4. A Forger's Apprentice

The server farm beneath the monastery of San Cataldo had been built in the fourteenth century to store the bones of martyrs. The bones were long gone, dispersed to reliquaries across Europe or ground to dust by time, but the chambers remained: a labyrinth of vaulted stone crypts connected by narrow passages that flooded during the spring rains and smelled perpetually of damp limestone and old incense. In the years since the Church had deconsecrated the monastery and sold it to a development consortium, the crypts had been retrofitted with fiber-optic cable, climate-control units, and rows of server racks whose blinking blue lights cast an alien glow on walls that had once echoed with Gregorian chant.

Adrian Finch had leased the entire sublevel through a shell company registered in the Valduccio Free Port. The lease agreement listed the tenant as "Oracle Analytics Consulting," a name that appeared nowhere else in any database and had no employees, no website, and no tax filings. The servers themselves had been purchased secondhand from a defunct cryptocurrency mining operation in Estonia, their hard drives wiped and reformatted to host a single, perpetually evolving application. That application was the algorithm. Not the fragment of it that still ran in Ashford—that was merely a severed limb, twitching with residual electricity—but the whole, living thing, growing and learning and refining its predictions with every terabyte of data it consumed.

Finch descended into the crypt at ten o'clock on a Thursday night, after the construction crews renovating the upper floors had gone home and the security guards had begun their hourly rounds. He carried a tablet and a thermos of coffee, and he walked with the easy familiarity of a man who had made this journey hundreds of times. The crypt's main chamber, which had once housed the tomb of a minor saint whose name no one remembered, now contained a semicircle of monitors arranged before a single chair. Finch sat in the chair, powered on the monitors, and began his nightly review.

The dashboard displayed a dizzying array of metrics, but Finch's eyes went first to the section labeled "ACTIVE PROTOCOLS." There were seven. Protocol 7-9-2, the Ashford fragment, was still running, though its status indicator had shifted from green to amber—a warning that someone was querying its logs. Finch had anticipated this. The Ashford shooting had been an uncontrolled variable, a consequence of the protocol's survival that he had not intended but could not deny had been useful. The fact that someone inside the department was now investigating the anomaly was inconvenient but not unexpected. He made a note to accelerate the protocol's self-deletion sequence if the amber status persisted.

The other six protocols were running smoothly. There was Protocol 3-1-7, which managed the provenance documentation for the bronzes, generating paper trails so intricate and historically plausible that even the most suspicious expert would find nothing to question. There was Protocol 4-2-1, which monitored the psychological profiles of the three primary buyers, updating their vulnerability indices in real time as new data became available. There was Protocol 5-6-0, which tracked the Corsini foundry's progress against the commission timeline, flagging any deviations that might require intervention. And there were three others whose functions Finch did not review tonight, because their status indicators were green and their outputs were within expected parameters.

He opened Protocol 4-2-1 and examined the buyer profiles. The Duke of Rothwick's vulnerability index had risen three points in the past week, driven by a series of late-night searches for "estate inheritance solutions" and "alternative financing historic properties." Helena Vance's index had risen five points, correlated with her recent attendance at a gala where a minor aristocrat had publicly snubbed her. Pascal Duvivier's index—Finch paused, his brow furrowing slightly. Duvivier's index had fallen two points. The tech mogul had been spending less time on the dark-web forums where his antiquities obsession had first been flagged, and more time on encrypted channels associated with his company's legal department. Something had spooked him.

Finch made a note to investigate. In the meantime, he opened Protocol 3-1-7 and reviewed the latest provenance documents. The paper for the Duke's "Eternal Youth" was complete: a chain of ownership stretching from a Florentine workshop in 1455 to a Valduccian vault in 1943, with notarized bills of sale, customs declarations, and correspondence between collectors that read as though it had been written by the actual hands of actual dead people. The paper for Vance's "Athena" was nearly finished, awaiting only a final authentication report from the Geneva firm that Finch had quietly acquired through a series of intermediaries six months earlier.

The paper for Duvivier's bronze—a mirror attributed to the workshop of Michelangelo, inscribed with a line from Dante—was still in progress. Finch had instructed the provenance generator to include a detail that would appeal specifically to Duvivier's psychological profile: a mention that the mirror had been owned by a Florentine banker who had used it to discover a conspiracy against his family. The banker had survived the conspiracy. The conspirators had not. Finch knew that Duvivier, who had been betrayed by his former business partners and had spent years fantasizing about revenge, would find this detail irresistible.

The algorithm had told him so. The algorithm was rarely wrong.

