Chương 2
They found Enzo Bellini in the wine cellar.
Not hiding.
Drinking.
That detail annoyed almost everyone.
At 9:40 p.m., while security locked down the library and guests whispered across the dining room, Enzo sat alone in a leather chair with a glass of Barolo.
He looked at Aaron and said:
“Is dinner over?”
Aaron answered:
“For you, yes.”
Enzo had no weapon.
No bag of documents.
No dramatic escape plan.
He had simply left the library corridor through a service staircase because, according to him, he wanted quiet.
Then why no badge exit?
He had used the old manual stair door.
Allowed.
Why visit library?
To look for a photograph of Salvatore before toast.
Possible.
Why enter seven minutes after Vanessa?
Coincidence.
Maybe.
Luca did not accuse him.
He asked him to remain available.
Enzo called his lawyer.
Good.
The engagement dinner ended within thirty minutes.
Guests were told:
the family needed privacy.
No announcement.
No public accusation.
No police convoy.
Vanessa left with counsel.
Enzo left separately after providing contact information.
I went to urgent care with Mrs. Alvarez.
The doctor cleaned the cut on my nose and confirmed no fracture.
My glasses were unusable.
The estate arranged an emergency optometrist appointment the next morning.
I hated accepting.
Mrs. Alvarez said:
“You were injured during work.”
Then:
“This is not charity.”
I remembered that.
At eleven the next morning, I could see properly again.
New glasses.
Simple black frames.
No tape.
I almost cried when the optometrist handed them to me.
Not because beautiful.
Because words had edges again.
Then Matteo called.
“Can you meet with your own lawyer before we ask more questions?”
My own lawyer.
I laughed.
“With what money?”
“The estate’s workplace-incident policy covers a limited consultation with independent counsel.”
“Independent from you?”
“Yes.”
“From Luca?”
“Yes.”
Good.
I chose Dana Kline from a list of three firms.
She started our meeting with:
“Your job is not to solve the Moretti family problem.”
I liked her immediately.
Then:
“Your role is narrower.”
“You witnessed document substitution.”
“You were injured during confrontation.”
“You were threatened with financial information.”
“Everything else belongs to investigators.”
That protected me from becoming the family detective.
Then we reviewed my statement.
I corrected one detail.
Vanessa had not grabbed my arm first.
She reached toward my elbow.
I turned.
Then cabinet caught glasses.
Was that assault?
Maybe not the impact itself.
But threat and interference mattered.
Dana said:
“Accuracy is more important than dramatic wording.”
Exactly.
Then the library.
Outside forensic team entered with:
document examiner,
digital forensics specialist,
archive conservator,
independent counsel,
one security observer.
Luca did not.
Vanessa did not.
Enzo did not.
The old folder:
RUSSO / 2008 REVIEW
contained forty-two documents.
Three had obvious replacement characteristics:
different paper fiber,
modern printer pattern,
recent staple marks.
One was Daniel Russo’s denial letter.
The original was gone.
But an image existed.
Why?
Salvatore’s assistant had scanned incoming correspondence into a document-management server in 2008.
The server still existed in cold storage.
Digital forensics restored archive.
There it was.
Daniel Russo’s original letter.
October 14, 2008.
Three pages.
He denied authorizing five vendor transfers.
He said:
his electronic approval token had been used while he was in Milwaukee for an audit conference.
He identified one person who had access to emergency backup credentials.
Enzo Bellini.
I stared at Dana when she told me.
Then she held up hand.
“Do not decide guilt from one letter.”
Right.
The 2008 board memo said Russo:
failed to deny in writing.
declined internal interview.
resigned after being confronted.
But email archive showed:
he requested interview with outside counsel.
He did not receive one.
Then another document.
Bank access logs.
Five transfers totaling $1.86 million went to:
North Lake Consulting LLC.
Who owned it?
At the time:
a holding company controlled by Victor Hale.
Not Enzo.
Victor was a logistics consultant.
Died 2016.
Why would Enzo matter?
Backup credentials.
Then payment trail:
North Lake paid $410,000 to Bellini Advisory Group over six months.
Enzo’s firm.
That looked terrible.
Could be legitimate consulting.
Invoices existed.
Services described:
fleet optimization.
warehouse integration.
risk analysis.
Were services real?
Some evidence yes.
Enzo had consulted for Moretti before officially becoming CFO.
Was that disclosed?
Partly.
The amount was higher than contract.
Then one more ledger.
Salvatore personally approved two Bellini Advisory invoices.
That complicated.
If Enzo was stealing, why was Salvatore approving payments?
Maybe some legitimate.
Some not.
Then Daniel Russo’s supposed fraud settlement.
The family story said:
Russo repaid part and left.
Actual court record:
no fraud judgment.
No admission.
There was a confidential employment settlement.
Russo waived wrongful termination claim.
Company paid him $275,000.
Both sides denied wrongdoing.
Why did everyone believe he stole?
Because the company’s internal memo did not become public, but executives repeated:
unauthorized transfers traced to controller credentials.
Credential use became:
controller did it.
Then Salvatore died in 2016.
Luca took over.
He had never reopened.
Why?
His father told him:
resolved.
There.
Family summaries again.
Then Vanessa.
What replacement letter did she insert?
The new version looked almost identical but changed three key lines.
Original:
I did not authorize the transfers.
Replacement:
I did not personally initiate the transfers.
Original:
The signature attributed to me is not mine.
