Chapter 13: The Audit Log
The evidence management system lived behind two passwords and a security token that June Castellano kept on a ring with her courthouse keys. It was not elegant software. It loaded slowly, complained about fields left blank, and rendered its reports in a typeface that had looked old-fashioned a decade ago. June trusted it anyway, because she understood exactly what it did: every time a file in its custody was uploaded, viewed, copied, exported, or altered, the system wrote a line, and no human being with ordinary access could unwrite it. The audit log was the record of the record.
She began the way procedure required. Before removal from Courtroom 4A, counsel for the defense had formally asked the court to preserve the audit log for Exhibit 18. June entered the request into the docket, timed and dated, and noted the preservation hold in the exhibit file, so that no routine purge, migration, or overwrite could touch it. Her initials went beside each entry. Whatever anyone later said about that morning, the request would be there, spelled correctly, with her name standing next to it. Only then did she permit herself to do the thing she had been thinking about since the handcuffs clicked: she requested the log itself.
Exhibit 18. RIVERVIEW_PARK_CAM_0923.MP4. The search field blinked. June typed the filename the way she had typed it once before, on the afternoon of September 23, when the file had arrived from the police evidence unit and she had logged its certification at 5:17 p.m. June sat with her hands folded, not touching the keyboard, and waited.
The log opened as a table, newest entries at the bottom. Upload, September 23, 4:52 p.m., police evidence unit terminal. Certification, September 23, 5:17 p.m., her own credential, a row she recognized the way you recognize your own signature on a crowded page. Storage verification, September 23, 6:03 p.m., automatic. Access, September 24, 9:15 a.m., prosecution review, ADA Steven Krol's office, duration eleven minutes, read-only. Access, September 24, 1:40 p.m., defense discovery export, logged, receipted, routine. Each entry wore its timestamp like a name tag. Each was the sort of line June had seen ten thousand times, the ordinary heartbeat of a file moving lawfully through a lawful process.
She scrolled slowly, because slow was how you read something you could not unread. The screen refreshed its gray rows. Between the defense export on the afternoon of the twenty-fourth and a storage verification on the morning of the twenty-sixth, the log held a space that her eyes crossed once and then, with a small internal lurch, crossed back to. There was a row there. There had, of course, been a row there the whole time; the log did not hold spaces. It held a row that did not belong to the rhythm of the others, sitting in the deep middle of the night of the case, timestamped at an hour when the courthouse was dark, the evidence servers unattended, and every honest user of the system asleep in their own home.
June leaned closer. The row did not say what Camille Renaud had said it would say, because logs do not take sides and do not use words like modified when a colder vocabulary will do. It used the system's own terms: the event type, the timestamp, the credential, the workstation, the duration of the session. But it confirmed the shape of the accusation that had gotten a lawyer handcuffed out of Courtroom 4A. Something had happened to Exhibit 18 at 2:41 a.m. on September 25. The file that had been certified as untouched on the twenty-third had been opened, in the dark, two nights later, by someone using a credential the system recorded without hesitation.
Her first instinct, thirty years deep, was to print. The printer woke, warmed, and produced two pages with its familiar smell of heat and dust. She checked the print against the screen, character by character, and fed one copy into the exhibit preservation folder, behind the preservation request that had started all of this.
She did not call anyone. Not yet. A log entry was not an explanation, and June had not survived three decades of courthouse storms by running down hallways with weather she had not finished reading. She sat with the pages and the quiet screen and allowed herself, briefly, to think about the woman in the holding cell downstairs, who had seen one timestamp on an exhibit detail panel and had refused, at the cost of her liberty for the day, to pretend she had not seen it. June turned the pages face up again. The next question was not what. The log had answered what. The next question was who, and the log had answered that too, in the column she had been avoiding with the discipline of a woman who knows that some names, once read, cannot be returned to unread. She moved her eyes to the credential column and read it.