“Graham,” I said quietly, “you need someone to check every site immediately.”

“I already have people doing that.”

“Not badge access. Contract status.”

“Why?”

I looked through the windshield as the first drops of rain began striking the glass.

“Because if North Side and Fulton both received the same deactivation alert, they’re probably not the only ones.”

He didn’t reply.

Twenty minutes later, while I was still sitting in that parking lot, an email arrived from Halcyon’s board chair.

The subject line contained only four words.

URGENT: INFRASTRUCTURE CONTINUITY REVIEW.

And attached beneath it was a list of twelve facilities.

### Part 3

By three o’clock that afternoon, six of the twelve sites had entered some form of restricted-access status. Not all of them were fully locked down, but that hardly made the situation better. Two landlords allowed employees to remain inside while refusing new deliveries, one suspended access to a secured equipment cage, another froze after-hours credentials, and North Side remained completely inaccessible because its insurance rider required continuous named authorization for the technical area.

The board meeting invitation came thirty minutes later.

I almost declined it.

Then I thought about the employees who had nothing to do with Graham’s decision and accepted.

The meeting opened with five people on screen. Elaine Whitmore, Halcyon’s board chair, sat in the center of a wood-paneled office. To her left were two directors I recognized from quarterly meetings, and on the right were Halcyon’s general counsel, Peter Shaw, and Graham.

Nobody mentioned my termination.

Elaine went straight to the point.

“Mara, we need to understand what broke.”

I shook my head slightly.

“Nothing broke.”

That produced the first uncomfortable silence.

Peter leaned forward. “Six facilities have imposed restrictions since your access credentials were deactivated.”

“Then the system is functioning exactly as written.”

Graham’s jaw tightened.

Elaine noticed.

“Explain that distinction.”

So I did.

I shared my screen and opened the infrastructure map I had maintained for years. Twelve secondary sites appeared around the Midwest and East Coast, each color-coded by purpose: technical operations, overflow inventory, records, spare parts, seasonal cross-docking, and emergency capacity.

None were secret.

None were hidden.

But they had been treated as background.

“During Halcyon’s expansion,” I explained, “we signed master agreements quickly because operations needed capacity faster than centralized onboarding could keep up. Local riders handled controlled access, after-hours use, liability, specialized equipment, environmental requirements, and emergency procedures.”

Peter nodded slowly.

“I remember some of those.”

“You should. Legal approved every one.”

Graham shifted in his chair.

“Then why does your name appear everywhere?”

“Because landlords requested a stable point of operational authorization. Halcyon changed regional managers four times in five years. Procurement reorganized twice. Facilities moved between departments three times.”

I pulled up another document.

“This is the authorization matrix I submitted last February.”

Elaine looked toward Peter.

“Have you seen this?”

Peter’s face tightened.

“I’ve seen the category.”

“That’s not what I asked.”

He glanced down.

“No.”

I wasn’t surprised.

My February report had been reduced to three bullets in the executive risk summary: “Secondary facilities stable. No material incidents. Authorization redundancy recommended.”

Recommended.

That one word had apparently made seven years of dependency sound optional.

I opened the next page.

“For four years, I’ve requested secondary signatories.”

Graham interrupted. “And why wasn’t that completed?”

I looked directly at him.

“Would you like the dates?”

He stopped moving.

I read them.

April 2023: postponed during acquisition integration.

November 2023: funding denied.

June 2024: reassignment project deferred.

January 2025: classified as low priority.

March 2025: requested again after two property-management companies changed ownership.

May 2025: included in my infrastructure risk memo.

Two weeks ago: included in my termination-transition warning.

Nobody spoke.

Elaine finally asked, “Who classified it as low priority?”

I could have answered.

I didn’t need to.

Graham already knew.

He rubbed one hand across his chin.

“The assumption was that legal ownership of the lease protected access.”

“Legal occupancy,” Peter corrected automatically.

“Whatever.”

“No,” I said. “That’s part of the misunderstanding.”

Everyone looked at me.

“Halcyon has leasing rights. But access to specific secured operations is governed by operational riders. Those provisions exist because some sites contain specialized equipment, shared landlord systems, restricted loading areas, or insurance requirements. If the authorized representative disappears without substitution, the landlord doesn’t cancel the lease. They temporarily restrict the covered activity.”

Elaine leaned back.

“So nothing has been taken from us.”

“Correct.”

“No property is being withheld illegally.”

“Correct.”

“We created a verification gap.”

“Yes.”

Peter removed his glasses.

“And every landlord has a slightly different process.”

“Exactly.”

That was the part Graham had not understood.

This wasn’t one centralized problem with one button that could be pushed.

It was twelve relationships.

Twelve sets of documents.

Twelve property managers.

Twelve verification procedures.