Replacement:
The electronic approval associated with my account may have been used by staff acting under routine authorization.
Original:
Enzo Bellini had access to emergency credentials.
Replacement:
Several finance personnel had backup access.
Small changes.
Massive effect.
Not fabrication from nothing.
A softened version that redistributed suspicion.
Why now?
Because in two days, Moretti Holdings board was voting on a merger of:
Moretti Community Foundation
and
Bellini Civic Trust.
The combined foundation would control:
roughly $140 million in charitable assets,
regional grants,
board appointments.
Vanessa was nominated as co-chair.
Enzo as senior adviser.
Luca had asked for a final family-archive review before vote because the merger involved:
historical names,
donor restrictions,
governance.
The Russo file was one of eight old conflict files flagged.
If original letter showed Enzo had access to credentials and received money through the vendor chain, the board would likely demand independent investigation before placing Bellini family in foundation leadership.
That was motive.
Not inheritance.
Not romance alone.
Institutional control and reputation.
Then Dana said:
“What do you want?”
I laughed.
“To keep my job.”
She did not smile.
“About the case.”
“I want my statement accurate.”
“I want Vanessa not to use my finances again.”
“I want someone to pay for my glasses.”
“Already covered.”
Then:
“Do you want to file a workplace complaint?”
Yes.
I did.
Against:
Vanessa Bellini, guest/fiancée with household access.
Complaint:
interference,
retaliatory threat,
misuse of employee information.
No assault claim about cabinet without evidence.
Good.
Then Luca requested meeting.
Dana came.
Neutral office.
He looked at my new glasses.
“Better?”
“Yes.”
Then he apologized.
Not for Vanessa’s acts.
For the employee data.
He said:
“Security discovered Vanessa used a private data broker through Bellini Civic Trust to search twelve estate employees.”
Twelve.
Why?
According to her lawyer:
screening potential theft/security risk before engagement events.
No authorization.
The reports included:
addresses,
court records,
estimated debt,
relatives,
social media.
My sixty-eight-dollar balance?
How exact?
That bothered everyone.
Data broker alone did not have live balance.
Then they found:
a screenshot in Vanessa’s phone backup.
My payroll direct-deposit account preview.
Not full account.
The estate’s payroll portal displayed last four digits and deposited amount, not balance.
So where did sixty-eight come from?
Someone accessed my bank app?
No.
I checked.
No unauthorized login.
Then Dana asked:
“Did you tell anyone?”
I thought.
One person.
My coworker Jenna.
I had texted her that morning:
I have $68 until Friday and Mom’s refill is due.
Jenna.
My stomach dropped.
Was she involved?
No.
Investigators checked:
Vanessa had my text screenshot because Jenna had forwarded it.
Why?
Jenna had applied for Vanessa’s personal assistant job.
Vanessa asked:
“Which staff members are financially vulnerable?”
Jenna sent examples to prove she understood household dynamics.
My message.
I felt sick.
Jenna cried when confronted.
She said:
“I thought she was asking who needed holiday bonuses.”
Maybe.
Then why send private text?
Bad judgment.
She was suspended pending review.
Not arrested.
No conspiracy assumed.
Then Luca looked at me.
“I am sorry.”
Again.
I said:
“You didn’t forward it.”
“No.”
Then:
“But the estate did not have a privacy policy strong enough to tell employees personal texts should never be used for screening.”
That was true.
Then the foundation merger vote.
Luca postponed it.
Not because Enzo guilty.
Because document integrity compromised.
Vanessa’s engagement?
Still intact publicly?
No.
Luca told me:
engagement suspended.
He did not say ended.
His relationship was his.
Then Enzo’s lawyer issued statement:
Mr. Bellini denies any involvement in alteration or substitution of records and denies wrongdoing in the 2008 transfers.
Fair.
Vanessa admitted:
she replaced documents.
Why?
She claimed:
she was correcting “misleading originals” using a draft summary her father’s old lawyer had prepared.
That was still unauthorized.
Did Enzo ask?
She said no.
Did he know?
No.
Then library access log showed:
Enzo entered after Vanessa.
Digital forensics found:
he opened one drawer.
His fingerprints on:
old photograph envelope,
not Russo folder.
Possible he truly did not touch.
Then the hallway camera showed Vanessa leaving the library at 2:39.
Enzo left at 2:51.
I entered at 3:06.
At 3:12, Vanessa returned through the terrace corridor, saw me inside, and followed me into the room.
That sequence matched my memory.
Digital forensics also found that a USB device had been connected to the archive terminal at 2:28.
Vanessa had used it to copy scans of the Russo folder before changing the paper file.
Investigators later recovered the USB from her handbag through counsel.
It contained:
scans of original Russo file.
So she had not destroyed truth.
She intended to control which version board saw while keeping originals privately.
That was revealing.
Not:
erase history forever.
Control timing and interpretation.
Then Luca said:
“She thought she was managing risk.”
Dana replied:
“She was managing your access to facts.”
Exactly.
Then meeting ended.
I went home.
Jenna texted:
I’m sorry.
I did not answer.
My new glasses sat perfectly on my nose.
Everything looked sharp again.
That was when my phone rang.
Unknown Indiana number.
I answered.
A man said:
“Is this Megan Foster?”
“Yes.”
“My name is Daniel Russo.”
I stood.
The man at center of the 2008 scandal was alive.
May you like
And he said:
“If Luca Moretti has finally opened that file, tell him his father knew I didn’t steal the money.”
