voxen

Chapter 8 - Who Used Her Login?

Dana’s note lay between us: *Ask for original approvals.*

I had written the same question on my own list during our February 5 consultation. At 10:17 that morning, according to the portal, my account had approved a Northline payment.

At 10:17, according to Dana’s appointment notes, I had been sitting across from her, trying to learn which records to request.

For a few minutes, I wanted that contradiction to be the answer.

Claire closed the portal export without changing it.

“We have a reason to investigate,” she said. “We don’t have a reason to name someone.”

“I know where I was.”

“Yes. Now we need to know what the system recorded.”

Dana turned her screen toward me. The activity history showed a time and my account name. It did not show a person’s face, a keyboard, or even the device used to enter the approval.

“If the time is displayed in a different zone, your meeting may not overlap it at all,” she said. “And some systems put the time a document was processed on a line that looks like the time it was submitted.”

It was irritating how much I needed her to be careful. It was also why I trusted her.

Claire called an independent digital-records specialist she had worked with before, a woman named Priya Shah. She explained what we had, what she had requested from the company, and what we did not yet have permission to inspect.

Priya joined us by video. Her first question was whether Dana had kept the export exactly as downloaded.

“Yes,” Dana said. “I recorded the retrieval time, too.”

“Good. Don’t keep opening and saving copies under the same name.”

Priya asked to see the headings, not just the row that frightened me. Then she asked for a second, ordinary approval I remembered making.

I found one from January. I had reviewed a revised landscaping budget at my kitchen table, approved it in the portal, and sent Dana a question about another charge a few minutes later. The messages gave us a rough comparison.

Priya studied the two entries.

“They appear to use the same display convention,” she said. “But I want the administrator’s explanation and the underlying event records before I call February fifth a submission time.”

“So we wait,” I said.

“We check,” she replied.

Claire’s records request had gone to the firm’s authorized systems custodian that morning. While we waited for a response, Dana put the February 5 calendar invitation, confirmation email, and her handwritten notes into a separate folder. She labeled what each item could establish. The notes supported that I was with her; they could not establish what was happening on a computer elsewhere.

I watched her write that distinction.

Grant had spent years introducing me to contractors as his “little bookkeeper.” Once, at a meeting about the second building my inheritance had helped fund, a lender asked me how we had decided on its renovation budget. Before I could answer, Grant laughed and said I was the one who made sure the receipts went into the right boxes.

I had prepared the budget. I had also gone home that night wondering whether correcting him would have embarrassed him.

Now three Northline approvals carried my account name. Anyone who believed Grant’s version of me could look at those pages and think I had quietly handled the paperwork.

“I did approve some expenses,” I told Priya. “Sometimes Grant sent me summaries first. I don’t want anyone treating every old approval as suspicious because I don’t remember it.”

“That helps me narrow the question,” she said. “We’re examining a particular event, not rewriting your whole history.”

Around noon, the systems custodian replied to Claire. She was retaining the requested records and could provide a limited administrator export for the February 5 event to an authorized independent reviewer. The original files and broader access history would take longer to assemble. She also confirmed that the portal displayed that event in local time and identified it as an approval submission, not a later posting to the ledger.

I read the email twice.

At 10:17, while Dana and I discussed how to examine the Northline records, someone had submitted an approval through my account.

Priya did not let me stop there.

“The event can be genuine without telling us who operated the account,” she said. “Let me compare the session details.”

Claire confirmed Priya’s access with the custodian. Dana stayed beside me while Priya examined the limited export in a separate session. She read out the fields she was checking, and Dana wrote them down without putting her own interpretation beside them.

The approving account was mine. The session had been active for eleven minutes before the submission. The export also held a device identifier that had not appeared in my ordinary portal view.

I waited for Priya to say she recognized it. She didn’t.

“We need the inventory record,” she said.

