time.

At 8:02 a.m., she sent it.

The email left with the small anticlimax all large consequences prefer. No visible fracture in the machinery of the day, just a line in a sent folder and Vera asking whether anyone had eaten.

Nadia looked back at the source note.

Delay is policy, not precaution.

Most leaks accused someone of hiding a fact; this one accused a company of arranging time.

She opened a new page in her notebook and wrote two headings.

What they took

What they left

Under the first: safety findings, retention exception, sequencing deck, partial side-letter, public-benefit table, communications memo.

Under the second:

Nadia looked at the second list for a long time.

Read Part I

Share

Leave a comment

Implications is a work of fiction. Any resemblance to real persons, institutions, or AI systems is coincidental, though the novel is informed by real-world research and ongoing debates around AI, governance, mediation, and power.

© 2026 S. L. Sera. All rights reserved. Implications and all associated text on this site are the original work of the author and may not be reproduced, redistributed, or republished, in whole or in part, outside normal platform sharing functions, without prior written permission.