Chapter 4: A Failure Nobody Signed Off

For a moment, I watched the second hand move across my kitchen clock. Fiona was still on the phone, waiting for me to make the dates mean something.
“It could be a data-entry error,” I said.
“I know.”
“It could also mean somebody cleared the batch before the tests were finished.”
“I know that too.”
Her voice had lost the careful composure she used when speaking to a room full of investors.
“Don’t change the record,” I said. “Don’t forward it to me. Tell your quality team what you found, and make sure they preserve the original entries.”
“Richard said to leave it alone.”
“Then tell someone besides Richard.”
She was quiet for a moment.
“I can ask our general counsel to contact Mara.”
“Do that.”
After we hung up, I called Mara. She listened without interrupting as I repeated Fiona’s account, including the fact that I had not seen a single record myself.
“A date discrepancy is a reason to look,” Mara said. “It isn’t a finding.”
“I’m not asking you to call it one.”
“I know. I’m reminding you because by tomorrow, everyone else will want you to call it whatever helps them.”
She would request the test history, the warning, and the clearance record through the product-related review provision in our license. The provision gave us a way to examine records involving our diagnostic firmware. It did not give me the keys to Ashford’s plant.
“Can we get someone independent?” I asked.
“I’m arranging it. Ashford has to agree on access and preservation, but they can’t reasonably treat a warning tied to our licensed system as none of our business.”
“And Elena?”
“I’ll speak to her in the morning, as planned. Her report stays separate until we know what it is. Her folder request stays pending.”
I looked at the table where I had once spread out floor plans for the apartment Fiona and I would share. Now there was a grocery receipt and a glass of water I hadn’t touched.
“If there’s a risk to equipment already installed,” I said, “we can’t spend days arguing over whose lawyer writes the letter.”
“No,” Mara said. “If the review confirms an immediate risk, prompt notice comes first. We’ll establish what we can, document what we can’t, and notify the people responsible for the equipment. We won’t use safety as leverage over the loan.”
I told her she wouldn’t have to remind me of that. Then I lay awake for most of the night, wondering whether I’d meant it strongly enough.
By nine the next morning, Ashford’s counsel had agreed to a limited, documented review. Mara called me from her office while I stood outside Thomas’s house, looking at the first tailored suit he had ever owned hanging inside his front window. He had taken it to the cleaner’s on his way home from the wedding. I hadn’t asked whether he wanted to keep it.
“Who agreed?” I asked.
“Ashford’s counsel. Not Richard personally. We have written access terms: the relevant batch records, test procedures, and distribution history. An independent examiner will attend. No one is surrendering their whole system to us.”
“Good.”
“There’s a technician who logged the original warning. Counsel will make him available for questions.”
I knocked on Thomas’s door. He opened it with a screwdriver in his hand.
“You look terrible,” he said.
“Good morning to you too.”
He stepped aside. A lamp lay in pieces on the kitchen table. Thomas had retired from elevator work, but every broken object in his house still seemed to come apart under his patient hands.
I told him what Fiona had found and what Mara had arranged.
“Before you ask,” he said, “I’m not a witness to whatever happened at that plant.”
“I know. I need help asking the right questions.”
He set down the screwdriver.
“That I can do.”
At the Ashford plant, a security guard checked our names against a list before opening the visitor gate. Mara met me in the lobby with a woman named Dr. Priya Shah, an independent engineer retained to examine the records and testing. Ashford’s counsel and a quality manager joined us. Richard did not.
The technician, Owen Bell, looked at the visitors’ badges around the table before he sat down. He was young enough that I suspected he had practiced what he would say all morning.
Priya kept her notebook open where everyone could see it.
“Tell me what you observed,” she said. “Not what you think caused it.”
Owen glanced at the quality manager.
“During a bench run, the diagnostic display reset. The controller kept responding, but the display went blank and came back. It happened three times.”
“When?” Priya asked.
“During the run that led to the warning. The unit was cycling under load.”
“Did it record a fault?”
“That’s the problem. Sometimes it did. Sometimes there was a gap in the log.”
I felt Mara turn slightly toward me. Bennett Systems’ firmware kept a fault history for technicians. If a gap was real, it mattered. It did not, by itself, tell us whether an elevator would move unsafely.
“Did you repeat the run?” Priya asked.
“Yes. On another sample, we got one reset.”
“What happened after you opened the warning?”
“I was told the batch would be held for more testing.”
“Who told you?”
“My supervisor.”
“And did you see a completed sign-off?”
