She was a master of her craft. I watched her handle a difficult customer who complained about a custom cake order. She didn’t yell. She calmly deescalated, offered a precise, measured solution, and protected her young employee, Lily, from the fallout. She was hard on the world, but I noticed she was soft with the people she cared about.
I turned my longing into discipline. I mapped her financial history. I built an entirely new digital infrastructure on my encrypted servers. I ran a Benford’s law analysis on the vendor invoices associated with the offshore transfers. The technical reality of the fraud began to materialize on my screen.
The leading digits of the fraudulent invoices did not follow the natural logarithmic distribution expected in organic financial data. The fours and sevens were heavily clustered. It was a manual insertion. Someone was using a dummy terminal to spoof her IP address and inject false payment requests into the bank’s automated clearing house.
Late on a Thursday night, the bakery was closed. The chairs were stacked on the tables. The only light came from the street lamps outside and the glow of my laptop screen. Savannah walked over to the booth. She didn’t speak. She set down a heavy ceramic mug of black coffee and a plate with a single perfectly glazed pastry.
I looked at the mug. The handle was turned exactly to the 4:00 position. I had never told her that I needed the handle oriented that way so I could grasp it without looking away from the screen. She had simply noticed. She remembered the small preference. You’ve been staring at that cascading code for 6 hours,” she said, sliding into the booth opposite me.
“It isn’t code. It’s an IP routing trace.” I corrected, picking up the mug. The heat transferred into my palm. I’ve isolated the origin node of the fraudulent transfers. They aren’t coming from your secure network. They’re coming from a secondary terminal that was authorized on your account 3 years ago. Savannah frowned.
Three years ago, that was when my ex- business partner, David, left. He signed away his equity. He shouldn’t have any access. He didn’t close his digital gateway. I said, tapping a specific line of data on the screen. He retained a dormant administrative token. He’s been bleeding your operating account using automated micro transfers to avoid triggering the primary fraud alert until the algorithm finally caught the cumulative volume.
I turned the screen toward her, pointing to the undeniable mathematical proof of her innocence. Savannah stared at the numbers. She didn’t cry, but she reached across the table, her hand resting flat on the cool wood next to my laptop. I looked at her hand, the dusting of flour on her knuckles, the small burn scar on her wrist from an oven rack.
I kept my hands locked on the cool plastic of the keyboard, letting the rhythmic clack of the keys fill the silence between us. “You found it,” she whispered her voice thick. “You actually found it.” “I documented it,” I replied my voice steady. Tomorrow, we take this to Mr. Harrison. But the system does not surrender easily.
The next morning, Friday, at 10:00 a.m., the midpoint twist hit like a physical blow. I was at the counter reviewing the printed affidavit I had prepared when the mail carrier dropped a certified letter onto the counter. Savannah signed for it. She tore open the heavy envelope. I watched her read. I watched the blood drain from her face.
