The threat arrived at 8:17 a.m. By 8:19, Lexi Carter understood that someone had been watching her investigation closely enough to know which records she intended to pursue.
The message contained only one sentence.
Withdraw Adrian Vale's appeal before someone gets hurt.
Lexi read it twice, then checked the sender's address. It had been created through an anonymous service, and the message contained no identifying information. She saved a copy, recorded the time of receipt, and forwarded it to a secure folder reserved for material connected to Adrian's case.
Fear settled beneath her ribs, but she refused to let it dictate her next move. The sender wanted her to imagine consequences without knowing what those consequences were. More importantly, the message had arrived before she had even submitted her latest records request.
Someone knew what she was preparing to do.
A knock interrupted her thoughts. Martin Hale, a senior partner at the firm, entered carrying a thin folder. His expression was controlled, but the tightness around his mouth suggested that the morning had already become unpleasant.
"An internal complaint has been filed against you," he said.
Lexi accepted the folder. The complaint alleged that she had sought access to restricted records beyond the scope of her authority and might have compromised the firm's professional obligations. She had forty-eight hours to provide a written response.
"Who filed it?"
"The complaint does not identify a single individual. It refers to concerns raised by an outside party."
"That is convenient."
"Lexi, I am not asking you to abandon your client. I am asking you to understand what this could cost you."
She looked up. "Have you examined the evidence against me?"
"I have examined what was sent to the firm."
"Then you know there is a difference between asking for a record through the proper process and obtaining one improperly."
Martin did not dispute that. Instead, he told her that the senior partner had received an anonymous call warning that the firm's handling of Adrian's appeal could attract unwanted scrutiny. He would not provide more details, and Lexi did not press him. His reluctance suggested that he was frightened of the consequences, not necessarily involved in the complaint.
"I will answer the allegations," she said. "I will also continue representing Adrian."
Martin closed his eyes briefly. "You are making this difficult for yourself."
"No. Someone else is making it difficult. I am refusing to make their job easier."
After he left, Lexi reviewed the complaint line by line. Its language was carefully chosen. It did not accuse her of a specific violation; it implied that a violation might have occurred and left the firm to imagine the damage. The complaint could later be used to question her judgment even if nothing was proved.
She began drafting her response, attaching dates and copies of the formal requests she had submitted. Every action had a procedural basis. She would not allow an anonymous allegation to turn lawful investigation into apparent misconduct.
Before noon, she returned to Gabriel Vale's old research.
The name Elias Voss appeared in a security consultancy agreement connected to a legal services contractor. The agreement itself was ordinary enough, but its archive reference matched a number written in the margin of one of Gabriel's surviving research notes.
Lexi compared the two entries. The formatting was similar, but the reference in Gabriel's notes included an additional suffix that did not appear in the contract.
It might have been a routine filing distinction. It might have meant the records belonged to different stages of the same process.
She needed the original documents before she could decide.
Lexi opened a new request for the contract's approval history, payment authorization, and named client. Then she paused before submitting it.
If someone was monitoring her work, the request would tell them exactly which connection she had noticed.
She submitted it anyway.
The record would be difficult to obtain. That did not make it less necessary.
The first useful response arrived shortly after lunch.
It was not an answer to her formal request. It was a scanned page from an investigative report, sent from an address that could not be traced to an identifiable person.
The page contained a payment entry associated with the security consultancy. Beside the amount, a typed note read:
Payment verified. Purpose unconfirmed.
Lexi examined the scan at high magnification. The document showed no complete file number, signature, or page sequence. Whoever had sent it had supplied enough information to establish a connection, but not enough to verify the document's origin.
She saved the attachment without altering it and recorded the message headers. Then she compared the payment reference with the number in Gabriel's notes.
The core sequence matched. The suffix did not.
That distinction mattered. It could indicate that Gabriel had been tracking a related transaction, or that someone had deliberately combined separate records to create a misleading connection. Without the original file, neither possibility could be dismissed.
She resisted the temptation to treat the scan as a breakthrough. Evidence became dangerous when a person decided what it meant before establishing where it came from.
Her phone rang.
The number was unfamiliar, and the caller did not introduce himself.
"You should stop requesting the payment file," a man said.
Lexi remained silent for a moment. She could hear faint traffic behind his voice.
"Who is this?"
"Someone who knows that file is not going to give you what you expect."
"Then you should have no objection to my examining it."
"That depends on what you believe you are looking for."
"I am looking for the original authorization and the identity of the client who paid for the security contract."
"You think the paperwork will tell you who was responsible."
"I think the paperwork will tell me what happened. Responsibility comes afterward."
The man gave a quiet, humorless laugh.
"Gabriel understood that distinction."
Lexi straightened in her chair. "You knew my father?"
"I knew of him."
"That is not what I asked."
"No," the man replied. "It isn't."
She gripped the phone more tightly. "Were you involved in his final investigation?"
For several seconds, there was only the distant sound of traffic.
Then the man said, "You sound like him."
The call ended.
Lexi stared at the screen. The sentence could have been an attempt to frighten her, a deliberate performance designed to make her believe the caller had known Gabriel, or an involuntary admission from someone who genuinely remembered him. She had no way to distinguish among those possibilities.
But the caller had known enough about her request to contact her before the records office responded. He had also known Gabriel's methods, or at least claimed to.
