Chapter 2 - Nine Percent Was Only the Door
Ellie’s resignation lasted twenty-three seconds.
The Gilded Cage’s general manager, Paul Mendez, stared at the paper.
“You’re quitting because of last night.”
“Yes.”
“Mr. Moretti told me not to fire you.”
“That’s nice.”
“Ellie.”
“I’m not being dramatic.”
“You’re giving up health insurance.”
There.
Real life.
Ellie paused.
“I know.”
“You need it.”
He knew too much.
Three years.
Schedules.
Doctors.
Her mother?
No.
Keep Ellie's reason: chronic migraine? Sensitive health maybe avoid? Could be she has student debt. Insurance relevant generally. Let's not delve sensitive. She needs it like everyone.
“I’ll get marketplace coverage.”
Paul lowered his voice.
“He asked for you upstairs.”
“I know.”
“You’re not in trouble?”
“I don’t think so.”
“That is not reassuring.”
“No.”
Paul signed the resignation acknowledgment.
Then:
“You’re good at this job.”
Ellie smiled faintly.
“I’m better at another one.”
There.
She walked out of the Gilded Cage at 11:02 a.m. as an employee for the last time.
At 11:45, she sat in Priya Desai’s office.
Priya had been recommended by a former professor Ellie still trusted.
Commercial attorney.
No connection to Moretti as far as Ellie could verify.
Priya read the proposed engagement letter.
Then looked up.
“He agreed to this?”
“Yes.”
“Clause seven?”
“Yes.”
No adverse action based solely on preliminary audit findings without corroborating evidence.
Not a promise of sainthood.
A procedural protection.
Priya looked impressed.
“Either he wants your help very badly or he enjoys unusual contracts.”
“Probably the first.”
“What are you afraid of?”
Ellie thought.
“Being useful enough to keep.”
Priya’s face changed.
Good answer.
“What else?”
“Being blamed if I find something.”
“Anything else?”
Ellie looked at the engagement letter.
“Liking the work again.”
There.
That one surprised her.
Priya did not mock.
“Then let’s protect the first two so you can decide the third.”
Good.
The contract made Ellie an independent forensic accounting consultant through a temporary LLC Priya helped form.
Vance Forensic Review.
Pretentious.
Useful.
Hourly rate.
No success fee.
No bonus tied to recovered money.
No confidentiality clause preventing reports to law enforcement where legally required.
Lorenzo’s lawyer objected to that one.
Lorenzo overruled.
Interesting.
Document access would occur through a secure data room administered by an outside e-discovery vendor.
No downloading personal criminal files beyond scope.
No home visits.
No physical surveillance except mutually agreed safety measures.
Ellie stared at that clause.
Priya smiled.
“I added it.”
“Good.”
They signed.
By 2:00 p.m., Ellie was in a borrowed conference room three floors above Riva Freight’s corporate offices.
Not the mafia headquarters.
Legitimate side.
Lorenzo arrived without entourage.
One lawyer.
One IT administrator.
No Marco.
Good.
Ellie opened the data room.
Thirty-eight thousand documents.
She stared.
“You said sample.”
Lorenzo sat across from her.
“I changed my mind.”
“Of course.”
“Problem?”
“No.”
There.
She almost smiled.
The first four hours confirmed the $450,000 discrepancy.
Marco had not made one mistake.
He had built a repeatable mechanism.
Gross-tonnage fees posted one way.
Net-tonnage deductions posted another.
Difference swept into a clearing account.
Clearing account periodically zeroed by vendor payments.
Vendor:
North Harbor Services LLC.
Ellie looked up.
“What does North Harbor do?”
Lorenzo frowned.
“Port consulting.”
“What kind?”
“Permits. labor coordination.”
“Who owns it?”
“My people are checking.”
“No.”
He looked at her.
“You asked.”
“I asked what it does, not who your people can scare.”
His jaw tightened.
Fair.
“Corporate records.”
