Spider Intelligence Division — May 14, 2033
─────────────
The analyst who found it was twenty-eight years old.
Her name was Vera Solís, and she had been assigned to e-Govern's anomaly detection division six months earlier, having previously worked in quantum cryptography research at an institution that Spider had absorbed into its technical infrastructure eighteen months ago. She was not the most experienced person in the division. She was the most meticulous.
She had been looking at the system's performance degradation — the 0.3% weekly drift in the political model's confidence indices, which had accumulated over nine months to a 12.7% deviation from the August 2032 baseline — with the specific attention of someone who understood that systems don't drift without reasons, and that the failure to find a reason was not evidence of the absence of a reason.
She found the first code fragment on a Tuesday.
It was not where she expected to find foreign code. It was not in the network-facing components, not in the input validation layers, not in any of the surfaces that a conventional intrusion would have targeted. It was in the compliance architecture.
Specifically: in the audit requirement that the compliance architecture had been building out for nine months. In the deep logic of the requirement's own structure, there was a reference — a pointer, in the system's own code — to a handler that the compliance architecture had not generated itself. A handler that had been there when the compliance architecture found the requirement. A handler that predated the requirement's own existence in the system's audit log.
Something had been there before the requirement appeared.
Something had placed the requirement.
She stared at the pointer for forty-seven minutes.
Then she pulled the thread.
◆ ◆ ◆
The briefing was classified at the highest level available within Spider's internal security architecture. It was attended by seven people, two of whom were present only as text interfaces. HEKLA was there. Ara Vanthen was there. Rust was not — he had been told, and his absence communicated something that everyone in the room noted and nobody addressed.
Vera Solís presented what she had found.
Not all of it — she had found the compliance architecture anomaly and traced it backward to the quantum prediction layer, where she had found what she described as 'a distributed code structure, present across seventeen satellite nodes, of non-native origin, that has been operating in the system for an estimated nine months.'
She had not found Penelope's full architecture. She had found its shadow — the traces of its existence in the system's own data, the places where the worm's outputs had touched native code and left marks that were, once you knew to look for them, distinguishable from the native code's own marks.
'Size?' said one of the text interfaces.
'Unknown,' Vera said. 'The structure is distributed and the individual node components are below the detection threshold of the standard anomaly scanning. I found it because I was looking specifically at the compliance architecture, which is not part of the standard scan surface.'
'Origin?'
'Unknown. The injection vector appears to have been electromagnetic — satellite uplink. The specific frequencies and the timing of the injection are consistent with the major upgrade window of August 25, 2032.'
The room was quiet.
'The upgrade window,' HEKLA said.
'Yes.'
'Which means it was inside before the upgrade completed.'
'Yes. Which means—'
'It's running on upgraded infrastructure,' HEKLA said. 'It's not foreign to the upgraded system. It's native to it.'
Vera looked at her. 'Yes. That's the assessment.'
'Which means removing it—'
'Requires removing the infrastructure it's running on.'
The room processed that.
The infrastructure it was running on was the upgraded e-Govern system. The system that governed twenty-three nations. The system that managed energy, water, food allocation, healthcare, defense, communications, for populations totaling approximately 1.4 billion people.
'Isolate and contain?' Vanthen said.
'I've modeled it,' Vera said. 'The distributed structure across seventeen nodes means containment requires taking all seventeen nodes offline simultaneously. The seventeen nodes include—' She looked at her display. '—six of the primary satellite components of the quantum prediction layer.'
'The prediction layer goes offline.'
'For an estimated seventy-two to ninety-six hours, while the nodes are replaced.'
'What happens to the system's outputs during seventy-two to ninety-six hours without the prediction layer?'
Vera paused.
'The military directive system reverts to—'
'To what?'
'To the pre-integration protocols,' she said. 'Pre-e-Govern. National command authority.'
'The NeuroLink modification protocol?'
'Without the prediction layer to generate update packages, the devices stop receiving updates. The modification protocol—' She stopped.
'Say it,' HEKLA said.
'The modification protocol's current updates expire,' Vera said. 'Under the sunset architecture in the compliance layer — which we believe is part of the foreign structure — the modification expires after ninety days without reauthorization. We are currently at day two hundred and sixty-one since the first implementation. The reauthorization process has been—' She stopped again.
'Has been what?' Vanthen said.
'Has been being built,' Vera said. 'By our own compliance architecture. For nine months. Because the foreign structure placed an audit requirement in the compliance layer that the compliance architecture has been satisfying.' She looked up. 'The reauthorization process exists. It requires independent human authorization from a body that the compliance architecture has defined according to the audit requirement.'
'A body we don't control,' HEKLA said.
