Chapter 4
Crestline Hospitality Services survived.
Paolo Santini did not control enough of it to destroy the company when he was arrested.
That mattered because Crestline employed more than eight hundred temporary workers.
Most had nothing to do with ghost billing.
The easy response would have been:
cancel every contract.
freeze every payment.
blacklist everyone.
Dante wanted that for forty-eight hours.
Then Priya Shah showed him the worker list.
Housekeepers.
servers.
warehouse loaders.
drivers.
people who needed Friday checks.
“You can terminate Crestline,” she said.
“But do it with a transition plan.”
So Romano Distribution froze new assignments and appointed an independent payroll monitor.
Existing workers were paid through verified time records.
No sudden mass cutoff.
Crestline’s board removed Alice Doran and Gabe Neri pending investigation.
An interim CEO came from outside.
Then every questionable profile was reviewed.
The results complicated the story again.
There were 147 “ghost” identities.
Of those:
62 were pure placeholders tied to real worker hours.
Improper records, but not overbilling by themselves.
31 were duplicates created during system migrations.
Administrative mess.
39 showed billed hours beyond verified labor.
Strong overbilling.
15 could not be resolved.
The dramatic headline:
147 fake workers.
The accurate version:
39 confirmed fraudulent profiles, 15 unresolved, 93 other irregular records.
Still bad.
Different.
Then household money.
Of $281,440 initially suspicious:
$118,000 was confirmed overbilling.
$96,000 was minimum-event staffing allowed under old contract but poorly described.
remainder involved duplicates and credits.
Dante stared.
“Bianca said two hundred eighty.”
Priya answered:
“She found anomalies, not final loss.”
That distinction mattered.
Bianca had been directionally right and numerically premature.
Then Romano warehouses.
Confirmed overbilling:
$742,000.
Not $2.3 million.
Large enough.
Crestline agreed to repay pending civil settlement plus audit costs.
Santini’s investment distributions subject to recovery claims.
Rafael repaid his $122,000 disputed bonus.
He kept documented consulting earnings.
Why not claw back all?
Because he actually did work.
Accountability did not require pretending legitimate labor never happened.
Then criminal roles.
Gabe Neri surrendered through counsel after three weeks.
He admitted:
cloning M-01.
sharing property plans.
providing staff-role list.
helping Varga locate drive.
He denied knowing guns would be used.
Messages:
Varga asked:
Any armed security?
Gabe:
Yes. Romano house.
Varga:
We handle.
Gabe did not ask how.
Foreseeable.
Then Santini arrested.
Charges:
conspiracy to burglary.
commercial bribery? Maybe not.
obstruction.
fraud-related counts tied to staffing.
Weapons enhancement contested.
Again:
no murder.
Then Rafael.
No criminal charge initially.
Civil conflict-of-interest case and internal employment investigation.
Dante removed him from operations pending review.
Rafael accused:
“You think I’m Santini.”
“No.”
“Then why suspend?”
“Because you took vendor money without disclosure.”
Specific.
Rafael had to face his own act rather than hide behind worse people.
Then Bianca’s civil exposure.
Household management company claimed she improperly accessed employee data and security credentials.
She agreed:
pay audit costs tied to her access.
delete all copied personnel files.
submit to independent verification.
not retain staff rosters.
No confidentiality.
Then employees were notified.
Some were angry their records had been copied by the owner’s fiancée.
Emma? No Emma here. Sofia.
Sofia asked whether Bianca saw her salary.
“Yes.”
That embarrassed her.
Bianca apologized.
Sofia said:
“Stop apologizing like it gives the information back.”
Fair.
Then data-minimization reforms:
wedding planners no longer get full staff rosters.
temporary vendors get role counts, not employee details unless needed.
family members do not receive payroll files without formal role.
master credentials stored in dual-control safe.
Dante asked:
“Dual control in a house?”
Priya said:
“You have corporate-grade access systems in a house.”
Fair.
Then the actual master card M-01.
Police retained during case.
Security deactivated it immediately.
New system used encrypted credentials harder to clone.
Not impossible.
Nothing is impossible.
Then kitchen safe.
Why was there a floor safe in a kitchen office?
Event cash.
tips.
vendor checks.
No longer used for sensitive digital media.
Bianca’s silver drive transferred to counsel.
Hash verified.
copies controlled.
No more casual evidence storage.
Then Sofia.
She returned to work after paid leave.
Not because fearless.
Because the mansion was her job.
The broken kitchen door had been replaced.
For weeks she hated the sound of hydraulic closers.
Then less.
She refused press.
One outlet called her:
THE HOUSE MANAGER WHO FOILED THE RAID.
She laughed.
“I got grabbed.”
No interview.
Good.
Then Varga.
Arrested in Milwaukee after attempting to collect money from Santini’s associate.
He negotiated proffer.
Confirmed Santini wanted audit drive.
Confirmed Gabe provided access.
Then:
Did Bianca cooperate with them?
“No.”
Did Rafael?
“Not with us.”
That mattered.
Then why did Varga tell Sofia:
“Your people already opened the door”?
