Chapter 3
Colin Voss did not run.
That surprised everyone.
He went to work the morning after the attack.
At Apex Vertical Systems.
Eight-thirty meeting.
coffee.
calendar full.
When police arrived with a warrant, he looked offended.
Not frightened.
His laptop told a different story.
Deleted folder:
DLT Legacy.
Recovered.
Inside:
commissioning diagrams for DeLuca Tower.
private-elevator controller credentials.
old test profiles.
screenshots from current remote-support portal.
One screenshot taken two days before attack showed:
FAM-06-TEST — DISABLED.
Another taken at 8:49 p.m. the night of attack:
ENABLED.
Was Voss logged in remotely?
Yes.
Apex logs showed his account connected at 8:46.
He claimed he was troubleshooting an unrelated elevator alarm at Sarto Tower.
VPN logs placed him at Apex office.
Could he access DeLuca Tower controller remotely?
Normally read-only unless a local facilities badge enabled a maintenance bridge.
Howard’s stolen badge supplied that local bridge.
That meant Voss and men on-site coordinated.
Then Voss’s relationship with Elias Crane.
Messages:
Crane:
Need door that lands upstairs without lobby.
Voss:
Possible if local bridge active.
Crane:
Can you make it look family?
Voss:
Legacy profile maps FAM-06.
There.
Not Isabella.
A controller artifact intentionally used to frame or at least confuse.
Then:
Crane:
She wears 06, right?
Voss:
Architect girl. Yes.
He knew Isabella had the fob.
How?
Building records.
That was disturbing.
Then Victor Sarto.
Voss had a contract with Sarto Development for elevator modernization.
Crane worked informal security and collections for Sarto.
Did Sarto order the attack?
Phone records:
Crane called Sarto twice that afternoon.
Sarto claimed:
air-rights negotiation.
Messages recovered:
Crane:
Old DeLuca inspection books surfaced.
Sarto:
Whose problem?
Crane:
Could bury Dominic and tower.
Sarto:
Useful.
Then later:
Crane:
Can get originals tonight.
Sarto:
Do not bring this to me.
Ambiguous.
Could mean:
do not involve me.
Could mean:
do not bring physical evidence.
Then:
Handle through Voss. No blood.
That was worse.
Sarto authorized something.
At minimum covert retrieval.
Again:
“no blood” does not make armed intrusion lawful.
Then why did Sarto want records?
Competitive leverage.
DeLuca Tower was collateral in a refinancing package Marco was negotiating.
A major life-safety scandal could weaken valuation and reopen the air-rights settlement.
Sarto wanted leverage.
Not necessarily to destroy evidence forever.
Crane’s notes:
photograph originals.
take pages showing Dominic signoff.
leave rest.
But once Howard moved binders unexpectedly to the penthouse, the plan escalated.
Voss enabled private elevator.
Crane brought armed men.
Then the gray binder.
It contained field notes.
The blue binder, still on the service cart, contained invoices and board correspondence.
Crane targeted gray because technical notes proved final certifications changed.
He did not know blue contained the financial chain.
Irony.
Even if he stole gray, the investigation could proceed.
Then who altered final reports eight years ago?
Document metadata and paper comparisons.
Final PDF created by Bell Urban project office.
User account:
CVoss.
Colin Voss.
He had been a Bell Urban systems engineer before Apex.
He admitted preparing the final package.
Why change wording from repaired to replaced?
He said Meridian instructed:
replacement scope fulfilled functionally through overhaul.
That is not the same.
Then smoke dampers.
Field note said:
two fail, revisit after ceiling access.
Final said:
all pass.
Why?
Voss claimed a follow-up verbal confirmation from technician.
Which technician?
Samir Patel.
Samir denied.
He had written:
not retested.
There.
Voss falsified at least some certification.
Did Howard know?
He was still Bell Urban co-owner then.
Emails:
Howard to Voss:
Need final report today. Owner closing.
Voss:
Two dampers pending.
Howard:
Can note follow-up?
Voss:
Will handle.
Howard stared when shown.
“I did not tell him to mark pass.”
Maybe.
But he pressured.
Then Dominic.
He received final report.
He did not receive field notes.
He signed project completion.
Negligent oversight.
not evidence of knowing falsification.
Then Meridian Mechanical.
Emails showed Stephen Ward pushed:
use refurbishment where equivalent.
bill against replacement line to preserve contract schedule.
That looked like invoice misdescription.
Some refurbished components may meet performance.
But invoices specifically said new replacement.
Potential fraud.
Stephen retired.
alive.
cooperated through counsel.
He said the owner’s representative knew.
Which owner’s rep?
Dominic.
Dominic denied knowing invoices stayed labeled replacement.
Meeting notes:
Dominic: If overhaul meets spec, fine, but paper must reflect.
That helped him.
Then another note by Voss:
DD doesn’t want details before refinance.
Could mean Dominic.
Could be Voss’s interpretation.
No proof.
Then current safety.
