Chapter 4
The criminal case and the building audit split apart after the third week.
That helped.
Criminal:
Sarto.
Crane.
Voss.
armed entry.
computer access.
assault.
theft conspiracy.
Building:
historic inspection falsification.
invoice misdescription.
governance.
current safety.
conflicts.
Keeping them separate prevented every technical defect from becoming evidence of the shooting.
It also prevented the shooting from distracting from boring safety failures.
Then Apex Vertical Systems.
Current company suspended Voss.
Independent review found no evidence other employees helped the attack.
But Apex had a terrible legacy-access practice.
Old test profiles remained stored in controllers for years.
Disabled, not deleted.
Support staff could see family mapping.
Maintenance bridges could re-enable them with local credentials.
That was industry convenience.
Not unique conspiracy.
Apex issued updates across affected buildings:
remove obsolete profiles.
require dual authorization for privileged re-enable.
alert property owner.
separate test identities from resident credential numbers.
No more FAM-06-TEST.
Then DeLuca Tower access.
Family fobs had too much privilege.
Marco’s mother could access mechanical floors.
Why?
Legacy owner settings.
Elena, his sister, could access loading dock.
Why?
No reason.
Isabella’s fob could reach floor thirty-eight.
Why?
Because “family.”
That ended.
New access:
residential floors.
penthouse.
garage.
approved amenities.
Mechanical floors:
facilities staff only.
contractors time-limited.
owner access by escorted override.
Marco asked:
“What if I need to inspect?”
“Request it,” Tasha said.
He stared.
“In my building?”
“Partly your building. Still a mechanical room.”
He laughed.
Fine.
Then Isabella’s conduct.
Building board retained independent counsel.
She had entered restricted space without authorization and photographed records.
Was she criminally charged?
No.
Facilities access policy had been vague for family fob holders.
No damage.
No theft.
She cooperated.
But the board issued formal notice that family access was not technical authorization.
She agreed.
Her architecture firm reviewed ethics.
Because she was advising renovation informally without written scope.
They required future outside-inspection work to be formally commissioned and safety-access rules followed.
Consequence.
Not exile.
Then Howard Bell.
His conflict with Bell Urban was worse than he first admitted.
The profit-sharing note lasted five years.
Payments:
$146,000.
During his first two years as facilities manager.
Disclosed?
No.
He claimed payments were sale proceeds fixed before his employment.
Still a conflict.
Then did he profit from false invoices?
No direct evidence.
Payments did not track project billing.
Independent valuation showed they were plausible sale-note installments.
So:
undisclosed conflict.
not kickback proven.
Howard resigned as facilities manager.
Why resign if he had been attacked?
Because his governance role was compromised.
He later worked elsewhere.
The fact he had been assaulted did not erase his conflict.
The conflict did not make the assault his fault.
Both.
Then Samir Patel.
Retired technician.
His notebooks became crucial.
But he refused public hero treatment.
He had kept company records at home without authorization.
Why?
Bell Urban archive was chaotic.
He feared test failures would disappear.
That preservation helped.
Also created privacy and record-control concerns.
Counsel copied relevant pages, returned unrelated materials to the proper custodian where possible, and documented chain of custody.
No saint.
Then Dominic DeLuca.
The building-board investigation concluded:
he relied excessively on consultants.
he signed closeout despite knowing the fan replacement had been deferred.
he failed to ensure invoice descriptions were corrected.
no evidence he knew final fire-safety pass data were falsified.
no evidence of kickback.
Outcome:
he resigned as chair of the building ownership board.
remained a passive owner.
agreed to contribute his owner-representative fee from the disputed phase, about $85,000, toward independent remediation costs.
Was that legally required?
No.
Negotiated.
Then Dominic met Marco.
Family library.
No press.
Dominic said:
“You think I should have caught it.”
“Yes.”
“I think so too.”
Then:
“I also think you’re enjoying being right.”
Marco stared.
“That’s unfair.”
“Maybe.”
Then Dominic said:
“When a family member fails, anger can feel cleaner than admitting the system was weak.”
That landed.
Marco asked:
“Did you know Howard still had Bell Urban money?”
“No.”
“Would you have cared?”
Dominic thought.
“Not enough.”
There.
Old business culture:
everyone knew everyone.
disclosures felt insulting.
trusted people moved between vendor and owner roles.
That culture created room.
Then the current building board adopted:
vendor conflict registry.
independent life-safety engineer.
direct retention of field notes.
version-controlled inspection records.
annual random retesting.
owner-representative signatures no longer substituting for engineer acceptance.
No family veto.
Then the original field notes.
Should they be displayed at a board meeting?
No.
Archived.
Evidence.
Not memorial.
Then Nina.
She returned to work after two weeks.
Paid leave had been available.
She chose.
Her first day, the private elevator opened while she pushed a service cart.