“Good.”
Public filings showed North Harbor belonged to Anthony Bell.
No relation to anyone known.
Address:
Mailbox.
Registered agent:
Law office in Newark.
Payments over eighteen months:
$8.4 million.
Ellie stared.
Nine percent had been the door.
This was the hallway.
She called Lorenzo into the conference room at 7:20.
He entered carrying coffee.
One for himself.
One for her.
Ellie looked at it.
“What?”
“Nothing.”
“You look suspicious.”
“I’m deciding whether accepting coffee creates an employment relationship.”
Lorenzo stared.
Then laughed.
Good.
He placed it down.
“Your coffee.”
She took it.
“Thank you.”
“Now ruin my evening.”
Ellie turned the screen.
“North Harbor.”
He read.
His face hardened.
“How much?”
“Eight point four million over eighteen months.”
Silence.
“No.”
“Yes.”
“Marco did not have authority for that level of payment.”
“Someone did.”
There.
Lorenzo leaned forward.
“Signatures?”
“Digital approvals from three people.”
“Who?”
“Marco Vesperi. Corporate controller David Russo. And you.”
Silence.
Lorenzo looked at her.
Ellie did not move.
“I never approved North Harbor.”
“The system says you did.”
“Then the system is wrong.”
“Maybe.”
He frowned.
“You don’t believe me.”
“I don’t believe systems or men until evidence agrees.”
There.
Good.
Lorenzo walked to the window.
“When?”
“Your approvals cluster on Sunday mornings.”
He turned.
“I don’t approve payments Sunday mornings.”
“Where are you?”
“At my grandmother’s.”
Interesting.
Every Sunday?
“Usually.”
Ellie asked:
“Phone?”
“With me.”
“Laptop?”
“Office.”
“Biometric login?”
“Password plus token.”
“Who has the token?”
“No one.”
“Backup token?”
He went still.
There.
“Finance keeps sealed recovery credentials.”
“Who can access?”
“Controller. CIO. legal.”
Three.
Ellie wrote.
David Russo.
CIO Melanie Quinn.
General counsel Peter Lasko.
Lorenzo said:
“David has been with me twelve years.”
“Marco was with you how long?”
“Fifteen.”
Point.
Good.
Ellie continued.
“I need login logs.”
“I’ll get them.”
“No. IT vendor exports them to the data room.”
He looked irritated.
Then nodded.
Growth, maybe.
The logs arrived next morning.
The approvals tied to Lorenzo’s credentials came from an internal finance terminal.
Not his laptop.
IP address:
Accounting floor.
Device assigned to David Russo.
There.
Too easy.
Ellie did not trust easy.
She checked timestamps.
Every approval occurred within two minutes of a legitimate payment Lorenzo had approved the previous Friday.
A copy pattern.
Credential token replay?
Possible.
She called IT.
Through documented channel.
Melanie Quinn joined.
Ellie explained.
Melanie frowned.
“Our system doesn’t allow token replay.”
“Unless?”
“Unless recovery mode is used.”
“Who can trigger recovery?”
“Controller or CIO with secondary approval.”
“Secondary from?”
“Legal.”
There.
At least two people.
Not David alone.
Ellie looked at Lorenzo.
“Do not confront anyone.”
He stared.
“That is becoming a theme.”
“Yes.”
“Marco is already gone.”
“Gone where?”
Lorenzo’s face changed.
“Not my custody.”
Good.
“Where?”
“He has not answered calls since last night.”
Ellie’s stomach tightened.
“That’s bad.”
“Yes.”
“Did you send men?”
“To watch his house.”
“Police?”
“No.”
She stared.
“Lorenzo.”
“I did not have evidence yesterday.”
“You have embezzlement now.”
He looked at her.
“Not enough to know who.”
“Enough to report suspected fraud.”
He exhaled.
“You think police solve everything.”
“No.”
“I think not reporting guarantees every later decision looks like concealment.”