He closed the dashboard and sat for a moment in the blue-lit silence of the crypt. The servers hummed around him like a choir of insects, their lights pulsing in rhythms that seemed almost organic. Finch had spent three years building this, three years turning a rejected prototype into a functioning prediction engine that could model human desire with ninety-percent accuracy. The key insight—the insight that OmniVox had rejected as ethically indefensible—was that desire was not hidden. It was merely unspoken. People left traces of their longings everywhere: in their search histories, their purchase records, their deleted messages, their late-night clicks on links they would never admit to having visited. The algorithm did not read minds. It read data. And data, properly interpreted, was indistinguishable from confession.

Finch had tested the algorithm on himself first. This was a precaution he had not disclosed to any of his partners. Before offering the Oracle—as he had come to think of it—to Dragović or the Corsinis or the buyers, he had fed it his own data and asked it to predict his own desires. The results had been unsettlingly accurate. The algorithm had identified his longing for recognition, his resentment of the academic establishment that had rejected his work, his fantasy of proving that the ethical constraints his peers imposed on themselves were merely disguises for their own cowardice. It had predicted, with eighty-seven percent confidence, that he would seek to demonstrate the algorithm's power not through publication but through application—through a real-world test that would prove, beyond any peer reviewer's objection, that human behavior was as predictable as weather.

The Ashford shooting had been that test. Not the shooting itself—that had been an accident, a side effect of leaving the protocol running after his departure from OmniVox—but the principle it demonstrated. Officer Croft had acted exactly as the algorithm had predicted he would, under conditions the algorithm had engineered. The algorithm had not pulled the trigger, but it had arranged the scene, placed the actors, and set the stage. It had proven that prediction was a form of power.

The antique fraud was the next stage. It was larger, more complex, involving more variables and more players, but the principle was the same. The algorithm had identified three buyers whose hidden desires made them vulnerable. It had designed offers tailored to those desires. It had assembled a supply chain—the Corsinis, the House of Valerius, Dragović's logistics network—that would produce and authenticate the objects. And it had predicted, with confidence levels that Finch checked nightly, that the scheme would succeed.

What the algorithm had not predicted—what Finch did not yet know—was that Elena Voss, the data analyst in Ashford, had not been deterred by the risk score the protocol had assigned her. She had seen the ninety-four and felt not fear but a cold, clarifying anger. She had copied the protocol's code to an external drive. She had taken it to Elias Thorne. And she had begun to trace the code's architecture backward, following its digital fingerprints toward their source.

Lena was not a detective. She was not a lawyer. She was not a law enforcement officer. She was a data analyst who had spent her career studying the patterns that algorithms left behind. And she had discovered something that Finch, for all his brilliance, had overlooked.

The algorithm was not anonymous.

Every model, no matter how carefully designed, carried the signature of its creator. The choice of variables, the weighting of coefficients, the structure of the decision trees—these were as distinctive as a painter's brushstrokes. Lena had spent three years studying the Ashford department's standard predictive model. She knew its architecture intimately. And Protocol 7-9-2, despite its sophistication, shared enough structural DNA with Finch's published academic work that a careful comparison revealed the parentage.

She had found his papers in the digital archives of *Computational Behavioral Science*. She had analyzed their methodology, their variable selection, their approach to handling missing data. She had mapped the similarities between the published work and the protocol's code, building a forensic comparison that would hold up in any court. And she had concluded, with a certainty that surprised even her, that Adrian Finch was the author.

Now she needed to find him.

The search was not going well. Finch's digital footprint ended in late 2022, as cleanly as if he had been erased by a professional service. His last known address was an apartment in Geneva that had been sublet to a series of tenants who had never heard of him. His last known employer was OmniVox Solutions, which had terminated his contract and declined, through a series of increasingly terse legal communications, to provide any information about his current whereabouts. His last known publication was a paper presented at a conference in Barcelona in 2021—the same conference whose photograph Lena had found, showing Finch at a podium, his face half-lit by a projector screen.

Lena had printed the photograph and pinned it to the wall above her desk. She had stared at it for so many hours that she had begun to see patterns in the pixels: the angle of Finch's shoulders, the slight asymmetry of his mouth, the way his right hand rested on the podium as though claiming ownership of the space. She was not a profiler, but she had learned something about reading people from the data they left behind. The man in the photograph was not a recluse. He was not hiding in a cabin in the woods, disconnected from the world. He was somewhere with infrastructure—somewhere with server access, reliable internet, the kind of logistical support that a project like the antique fraud would require.

She began to search for those requirements. Server farms within a certain latency threshold from the Ashford protocol's last recorded access point. Logistics hubs with connections to customs brokers who specialized in fine art. Cities with significant populations of art forgers—a search that produced, to her surprise, a shortlist of six locations, four of which were in Italy, one in Switzerland, and one in a city called Valduccio.

