"Someone tried to erase it," he said. "The 06:41 override. Later that morning, after the flight was held, after you were already off the aircraft. They used the same restricted channel. The ledger would not let them."
"Because it's immutable," Sanaa said.
"Because it's built so that every action becomes a new entry," he said. "You can add. You cannot unwrite. Whoever tried did not understand the tool they were using — or understood it and panicked anyway."
Sanaa thought of her scorebook. You could cross out an error during a game, but both players had to initial the correction, and the crossed-out number stayed legible underneath forever. That was the point. A record that could be cleaned was not a record. It was a story.
What Grant's team found next, Sanaa pieced together over the following two days from that call, from a careful summary Grant herself gave her on a second video call, and from the questions reporters had suddenly started asking with new precision, which told her what had leaked and what had not.
The deletion attempt had come through the same restricted executive override channel as the original change. Not a general reservations terminal. Not a gate agent's ordinary login. The channel existed for genuine operational emergencies, and it required a token held by a very small number of offices at Larkspur Air. The 06:41 entry had carried such a token, attached to the office of Premium Client Relations. The deletion attempt, hours later, had carried the same office's token, used in the same way, from the same internal network segment.
One coincidence might be explained. Two uses, in sequence, aimed first at moving a fourteen-year-old out of seat 2A on Flight 208 and then at erasing the evidence that she had ever been moved — that was not a coincidence. That was a person returning to a scene.
Colin Mercer, Director of Premium Client Relations, had denied knowing anything about the override. Grant laid out his denials for Sanaa without pleasure, the way a player lays out a challenged word for adjudication, one at a time.
First, he had said the token must have been used by someone else in his office, that tokens were shared in practice if not in policy. The access logs said otherwise: the channel required a personal hardware key as well as the office token, and only one hardware key had signed both entries.
Then he had said the change might have been automatic, a system response to the Devereux Lang corporate account's preferences. The system's designers, consulted in writing, said the channel performed no automatic actions at all. Every entry in it was a deliberate human act, confirmed twice by the user before it committed.
Then he had said that if anything had been done, it had been done to correct an earlier error, to restore an intended seating plan. But there was no earlier error in the ledger. Before 06:41 that morning, the ledger showed one clean line, months old and untouched: Sanaa Osei, Flight 208, seat 2A, confirmed. Gate lead Tom Beckett had already testified that his handwritten note in the gate logbook — seat map changed at 06:41 — matched the ledger to the minute. Paper and system agreed. Only Mercer's account kept changing shape to fit whichever fact had just been proven.
Each denial, Sanaa noticed, was smaller than the one before it. That was how losing worked in Scrabble too. Early on, a player behind on points played boldly, spending big words. Late, they played defensively in corners, blocking, hoping merely to lose by less. Mercer had reached the corner stage.
The last gap was time. Between the original override at 06:41 and the failed deletion, Mercer claimed he had been in a scheduled call with a client, away from his desk, unable to access the channel. It was his strongest claim because it was specific, and Grant's team treated it accordingly, Sanaa was told. They did not argue with it. They simply asked his assistant — with a lawyer present, with her consent, about her own records — to walk them through that morning.
His assistant's calendar filled the gap the way water fills a footprint.
The client call had ended early, at Mercer himself noting the change in the calendar entry: wrapped by 08:10, his own typed words. Then a block he had labeled only as HOLD, in the exact window in which the deletion attempt had been made from his office's network segment, with his hardware key signed in and active. And in the calendar, attached to the HOLD block as a note, were four words his assistant had copied from his message that morning without understanding them: hold all premium escalations.
Premium escalations. As if a girl's stolen seat, once it became a viral video, had been filed in his mind under client management.
"Did he say anything to you directly?" Grant asked Sanaa on that second call. "At any point? A message, an apology, an explanation routed through anyone?"
"No," Sanaa said. "Nobody from his office ever spoke to me. They just — moved me. Like a bag that was in the wrong bin."
Grant wrote that down too, and Sanaa wondered whether it would appear somewhere in a report in softer language, and hoped it would not be softened too much.
Her father asked no questions on the call. He sat outside the camera's view, where he had placed himself on purpose, a man determined that no one would ever be able to say he had supervised his daughter's evidence. But when Grant had signed off, he came and stood behind Sanaa's chair and put a hand briefly on her shoulder.
"He moved a child to please a law firm," he said, very quietly, as if the sentence embarrassed his whole profession. "And then he tried to clean the scoresheet."
"He couldn't," Sanaa said. "That's the thing. He couldn't. It's still there."
"It is," her father said. "All of it is."
The news reached her that evening not from Grant, not from her father, but from a notification blooming on her phone while she was trying, finally, to study. A headline, then another, then a photograph of a man she had never met leaving a building with a box nowhere in sight — that detail, at least, the reports agreed on: he had left with nothing but his coat.
The airline's statement was three sentences long, and Sanaa read it four times, committing its plainness to memory the way she committed word lists, because she knew she would want it exact later.
Colin Mercer, Director of Premium Client Relations, had been suspended from his duties, effective immediately, pending the conclusion of the internal investigation into the alteration of a passenger's reservation on Flight 208.