She wrote down the exact words while they remained fresh in her mind. She added the time, duration, and number displayed on the phone. Then she placed the call log beside the scanned report and the security contract.
The three items did not prove a conspiracy. They did establish a pattern worth investigating: a payment with an unconfirmed purpose, a reference number linked to Gabriel's research, and an unidentified person attempting to discourage access to the original record.
Lexi returned to her formal request and narrowed its scope. She asked for the original contract, its approval chain, and the record identifying the authorizing officer. She did not mention the anonymous scan or the call. Neither was verified, and including them could alert the records office to information that might compromise the inquiry.
She then completed her response to the disciplinary complaint. The document contained no emotional accusations, only a chronological account of her actions and supporting records demonstrating that she had used authorized channels.
Before sending it, she read it once more.
She was afraid. Pretending otherwise would not make her stronger. But fear was not evidence that she had chosen the wrong path.
She submitted the response and preserved the confirmation.
Then she turned back to Gabriel's notes.
The additional suffix appeared nowhere else in the surviving pages. If it had once identified a separate file, that file was missing.
Someone had given her a fragment of the answer while trying to prevent her from seeing the original.
She needed to know why.
Adrian Vale received the photocopy shortly before the evening count.
It had been slipped into a stack of routine papers delivered to his cell. The page showed part of a prison visitation record, including a date and an administrative entry made shortly before Michael Turner disappeared at 2:14 a.m.
The visitor's name was missing.
A handwritten note had been added beneath the copied entry.
Ask Lexi Carter why this visitor came before Turner disappeared.
Adrian read it once, then placed the page on his narrow desk.
His first reaction was anger, but not the kind the sender wanted. He was angry that someone had taken an incomplete record and attached Lexi's name to it as if the accusation itself were proof.
The document established only that an entry existed. It did not establish who had made the entry, whether the visitor had been admitted, or whether Lexi had any connection to the visit.
He examined the photocopy carefully. The prison's ordinary visitation records used a consistent administrative reference format. The code on this page was different. Its prefix appeared to belong to an internal routing system rather than the standard visitor register.
That was a concrete discrepancy.
It did not prove the page was false. An internal transfer, correction, or restricted-access procedure might explain the difference. But until he could identify the system behind the code, he could not treat the photocopy as a reliable representation of the original record.
Adrian folded the page along its existing crease and slipped it beneath his mattress before the next inspection.
He would not confront Lexi on the strength of an anonymous accusation. Doing so would give the sender exactly what it wanted: a fracture between them before either had verified the evidence.
Instead, he began reconstructing the record's possible path. Someone had obtained a copy of a prison document, removed the visitor's identity, and added a message designed to direct suspicion toward Lexi. The altered presentation might conceal a real connection, or it might be intended to manufacture one.
Either way, the person responsible understood that Adrian's greatest vulnerability was not the prison itself. It was the possibility that the people he trusted could be used against him.
A guard stopped outside his cell.
"Vale. You have mail."
The envelope was plain, without a return address. Adrian accepted it and waited until the guard had moved away before opening it.
Inside was a single sheet of paper. It contained no threat and no demand. Only a short statement:
Your father kept a record of what they changed.
Adrian's pulse quickened.
The message did not identify the record, the people who had changed it, or the circumstances in which Gabriel had discovered the alteration. It might have referred to the investigation his father had conducted. It might also have been another attempt to draw Adrian toward a conclusion unsupported by evidence.
He turned the sheet over. There was no signature, stamp, or visible marking that could identify its source.
For a moment, he remembered his father's insistence that documents could lie without containing a single false word. A date could be accurate while the sequence around it was manipulated. A name could be omitted for legitimate reasons or removed to protect someone. The task was not to decide which explanation felt right. It was to find the record that could distinguish one from the other.
Adrian looked again at the unfamiliar prefix on the visitation photocopy.
If the entry had passed through an internal routing channel, the original might still exist somewhere outside the ordinary visitation register. The sender could have removed the name because it was incriminating—or because the name would expose the sender's own deception.
He had no proof that the two messages came from the same person. Their arrival close together was suspicious, but timing alone could not establish a connection.
At the next opportunity, he would need to find someone who understood the prison's older record systems. Someone with enough knowledge to explain the code, but not enough authority to control the answer.
The name Jonah Mercer came to mind. Jonah had worked in the records wing before becoming a prisoner himself. He knew fragments of the system, not its entire history. That limitation made him useful. Adrian needed a verifiable answer, not another man's theory.
He waited until the corridor quieted before taking the photocopy out again. Under the weak light, he studied the code one last time.
The format was unfamiliar, but one detail stood out: the entry appeared to have been routed through a separate administrative channel before it reached the copied page.
That meant the missing visitor's identity might not be the only information withheld from him. The document's journey through the system could matter just as much as the visit itself.
Adrian folded both messages and hid them together.
He would not accuse Lexi. He would not dismiss the possibility that she had been placed in danger. And he would not let an unknown sender decide which of those fears controlled his next move.
But someone had access to records connected to his father's investigation, and that person knew exactly how to make incomplete evidence look personal.
The next question was no longer simply who had visited Michael Turner.
It was who had altered the record—and why they wanted Adrian to believe Lexi was the answer.