Chapter 2
Howard Bell was found at 1:06 a.m.
Alive.
Conscious.
Locked inside a maintenance cage on level thirty-six.
His wrists had been zip-tied.
His phone was gone.
His access badge was missing.
He had a cut above his eyebrow and a mild concussion.
No gunshot.
The first thing he asked was:
“Did Nina get the binders upstairs?”
That did not make him innocent.
It made him important.
At the hospital, Detective Ortiz took his statement.
Howard said he had spent eleven years managing facilities at DeLuca Tower.
Before that, he co-owned Bell Urban Systems with his brother, Aaron.
Bell Urban had performed fire-safety testing during the tower’s major renovation eight years earlier.
Howard sold his share before taking the facilities job.
Conflict disclosed?
Partly.
The building board knew he had worked there.
It did not know he retained a small profit-sharing note for years after the sale.
That was a conflict.
Then the inspection problem.
Three weeks earlier, Isabella asked why the stair-pressurization fan on floor thirty-eight carried a 2009 manufacturer plate when the capital report said it had been replaced in 2018.
Howard gave a vague answer.
She kept asking.
He became defensive.
Then he checked archived work orders himself.
What he found frightened him.
Several “replacement” items had not actually been replaced.
Instead:
components repaired.
labels changed.
capital invoices billed as full replacement.
At least on paper.
Who approved?
A project contractor:
Meridian Mechanical.
Oversight:
Bell Urban Systems.
Owner representative:
Dominic DeLuca.
Marco’s uncle.
Did Dominic know?
Howard said he did not know.
Then the original field notes.
Technicians had recorded:
fan repair, not replacement.
partial sprinkler valve rebuild, not replacement.
smoke-control damper failures requiring follow-up.
Final inspection reports later said:
replacement complete.
all systems passed.
Someone altered the story between field notes and final reports.
Howard thought originals were destroyed because the scanned archive contained only final versions.
Then last week, a retired Bell Urban technician named Samir Patel contacted him.
Samir was clearing storage.
He had kept paper field notebooks because Bell Urban’s digital archive had been unreliable.
He knew the building had changed ownership structure and wanted to return them.
Howard collected them.
He did not tell the building board yet.
Why not?
He wanted to compare first.
Again:
delay.
Then he told Isabella.
Not all.
Enough.
She told him she wanted an independent engineer.
Good.
Then dinner day.
Howard got a call from a blocked number.
“Stop moving old inspection papers.”
He panicked.
He decided the binders were safer with Marco because Marco’s penthouse had security.
Why Nina?
She was nearby with the service cart.
He slipped binders under the linens.
No explanation.
That choice nearly got her dragged into an elevator.
Howard cried when told.
No absolution.
Then at 8:55, he went to the garage because someone texted:
Samir here. Need talk.
Not Samir.
Two men hit him, took his badge, locked him in the maintenance cage.
Did those men need his badge to reach the penthouse?
No.
Private elevator required family authorization.
But his badge opened:
mechanical floors.
service corridors.
elevator controller room.
There.
Someone used Howard’s badge plus a legacy family authorization.
Then FAM-06.
Building access vendor:
Apex Vertical Systems.
Old installation.
Private-elevator credentials were not simply RFID cards.
They were logical authorizations.
Each family fob had serial:
FAM-01 through FAM-06.
The controller also stored legacy profiles for emergency testing.
One legacy profile:
FAM-06-TEST.
Created eight years earlier during renovation.
Disabled?
Supposedly.
Access logs showed it had been re-enabled at 8:48 p.m.
By:
local controller admin.
Credential required:
facilities-level badge plus PIN.
Howard’s badge could supply first factor.
Who knew PIN?
Apex technicians.
Howard.
building chief engineer.
possibly archived commissioning documents.
Then the intruders used a device that emulated FAM-06 because the test profile mapped to Isabella’s serial family group.
So the log displayed FAM-06.
Not because her physical fob had been cloned.
Because the old controller reused the same family identifier.
That distinction cleared one accusation immediately.
Marco had accused her based on a log that was technically accurate and practically misleading.
He called her.
She did not answer.
Fair.
Then the original binders.
Independent fire engineer Dr. Elaine Park reviewed.
She said:
“Do not assume the building is unsafe because reports were falsified.”
Why?
Some equipment may have been repaired adequately even if invoices were wrong.
Need test current condition.
They tested.
Stair pressurization:
one fan below design capacity but still functional.
Sprinkler system:
one isolation valve corroded, others serviceable.
Smoke-control dampers:
two failed current test.
Fire alarm:
working.
Serious deficiencies.
Not imminent collapse.
Residents notified.
fire watch established temporarily.
repairs scheduled.
fire department consulted.
No evacuation of whole tower after engineers determined interim measures were sufficient.
Specific.
Then financial side.
Capital invoices eight years earlier:
$4.8 million life-safety modernization.
Actual verified equipment replacement:
roughly $3.1 million.
Difference:
some legitimate labor and design.
some overbilling.
some unclear.
Not “$1.7 million stolen” yet.