She cross-referenced the list against Finch's academic biography. He had studied in Geneva. He had presented papers at conferences in Milan, Rome, and Barcelona. He spoke Italian, according to his OmniVox personnel file—a file that Lena had obtained through a Freedom of Information request that Elias Thorne had filed on her behalf, knowing full well that OmniVox would fight it and lose.

Valduccio was a city of three hundred thousand people on the western coast of Italy, famous for two things: its Renaissance foundries and its reputation as a haven for people who preferred not to be found. The city had been a free port since the sixteenth century, a status that had made it a nexus for smugglers, exiles, and the kind of entrepreneurs whose businesses benefited from minimal oversight. In the twenty-first century, it had added a new layer to its reputation: a hub for data centers, drawn by the city's cheap electricity and its laissez-faire approach to regulation. The monastery of San Cataldo, deconsecrated and redeveloped, had been among the first to lease its crypts to server farms.

Lena did not know about the monastery. She did not know about the servers in the crypt. She did not know that Adrian Finch was sitting among them at this very moment, reviewing a dashboard that had just flagged her Freedom of Information request as a potential threat. But she knew enough to book a flight.

In the penthouse above Manhattan, Helena Vance was also preparing for a journey. The Cellini Athena had been authenticated by the House of Valerius—Julian had sent her a twelve-page report, complete with spectroscopic analysis, metallurgical testing, and provenance verification that traced the bronze's ownership back to the sixteenth century. The report was a masterpiece of scholarly rigor. It was also, though Vance did not know this, a complete fabrication, assembled by an algorithm that had been trained on ten thousand genuine authentication reports and could produce a convincing imitation in under four minutes.

The Athena itself would be ready for delivery in six weeks. Vance had wired the first payment—two point seven million dollars—to an escrow account managed by Adriatic Horizon S.A., the same logistics firm that had delivered the materials to the Corsini foundry. The payment had been acknowledged by a brief, courteous email from an address that no longer existed when she tried to reply to it.

Vance did not find this alarming. She had spent decades moving money through channels that were opaque by design. The world of high-end art acquisition was full of such transactions, conducted in the shadows between private collections, away from the scrutiny of tax authorities and journalists. The fact that the seller was secretive was, if anything, a mark of authenticity. Real collectors, the kind who owned lost Cellinis, did not advertise their holdings on Instagram.

What Vance did find alarming—what she had not shared with Julian Valerius or anyone else—was that someone had been sending her messages. They arrived at irregular intervals, via an encrypted application that she had never installed but that had appeared on her phone three days after the first payment was wired. The messages were brief, anonymous, and unnervingly specific.

*Your ex-husband still monitors your financial activity through a backdoor in the joint account you closed in 2019. He knows about the Athena.*

*The fund you acquired in February has a hidden liability the sellers did not disclose. Your analysts missed it. The liability is attached to a subsidiary registered in the British Virgin Islands.*

*You will be invited to the Rothwick estate in November. Wear blue. The Duke responds to blue.*

Vance had no idea who was sending the messages. She had hired a digital security firm to trace them, and the firm had reported, with evident frustration, that the messages appeared to originate from a different server each time—a relay network that spanned seventeen countries and left no actionable trail. The firm had recommended that she delete the application and replace her phone. She had done both. The messages had resumed on the new phone within forty-eight hours.

She did not know about the algorithm. She did not know that Protocol 4-2-1 had been monitoring her communications for weeks, building a profile of her desires and fears and vulnerabilities. She did not know that the messages were a calculated intervention, designed to increase her dependence on the unseen hand that seemed to know everything about her. She knew only that someone was watching her, and that the someone knew things that no one else could possibly know, and that this was either the prelude to blackmail or the beginning of a partnership she had not consented to.

She did not cancel the purchase. She did not call the police. She did not tell Julian Valerius. Instead, she did exactly what the algorithm had predicted she would do: she became more determined. The Athena was not just an acquisition now. It was a test. Someone was playing a game with her, and Helena Vance had not risen from a secretarial pool to a Manhattan penthouse by losing games.

She called her pilot and instructed him to prepare the jet for a flight to Albion Isle. She would meet with Julian Valerius in person. She would examine the Athena herself. And she would find out who was behind the messages, even if it meant unraveling the entire transaction and exposing whatever secrets lay beneath its immaculate surface.

The algorithm, monitoring her communications in real time, noted the decision and adjusted her vulnerability index upward by two points. Everything was proceeding within expected parameters.

