Chapter 2 - THE LEDGER GREG WANTED HER TO SIGN
Mara had three fractured ribs.
A concussion.
A hairline fracture along her left cheekbone.
No internal bleeding.
Dr. Serena Paley stayed with her through emergency imaging at Mount Sinai.
Not because Lorenzo ordered.
Because Mara asked.
Good.
At 4:12 a.m., a social worker offered a domestic violence advocate.
Mara said yes.
That mattered.
She had said no before.
Twice.
The advocate’s name was Jenna Cole.
She did not ask:
Why didn’t you leave?
Good.
She asked:
“Where do you feel safest tonight?”
Mara almost laughed.
Nowhere.
But that was not an answer.
“My apartment is compromised.”
“Friend?”
“No.”
“Family?”
Mara looked away.
“No one close.”
Shelter available.
Confidential.
Mara agreed.
Good.
No Costa estate.
No hotel Lorenzo owned.
Important.
Before leaving hospital, two detectives interviewed her briefly.
Not about old abuse in detail.
About apartment break-in and restaurant assault.
She told truth.
Greg hit her.
Lorenzo’s men took him out back.
She did not see what happened there.
Good.
Then detective asked:
“Did Mr. Costa threaten Mr. Hart?”
“I heard an order from upstairs?”
She had not.
She only learned result.
“No.”
“Did Mr. Costa tell you he had Greg’s hand broken?”
“Yes.”
There.
The detective wrote.
Mara did not protect Lorenzo.
Good.
At 8:00 a.m., police secured her apartment.
No suspect inside.
The binder was gone.
But whoever entered had missed one thing.
A cloud backup.
Mara had photographed every page because she did not trust paper.
Smart.
The backup sat inside a storage account Greg did not know existed.
She told Jenna.
Then her attorney.
Only after that did she tell detectives.
Good.
Not Lorenzo.
Important.
Meanwhile, Le Clovis remained closed for lunch.
Lorenzo’s public statement:
“An assault occurred in our dining room. We are cooperating with law enforcement.”
Nothing else.
Good.
Internally, he called:
Vincent.
CFO Helena Costa.
Cousin Marco Costa, head of development.
Outside forensic firm.
Criminal counsel.
Helena was Lorenzo’s older cousin, fifty-one, controlled finance for nearly fifteen years.
Marco was younger, thirty-eight, charismatic, ran construction and development.
Vincent sat at far end.
All three had access to Lorenzo’s financial authorization token under emergency protocols.
That was already a problem.
Lorenzo placed a printout of project 7714.
“Who touched it?”
Helena said:
“I’ll need logs.”
Marco frowned.
“Harbor Point closed two years ago.”
“I know.”
Vincent said nothing.
Good.
Forensic firm joined.
No internal IT modifications.
Preserve.
They pulled bank audit records.
Nine-minute descriptor change existed.
Mara had been right.
A receiving account showed:
COSTA DEVELOPMENT PROJECT RESERVE 7714.
Then reverted to:
HART VENUE SERVICES - OPERATING.
The money had moved through Hart, then into a Costa-controlled reserve, then out again.
Destination:
three vendor LLCs.
All new.
Total:
$2.63 million.
Exactly the amount Greg wanted Mara to confess to.
Lorenzo stared.
“Who owns vendor LLCs?”
Forensic analyst:
“Beneficial ownership hidden through nominee filings.”
Helena said:
“Not hidden from bank KYC.”
Good.
Subpoena needed.
Lorenzo could call bank CEO.
He did not.
Let investigators do.
Progress.
Then IT logs.
Authorization initials L.C.
But token serial:
not Lorenzo’s current device.
Older backup token.
Assigned eighteen months ago to:
Marco Costa.
Silence.
Marco laughed.
“That proves nothing.”
“No.”
Good.
Lorenzo looked at him.
“Where is token?”
“Destroyed.”
“When?”
“After rotation.”
“Certificate?”
Marco’s face changed.
No certificate.
There.
Helena closed eyes.
Vincent swore.
Lorenzo felt old violence rise.
Not yet.
He looked at counsel.
“What do we do?”
Counsel said:
“Preserve. Interview through outside investigators. Do not accuse him criminally without evidence.”
Good.
Marco stared.
“You’re letting lawyers interrogate family now?”
Lorenzo said:
“Yes.”
There.
Marco stood.
“This woman shows up bleeding, tells you a story, and suddenly—”
Lorenzo’s voice dropped.
“Sit.”
Old power.
Marco sat.
Good.