Owen shook his head. The quality manager leaned forward.
“The electronic clearance may serve as the sign-off,” she said.
“That’s what we’re here to examine,” Priya replied.
At lunch, I stepped outside and called Thomas. I told him what Owen had described, stopping whenever I found myself turning an observation into a conclusion.
“Ask where the power went during the reset,” Thomas said. “Not just whether the screen went dark. Ask whether the log clock kept running. And ask the crew what they would see on a service call if the unit had already done this.”
I wrote it down.
“You think it’s dangerous?”
“I think a blank history can send a mechanic looking in the wrong place. Beyond that, I’d need to see the equipment.”
“You repaired elevators for thirty-seven years. I trust your instincts.”
“My instincts tell me to ask the person who ran the test.”
Back inside, Priya took the questions seriously. Owen pulled up the bench notes while Ashford’s counsel observed. In two runs, the log clock had continued through the display reset. In one, there was a missing interval. No one in the room could explain the difference from those notes alone.
“If a mechanic opened the diagnostic history afterward, what would they see?” Priya asked Owen.
“For the first two, a restart entry. For the third, nothing that says the screen went out. Just the time gap.”
Priya asked for a controlled repeat with the same test procedure. Ashford’s quality manager wanted more time to prepare equipment; Priya agreed, provided the original samples and test setup were identified and preserved. There would be no experiment on an installed unit to satisfy my impatience.
While staff assembled the bench setup, Mara called Elena from an empty conference room. I stayed in the hallway. Whatever Elena needed to say about the reports, she deserved counsel and a record of how she said it, not me hovering at the door.
Fiona appeared near the vending machines just after two. She had a visitor badge clipped to her jacket, though she worked at the company. For a second we stood looking at each other as if the last time we’d met had been in a different life.
“I told quality what I saw,” she said. “And general counsel. I asked them to preserve the briefing too.”
“Thank you.”
“Have they found anything?”
“They’re testing the warning. I can’t give you a conclusion I don’t have.”
She nodded, then rubbed her thumb against the edge of her badge.
“I keep thinking about that sentence in the briefing. ‘Passed full quality review.’ I thought an approval summary meant someone had checked.”
“You can tell the reviewers what you relied on.”
“I will.”
She glanced toward the closed conference-room door.
“Richard wants to know who raised this with you.”
“I didn’t ask anyone for a company file, Fiona.”
“I know. I told him I found it.”
A door opened at the far end of the hallway. She stepped away before either of us said something about the wedding.
In the test room, the sample’s diagnostic display went black during its second run. It returned a moment later. Owen pointed to the monitor beside it; the recorded event history showed a gap but no restart entry.
Nobody spoke until Priya asked the operator to save the readings under the inspection record.
“It happened here,” she said. “That establishes the symptom is reproducible under this procedure. We still need to understand the cause, whether other units behave the same way, and what protections remain in place.”
I was grateful for every limit she put on her conclusion. I was afraid of all the space between them.
Next came the clearance history. Ashford’s quality manager showed Priya the current screen: batch cleared on the twelfth, test results entered on the fourteenth. She offered the same possible explanation Fiona had heard—a status display that had failed to update properly.
Priya requested the underlying change history.
The room went still while a systems administrator retrieved it. The record showed the batch on hold after the warning. Late on the fourteenth, its status had been changed to cleared. The effective clearance date displayed to anyone opening the ordinary record was the twelfth.
“Who made the change?” Mara asked.
The administrator pointed to a service account, not a person’s name.
“That account can be used through an approved workflow,” he said.
“Where is the approval?” Priya asked.
He searched. Owen watched the screen without moving. No signed approval appeared in the records available to us.
Priya photographed the displayed history with everyone’s consent, recorded the administrator’s explanation, and asked that access logs be preserved. She did not say Richard’s name. Neither did I.
Mara drew Ashford’s counsel aside. I heard her say that the reproducible symptom and altered clearance required an immediate review of installed units and appropriate notice to the people responsible for them. Counsel agreed to contact the safety team while distribution records were checked. It wasn’t yet clear which units, if any, shared the condition. Waiting to learn that before telling anyone to look would have been its own decision.
Priya opened the batch-distribution file with the quality manager beside her. Rows of serial numbers filled the screen. I expected a warehouse location, maybe a shipment held at a dealer.
Instead, the destination column listed building addresses.
May you like
Priya scrolled, stopped, and checked the shipment dates against the clearance record. She looked up at us.
“This cleared batch was shipped to several occupied buildings.”