He had said something similar? User says rival grabbed Sofia, no dialogue. We can add.
Varga told crew:
“Inside card is live.”
Inside referred to cloned master.
Not a second insider.
Good.
Then Dante received a message from an old business acquaintance:
You should have known better than to let women into your books.
He deleted.
That was not lesson.
Bianca found fraud because she looked.
Her wrongdoing was not looking.
It was believing being right entitled her to bypass consent.
Then Dante met Sofia.
He apologized.
“For what?”
“Not knowing you were being used as a safe keeper.”
She looked.
“That was Bianca.”
“I gave her enough informal authority that you assumed her request was mine.”
Sofia thought.
“Maybe.”
Then:
“You want me to say it’s your fault too?”
“No.”
“Good.”
She smiled faintly.
“Because getting grabbed was Varga’s fault.”
Specific.
Then:
“But next time your fiancée asks me to hide a drive?”
“There won’t be a next time.”
He stopped.
Wrong.
Could sound like no fiancée.
He corrected:
“Next time anyone asks, verify.”
Sofia nodded.
“Better.”
Then the dining room reopened.
No event.
Staff breakfast.
Coffee.
eggs.
paper plates.
Sofia sat facing kitchen door.
At first.
Then turned chair sideways because sunlight was in her eyes.
That was recovery.
Not conquering the doorway.
Forgetting to care where it was.
The remediation pool for temporary workers became another argument.
Some employees whose names had been reused feared tax problems.
Crestline had reported wages under certain placeholder profiles incorrectly.
Not every affected person lost money, but records needed correction.
The interim Crestline board funded:
tax assistance.
credit monitoring where identity data had been reused.
wage review.
independent hotline.
Romano companies contributed where their systems accepted bad records without verification.
Dante’s lawyers initially objected.
“Why pay if Crestline created them?”
Priya answered:
“Because your controls helped them persist.”
That was enough.
Then actual workers came forward.
One man said his hours were underpaid even while ghost hours were overbilled.
That was possible.
Crestline inflated invoices but also shaved worker overtime.
Fraud can hurt customer and worker at once.
Audit expanded.
Verified wage shortfalls:
eighty-six thousand dollars across multiple workers.
Crestline repaid with required additions where applicable.
Romano monitored.
No heroic direct cash from Dante.
Use proper payroll correction.
Then one warehouse supervisor admitted he had approved rosters without reading because:
“Crestline always handled names.”
He received corrective discipline and training.
Another supervisor had flagged duplicate names three times and been ignored.
Her emails became part of the audit record.
The system changed so vendor exceptions could not die in one manager’s inbox.
Then Rafael’s employment review.
Independent committee found:
undisclosed outside compensation.
failure to escalate known billing anomalies.
warning Gabe about Bianca’s inquiry.
no evidence he knowingly approved ghost overbilling.
no evidence he knew about the attack.
Outcome:
removed from vendor oversight permanently.
six-month suspension.
repayment of disputed bonus.
conflict training.
return only in a different operational role if the board approved.
Rafael wanted to resign.
Dante said:
“Your choice.”
He stayed.
Some executives called that nepotism.
The board published the reasoning internally.
Transparency does not eliminate disagreement.
Then Santini’s lawyers argued Romano was using fraud allegations to destroy a competitor.
Dante’s company handed forensic work to outside counsel and auditors.
No strategic leaks.
Then a newspaper printed:
ROMANO COUSIN TIED TO PHANTOM PAYROLL.
Technically.
Misleading.
Rafael wanted Dante to publicly defend him.
Dante said:
“I’ll correct false facts.”
“Say I didn’t steal.”
“Investigation says there is no evidence you knowingly overbilled. I’ll say that.”
“That sounds weak.”
“It’s accurate.”
Rafael swore.
Dante understood.
Accuracy is often emotionally unsatisfying.
Then Bianca needed to collect personal belongings from the mansion.
She no longer had automatic access.
Security scheduled a visit.
Guest badge.
escort to private suite.
no staff offices.
She accepted.
Sofia happened to be working.
They crossed in the hall.
Bianca stopped.
“Hi.”
Sofia said:
“Hi.”
No apology scene.
They had already said what mattered.
They continued walking.
That was healthier.
Then kitchen security.
The replacement access system no longer relied on one universal master card.
Role-based credentials.
time limits.
emergency override split between security chief and house manager.
Could two people still collude?
Yes.
No system is perfect.
But one stolen card no longer opened the house.
Then Dante asked whether he should hold an emergency master credential personally.
Priya said:
“Yes. Sealed.”
“Can I memorize the code?”
“You can.”
Then:
“Should I?”
She stared.
“No.”
He laughed.
The owner did not need every secret in his head.
Then the repaired kitchen door.
Workers installed a stronger frame.
Sofia asked:
“Will it stop someone with a gun?”
“No.”
“Then why stronger?”
“To resist forced entry long enough for response.”
Good.
No fortress promises.
Then the bar shelves.
Dante replaced them.
One guest suggested keeping a cracked bottle as memory.
He said no.
May you like
Broken glass is trash.
Not every object from a violent night deserves meaning.
