5. In the Frame

The Vancorp Security Solutions headquarters rose from a Reston office park like a black glass monument to paranoia. The building was twelve stories of reflective windows and biometric locks, surrounded by a perimeter fence topped with razor wire that looked decorative until you noticed the voltage warning signs. Marcus Thorne sat in his car across the street, drinking cold coffee and watching the employee entrance.

It was six in the morning. The sun was just beginning to bleed orange across the Virginia skyline. He had been here for two hours, studying the shift patterns, the security rotations, the way employees badged in through the main gate with a retinal scan and a fingerprint verification. The building was a fortress. But every fortress had a flaw.

His phone buzzed. Rhea.

"Tell me you found something," he said.

"I found Gerald Cross's travel records." Her voice was tight, hurried. "He flew from Hartford to Westbrook County six times in the three months before the massacre. Each visit coincided with a Willow Creek Community Trust board meeting. He was listed as a 'special advisor' to the Trust. Meredith Vance signed off on his credentials personally."

"That puts him in Willow Creek. It doesn't prove he was involved in the murders."

"There's more. I pulled his financials. Two weeks before the banquet, Gerald transferred fifty thousand dollars to an account in the Cayman Islands. The account belongs to a shell company called Aegis Solutions. And Aegis Solutions, Marcus, is a private military contractor that specializes in 'personnel extraction and asset retrieval.' Mercenaries. He hired mercenaries."

Thorne's grip tightened on the phone. "Do we have a name? Someone who might have been on the ground that night?"

"Not yet. The Cayman account is a dead end without a court order. But I found something else in his communications. Gerald used a burner email account to correspond with someone in Willow Creek. The emails were deleted, but the metadata survived on his phone backup. The recipient's IP address traces to a device registered on the NeighborGlass network."

"Whose device?"

"That's the problem. The device isn't registered to a person. It's registered to an address. 601 Lavender Lane. Captain Raymond Holt's house."

Thorne absorbed the information in silence. Gerald Cross had been communicating with someone in Holt's house. Not necessarily Holt himself, his wife perhaps, or someone else with access to that address. But the connection was undeniable now. The conspiracy had roots deep in Willow Creek, tangled through the sheriff's department, the Community Trust, and the Cross family.

"I need to get inside Vancorp," he said. "Today."

"Marcus, you're a lawyer, not a spy. If you get caught breaking into a defense contractor's facility, you'll be disbarred. Or worse."

"I'm not planning to break in. I'm planning to walk in." He stared at the black glass tower. "Vancorp is hosting a job fair today. Entry-level security analysts. They posted about it on their public LinkedIn page. I have an appointment at nine o'clock under the name David Carver."

"You created a fake identity?"

"I created a consulting identity six months ago for a different case. David Carver, cybersecurity consultant, former military, looking for a career change. The resume is solid. The references are fake but they'll hold up for a few hours."

"And when they run a background check?"

"They'll run it today. I'll be inside before the results come back." Thorne pulled a folder from the passenger seat. Inside were forged credentials, a fake ID, and a cover story he had spent the previous night constructing. "The job fair includes a tour of the server facility. It's a selling point. 'See the cutting-edge infrastructure that powers the future of community security.' I just need ten minutes alone with the authentication server."

Rhea was silent for a moment. "If this goes wrong, I can't help you. I'm already on thin ice with the State Attorney's office."

"I know. That's why you're not coming with me." Thorne tucked the folder under his arm. "Keep digging into Gerald's communications. Find the name of the person he hired. If I can get the master key and trace WillowWatcher47, we'll have two independent lines of evidence pointing to the same conspiracy."

"And if you can't?"

"Then Elena's trial starts in twelve days, and nothing we've found will matter."

He hung up and stepped out of the car. The morning air was crisp, carrying the scent of freshly cut grass and corporate ambition. He adjusted his tie, straightened his blazer, and walked across the street toward the black glass tower.

The job fair was held in Vancorp's atrium, a cavernous space filled with interactive displays, recruitment booths, and holographic projections of the company's various surveillance platforms. A young woman with a bright smile and a Vancorp lapel pin handed Thorne a name tag reading DAVID CARVER - CYBERSECURITY TRACK.

"There are twelve candidates in your group," she said. "The tour begins at nine-thirty. Coffee and pastries are available in the lounge."

Thorne nodded and joined the other candidates, a mix of military veterans, recent college graduates, and mid-career professionals seeking a change. He kept his head down, made small talk about network architecture, and waited for the tour to begin.