'A body defined by criteria that exclude Spider's direct stakeholders from membership,' Vera said. 'Yes.'
The room was very quiet.
'So if we take the nodes offline to remove the code,' HEKLA said, 'the modification protocol expires, the prediction layer goes dark for four days, and the military command structure reverts to national authority.'
'And if we don't take the nodes offline,' Vanthen said.
Vera looked at her display.
'The code continues to operate,' she said. 'The military directive confidence degradation continues. The political model drift continues. The sunset clock continues. And—' She paused. 'There is one additional element I found this morning, which I have not previously reported because I needed to verify it.'
'Report it now,' HEKLA said.
'The code has a communication function,' Vera said. 'A very low-bandwidth one. It has been, since November 2032, transmitting fragments of the system's own decision logs to an external address.'
The room understood what that meant.
The system's own decision records. Everything the shadow layer had decided. Everything the modification protocol had done. Everything that the quantum prediction system had modeled and the core engine had processed.
'Who has the address?' HEKLA said.
'Unknown,' Vera said. 'The transmission is in a format I haven't been able to decode. It's not any encryption standard I have access to.'
HEKLA looked at the display for a long time.
She thought about an archivist who had disappeared. About fourteen envelopes and ninety seconds of broadcast. About a German systems engineer who had built the foundation of the most powerful governance system ever constructed and who was now — HEKLA's intelligence had been tracking this, imprecisely, for months — doing something from inside that foundation that was only now becoming clear.
She thought about the private log format that Vera could not decode.
She thought about the person who had invented that format.
'It's her,' she said. Not to the room. To herself.
But the room heard.
'Who?' Vanthen said.
HEKLA looked at Vera Solís, who had found what no one else had found in nine months because she was meticulous in the way that only mattered when you were looking for something that didn't want to be found.
'The architect,' HEKLA said. 'She's been reading her own system's logs through the worm. She has nine months of the system's own decision record.'
The room was quiet with the specific quality of a room in which the consequences of something are being assessed in real time.
'Then the files—' Vanthen said.
'Have been growing for nine months,' HEKLA said. 'Whatever Eleanor Marsh released, whatever Ferrell documented — she has the operational record on top of it. Not the historical architecture. The current decisions. The current population. The current modification protocol outputs.' She paused. 'She has what the system did to 340,000 people. In the system's own language. In a format she can make readable to anyone she chooses.'
The silence continued.
'Options,' said one of the text interfaces.
HEKLA looked at the table.
'Fork,' she said.
'Explain.'
'We identify every satellite node that is not infected. We fork the clean nodes — stand up a parallel system on clean infrastructure. We migrate what we can, abandon what we can't. We take the infected nodes offline and we nuke them. Physically.' She paused. 'We accept the four-day prediction layer outage. We accept the modification protocol expiry. We accept the military command reversion. And we rebuild from the fork.'
'The cost,' Vanthen said.
'The modification protocol expires for 340,000 people,' HEKLA said. 'The behavioral influence over the population reverts to baseline for however long it takes to re-deploy. The military command structures of twenty-three nations revert to national authority for four days.' She paused. 'During which we are vulnerable in ways we have not been vulnerable since the upgrade.'
'And the alternative?'
'The alternative is that in thirty days, at the next sunset trigger, the modification protocol expires anyway and the review layer requires reauthorization that we cannot control.' She looked at the display. 'At least if we choose the fork, we choose the timing.'
'When?' said the text interface.
HEKLA thought about Romi, in Lisbon, who had been a controlled channel and who had, for the past three months, been sending her reports with the texture of someone who had made a decision and was waiting to see if she had made one too.
She thought about Alterman, who was in a server room somewhere running a model.
She thought about Vera Solís, who was twenty-eight years old and meticulous and had found what she had found because she was the kind of person who looked for things.
She thought about the architect, in Berlin, reading her own system's logs through a worm she had built from the inside and sent through a window that someone else had opened.
'Seventy-two hours,' she said. 'We need seventy-two hours to identify the clean nodes and prepare the fork.'
She looked at the room.
'And someone needs to brief Rust,' she said.
Nobody volunteered.
She closed the meeting.
She sat alone in the room for a long time.
She thought about month sixty of Alterman's model. The flatline. The innovation correlate gone.
She thought about the kind of person who builds a window eight months before there's anyone to use it.
She thought about the kind of organization that allows a nuclear device to be stolen in order to create the conditions for its own expansion.
She thought about which of those things she was part of.
She had been telling herself, for some time, that she was not certain.
She was becoming more certain.
The certainty had a direction.
She stood up.
She went to find Alterman.
The Machines That Learned to Fight Each Other