Chapter 3
Miles Varo talked the next morning.
Not because Leo threatened him.
Leo did not see him.
That was deliberate.
Miles spoke through counsel to Detective Marisol Grant and the prosecutor.
He admitted:
taking Sabrina’s wedding key from the bridal room.
delivering a newly cut duplicate to florist Celia Hart.
triggering the loading-gate false alarm.
sending the side-door schedule to Victor Salvi’s intermediary.
He denied:
knowing live gunfire was planned.
knowing Jade would be grabbed.
being inside church during attack.
Then:
who paid him?
Dominic Mancini.
Miles said Dominic offered twenty thousand dollars:
“for a security test that would embarrass Leo’s new team.”
That sounded absurd after gunfire.
Marisol asked:
“What did you believe would happen?”
Miles said:
“Salvi people would enter through side door, confront Leo, maybe rough up one guard, prove perimeter breach. Dominic said no shooting.”
Did he believe Victor Salvi would obey?
Miles cried.
“I wanted to.”
That was not innocence.
It was a choice to accept the convenient version.
Then the cash:
fourteen thousand was the advance.
six thousand had already been spent or deposited.
Then Dominic.
Confronted with Miles’s statement, he denied.
Said Miles was lying to reduce his own exposure.
Possible.
Then digital records.
Miles’s phone contained deleted messages recovered through cloud backup.
Contact saved:
D.
D:
Need SD key by 1330.
Miles:
Why copy if we have original?
D:
Original gets found on route, copy goes bouquet.
Miles:
That points at Sabrina.
D:
Exactly.
Not a security test.
A frame.
Then:
Miles:
Salvi says he wants Jade.
D:
He only needs to scare her.
Miles:
Leo will go insane.
D:
That is useful.
Dominic’s attorney argued D could be anyone.
Then metadata:
the number belonged to a prepaid phone, not Dominic’s personal device.
Purchase records and contact history connected the handset to one recovered from Dominic’s office after a warrant.
Dominic’s denial weakened.
Then Victor Salvi remained missing.
Police found one attacker at hospital under false name with shoulder wound.
He refused statement initially.
Another was arrested at cousin’s apartment.
Weapons matched shell casings.
Again:
live rounds.
Not blanks.
This was not a prank security test gone wrong.
Someone knew deadly force was possible.
Then Jade’s audit.
Leo moved it out of company control entirely.
Outside forensic firm:
Brenner Cole LLP.
Jade remained source consultant but no longer sole holder.
General counsel Elaine Park created board special committee excluding Dominic.
No family internal inquiry.
The initial findings were worse than Leo expected.
Three legacy vendors:
Bennett Facilities Consulting.
North Crown Response.
Vela Risk Advisory.
Seven years:
$3.8 million combined.
Documented services:
thin.
Some services real.
That mattered.
Bennett had performed:
two site assessments.
one emergency lock replacement.
historic building-security consulting.
Not worth $1.5 million.
But not zero.
North Crown had provided:
temporary guards during three strikes.
two threat assessments.
event staffing.
Again real work.
inflated retainer.
Vela:
almost no legitimate deliverables.
Owner:
Luca Salvi.
Payments started after a series of route disruptions seven years earlier.
Mancini Freight trucks had been vandalized.
Drivers had been threatened.
Small depots had received pressure to stop taking Mancini loads.
Then the disruptions abruptly eased.
Leo remembered.
Seven years ago, truck vandalism.
driver threats.
cargo delays.
Then suddenly stopped.
Dominic told board:
“New intelligence channels stabilized the corridor.”
Now Jade suspected:
Vela payments were protection disguised as security consulting.
Protection money.
Was Leo’s father alive then?
Carlo Mancini died five years ago.
So he was.
Did he approve?
Board minutes showed aggregate confidential-security budget approved by Carlo.
But no vendor names.
Dominic had discretion.
Could Carlo have known Vela was Salvi-linked?
Unknown.
Leo refused to assume father innocence or guilt.
Then a private email.
Dominic to Carlo:
“Vela keeps east routes quiet. Details are better left with me.”
Carlo replied:
“Keep it legal.”
Dominic:
“Always.”
That did not clear Carlo.
It showed he asked a question and accepted a vague answer.
Nuance.
Then another:
Carlo asked annual review of confidential vendors.
No review found.
Why?
Dominic submitted one-page summaries.
Carlo signed.
Weak oversight.
Not direct conspiracy.
Then Sabrina.
She postponed wedding indefinitely.
Not canceled relationship.
Postponed.
Leo accepted.
No:
but attackers win.
That would be manipulative.
She said:
“I am not getting married while I am still finding out what you decide I am allowed to know.”
