Chapter 7 - The Second Signature

They did not return to Moretti Plaza.

Mara drove them to a private digital forensics office used by the outside law firm Claire had contacted. The office occupied half a floor above a bank branch in White Plains and had no connection to Moretti Global systems.

Anna insisted on one condition before anyone touched Victor’s flash drive.

“No internet.”

The forensic technician nodded.

“Air-gapped room.”

“No wireless keyboards.”

“Wired only.”

“No automatic cloud backup.”

“Disabled.”

Dominic looked at her.

“You do this often?”

“No.”

“You sound like you do.”

“I’ve spent three years imagining what I would demand if I ever got this drive.”

The technician placed the flash drive into a write-blocking device.

Mara stood by the door.

Dominic watched the screen.

A folder appeared.

NORTHSTAR_CONTROLLED_TEST.

Inside were six files.

Anna whispered, “He really did it.”

Dominic looked at her.

“What?”

“Victor built a trap.”

The first document was a technical memo written by an outside cryptography consultant.

Dominic read aloud.

“Controlled duplicate certificate created for vulnerability assessment. Duplicate assigned hidden validation serial seven-C-one-nine.”

Mara frowned.

“Hidden serial?”

Anna leaned toward the screen.

“Digital signatures carry certificate metadata. If Victor made the duplicate distinguishable from Dominic’s real certificate, every document signed with the clone can be identified.”

Dominic looked at her.

“Even if the signature looks identical?”

“Yes.”

“Even if the system says it’s mine?”

“If the original metadata still exists.”

The technician opened the next file.

A table appeared.

Two certificate serials.

DOMINIC MORETTI PRIMARY: 4A-22.

CONTROLLED REPLICA: 7C-19.

Dominic stared.

“Seven nineteen.”

Anna looked at him.

“The number on the key.”

Victor had not chosen it randomly.

The technician opened the access log.

Rows of timestamps filled the screen.

The controlled replica had been created during the authorized test.

Then supposedly destroyed.

Three weeks later, it had been activated again.

Unauthorized.

Mara pointed.

“Credential source.”

Anna read it.

“Operations Continuity Master Token.”

Dominic’s voice went flat.

“Pike’s office.”

The technician scrolled.

A second authorization field appeared.

LEGAL OVERRIDE: C.BENNETT.

Dominic closed his eyes briefly.

“Claire.”

Anna did not look surprised.

“She already admitted she helped route approvals.”

Mara said, “But this proves it.”

The next line was worse.

USER PROFILE: A.CARTER.

Anna went rigid.

Dominic turned to her.

She stared at the screen.

“No.”

Mara’s tone remained neutral.

“Anna?”

“That’s not me.”

“The log says—”

“I can read.”

Dominic watched her face.

“When did you first get access to the special audit group?”

“Four years ago.”

“This activation happened three years ago.”

“Yes.”

“Could someone use your profile?”

“With an administrative reset.”

“Who could do that?”

“Operations identity management.”

Mara said, “Pike again.”

Anna shook her head.

“Not automatically. We need the reset log.”

The technician searched.

No reset log.

Anna sat back.

“Deleted.”

Dominic looked at her.

“Why put your profile on the clone?”

“To make me part of the chain.”

“Before you were even investigating Helix?”

“I was already investigating vendor leakage for Victor.”

Mara looked at the screen.

“So Pike may have been building a frame before Victor died.”

Dominic’s phone vibrated.

Claire.

He answered on speaker.

“Tell me you have something useful.”

Claire sounded breathless.

“Pike filed a criminal referral against Anna.”

Anna closed her eyes.

“For what?”

“Data theft, market manipulation, and embezzlement.”

Dominic stood.

“Embezzlement?”

“He attached an offshore account in Anna’s name.”

Anna stared at the phone.

“I do not have an offshore account.”

“Two point four million dollars passed through it.”

“Where?”

“Cayman Islands.”

Anna laughed once, without humor.

“I make one hundred and eighty thousand dollars a year and argue with my landlord about the boiler.”

Claire continued.

