Chương 6
Matteo proposed again three years after the shooting.
Not at the estate.
Not near a pool.
Not during an event.
They were eating breakfast in Camilla’s apartment when the toaster burned a piece of bread.
The smoke alarm started.
Camilla swore.
Matteo laughed.
Then he looked at her standing on a chair waving a dish towel beneath the alarm.
He thought:
this is enough.
Not drama.
Not proof.
Life.
When the alarm stopped, he said:
“Come down.”
Camilla looked suspicious.
“Why?”
“Because I am not proposing while you’re standing on furniture.”
She froze.
Then slowly stepped down.
Matteo took a ring box from his jacket pocket.
Camilla stared.
“You brought that here?”
“Yes.”
“Since when?”
“Since yesterday.”
“And you planned breakfast?”
“No. I planned dinner.”
She laughed.
Then he put the box on the table.
“Camilla Hayes.”
“Yes?”
“Do you want to be engaged to me again?”
She started crying.
“Yes.”
“Do you want me to ask the second question?”
She laughed through tears.
“Yes.”
“Will you marry me?”
“Yes.”
Then:
“Do you want the ring?”
“Matteo.”
“I’m asking.”
“Yes.”
He put it on.
Smaller than the first.
Not because symbolism.
They liked it.
Then the prenup.
Independent lawyers.
Her assets:
separate.
His Bellucci interests:
separate.
No spouse control of family company.
No marriage-approval conditions.
No waiver of undisclosed historical claims.
No use of household security systems to monitor the other without consent.
No sharing personal access codes with third parties.
No confidential settlement requirement for truthful testimony about unlawful conduct.
No automatic right to the other’s private email, location, medical records, or devices.
The lawyers smiled at one clause:
No shared property-access credential may be issued without individual identity logging.
Matteo said:
“Keep it.”
History earns specificity.
Then the wedding.
Small.
City hotel garden.
No Bellucci estate.
No Lake Aurelia.
No pool.
Sophie was invited.
She came with her partner.
Not as staff.
Vittorio attended.
He was eighty-one.
Walking slowly.
Public reputation changed.
Still difficult.
Before the ceremony, he asked Camilla for a private minute.
She almost said no.
Then agreed.
He said:
“I owe your father an apology.”
Camilla looked at him.
“He’s dead.”
“I know.”
“Then put it in the archive.”
Vittorio blinked.
Then nodded.
She did not carry the dead man’s forgiveness for him.
Good.
He later recorded an oral history for the engineering archive.
No demand that Camilla listen.
Then the ceremony.
Camilla said:
“I promise to bring you the fact before I decide what you will do with it.”
Matteo said:
“I promise to hear the fact before I become the company.”
Those vows made sense only to a few people.
Enough.
Then marriage.
Their first year was ordinary.
Which meant difficult in normal ways.
Work travel.
Laundry.
Vittorio calling at bad times.
Camilla’s habit of leaving cabinet doors open.
Matteo’s habit of turning every vacation into an itinerary.
No old claim.
Mostly.
Then a real test.
A journalist emailed Camilla with a copy of a new document.
A 2003 insurer memo saying Vittorio privately offered to reimburse Rinaldi-Serra if Paolo stopped speaking to regulators.
That mattered.
Camilla called Matteo immediately.
“I have something you need to know.”
He felt old fear.
“What?”
“A memo.”
“About the incident?”
“Yes.”
“Send it to independent counsel.”
Not:
send it to me.
She did.
The memo was real.
But it had already been included in the reopened bankruptcy review.
No new liability.
The journalist had found it through public records.
Matteo looked at Camilla.
“That was easy.”
She laughed.
“Three years.”
Then:
“I still wanted to read it first and decide whether it was real.”
“You can.”
She looked surprised.
“You can read first. Just don’t act in a way that changes my choices before telling me.”
Nuance.
Good.
Then Matteo’s test.
Security reported an attempted login to Camilla’s studio access system from an old vendor credential.
The security director asked Matteo if he wanted location monitoring added to Camilla’s phone.
He almost said yes.
Then:
“Ask her.”
Camilla said no.
She wanted:
credential reset.
camera review.
no phone tracking.
Security respected.
The login came from a former cleaning vendor who had not realized his old access was still stored in one local control panel.
No threat.
Then Sophie received a promotion.
Director of Estate Operations.
Formal process.
Five candidates.
Matteo recused from final interview because Sophie’s history with him could create perception.
Independent committee chose her.
She accepted.
Then online comments said:
hostage gets promoted by billionaire.
Sophie hated that.
She considered posting her résumé.
Did not.
Her work existed.
She chose not to prove herself to strangers.
Then she implemented a rule:
event access and household access must never share the same credential system.
The pool shooting had crossed those boundaries.
A fundraiser guest should not inherit private-house access.
A household code should not become event logistics.
Simple.
Then Vittorio’s health declined.
He moved closer to Matteo.
At first Matteo managed everything.
Appointments.
medications.
staff.
Vittorio snapped:
“Stop running me.”
Matteo stared.
The old man was still competent.
Matteo had confused age with need for control.
He apologized.
They hired a care coordinator who took instructions from Vittorio.
Matteo stayed informed with permission.
