Chapter 41 - THE CARTER CREDENTIAL THAT SHOULD NOT HAVE EXISTED.
Emma stared at the login record until the letters blurred.
CARTER EPR LEGACY.
Authentication successful.
Migration concurrence submitted.
No transfer executed because the court order blocked it.
That was the good news.
The bad news was obvious.
Somewhere inside Redwood's inherited systems, a credential existed that could impersonate the worker representative.
Again.
History repeating digitally.
Emma's first reaction was that somebody had hacked the system.
Her attorney stopped her.
“We don't know that.”
Emma nodded.
Right.
Maybe old credentials remained.
Maybe an automated process.
Maybe delegated authority.
Maybe a system error.
They called forensic cybersecurity investigators.
Redwood preserved logs.
Harrow preserved logs.
The institutional trustee disabled migration functions.
No money moved.
The credential had been created in 2008.
Emma looked at Michael.
He looked genuinely confused.
“Why 2008?”
“That was when you signed the Northstar release.”
“I know.”
“Did they create the credential for you?”
“No.”
“Did you ever have a Redwood login?”
“No.”
“Did Thomas give you a token?”
Michael stopped.
Emma saw it.
“What?”
“He gave me a device.”
Her eyes narrowed.
“What device?”
“A small security token.”
“Dad.”
“I never used it.”
“When were you planning to mention this?”
“I forgot.”
Emma stood.
“You forgot a security token from Northstar?”
“I had a lot going on.”
“You hid internationally for decades with secret evidence, but a mystery authentication device slipped your mind?”
Michael's mouth tightened.
“When you say it like that—”
“How else would I say it?”
Gloria, sitting across the room, said, “Bad time to joke, Michael.”
He nodded.
The token was in Unit 214.
Of course.
Emma refused to go.
“Send the forensic team.”
Michael didn't argue.
The device was recovered in an evidence bag.
Old hardware.
Serial number partially worn.
Cyber investigators matched it to an authentication system Redwood used from 2007 to 2013.
Michael's token had indeed been enrolled.
Account:
M.CARTER-EPR.
Emma felt nauseated.
“Did you sign anything about being representative?”
“No.”
“Did Vale tell you what it was?”
“He said it would let me verify whether Prescott moved certain funds.”
“Did you believe him?”
“No.”
“Then why keep it?”
“Because anything Thomas gave me might become evidence.”
That was plausible.
It was also Michael.
They searched his 2008 documents.
No appointment.
No acceptance.
No credential disclosure.
The Northstar release did contain one line.
Administrative access tools may be issued for reconciliation purposes.
Buried.
Michael had not noticed.
Or said he hadn't.
Emma believed him more than she would have six months earlier.
Not completely.
Trust returned slowly.
The cyber team examined the 2:11 a.m. approval.
It did not come from Michael's physical token.
The legacy credential had been virtualized during a 2013 system upgrade.
The old token identity became a software certificate.
Then transferred into Redwood's modern platform.
No human had to possess the device.
The certificate itself survived.
Who controlled it?
Redwood's system.
The same system asking for concurrence.
Emma stared.
“So it asked itself.”
The investigator nodded cautiously.
“In effect, an automated workflow invoked a legacy delegated credential that the system classified as valid EPR authority.”
Michael laughed without humor.
“They replaced me without asking me, then turned me into software.”
Emma looked at him.
“Congratulations. You achieved continuity.”
Even Gloria laughed.
Pressure needed release.
The technical problem was fixable.
Revoke credential.
Invalidate legacy certificates.
Require human review.
But the legal implication was enormous.
How many historical actions had been approved using M.CARTER-EPR or similar credentials?
The audit searched.
Dozens.
Not hundreds.
Enough.
From 2008 through 2013, the credential had approved administrative reconciliations.
Two asset transfers.
Several beneficiary closeouts.
One voting instruction.
Michael had never performed any of them.
The system had used his identity as consent.
Emma felt physically sick.
For decades, Prescott structures had turned vulnerable people's signatures into authority.
Now they had turned a man's existence into a digital signature.
No evil hacker required.
Only a database built from a false premise.
Redwood's trustee was furious.
Current leadership had not known.
They agreed to suspend every action tied to legacy EPR credentials pending review.
That slowed the settlement.
Worth it.
Among the actions was a 2011 transfer into the Worker Recovery Foundation.
Another funded a medical-assistance pool that had actually helped retirees.
Now came the hard question.
If consent was invalid, did beneficial payments need to be unwound?
Nobody wanted that.
Emma said no immediately.
Her lawyer corrected.
“We don't decide before analysis.”
“Fine. My desired outcome is no.”
Good intentions built on defective authority created difficult remedies.
People who received medical help shouldn't have to repay money because a trust used false credentials.
The goal was correction, not chaos.
Then the audit found one approval involving no helpful program.
Transfer of voting shares from a worker-benefit subaccount into Redwood's unrestricted governance portfolio.
Value at transfer:
Significant.
Those shares later became part of the bloc used to call the special shareholder vote.
The circle closed.
Redwood's modern voting power depended partly on a transfer “approved” by Michael Carter without Michael Carter knowing.
Emma called Daniel.
“This is the cleanest link we've found.”
He exhaled.
“Can we freeze those shares?”
“Probably.”
“Do it.”
“We.”
“Sorry.”
They filed jointly with worker representatives and the independent trustee.
The court froze the disputed shares.
Redwood withdrew the special shareholder vote rather than proceed without them.
No cameras in court.
No cheering.
An electronic notice hit investors.
SPECIAL MEETING CANCELED.
Emma read it sitting at her wobbly desk.
For weeks, the vote had felt enormous.
Then it disappeared in one paragraph.
Gloria brought grocery-store cupcakes.
“Don't make it weird.”
“Too late.”
Michael arrived.
Daniel called from New York.
Alexander joined video.
Allison sent a text.
Good.
One word.
Enough.
The central power move had been stopped.
Directors investigating Harbor would remain.
Redwood couldn't use the disputed shares.
The Five-Bloc system was suspended.
Migration blocked.
Emma should have felt finished.
Instead the forensic investigator walked into her office carrying another report.
“We found something in the legacy credential archive.”
Emma put down the cupcake.
“What?”
“M.CARTER wasn't the only synthetic EPR identity.”
“How many?”
“Five.”
Emma's stomach tightened.
“Names?”
Three were administrative codes.
One was Michael.
The fifth made Michael stand up.
J.CARTER-EPR.
Jonathan Carter.
Created in 1996.
Jonathan had been dead for thirteen years.
May you like
Someone had created a digital identity for a dead worker representative and used it to approve Redwood actions in his name.
And the first authorization under that dead man's account was tied to the Allison Reed matter.
