Story code: ST-000346
Part 3: The Audit Log Reveal
Maribel Soto arrived within minutes, her heavy badge reel clinking against the plastic buttons of her blue lab scrubs. She carried a thick ledger of system event logs, printed on wide-margin paper with green and white lines. She did not look at Leah or Dana; she walked straight to Dr. Rusk and laid the pages flat on the high counter.
“The 9:15 AM entry is an automated copy of a wild-type template,” Maribel said, her voice dry and mechanical. She pointed her thumbnail at a long string of hexadecimal characters. “The system log shows a manual validation bypass occurred at 9:10 AM. It used a remote partner token to force the status to ‘verified’ before the sequencer even initialized.”
Leah shifted her weight, her heel clicking sharply on the terrazzo floor. “Maribel, the partner portal permits pre-verification for trial scheduling. We’ve done it for three other profiles this quarter to ensure the clinical team doesn’t lose their window. It is standard efficiency.”
“The partner portal permits pre-allocation of slots, not sequence injection,” Maribel replied, her eyes remaining on the printout. She flipped to the second sheet, her thumb marking the margin. “The sequence file attached to the 9:15 AM entry is a complete genetic profile of a different patient from last Thursday. Look at the variant tags. They don’t match the raw sequencing run that finished at 1:42 PM today. Today’s run is Noah’s actual sample.”
Dana stood perfectly still, her hands resting flat on her folder. She did not look at her sister. “So the morning report wasn’t my son’s test at all.”
“It was a placeholder sequence from another run,” Maribel confirmed, her voice showing no emotion. “It was pushed through the validation gate manually to simulate a completed test.”
Dr. Rusk leaned over the desk, his glasses slipping down his nose as he compared the two logs. “Who authorized the manual validation bypass? The system requires an authenticated corporate partner credential for any remote override.”
Maribel tapped the column labeled User Auth ID. “The credential token belongs to the Mercer-Pike liaison account. It was logged as active from the neighboring biotech park’s server at 9:08 AM.”
I saw Leah’s gaze dart toward the glass doors of the clinic, then back to Dr. Rusk. Her jaw tightened, the muscles along her neck going rigid. “Dr. Rusk, this was a coordinating measure. If the system didn’t show a verified sequence by the morning milestone, the sponsor would have reallocated the therapeutic batch. I was protecting the patient’s access. Dana doesn’t understand how the allocation queue works.”
“You used a dummy sequence to bypass our safety check,” Dr. Rusk said. His voice was no longer quiet; it carried a hard, flat weight that made the clinic lobby go silent. He turned to Tessa Bell. “Tessa, disable the Mercer-Pike liaison token immediately. Flag the account for an active security breach.”
Tessa’s fingers flew across her keyboard, tapping in rapid succession. A sharp, double-beep echoed from the terminal.
“It’s done,” Tessa said, looking up. “The token is revoked.”
Leah stood frozen, her hand hovering over the counter where her folder had been. The new printout lay open, showing the exact IP address and credential code that linked the fake entry directly to her office.