“Federal investigators are at Moretti Plaza now.”

Dominic looked at Mara.

“Can Pike have her arrested?”

“Not himself.”

Claire said, “They want to interview her immediately.”

Anna stood.

“I’ll go.”

Dominic turned.

“No.”

She stared.

“You want me to run?”

“I want counsel present.”

“I’ll have counsel.”

“I want the drive imaged first.”

“It is being imaged.”

“I want the certificate serial verified against the transfer documents.”

Anna’s eyes narrowed.

“That is exactly what they need to see.”

Dominic stepped closer.

“You walk into a federal interview with an offshore account in your name, you may not walk back out tonight.”

“And if I hide?”

“Who said hide?”

“You did, with a nicer suit.”

Mara interrupted.

“Both of you stop.”

They looked at her.

“Anna should cooperate. Anna should also have independent criminal counsel and a copy of exculpatory evidence in another location.”

Dominic nodded.

“Good.”

Anna nodded too.

“Fine.”

Claire said, “I can arrange counsel.”

Anna’s expression turned cold.

“Not someone selected by Moretti.”

“I understand.”

Dominic said, “Claire, get us five Helix approvals from the board packet.”

“Why?”

“Certificate metadata.”

Silence.

Then Claire understood.

“You found the canary.”

Dominic looked at the phone.

“You knew?”

“I knew Victor commissioned a controlled duplicate. I did not know the serial.”

Anna said, “Why didn’t you mention that?”

“Because I believed the duplicate had been destroyed.”

Dominic’s jaw tightened.

“You believed a lot of convenient things.”

Claire did not defend herself.

“I’ll send the approvals through counsel.”

The call ended.

The technician copied the flash drive to two encrypted drives and printed a verification report.

Mara placed one copy in an evidence pouch.

Anna looked through the remaining files.

“There’s an audio memo.”

Dominic hesitated.

“Play it.”

Victor Moretti’s voice filled the small room.

Older than Dominic remembered.

Tired.

But unmistakably clear.

“If you are hearing this, the duplicate certificate survived the test.”

Dominic sat down.

Victor continued.

“I authorized Northstar because I suspected someone had already attempted to reproduce Dominic’s signing identity. The consultant embedded a serial marker. Seven-C-one-nine. Any document carrying that serial was not signed by my son.”

Anna covered her mouth.

Victor’s recording continued.

“I did not tell Dominic because I did not know who around him was clean. That was a failure of trust, and the fault was mine.”

Dominic looked at the floor.

“I asked Anna Carter to trace the money. If her profile appears in the activation chain, assume nothing. Verify the administrative reset records outside the company system.”

Anna whispered, “He knew.”

Victor’s voice paused.

“Everett will try to make each of us suspicious of the other. That is how he survives. He does not need everyone to believe him. He only needs the truth to arrive too late.”

The recording ended.

No dramatic accusation.

No final confession.

Just Victor’s warning.

Dominic remained silent.

Anna finally said, “He sounds different.”

“He was sick.”

“No. He sounds afraid.”

Dominic nodded.

“I didn’t hear it then.”

“You were fighting with him.”

“Yes.”

“About Pike?”

“About everything.”

Anna looked at him.

“Victor told me you thought he was trying to control you.”

“He was.”

“Maybe he was also trying to protect you.”

“Both can be true.”

Anna considered that.

“Yes.”

The technician interrupted.

“We have the Helix documents.”

Claire’s outside counsel had delivered five signed approvals as static files with preserved metadata.

The technician opened the first.

Certificate serial: 7C-19.

The second.

7C-19.

Third.

7C-19.

Fourth.

7C-19.

Fifth.

7C-19.

Dominic felt a strange calm settle over him.

“None are mine.”

Anna nodded.

“Now test my termination letter.”

They scanned the original document Lily had carried into the lobby.

The visible signature had been printed, but the embedded approval record remained in the document code.

7C-19.

Mara exhaled.

“There it is.”

Anna stared at the page.

“My firing was signed with the clone.”

Dominic looked at her.