Leo said:
“I was protecting an audit.”
“You were also protecting your family image.”
“Yes.”
“From me.”
“Yes.”
That honesty did not solve.
Then Jade.
She blamed herself.
“If I hadn’t pushed vendor audit—”
Leo stopped.
“No.”
Salvi chose attack.
Dominic facilitated.
Miles participated.
Audit did not cause wrongdoing.
It exposed a system people were willing to defend violently.
Then Jade said:
“I should have told Sabrina I was working for you.”
“No.”
Sabrina entered room.
“Yes, you should have.”
Jade looked.
Sabrina continued:
“Not details. Just that you were involved in something that could create risk around wedding.”
Leo said:
“That was my call.”
Sabrina looked at him.
“Exactly.”
The problem was not Jade loyalty.
It was Leo deciding risk disclosure alone.
Then Jade said:
“I accepted confidentiality.”
“Would you again?”
She thought.
“Yes, for audit details. Not about physical safety if I knew.”
Boundaries can refine.
Then police searched Dominic’s office.
They found a labeled Saint Agatha key in a secure cabinet along with old alarm codes, retired access badges, and historic site keys.
The discovery raised a new problem.
The attackers had also used a key matching the old restoration master profile.
That meant more than one copy had existed.
Locksmith file at Mancini Protective twelve years ago showed:
three copies cut from restoration master for “security transition.”
Dominic approved.
No record church knew.
One remained in office.
Two unaccounted.
The original contractor return quantity discrepancy plus private duplicates.
Access system had been compromised for twelve years.
Then Father Michael was furious.
Not at Salvi first.
At Dominic.
“You made keys to a church without authorization.”
Dominic said nothing.
Then priest looked at Leo.
“Did your father know?”
Leo answered:
“I don’t know.”
No family defense.
Then church changed locks immediately.
Not because mystery solved.
Because known vulnerability.
Every exterior lock rekeyed.
key log rebuilt.
no family security control.
Independent security vendor.
Then board suspended Dominic.
Not fired yet.
Due process.
Removed system access.
no contact with vendors.
no role in investigation.
Dominic told Leo through lawyer:
“You are letting outsiders dismantle what kept this family alive.”
Leo read sentence twice.
That was Dominic’s worldview.
Control.
informal access.
secret payments.
relationships with rivals.
Maybe he truly believed it kept people safe.
The wedding proved what those methods could become.
Then Victor Salvi sent a message.
Not to Leo.
To Sabrina.
Unknown number:
You were never the door.
Leo saw only because Sabrina showed him immediately.
She did not hide.
Message continued:
Ask your fiancé why his uncle paid us for seven years.
Then number died.
Sabrina looked at Leo.
“I am asking.”
He had no answer yet.
But for the first time, he did not try to decide how much truth she could handle.
He opened the audit file between them.
The forensic audit also corrected an early rumor.
Employees were saying:
“Dominic paid Salvi millions for nothing.”
Not accurate.
Vela had delivered some real intelligence.
Bennett had done real security work.
North Crown had supplied actual guards during labor disruptions.
The problem was not that every invoice was fictional.
The problem was that genuine work sat inside a structure broad enough to hide:
inflated retainers.
undisclosed relationships.
noninterference payments.
private consulting fees.
Jade insisted the distinction stay in the report.
One director said:
“Why help them?”
“Because if we exaggerate what is false, they can use that to attack what is true.”
Leo remembered that.
Then Gavin Bennett produced an old scanned email from Dominic:
Keep one Mancini master set until family-event transition is complete. Do not return all copies yet.
No follow-up existed.
Bennett assumed Mancini later handled return.
Mancini assumed contractor had.
Church assumed all keys were back.
Three organizations.
One gap.
Twelve years.
That was how a minor exception became permanent access.
One more thing came out of the audit’s first week.
Jade found a memo she had written to herself before the wedding:
Bennett overlaps legacy access history. Ask Leo whether church restoration included security subcontractor.
She had not sent it yet.
Why not?
Because she was still confirming the corporate link.
That note became important emotionally, not legally.
Sabrina read it later and said:
“So you were one step from telling him.”
“Yes.”
“Would you have told me?”
Jade took time.
“If I had realized the overlap created physical risk, yes.”
Sabrina nodded.
The answer was not perfect.
It was specific.
That mattered more.
Then Leo added a standing audit rule:
when an investigation uncovers historical physical-access overlap, independent security gets notified even before financial conclusions are final.
No vendor names shared beyond need.
No audit details exposed.
May you like
Just enough to connect risk domains.
That change came from Jade nearly asking the right question one day too late.