Lorenzo noticed.
He had used same thing.
Fear.
Even now.
He hated how easy.
Then:
“Her injuries do not make her accounting right. The bank logs do.”
Good.
Marco looked away.
Mara spent next forty-eight hours in confidential shelter.
No phone except secure advocate-supported contact.
Greg called repeatedly from clinic after police released him pending investigation? Wait his hand broken and domestic assault. He could be arrested at clinic. Let's do: police arrested Greg for felony assault after treatment and later bail hearing. His hand fractures recorded. He claimed Costa men attacked him.
Good.
He was not free.
But someone else sent messages.
Unknown number:
YOU THINK HE CAN PROTECT YOU?
Mara gave to police.
Then:
ASK LORENZO WHAT HAPPENED AT HARBOR POINT.
There.
Bigger.
She forwarded to attorney only.
Not Lorenzo.
Good.
Jenna asked:
“Do you want to leave city?”
Mara thought.
“Not yet.”
Why?
Because every time Greg hurt her, he decided what happened next.
Not this time.
Good.
Then attorney.
Her lawyer from DV clinic:
Anika Shah.
Competent.
She advised separate counsel for financial matter.
They found white-collar attorney through pro bono network.
Mara met.
She disclosed:
she approved some Hart invoices.
She sometimes moved funds under Greg’s instruction.
She suspected fraud late.
She did not report immediately.
She had signed tax forms.
Risk.
Good.
No instant innocent heroine.
Mara could face scrutiny.
Attorney said:
“Do not destroy anything. Do not contact Greg. Do not contact Costa without counsel.”
Good.
Mara obeyed.
Mostly.
Then Lorenzo contacted through lawyer requesting permission for his forensic firm to compare Mara’s backup to Costa records.
Mara said no initially.
Good.
Why?
She wanted police copy first.
After warrant/subpoena process and her counsel preserved image, she allowed limited sharing.
Good.
Lorenzo learned.
The binder contained:
invoice sequences,
screenshots,
bank descriptor changes,
Greg’s handwritten notes,
and one audio recording.
Mara had recorded Greg in their kitchen.
Not because building criminal case.
Because she was tired of being told conversations did not happen.
Good.
In recording:
Greg:
“You sign the reconciliation and we walk away clean.”
Mara:
“It says I moved the money.”
Greg:
“You did move it.”
Mara:
“Because you told me those were payroll reserves.”
Greg:
“And nobody cares why.”
Mara:
“Who is L.C.?”
Pause.
Greg:
“You do not say that name.”
There.
Then:
Mara:
“Lorenzo?”
Greg laughed.
“No. Lorenzo doesn’t know where half his money goes.”
There.
Important.
Then:
“The family member who matters is paid.”
Not name.
Good.
Lorenzo listened.
His jaw tightened.
Mara had evidence he wasn’t direct conspirator.
Not innocence overall.
Good.
Then another audio.
Greg drunk.
“If Marco tells me one more time—”
Stops.
Mara:
“What about Marco?”
Greg:
“Forget it.”
There.
Marco.
Lorenzo looked at Vincent.
Not enough for conviction.
Enough for audit.
Good.
Forensic review expanded.
Marco’s personal finances:
large unexplained payments?
Need lawful access. Internal compensation records + public property.
He had bought a villa in Lake Como through trust? Could be too glam. Better $1.8m condo in Miami inconsistent with disclosed income. Public.
Then bank subpoena later would prove.
Good.
Mara received one message from Lorenzo’s lawyer:
Mr. Costa asks whether you need payment for medical expenses arising from assault at his restaurant. This offer is not contingent on cooperation or confidentiality. You may decline.
Mara stared.
She declined.
Good.
Hospital bill covered via state victim compensation and her insurance? She may lack. Could later civil claim against Greg and restaurant? But not need.
She did not want money tied to him.
Anika said:
“Declining does not make you stronger.”
Mara looked.
“I know.”
“Then why decline?”
“Because right now I need to know which choices are mine.”
Good.
Fair.
Then Greg’s bail hearing.
He was charged with assault.
His attorney argued:
he was also victim of severe beating by Costa associates.
True.
The judge noted both cases separate.
Greg released? Domestic violence risk. Could be held on high bail due witness intimidation messages? Messages not tied yet.
Let's say detained because prosecutors tied one jail call to unknown messenger? Hmm.
Greg’s phone had been confiscated. But he could have asked associate.
Police found he called one "Derek Sanz" before restaurant, not after.
No proof messages.
Judge issued no-contact and GPS monitoring, bail with conditions.