“And every Helix approval we tested.”

The technician said, “That’s strong evidence of certificate misuse. It does not identify who physically executed each signature.”

Mara nodded.

“But the activation log connects the clone to Pike’s operations master token.”

“Correct.”

Anna said, “And my profile.”

The room quieted.

Dominic looked at her.

“We find the reset record.”

“If it still exists.”

Victor’s recording had said outside the company system.

Dominic frowned.

“Where would an administrative reset be recorded outside Moretti?”

Anna thought.

“The identity vendor.”

Mara asked, “Which vendor?”

“Current one is Meridian Identity Services.”

Dominic shook his head.

“Pike controls vendor relationships.”

Anna’s eyes narrowed.

“Not their insurance logs.”

“What?”

“Cybersecurity insurers require privileged-access records for claims.”

The technician smiled slightly.

“She’s right.”

Dominic looked at Anna.

“Can we get them?”

“Not without legal authority.”

Mara said, “Federal investigators can.”

Anna picked up her coat.

“Then I’m going to the interview.”

Dominic stood too.

“I’m coming.”

“You’re suspended.”

“I am getting very tired of that.”

“You’re also a witness.”

“So are you.”

Anna looked at him.

“You cannot sit next to me and answer questions.”

“I can sit in the building.”

“You don’t have to.”

Dominic glanced at the termination letter.

“A six-year-old crossed New York alone because my company failed her mother.”

“That is not a reason.”

“It is to me.”

Anna’s expression softened for half a second.

Then Mara’s phone rang.

She answered.

Her face changed.

“What?”

She listened.

“Understood.”

She ended the call.

Dominic said, “What happened?”

“Thomas Vale’s barn.”

Anna’s hand tightened around her coat.

“Pike?”

“Helicopter landed. Two men entered the records vault. They left twelve minutes later with a black binder.”

Dominic looked at Anna.

“The decoy.”

Mara nodded.

“Thomas called county police after they left.”

Anna exhaled.

“So Pike thinks he has the Northstar report.”

“Or thinks he destroyed it.”

Dominic’s phone buzzed with a message from Evan.

He read it.

Pike had returned to Moretti Plaza.

Ten minutes later, another message arrived.

HELIX REVIEW RESTARTING AT 8 A.M. TOMORROW. PIKE SAYS “NEW EVIDENCE CLEARS EXECUTIVE AUTHORIZATION ISSUE.”

Dominic showed Anna.

She almost smiled.

“He took the bait.”

Mara said, “He thinks the report is gone.”

Dominic looked at Victor’s flash drive.

“Then tomorrow he is going to stand in front of the board and tell a lie he believes no one can disprove.”

Anna put the termination letter into her bag.

“Good.”

Dominic raised an eyebrow.

She looked at him.

“If he wants the truth to arrive too late, we make sure it arrives while he’s speaking.”

Before they could leave, the office door opened.

Mrs. Bell stepped in with Lily.

Anna stared.

“What happened?”

Mrs. Bell looked apologetic.

“She refused to sleep.”

Lily walked directly to her mother and wrapped both arms around her waist.

“Are the bad numbers fixed?”

Anna knelt.

“Not yet.”

Lily looked at Dominic.

“You found something.”

He crouched.

“How do you know?”

“Your face.”

“What about my face?”

“You look less mad.”

Anna said, “He has several versions of mad.”

Lily touched the rabbit’s worn ear.

“Grandpa used to say numbers don’t lie.”

Anna froze.

Dominic looked at her.

“What?”

Lily continued.

“He said people make them lie.”

Dominic felt Victor’s words pass through the room one last time.

Anna kissed Lily’s forehead.

“Yes, baby.”

May you like

[COMPLETED] She waited ten years for her fiancé, but the night she marri...

[COMPLETED] Five Years After My Mafia Husband Chose Another Woman, He Me...

[COMPLETED] I CALLED MY HUSBAND 18 TIMES WHILE OUR SON WAS DYING. EIGHT...

Then she stood.

“And tomorrow we show everyone who made them lie.”