Chapter 22: Eight Minutes of Law

## Chapter 22: The Limited Finding

Mara’s chronology withdrawal was already final when the succession registrar entered the annex. Vale’s diversion reservation was not.

Registrar Paret stopped inside the witness circuit and closed the door himself. He was narrow-faced, gray at the temples, and carried the physical seal controls in a black case cuffed to his wrist. The dry recycled air had raised white lines at the corners of his mouth.

Behind him, the sealed Holder-Loss endpoint remained visible through the passage window. No custody light had changed. All four envelopes remained inside it.

Paret set the case on the table without opening it. “Your request asks me to convert a ledger irregularity into a succession finding.”

“It asks you to enter what the succession ledger records,” Mara said.

“A ledger records authority states. It does not establish presence, conduct, or use.”

“Then the finding should say that.”

Vale stood opposite her, one hand resting beside his unwithdrawn reservation. “Registrar, Continuity agrees that the authority return requires review. It does not agree that the return has been interpreted completely.”

Mara looked at him. “Your reservation says the newest envelope may have been diverted before reaching Holder-Loss.”

“It says that possibility remained open when I entered it.”

“It no longer does.”

Paret touched the witness rail. The panes on either wall brightened, showing the three remote legal witnesses as silhouettes behind identity-neutral glass. “One dispute at a time.”

“No,” Mara said. “They are one dispute. Director Vale’s reservation preserves a false alternative. That alternative lets the succession ledger remain institutionally irrelevant.”

Vale’s expression barely changed. “You do make correction sound like a form of violence.”

“Only to records that resist it.”

Paret gave neither of them the satisfaction of reacting. He unlocked the black case with his thumb and a rotating mechanical key. Inside lay three seal controls, each under a transparent cover.

“The succession instrument remains identity-sealed,” he said. “Opening its sponsor field is outside this order.”

“Agreed,” Mara said.

Vale added, “Continuity requires that limitation to remain explicit.”

Paret entered it. The ledger display took almost a second to refresh, long enough for the old wording to ghost beneath the new.

Mara disliked the lag. It made every correction look briefly reversible.

The registrar called the documents into the witnessed field: emergency succession instrument, outgoing revocation order, transmission commitment, endpoint acknowledgment return, service-batch authorization, and duplicate-authority alarm record.

Six entries appeared around the newest envelope’s receipt interval.

Paret pointed to the succession instrument. “Sponsor identity sealed. Sponsor eligibility verified at invocation.”

Mara kept her hands flat on the table to control the fine tremor. “Meaning?”

“Meaning the invocation came from a person lawfully authorized to sponsor emergency Holder-Loss succession at the time of invocation.”

“Enter that.”

“It does not establish that the emergency was justified.”

“I did not ask you to establish justification.”

The registrar entered the limited finding. The display hesitated, then fixed it in white:

A LAWFUL SPONSOR INVOKED THE EMERGENCY SUCCESSION INSTRUMENT. SPONSOR IDENTITY REMAINS SEALED. NECESSITY AND MOTIVE NOT DETERMINED.

Vale read it once. “No objection.”

Paret moved to the credential bands. The successor credential activated eight minutes before the outgoing credential’s scheduled termination. The revocation order for the outgoing credential showed valid issuance and transmission commitment.

Its endpoint acknowledgment field was empty.

“The absence may be a return-path failure,” Paret said. “It may be an endpoint processing failure. It may reflect service interference or suppression. This record does not choose among them.”

“It also does not prove termination,” Mara said.

Paret’s gaze sharpened. “Scheduled termination and completed revocation are different events.”

“That distinction is why you are here.”

Vale enlarged the hardware field. “Could the credential have terminated centrally without the endpoint acknowledgment?”

“Not for endpoint release authority,” Paret said. “Holder-Loss was designed to remain operable through network partition. Its local authority cache ends only on authenticated acknowledgment or physical expiry.”

“There is no physical-expiry entry,” Mara said.

“No.”

Vale’s fingers moved away from his reservation but did not yet withdraw it. “Then the outgoing credential remained effective at that endpoint when the successor credential activated.”

Paret corrected him. “The record proves that it had not completed revocation. We have not established when, or whether, it later ended.”

“Enter that too,” Mara said.

The registrar did.

Next came the service-batch custody return. Its technician and individual approval fields remained sealed, but the authorization route was exposed. The maintenance package had been admitted against the outgoing Holder-Loss credential while that credential was valid. Filter replacement, backup-cell service, seal compound, and oscillator calibration had all been authorized before the scheduled turnover.

Paret folded his arms. “This proves institutional authorization of maintenance.”

“Not who held a tool,” Mara said.

“Not who entered the room,” Vale added.

The registrar glanced between them. “You appear unusually determined not to accuse anyone.”

“I am determined not to make the record stupid,” Mara said.

One witness shifted behind the neutral pane. Vale’s mouth tightened by a fraction.

Paret entered the service finding: the endpoint had been deliberately maintained for Holder-Loss succession under authorization accepted while the outgoing credential remained active. No technician identity, physical presence, or service conduct was attributed to the credential holder.

The endpoint’s ordinarily vacant status no longer made its continued readiness mysterious. It had been preserved as an independent succession facility. Whether anyone had approached it during the newest delivery remained unanswered.

Paret opened the alarm record last.

The ledger showed that simultaneous validity had crossed a protected threshold. Under Holder-Loss rules, the second credential’s activation while the first remained locally effective generated a mandatory duplicate-authority alarm.

The generation mark was present.

The destination field was blank.

There was no receipt, no rejection, and no acknowledgment trail.

Vale leaned closer. “A blank destination should prevent commitment.”

“It did not,” Paret said.

“Can your office alter the destination after generation?”

“No.”

“Can Continuity?”