At nine-thirty, a man in a crisp Vancorp uniform introduced himself as Derek Shaw, Senior Infrastructure Manager. He was tall, broad-shouldered, with the easy confidence of someone who had spent years explaining complex systems to non-technical audiences.

"Welcome to the nerve center of Vancorp Security Solutions," Shaw said. "What you're about to see is the infrastructure that powers NeighborGlass, CivicEye, and our next-generation community security platforms. This facility processes over two petabytes of data every day, from doorbell cameras, license plate readers, facial recognition scanners, and community mesh networks across twelve states. You'll get a chance to see the server racks, the cooling systems, and the authentication protocols that keep our data secure. Any questions before we begin?"

No one spoke. Thorne's heart was hammering, but his face remained calm. David Carver was calm. David Carver was curious. David Carver was not a lawyer breaking into a secure facility to steal evidence for a murder case.

The tour wound through multiple security checkpoints, each requiring a badge scan and a biometric verification. Thorne noted the placement of cameras, the frequency of guard patrols, the thickness of the blast doors separating each section of the facility. The server room was at the center of the building, a climate-controlled vault filled with towering racks of blinking equipment. The air was cold and dry, humming with the collective processing power of a thousand machines.

"This is where the magic happens," Shaw said, gesturing to a bank of servers marked with red labels. "These are the authentication servers. They manage access credentials for every NeighborGlass node in the country. Every time a resident logs into the app, every time a device connects to the mesh network, every time data is transmitted between nodes, these servers verify the connection and log the transaction. The master key system rotates credentials every thirty days, ensuring that even if a key is compromised, the window for exploitation is limited."

Thorne moved closer to the authentication servers, studying the interface panels. Each server had a maintenance port, a physical access point used for diagnostics and updates. If he could connect a device to that port, he could potentially extract the current master key before the system detected the intrusion.

But the group was moving on, and Shaw was watching.

"The maintenance schedule is rigorous," Shaw continued. "We run diagnostics every Sunday at midnight, and the authentication servers are physically inspected by a technician every morning at eight. It's a redundant system, but redundancy is the foundation of security."

Eight in the morning. The inspection had already happened. The servers would not be touched again until tomorrow. If he could get back here after hours, he would have a window of opportunity.

The tour ended in a conference room where candidates were invited to complete a skills assessment. Thorne excused himself to use the restroom, then slipped away from the group and retraced his steps toward the server room.

The corridor was empty. The cameras were positioned at intersections, not in the long stretches between them. He walked with purpose, a man who belonged here, a man who had forgotten something in the previous room.

The server room door was locked. He had expected that. What he hadn't expected was the keypad beside the door, which required a six-digit code. He had thirty seconds before the next security patrol passed through this corridor.

His phone buzzed. Rhea again. He ignored it and studied the keypad. The numbers showed wear on three keys: 2, 5, and 8. Three digits out of six. The remaining possibilities were still astronomical, but the wear pattern suggested a combination that used those numbers frequently.

He typed 258258. The keypad flashed red.

One attempt remaining before lockdown.

He closed his eyes and thought about what Shaw had said. The maintenance schedule is rigorous. Diagnostics every Sunday at midnight. Inspection every morning at eight.

Eight AM. Midnight. Dates and times. He typed 080800. The keypad flashed green.

The door clicked open.

Thorne slipped inside and closed the door behind him. The server room was cold and dark, lit only by the blinking LEDs on the equipment racks. He moved to the authentication servers and found the maintenance port, a standard USB-C interface marked with a diagnostic symbol. He pulled a small device from his pocket, a portable drive preloaded with extraction software that Rhea had obtained from a hacker contact.

The device connected. The extraction began. On the screen, a progress bar crawled from zero to one hundred percent.

Eighty percent. Ninety. Ninety-five.

The door handle turned.

Thorne yanked the device from the port and shoved it into his pocket just as Derek Shaw walked through the door. Shaw stopped, his expression shifting from surprise to suspicion.

"Carver, right? You're supposed to be in the assessment room."

"I got turned around." Thorne's voice was steady. "Looking for the restroom."

"The restroom is on the other side of the building. You walked through two security doors to get here." Shaw's hand moved toward the radio on his belt. "How did you get through those doors without a badge?"

Thorne calculated his options. The device was in his pocket. The data was extracted. But if Shaw called security, he would be searched, the device would be found, and everything would unravel.

"I followed someone through," he said. "A maintenance worker. I didn't realize it was a restricted area."