She froze.
The doors revealed:
Elena DeLuca holding shopping bags.
Elena looked.
“You okay?”
Nina exhaled.
“Yes.”
Then:
“Give me a second.”
Elena waited.
No joke.
Nina entered.
The elevator moved.
Nothing happened.
The ordinary ride felt harder than any speech.
Then Marco asked whether Nina wanted reassignment away from the penthouse.
“No.”
“Why?”
“I like my schedule.”
Good.
No survivor destiny.
Then Isabella and Marco.
They postponed the wedding indefinitely.
Not canceled yet.
That was honest.
They were still together, carefully.
One rule:
no private investigation involving family property without telling the other enough to protect safety.
Isabella said:
“That sounds very specific.”
“It is.”
Then:
“Does it apply to you?”
“Yes.”
Good.
Then Sarto’s lawyers released a statement:
Mr. Sarto did not authorize violence and believed any retrieval would be non-confrontational.
Mara read it.
“Armed men through a private elevator.”
Marco said:
“Non-confrontational.”
She shrugged.
“People write strange definitions after arrest.”
Crane had not yet been arrested.
Voss was.
Sarto was under investigation.
Then building residents debated whether to remove the DeLuca name from the tower.
Some wanted change.
Others argued:
current ownership included many investors.
the name was an address, not a moral award.
The board decided no renaming.
Fine.
Changing a sign would not fix dampers.
The money went to systems instead.
Then one more finding changed how Marco viewed Isabella’s trespass.
The restricted mechanical floor had no clear warning at the private-elevator exit.
The fob simply worked.
No sign:
AUTHORIZED FACILITIES PERSONNEL ONLY.
No second credential.
No escort prompt.
That did not make her entry proper.
It showed the building had encoded privilege without boundaries.
The board installed a hard stop.
Family fob alone no longer called that floor.
Any owner visit required facilities authorization.
The elevator itself finally stopped pretending family status was technical competence.
The resident communications became their own test.
The first draft from building counsel said:
Historic documentation discrepancies have been identified.
Isabella read it.
“Too soft.”
The second draft said:
Historic life-safety inspection records were falsified.
Dr. Park objected.
“Some were. Not all.”
So the final notice said:
Independent review has identified material discrepancies between certain original field notes and final life-safety reports from the 2018 modernization project, including at least two final pass entries not supported by documented retesting. Current systems have been independently evaluated, identified deficiencies are being corrected, and regulators have been notified.
Long.
Precise.
Residents complained it sounded legalistic.
It was still better than false simplicity.
Then one resident asked:
“Was I living in an unsafe building for eight years?”
Dr. Park answered:
“We cannot reconstruct every day. We can say the building had documented record failures and some current deficiencies. We did not find evidence of total life-safety system failure.”
Not satisfying.
Accurate.
Then insurance inspectors retested additional floors.
Most passed.
Three more dampers needed adjustment.
No new falsification tied to those.
Ordinary aging.
That mattered.
The scandal had made everyone expect every failed test to prove the old fraud continued.
It did not.
Then the board reviewed other DeLuca-managed buildings.
Three properties.
No comparable falsified reports.
One outdated conflict disclosure.
two ordinary record gaps.
nothing systemic.
Marco insisted those minor findings remain in the report.
“Why publish problems that aren’t part of this?”
“Because the review happened.”
Good.
Accuracy should not become selective when results are favorable.
Then Nina was invited to a resident town hall because she had been “the employee caught in the attack.”
She declined.
“I carry service and coordinate guests. I don’t inspect dampers.”
Good.
People who survive an event do not automatically become experts on its subject.
The building gave staff a separate briefing on:
new elevator permissions.
emergency procedures.
police handoff.
One slide read:
FAMILY ACCESS ≠ FACILITIES ACCESS.
Nina almost laughed.
It had taken gunfire to turn that into a slide.
The better goal was making sure nobody needed another reason to learn it.
The board also changed how project closeout worked.
No more single executive signature certifying an entire technical package.
Engineers signed technical acceptance.
finance signed payment reconciliation.
owner representatives signed governance completion.
Each signature meant something narrower and clearer.
Dominic called it bureaucratic.
Dr. Park called it accurate.
The form stayed.
The board also changed how project closeout worked.
No more single executive signature certifying an entire technical package.
Engineers signed technical acceptance.
finance signed payment reconciliation.
owner representatives signed governance completion.
Each signature meant something narrower and clearer.
Dominic called it bureaucratic.
Dr. Park called it accurate.
The form stayed.
Then one contractor asked whether all original field notes really had to be retained.
“Yes,” the board answered.
“For how long?”
Long enough to support the legal, regulatory, and building-record obligations.
Not forever by superstition.
May you like
Retention schedule.
No disappearing drafts merely because final reports looked cleaner.