Then one afternoon Vittorio said:
“You became better at asking because she scared you.”
Matteo shook his head.
“No.”
“Then why?”
“Because we both learned what assuming costs.”
Vittorio smiled.
“Same thing.”
Not exactly.
Then he asked:
“Do you trust her?”
Matteo looked toward the kitchen where Camilla was arguing with a contractor about cabinet hardware.
“Yes.”
“Completely?”
“No.”
Vittorio frowned.
Matteo continued:
“I don’t trust anyone completely. I trust enough, and I know what we do when we’re afraid.”
That was more mature than certainty.
Then Camilla’s old probation record became eligible for sealing after years of compliance.
Her lawyer asked whether she wanted to seek it.
She did.
Not to pretend it never happened.
To reduce automatic background barriers after sentence completion.
The court granted limited sealing under applicable law.
Public historical articles remained.
She did not ask them removed.
Then she started guest lecturing about design ethics and organizational trust.
Students inevitably found her past.
One asked:
“Would you give the code again if you knew there were no guns?”
Camilla paused.
“No.”
“Even if Bellucci still hid the records?”
“I would go to court. Regulators. Press. Independent counsel.”
Then:
“Anything except deciding that being right about the secret gave me the right to enter.”
That became the line students remembered.
Then Matteo and Camilla went home.
She forgot her apartment key.
Matteo held up his.
“Want mine?”
She laughed.
“No. Call the super.”
He did.
The joke was obvious.
They still enjoyed it.
Then a year later, Matteo discovered a new access issue inside Bellucci Hospitality.
Not at home.
At work.
A regional vice president had been using a former employee’s administrator credentials because “IT took too long” to create a new role.
No breach had happened.
No stolen data.
Still unacceptable.
The executive said:
“Nothing went wrong.”
Matteo answered:
“That is not the standard.”
The account was disabled.
The executive received formal discipline.
IT redesigned the provisioning process so people could get legitimate access faster.
The lesson mattered.
Bad controls often survive because proper controls are inconvenient.
Then Matteo told Camilla.
She smiled.
“You’re turning into a security lecture.”
“I was always a security lecture.”
“No. You were a control lecture.”
He laughed.
Fair.
Then Sophie built a quarterly access review.
Who still needs what?
Who changed jobs?
Which vendors expired?
Which temporary credentials remain?
Which shared codes still exist?
Shared codes:
none.
That pleased her.
Then one staff member asked:
“Why are we still doing all this years later?”
Sophie looked at him.
“Because if a lesson expires when people stop being scared, it wasn’t a system.”
That sentence made it into training.
No names.
No Marco.
No Camilla.
Just policy.
Then Matteo and Camilla celebrated their fifth wedding anniversary.
No gala.
Dinner at home.
At one point Camilla looked toward the pool visible through the glass doors.
She said:
“I still feel sick sometimes.”
“When?”
“When I remember Sophie running.”
Matteo nodded.
“Me too.”
Then:
“Do you ever wish we never found the gray case?”
Camilla thought.
“I wish we found it without what happened.”
“Yes.”
The truth did not need violence to be valuable.
They refused to thank the attack for exposing anything.
That distinction mattered.
Then Matteo took her hand.
No code.
No pass.
No key.
Just permission freely given.
Marriage also forced Matteo to confront one last bad habit inherited from the old Bellucci structure.
For decades, household staff had used one master calendar showing:
who was home.
which cars were expected.
which bedrooms were occupied.
which family members were traveling.
which doors should be opened for which guests.
Convenient.
Too convenient.
Camilla noticed a house manager could see her medical appointments and design-client dinners simply because the calendar had grown over time.
“Why does facilities need my rheumatologist?”
Matteo stared.
“They don’t.”
The system was rebuilt.
Household operations saw only what affected:
staffing.
deliveries.
security.
transportation.
Medical and personal schedules stayed private unless Camilla or Matteo chose otherwise.
Then the first mistake happened.
A florist arrived early for a dinner and said:
“Mrs. Bellucci told me to use the pool entrance.”
The employee at the gate checked.
No authorization.
The florist became irritated.
“I’ve been coming here for ten years.”
The employee still refused.
Camilla later confirmed:
she had mentioned the pool entrance casually but had never submitted access.
Old system would have treated familiarity as permission.
New system did not.
Camilla apologized to the florist for the confusion.
She did not apologize for the employee following policy.
That mattered.
Then Matteo realized the reform had become real when inconvenience reached him too.
He arrived at the estate without the phone containing his current credential.
The guard knew him.
Everyone knew him.
Still:
“I need another approved credential, Mr. Bellucci.”
Matteo looked toward the long driveway.
For one irrational second, he wanted to say:
This is my house.
Then he remembered the rain, the shattered glass, and Sophie whispering that the attackers knew the code.
He called operations.
A temporary credential was issued under his name.
Five minutes.
No humiliation.
No exception.
He told Sophie later.
She laughed for a full minute.
“Best five minutes of my career.”
He almost fired her.
Not really.
That evening he told Camilla:
“I think the system finally works.”
She asked:
“Because it stopped you?”
“Yes.”
“Then maybe.”
They toasted with bad grocery-store wine.
May you like
No gala.
No code.
