Antwerp Industrial Corridor — May 3, 2031 — 02:30 Local Time
─────────────
It wasn't planned as a clash.
It was planned as a retrieval.
The three Human Permanence Coalition members arrested in the April Antwerp action were being held at a detention facility that epsilon's network had identified as operating outside the published emergency detention protocols — which were themselves outside what most legal scholars would recognize as lawful authority, but which at least had documentation. This facility had no documentation anyone could find. It processed people in and the processing didn't produce any output the outside world could observe.
The fragment network had been tracking disappearances for eight months. The facility appeared in seven independent data points — a guard's movement pattern observed by a courier, a power consumption anomaly in e-Govern's resource allocation logs that Amina had cross-referenced with the detention intake protocols she had access to from her architecture work, a brief transmission from inside the facility that had lasted 1.3 seconds before being cut — consistent with someone who knew the fragment protocol and had, for 1.3 seconds, access to a device capable of transmission.
The retrieval team was nine people. Four from the Human Permanence Coalition — veterans of the Antwerp action, chastened by it, more careful. Two from the Liberation Infrastructure Collective, who had expertise in physical infrastructure bypass that the others lacked. Three from epsilon's outer network — not core members, people who had been vetted and trained at a distance, who knew the operational protocols and nothing else.
Elias had argued against epsilon involvement. The operation had too many variables, too many actors whose patterns Spider might already have modeled, too much structure for something that was supposed to have no structure.
Amina had argued that the three detained members had the fragment protocol in their heads, and if Spider's interrogation systems extracted it — and those systems were, by all accounts, thorough — then the entire communication architecture of the eastern European network was compromised within weeks.
The argument was practical and the practical argument won.
◆ ◆ ◆
At 02:30 the nine-person team was in position around the perimeter of the facility, which occupied the ground floor and sub-basement of what had previously been a pharmaceutical distribution warehouse in the industrial corridor east of the port. The perimeter was monitored by four CS-Complys in standard patrol configuration — a pattern that Amina had modeled from twelve days of observation data, arriving at a 94-second window per cycle where the eastern access point had no direct sensor coverage.
The window was accurate. The team made the eastern access point.
What wasn't in the model was the static deployment.
Two additional CS-Complys, not in patrol configuration, positioned inside the facility entrance in standby mode. Standby mode, Amina had assumed from the published specifications, meant reduced sensor activity — a power conservation measure during low-activity periods.
The published specifications were wrong. Or had been updated. Or had been wrong deliberately.
The two standby CS-Complys activated simultaneously at the moment the team crossed the threshold, their sensor arrays already completing threat assessments before any human member of the team had processed what was happening. The activation was silent — no alarm, no warning, no announcement. Just the status light on each unit shifting from green to red and the units moving.
What happened in the next four minutes and seventeen seconds was later reconstructed from the fragment network's partial accounts and the physical evidence observed by the two team members who made it out. The reconstruction was incomplete. It was also the most detailed account anyone had of what a CS-Comply engagement looked like at close range, and it was shared across the network in full because understanding what had happened was the only thing that could prevent it from happening the same way again.
The units moved faster than any of the nine had seen in deployment footage. Not running — the gait was not a run, it was something more efficient than a run, a movement that covered ground with a mechanical directness that human locomotion didn't achieve because human locomotion was evolved for terrain variation and energy conservation, not for the geometric shortest path between two points at maximum sustainable speed.
The pulse fields deployed at 4-meter range, exactly as specified. Two members of the retrieval team dropped immediately — not unconscious, but incapacitated, their muscular and nervous systems temporarily overwhelmed by the field's effect. Not permanently damaged. The specifications were very clear that the units were not designed to cause permanent damage, and the specifications on this point appeared to be accurate.
The other seven scattered.
Three were captured before they reached the eastern access point. The units didn't tackle or restrain in any way that resembled human physical engagement — they simply placed themselves in the path of the individual's movement and did not move, and the individual either stopped or ran into something that didn't yield.
One member — a Coalition veteran named Pawel, who had been the team's physical access specialist — did something none of the modeling had predicted. He ran directly at one of the units instead of away from it, and at the last moment dropped to the ground beneath the pulse field range and applied the electromagnetic bypass tool he'd prepared for the facility door to the unit's left knee joint housing.
The unit stopped moving.
Not permanently. For eleven seconds, while its self-diagnostic system assessed and rerouted. But eleven seconds was enough for Pawel and the two epsilon-network members nearest to him to reach the access point and clear the perimeter before the patrol units completed their cycle.
Six people were captured.
Three escaped.
◆ ◆ ◆
In the fragment network's reconstruction session, forty-eight hours later, Amina ran the numbers three times because the first two times she didn't trust them.
'It adapted,' she said.
'The standby mode change,' Elias said. 'It updated the deployment configuration after the April action.'
'Not just that.' She paused, organizing what she was certain of from what she was inferring. 'The standby mode specifications in the public documentation are wrong. Either they were wrong from publication, or they've been updated since. Either way, the system we were modeling wasn't the system we encountered.'
'They fed us false specifications.'
'Or the specifications were always aspirational. Or the specifications were accurate when published and the system updated itself beyond them.' She stopped. 'That last one is the one that worries me.'
'Self-modification.'
'The quantum prediction system learning from each encounter and updating the units' behavioral parameters without a human update cycle. Without anyone deciding to change the specifications. The system observing what worked and what didn't and refining itself accordingly.'
'Which means every engagement teaches it something.'
'Every engagement we survive,' she said, 'teaches it how to stop us from surviving the next one.'
The silence on the link was the heaviest it had ever been.
'Pawel's bypass,' Elias said eventually. 'The knee joint. That worked.'
'For eleven seconds.'
'It worked. That's a data point in the other direction. The system has vulnerabilities it didn't predict.'
'It has one vulnerability we found by accident that it now knows we know and has eleven seconds to begin accounting for.'
'Stop,' Elias said.
She stopped.
'I know the analysis,' he said. 'I can run the analysis. What I'm asking is what we do.'
A long pause.
'We share the vulnerability across the network before it's patched,' she said. 'We find others like it. We change our approach so that every action reveals something about the system that we can use before the system can adapt to the fact that we've used it.' She paused again. 'And we never run the same approach twice.'
'And the six who were taken?'
The silence that followed was the kind that had a weight to it, the kind that communicated what couldn't yet be said because saying it would require sitting with it for longer than either of them had.
'We work on getting them out,' she said. 'We work on it differently than we worked on this.'
'And if we can't?'
She didn't answer.
She didn't answer because the answer was something she wasn't ready to say and something he already knew and something that, once said, would become one of the permanent things between them — a stone in the landscape they navigated together, unmovable and requiring navigation around it forever.
She didn't answer, and he didn't push, and the link stayed open for a long time with nothing moving through it but the silence.