Then Meridian Mechanical.
Company still operating.
CEO then:
Stephen Ward.
Current:
his daughter Julia Ward.
No evidence current management knew old issue.
Again:
do not inherit guilt.
Then Bell Urban.
Dissolved.
Howard’s brother Aaron died five years earlier.
Records sparse.
Then Dominic DeLuca.
He came to the police station voluntarily with counsel.
He was seventy-two.
Marco did not attend.
Dominic admitted signing final project completion certificates.
Did he inspect?
“No.”
Why sign?
Consultants certified.
Board needed occupancy work closed.
He trusted Bell Urban and Meridian.
Did he know Howard had a financial note in Bell Urban?
“No.”
Did he know systems were repaired rather than replaced?
“Some.”
There.
Which?
Pressurization fan.
Why accept repair if invoice said replacement?
Dominic said the contractor promised full replacement later during phase two.
Did it happen?
No.
Why?
Budget dispute.
then project closed.
He failed to track.
That was negligence.
Then:
Did he receive money?
No evidence.
No kickback.
Then one invoice:
consulting payment of $85,000 to DDL Project Services.
Owned by Dominic.
He said it was disclosed owner-representative fee.
Board minutes confirmed.
Legitimate.
Good.
Then the attack motive.
Who feared original field notes?
Possibly Meridian.
possibly old Bell Urban principals.
possibly Dominic if negligent.
possibly insurers.
possibly someone hiding current maintenance shortcuts.
Then Victor Sarto.
His name surfaced because Elias Crane worked for him.
Sarto Development had sued DeLuca Tower ownership two years earlier over an adjacent air-rights dispute.
Rival.
But why would Sarto care about old inspection fraud?
Apex Vertical Systems had recently been competing for a major elevator modernization contract at Sarto’s newest tower.
One Apex regional manager:
Colin Voss.
Also a former Bell Urban systems engineer eight years ago.
There.
Voss knew:
legacy test profile.
old controller.
inspection records.
And he currently consulted for Sarto Development.
Connections tightened.
Then Isabella’s secret investigation.
She had contacted Dr. Elaine Park for a technical opinion before the attack.
No covert security consultant.
No third-party fob use.
She had simply asked an engineer:
“If a final report says replaced and the plate says otherwise, what should I preserve?”
Elaine answered:
“Photographs. Source records. Do not alter equipment. Get formal authority before another site entry.”
Isabella ignored the last part once.
That mattered.
Then Marco sent one message:
I was wrong to say you gave them access.
No “but.”
Then another:
I still need to understand what you were doing on thirty-eight.
Isabella replied:
Both can be true.
That was right.
Then Nina.
At home, she stared at the bruise on her arm.
She had spent all night replaying Crane’s grip.
Then building management called to ask when she could return for another statement.
She said:
“Tomorrow.”
No bravery.
Sleep first.
Then she remembered Howard placing the binders.
He had said:
“Mr. DeLuca needs these.”
He used Marco’s name as authority without asking Marco.
Too many people had been borrowing someone else’s authority.
A fob.
a badge.
a family name.
a professional certification.
The tower’s problem was becoming larger than one gunman.
It was a building full of people who had learned that trusted names could substitute for verified permission.
The forensic elevator review also established something else.
At 8:48 p.m., when FAM-06-TEST was re-enabled, Isabella’s real fob was not moving anywhere.
It had remained inside the penthouse from 7:02 onward.
The building’s short-range readers showed it opening the family vestibule at 7:02 and no other door after.
That mattered because the family profile identifier and the physical fob had been treated as the same thing in every ordinary report.
They were not.
A software label had borrowed a person’s identity.
Then the review checked the other family credentials.
FAM-01 through FAM-05 each had legacy test profiles too.
All disabled.
Had any been used recently?
No.
Could they have been?
Yes.
That frightened Marco more than one cloned card would have.
The vulnerability belonged to architecture, not to Isabella’s jewelry.
Then Tasha asked Apex:
“Why map test profiles to real family numbers?”
Answer:
commissioning convenience.
Engineers wanted to verify each destination with realistic permissions.
Then they left profiles in place because deleting them risked breaking old controller logic.
Convenience again.
Marco asked:
“So the system could have made it look like my mother opened the elevator too?”
“Yes.”
That cooled his anger enough to become useful.
Then Isabella finally called him.
Not to reconcile.
To correct one fact.
“I did not know Howard still had Bell Urban money.”
“I know.”
“I suspected Dominic because his name was on closeout.”
“I know.”
Then:
“I should have told you I was looking.”
“Yes.”
“And you should have asked before accusing me.”
“Yes.”
Silence.
That was the first conversation after the attack where both sentences fit in the same room.
Then Nina’s second statement added one detail.
Howard had seemed afraid when he placed the binders under her linens.
She had joked:
“Are these illegal?”
He answered:
“No. Just inconvenient.”
At the time, she laughed.
Now Mara wrote it down.
May you like
Inconvenient for whom?
That became a question the audit could answer with documents instead of guesses.