Repairs completed within weeks:
pressurization fan replaced.
two smoke dampers replaced.
valve serviced.
Residents got notice:
historic record irregularities under review.
current deficiencies identified and corrected.
interim fire watch ended after authority signoff.
No panic marketing.
Then financial audit.
Of $4.8 million project:
$3.6 million supported by legitimate labor, equipment, and design.
$620,000 involved refurbishment billed as replacement or unsupported markup.
$240,000 duplicate or weak documentation.
$340,000 still under review.
Likely exposure:
less than the sensational first estimate.
Then insurers.
Building had certified full compliance for years.
Did falsification void coverage?
Insurers reserved rights.
Building counsel negotiated.
No collapse.
Then Isabella.
Marco met her at a neutral architecture office.
No lawyers in room.
He began:
“I accused you before evidence.”
“Yes.”
“I’m sorry.”
She nodded.
Then:
“I entered floor thirty-eight without permission.”
“Yes.”
“I copied restricted records.”
“Yes.”
“I hid it because I thought Dominic might be involved.”
“Yes.”
“Are you angry?”
“Yes.”
Fair.
Then Isabella asked:
“If I had told you I suspected your uncle, what would you have done?”
Marco thought.
“Confronted him.”
“Immediately.”
“Probably.”
“And if he was innocent?”
“I would have damaged something.”
“Maybe.”
Then:
“That still wasn’t my choice to make.”
There.
She understood her own error.
Then Marco asked:
“Why didn’t you use outside counsel?”
“I thought it was a building problem, not a crime.”
“You’re an architect.”
“I know.”
“You know better than to enter a mechanical room alone.”
“I know.”
She smiled sadly.
“I was very sure I was the most competent person in the building.”
“Were you?”
“No.”
That almost made him smile.
Then:
“Are we still engaged?”
Silence.
Isabella looked at her ring.
“I don’t know.”
Marco did not demand.
Then Nina’s statement identified another detail.
Crane had whispered while dragging her:
“Where did Bell put the originals?”
That proved Howard was the target source.
Not Isabella.
Then police found Howard’s stolen badge in Voss’s desk drawer.
Not Crane’s car.
How?
After the attack, Crane must have returned or transferred it.
Voss claimed it was planted.
DNA on the lanyard:
Crane.
Voss.
That put Voss deeper.
Then Mara summarized:
“Isabella’s fob did not open the elevator.”
Marco nodded.
“Her family profile name did.”
“Correct.”
“And Voss used Howard’s badge to enable it.”
“Evidence says yes.”
Then:
“So I was wrong.”
“Yes.”
No comforting qualifier.
Marco looked at Nina.
At Isabella.
At Howard.
The tower had spent years treating logs as proof:
badge says who.
fob says who.
report says pass.
invoice says replace.
Now every one of those records required the same question:
Does the label describe what actually happened?
Voss’s defense team tried to argue that FAM-06 was chosen only because it happened to be the most convenient legacy profile.
The messages weakened that.
Crane had specifically asked whether the log would “look family.”
Voss answered yes.
Then asked which family member wore 06.
That meant the misleading identity was not accidental.
It was useful.
Would it have been enough to frame Isabella for the attack?
Probably not after physical evidence showed she still had her fob.
But in the first minutes, it did exactly what Crane needed.
It split attention.
Marco looked at Isabella instead of the elevator controller.
Security looked at family access before contractor access.
A false implication bought time.
Then Mara told Marco:
“Good evidence can mislead when people ask it the wrong question.”
He frowned.
“The log was good evidence.”
“Yes.”
“It said FAM-06.”
“Yes.”
“So what was the wrong question?”
“Who used Isabella’s fob?”
She tapped the report.
“The right question was: what system event generated FAM-06?”
That distinction bothered him.
He had spent years trusting dashboards.
Then he began asking what each field actually meant.
That habit spread.
Corporate security reports.
building badges.
vendor approvals.
A label was not a witness.
Then Voss’s old Bell Urban compensation surfaced.
He had received a completion bonus tied to closing the DeLuca Tower renovation before a refinancing deadline.
Not enormous.
Twenty-five thousand dollars.
Enough motive to smooth unresolved test failures.
Howard had approved the bonus.
Did Howard know Voss falsified?
No direct evidence.
But Howard knew the deadline pressure.
He had created an incentive:
close the report.
get paid.
Again:
systems can reward exactly the behavior leaders later claim they never requested.
Then Samir Patel produced one email:
Samir:
Dampers 7B/7C still fail. Do not close.
Voss:
Noted.
Three hours later:
final report all pass.
That was the strongest technical evidence.
Then Dominic’s email on the same day:
Need honest closeout, even if deficiencies remain.
That helped Dominic.
Not enough to erase his other failures.
But enough to stop the story from becoming:
uncle ordered fake reports.
Marco appreciated that accuracy, even while angry.
May you like
He had wanted a villain close enough to explain everything.
The documents refused.