There.
Different.
Lorenzo considered.
Then called his lawyer.
Within two hours, outside counsel submitted a voluntary fraud referral concerning suspected internal embezzlement at Riva Freight.
Not mafia books.
Legitimate company.
Good.
Ellie returned to the logs.
At 3:14, she found the thing that bothered her.
David Russo’s terminal approved the payments.
But on six of the Sunday mornings, David’s corporate badge showed him entering a church across town for an accounting volunteer program.
Camera footage confirmed.
So his terminal had been used while he was elsewhere.
Someone had his credentials too.
Layer.
Ellie smiled without humor.
“What?”
Lorenzo asked.
“Your thief is framing people.”
“Marco?”
“Maybe.”
“Who else?”
“Anyone who knows how your approvals work.”
She opened the vendor master record.
North Harbor had been added eighteen months earlier.
Entered by:
S. HARPER.
Lorenzo frowned.
“Who is S. Harper?”
Ellie searched employee directory.
No current match.
Archived:
Samantha Harper.
Former accounts-payable supervisor.
Terminated seventeen months ago.
Reason:
Attendance violations.
Forwarding address:
Milwaukee.
Ellie looked at Lorenzo.
“She left one month after the vendor was created.”
“Coincidence?”
“Maybe.”
Good.
No assumptions.
They contacted her through outside counsel.
No threats.
Samantha agreed to speak by video if her attorney could attend.
Good.
Her answer changed the case.
“I didn’t create North Harbor.”
Ellie said:
“Your credentials did.”
“They were used after I was sent home.”
“By who?”
Samantha’s face tightened.
“Marco.”
There.
Lorenzo went still.
Samantha continued.
“He told me there was an urgent vendor setup and his access failed.”
“Did you give him your password?”
“Yes.”
“Why?”
“He was the underboss.”
There.
Power.
Not hacking.
Hierarchy.
“He said Mr. Moretti approved it.”
Lorenzo looked away.
Samantha continued.
“The next week, payroll wrote me up for attendance. A month later I was fired.”
“By who?”
“David Russo.”
Interesting.
Maybe David complicit.
Maybe he was manipulated.
Samantha said:
“I thought it was retaliation because I complained about Marco using my login.”
“Did you put that in writing?”
“Yes.”
There.
“Where?”
“HR portal.”
Ellie searched.
Complaint missing.
No record.
But Samantha had screenshot.
Good.
Timestamp.
Ticket number.
System-generated confirmation.
The complaint had existed.
Someone deleted it.
Who had HR admin access?
Not Marco.
Not David.
Chief Operating Officer:
Rebecca Sloan.
Lorenzo’s legitimate COO.
Respected.
Forty-eight.
Former prosecutor.
The person everyone trusted because she was not mafia.
Ellie stared at the screen.
There.
Maybe.
Still not proof.
Lorenzo read her face.
“What?”
“Nothing yet.”
He knew that answer now.
“Ellie.”
She turned the laptop toward him.
Rebecca Sloan’s admin account had deleted Samantha Harper’s complaint fourteen minutes after it was filed.
Silence.
Lorenzo sat slowly.
Rebecca had been the executive who built Riva Freight’s compliance program.
The executive who told lenders the company had separated from the family’s criminal operations.
The executive Lorenzo held up whenever someone called the legitimate business a front.
He looked at Ellie.
“She wouldn’t.”
Ellie answered quietly.
“Maybe.”
Good.
“Maybe she wouldn’t.”
Then she clicked another line.
“But someone using her account did.”
There.
Eight point four million dollars.
Three framed credentials.
A deleted complaint.
A vanished underboss.
And for the first time since Ellie corrected the math at table one, Lorenzo looked less angry than afraid.
Not for the money.
For the possibility that his entire system had been built so everyone could borrow everyone else’s authority.
May you like
That kind of system did not need one thief.
It only needed one person willing to use what trust left unlocked.