Mara terrified.
Good.
Jenna asked:
“What do you want?”
“A protection order.”
She got temporary order.
Good.
Not mafia guards.
Law.
Then someone delivered flowers to shelter.
Impossible.
Address confidential.
No card.
Mara froze.
Shelter staff immediately relocated her.
Police opened investigation.
Good.
Someone had found protected location.
That implied access to information.
Not Greg alone perhaps.
Then Anika called Lorenzo’s counsel.
Not Mara.
Because Costa investigation might intersect.
Within hours, Lorenzo learned.
He wanted to send guards.
Stopped.
Asked through counsel:
“Would Ms. Hart like independent licensed protection paid through victim-support fund with no reporting to Costa?”
Mara’s answer:
“No.”
Then after another message:
NEXT PLACE WON’T BE SECRET EITHER.
She reconsidered.
Not Costa men.
Independent security chosen by her attorney.
Cost temporarily advanced by a neutral escrow funded by restaurant liability insurer.
Good.
No ownership.
Lorenzo accepted.
That mattered.
Then audit breakthrough.
Bank records arrived.
The three vendor LLCs ultimately paid:
one construction consultant,
one shell,
one personal trust.
Beneficiary:
Marco Costa.
There.
$1.4 million.
Another $800k to Greg.
Remaining to Derek Sanz, a Costa Development procurement manager.
Fraud.
Mara was being framed.
But why Harbor Point?
Forensic team found inflated change orders on public-facing redevelopment project.
Marco and Greg skimmed.
The project itself had worker injury incident two years ago.
One undocumented laborer fell from scaffold.
Company report said subcontractor employee left before treatment.
No OSHA? We need not get regulatory details too specific. Keep generic safety incident.
Mara’s message:
ASK LORENZO WHAT HAPPENED AT HARBOR POINT.
Maybe Greg/Marco used cost overruns after injury to hide payoff.
Lorenzo asked Helena:
“What happened at Harbor Point?”
She looked away.
There.
Not Marco only.
“Helena.”
“A worker fell.”
“I know.”
“No.”
She looked.
“You know the report.”
Good.
“What is truth?”
The worker, Tomas Rivera, fell due unguarded scaffold.
He survived with spinal injury.
Marco ordered subcontractor to classify him as off-books and paid family cash to avoid investigation.
Lorenzo went still.
“Did I know?”
Helena’s silence.
Then:
“You signed the settlement authorization.”
There.
Lorenzo’s face drained.
He remembered.
A generic “site incident resolution” in stack.
$250,000.
He signed without reading full.
Not ignorance as innocence.
His signature.
Good.
That project code then became slush reserve.
Marco knew Lorenzo signed without asking.
So later fraud used same code.
There.
Lorenzo looked at his hands.
He had built system where his signature meant command, but he had stopped knowing what it commanded.
Good.
Vincent said quietly:
“Boss.”
Lorenzo shook head.
No excuse.
Then his phone rang.
Mara’s attorney.
She wanted meeting.
Not alone.
Neutral law office.
Lorenzo arrived with counsel only.
No Vincent.
Mara was there.
Bruising yellow now.
Still painful.
She looked at him.
“Did you know about Rivera?”
Lorenzo sat.
“I signed the settlement.”
“That is not what I asked.”
“No.”
Good.
“Did you ask?”
“No.”
There.
Mara stared.
“Then maybe Greg was right.”
Lorenzo’s face tightened.
“About what?”
“That you don’t know where half your money goes.”
There.
He could have become angry.
Instead:
“Maybe.”
Good.
Mara slid a document.
A third ledger page.
Not in backup previously.
She had kept separately.
Smart.
“Greg made me move money into one more account.”
Lorenzo looked.
Not Marco.
Not Costa Development.
A charitable foundation.
Costa Family Relief Fund.
Lorenzo founded after his mother died.
His most public “clean” institution.
Mara said:
“The money came back out as grants.”
“To who?”
“Families connected to men injured on jobs. Some legitimate. Some not.”
Lorenzo read names.
Tomas Rivera’s wife.
There.
The charity had been used to disguise hush payments.
His charity.
His signature.
Mara looked at him.
“Greg didn’t invent the architecture.”
There.
Lorenzo looked up.
“No.”
Good.
“Your family did.”
“Yes.”
There.
May you like
That was the first moment Mara stopped seeing Lorenzo only as the dangerous man who had saved her from Greg.
Because for the first time, he was looking at the machine around him and not pretending he stood outside it.