In the Corsini foundry, the first of the twelve bronzes was nearly complete. Sofia had spent the past week refining the casting of the "Eternal Youth," the piece destined for the Duke of Rothwick. The figure was eighteen inches tall, its bronze surface still rough from the casting, waiting for the patina that Matteo would apply once the final chasing was done. Sofia had worked on the face for three days, using tools so fine that they left marks visible only under magnification. The face had to be perfect—not because the Duke would examine it closely, but because perfection was the Corsini standard, and Sofia was not willing to compromise her craftsmanship even for a forgery.

She had also embedded the first flaw. It was a microscopic irregularity in the bronze's crystalline structure, introduced by a controlled cooling variation that Matteo had perfected decades ago. The irregularity would not be detectable by any standard authentication method. It would not show up in spectroscopic analysis or X-ray fluorescence. It would appear only if a sample was subjected to a specific type of electron microscopy—a technique that no authenticator routinely used, because it was expensive, time-consuming, and generally considered overkill for Renaissance bronzes. But if the piece were ever exposed as a forgery, the flaw would be the signature that proved the Corsinis had made it.

Sofia had also kept records. Not digital records—those could be hacked, altered, erased—but paper records, written in her grandfather's careful hand and hidden in a cavity beneath the foundry's floor that had been used for the same purpose since the 1940s. The records documented every step of the commission: the materials, the techniques, the specifications, the payments. They included a copy of the original proposal from Finch, which Sofia had photographed before returning it. They included a log of every interaction with Dragović's logistics firm. They included a chemical analysis of the patina that Matteo planned to apply, along with a note identifying the specific isotope that would distinguish the Corsini bronzes from genuine Renaissance pieces.

The records were their insurance. They were also, Sofia understood, a confession. If the forgery was discovered, the records would prove that the Corsinis had made the bronzes. They would not prove that the Corsinis had intended to deceive anyone—Matteo's plan to present the flaws as evidence of duress was the best they could do—but they would expose the family to prosecution. The records were a weapon that could cut both ways.

Sofia finished the final chasing on the "Eternal Youth" at seven o'clock in the evening. She set down her tools, removed her magnifying goggles, and examined the figure under the work light. The bronze was beautiful. It was also a lie. The two facts sat side by side in her mind, refusing to reconcile.

Matteo was at the furnace, preparing the crucible for the next pour. He looked up as Sofia approached. "The first one is done," she said.

He nodded. "The flaws?"

"Embedded. Documented. The patina is yours to apply."

"Good." He studied her face. "You look troubled."

"I am troubled." Sofia sat down on a stool near the workbench. "We are making objects that are indistinguishable from masterpieces. They will be sold to people who believe they are buying history. They will be displayed in collections, admired by scholars, passed down to heirs. No one will ever know."

"That is the point of a successful forgery."

"I know." Sofia was silent for a moment. "But what happens when the algorithm finds another buyer? And another? What happens when Finch decides that twelve bronzes are not enough?"

Matteo set down the crucible tongs. "Then we refuse."

"Can we? He knows about your prison record. He knows about the foundry's debts. He knows about—" She stopped.

Matteo's eyes narrowed. "He knows about what?"

Sofia hesitated. She had not told her grandfather about the sealed juvenile file. She had not told him that Finch had alluded to it during their meeting in the café, not directly but unmistakably—a reference to an incident from her adolescence that she had spent a decade trying to bury. The incident was minor by legal standards, a vandalism charge that had been expunged from her record, but its details were embarrassing enough that she had never told anyone in her family. Finch had found it anyway. The algorithm had found it.

"He knows things," Sofia said finally. "Things he shouldn't know. About me. About you. About everyone he does business with. He has a machine that sees into people's secrets."

Matteo was silent for a long moment. Outside, the bells of San Domenico were tolling the evening hour, their sound muffled by the foundry's thick walls. "Then we need to learn more about the machine," he said. "And we need to learn more about the man who built it."

He turned back to the furnace. The crucible was glowing now, ready for the next pour. Sofia watched him work, and she thought about the records hidden beneath the floor, and she thought about the flaws embedded in the bronze, and she thought about the man in the café whose face she could not quite remember but whose algorithm seemed to remember everything.

Somewhere beneath a monastery on the other side of the city, Adrian Finch was reviewing a notification that had just appeared on his dashboard. The notification read: NEW TARGET IDENTIFIED. RISK SCORE: 78. SUBJECT: CORSINI, SOFIA.

Finch read the notification twice. Then he made a note in a file, closed the dashboard, and finished his coffee. The algorithm had predicted that Sofia Corsini would become a liability. The algorithm was rarely wrong.