The custodian sent one after checking what she was authorized to share. The device identifier belonged to a company desktop listed as assigned to Grant’s office. A network record for February 5 showed that desktop connected through the wired outlet mapped to that office at the time of the approval.

Nobody spoke for a moment.

Then I said, “Grant used my login.”

Priya shook her head, gently but at once.

“That’s one possibility. The record points to the device and its connection, not the person at the keyboard. I haven’t ruled out a remote session, a shared login left open, or an error in the assignment records.”

“Was the computer actually in his office?”

“The inventory says it was assigned there, and the connection record points to that office’s outlet. Those are two records we can test further.”

Claire asked whether either record could tell us who entered my password.

“Not from what I’ve seen,” Priya said. “And I don’t yet know whether a password was entered that morning.”

I thought of the desk in Grant’s office, the one he kept clear for visitors. I had sat there before. Months ago, when the printer outside the conference room jammed, I had used his computer to open a file I needed for a meeting.

“I’ve used that desktop,” I said.

Dana looked up.

“How often?”

“Once that I remember. I can’t tell you whether I signed out properly.”

Priya added that to her notes.

It embarrassed me to admit it. Then I looked at the approval on Dana’s screen and felt something worse than embarrassment. Even if I had left a session open months ago, someone might have found my account ready to use. Or the old session might have expired. We had no evidence yet either way.

“That’s exactly why I need the fuller session history,” Priya said.

Claire asked the custodian to preserve the device’s relevant records, including its sign-in history, without asking her to inspect anyone’s private files or make an accusation. She requested the inventory changes and network mapping for February 5. Priya wrote down which records she had received, from whom, and when.

I wanted Claire to send everything to the firm’s members immediately. Grant had already sent them an approval page with my name on it. The longer his claim sat unanswered, the more it seemed to harden.

Claire understood without my saying it.

“We can tell them an independent review has found information that calls for checking the attribution,” she said. “I won’t send them an office location as if it proves Grant clicked a button.”

“He didn’t give me that courtesy.”

“No. But the employees still need decisions made on records they can trust.”

Dana had found a legitimate supplier invoice that morning and put it in a separate pile from the disputed marketing charges. It was due soon. Somewhere at the firm, people were still arranging repairs and answering tenants while we studied a computer identifier. I did not want an accusation, even a satisfying one, to make their work harder.

“Send the measured version,” I said.

Claire drafted three sentences. They said the February 5 Northline approval was under independent review, that I disputed having made it, and that we had requested preservation of the underlying records. She showed them to me before sending anything.

I looked at the words *I disputed having made it*. They were less dramatic than *Grant used my login*. They were also true.

My phone lit up while Claire was still at her keyboard.

For one startled second, I thought Grant had seen the draft. Then I read the name on the screen.

Sloane Mercer.

I let it ring. A message appeared, followed almost immediately by another.

The first asked if we could speak without Grant. The second said it was about the marketing payments.

I showed Claire. She read both messages and handed the phone back.

“You don’t owe her a conversation,” she said. “If you want one, you can decide the terms.”

I thought of Sloane at Bellwether, laughing when Grant offered Simon money to lie. I thought of the diamond at her throat and the ease with which she had discussed proof I was irrational. Nothing about those memories made me want to protect her.

But the blank ownership field on Lark Strategies’ vendor profile was still blank. The firm had paid $9,640 for Cedar Row “campaign completion and deployment,” and the records we had checked did not show what had been deployed.

I called her back on speaker, with Claire and Dana beside me.

Sloane answered before the second ring.

“I’m not agreeing to meet alone,” I said.

“I didn’t ask you to.”

“You asked to speak without Grant. Claire is here.”

There was a pause long enough for me to hear traffic behind her.

“All right,” Sloane said.

I waited. She could tell us what she wanted over the phone. She could hang up. I would not fill the silence for her.

May you like

Finally, she spoke.

“I can explain Lark Strategies,” she said. “But only if you hear me out.”

Related Stories

Other posts