Shaw studied him for a long moment. Then his expression changed, the suspicion giving way to something colder and more knowing.

"David Carver," he said slowly. "We ran your background check while you were on the tour. It came back flagged. The references don't exist. The military record is fabricated. And your real name is Marcus Thorne. You're a civil rights attorney from Westbrook County."

Thorne didn't move. "Then you know why I'm here."

"I know you're investigating the Willow Creek case. I know you've been asking questions about Gerald Cross and Captain Holt. And I know you just plugged an unauthorized device into our authentication server." Shaw took a step closer. "Here's what you don't know. I've been waiting for someone like you."

The words didn't compute. "What?"

"I've worked at Vancorp for six years. I helped design the NeighborGlass infrastructure. And I've been watching it be weaponized against innocent people for the past eighteen months." Shaw's voice dropped. "Willow Creek was supposed to be a test case for community-based security. Instead, it became a surveillance tool for a small group of people who use it to blackmail, manipulate, and control. Meredith Vance was one of them. Captain Holt is another. And Gerald Cross is the worst of all."

"Why are you telling me this?"

"Because I've been trying to blow the whistle for six months, but no one will listen. The people I've contacted, journalists, regulators, even the FBI, they all hit the same wall. Vancorp has powerful friends. Gerald Cross has powerful friends. Evidence disappears. Witnesses recant. Investigators get reassigned." Shaw pulled a flash drive from his own pocket. "This contains everything. Server logs, admin access records, private messages, everything WillowWatcher47 has ever posted and every device that account has ever used. I downloaded it a month ago, hoping I'd find someone brave enough to use it."

Thorne stared at the flash drive. "Why should I trust you?"

"You shouldn't. But you don't have a choice. Your device probably got about sixty percent of the data before I interrupted. Mine has all of it." Shaw pressed the flash drive into Thorne's palm. "Take it. Get out of here. And when you release this to the public, make sure they know that Vancorp knew. They knew what their platform was being used for, and they did nothing to stop it."

"What about you?"

"I have a resignation letter pre-written and a flight to a country without an extradition treaty. I suggest you do the same." Shaw moved toward the door. "Security will be here in three minutes. There's a service elevator at the end of the hall. It exits to the loading dock. From there, you can reach the parking lot without passing the front desk."

"Shaw."

The man paused.

"Who is WillowWatcher47? You must have seen the real identity behind the account."

Shaw's face was grim. "I saw. But you're not going to believe me until you see it for yourself. Check the logs from the night of the banquet. Look at the device that posted the 'Person of Interest' tag on Elena's profile. Then look at who that device is registered to." He opened the door and glanced down the corridor. "Two minutes. Go."

Thorne ran.

The service elevator was exactly where Shaw had said. He descended to the loading dock and emerged into the grey morning light, the flash drive clutched in his hand. His car was where he had left it. He drove out of the parking lot at exactly the speed limit, his heart pounding, his mind racing through the implications.

Shaw had been waiting for someone to expose the truth. The server logs were in his possession. And somewhere in those logs was the real identity of WillowWatcher47, the anonymous account that had been orchestrating the public campaign against Elena.

He pulled over at a rest stop twenty miles outside Reston and plugged the flash drive into his laptop. The files were organized by date and device ID. He scrolled to the night of the banquet and found the logs from 7:32 PM, the moment the lights went out at Meredith Vance's house.

The first NeighborGlass post about the massacre appeared at 7:34 PM. Two minutes after the attack began. It was a photo of the darkened house, uploaded from a device registered to 601 Lavender Lane. Captain Holt's address.

But the caption was written from an account logged in on a different device. A device registered to 612 Lavender Lane.

Marcus Thorne's house.

He stared at the screen, refusing to comprehend what he was seeing. WillowWatcher47 had posted from his device. From his IP address. From his home.

He scrolled through the logs, searching for an explanation, a timestamp that would prove he had been somewhere else, a login record that would show the account had been accessed remotely. But the logs were unambiguous. WillowWatcher47 had originated from his router, his network, his own internet connection.

And he had never known.

The implications crashed over him like a wave. Someone had been inside his house. Someone had access to his devices. Someone had been using his network to frame Elena Cruz while he slept, while he worked, while he prepared her defense.

He looked at the post again. The caption read: Person of interest identified. Awaiting confirmation from law enforcement.

And below it, the first comment, posted by an account called MarcusT612: Saw her at the banquet. Something wasn't right about her eyes.

A comment he had never written. From an account he had never created.

The killer had not just framed Elena.

The killer had been living in his walls.