Chapter 4: The Accountable Door

Chapter Four: The Service Mouth

The thirty-seven seconds did not begin at the locker.

Mara erased the reconstruction from the terminal before anyone could grow attached to it.

“Again,” she said.

Cold air moved through the issue cache, carrying the mineral trace of fresh seal compound from locker 6E-41. Beyond the controlled aisle, two pressure doors separated them from Probe Nine’s recovery bay. Both were closed now. Their status lamps held a patient red.

Registrar Pell remained on the secure channel. Vale stood beside Mara at the terminal, and Elias waited behind the observer line with his broth bulb tucked beneath one arm.

Mara brought up the allocation record first.

“State the relationship between 6E-41 and R-6-Delta.”

Pell attached his identity and authority band to the answer. “Locker 6E-41 is the continuously assigned issue-cache slot for cartridge R-6-Delta. It was not reassigned during the period under examination.”

Only then did Mara reopen the full seal history.

The export showed R-6-Delta returned intact at revocation. Its factory band was recorded unbroken, its contacts capped, and its cradle contact confirmed under witness. Three minutes later, the slot entered a valid maintenance cycle.

The ordinary user log remained blank because the user door had never opened.

Vale lowered his inspection light against the hinge. A narrow shadow revealed the recessed mechanical interface behind it: a shaped service mouth, no wider than two fingers, leading directly to the twin locking pins.

“Established hardware,” he said.

“Local hardware,” Mara corrected. “It cannot operate remotely.”

“No.”

A valid authority could schedule the maintenance window. It could not insert the registered tool, align both channels, hold pressure against the pins, remove the cartridge, or press replacement compound into the broken seal.

Mara expanded the maintenance layer. Its original clock source authenticated against the cache controller’s sealed oscillator.

The pins withdrew at lockout minus eighty-six seconds.

Cradle contact ended at minus eighty-four.

The pins returned at minus seventy-nine, and the locker registered complete reseating at minus seventy-six.

She froze the display there.

“Service completion at minus seventy-six,” she said. “Not inside the thirty-seven-second interval.”

Vale inspected the source certificate rather than her conclusion. Elias watched the times appear.

Pell supplied the raw corridor export. Mara refused its administrative summary and opened the underlying sensor blocks: floor-load changes, transfer-state continuity, and the two pressure-door controllers, each carrying its own clock history and correction ledger.

No clock was allowed to borrow authority from another. They compared each source to the lockout recorder independently.

The inner cache door recorded a service transit at minus sixty-two seconds. Its pressure equalization completed before the outer leaf opened. The corridor floor sensed a carried mass moving toward the recovery bay, within tolerance for R-6-Delta and its transport cradle.

At minus forty-nine, the second pressure door completed its crossing cycle.

Neither door record named the carrier. The transit had used a valid service credential that preserved the maintenance chain but did not expose an individual identity in the operational display. That omission might be lawful, negligent, or exploited. The records did not decide which.

The cage controller registered R-6-Delta entering the service cage at minus forty-one seconds.

Mara placed a vertical line through that event.

“Here,” she said. “The authenticated interval begins here.”

P9-C accepted the related relay frame at minus eleven.

Elias’s queue received the request at minus four.

Lockout followed at zero.

Thirty-seven seconds lay between cage entry at minus forty-one and queue receipt at minus four. The locker opening, cartridge removal, resealing, corridor movement, and both pressure-door crossings were already complete before those thirty-seven seconds began.

No one spoke for several breaths.

Mara made them test it separately.

Vale took the door records first. He checked pressure equalization, anti-tailgate intervals, controller amendments, and the original signatures on both crossings. Then he compared the second door’s completion with the cage sensor.

“The cartridge could not enter the cage before the second crossing,” he said. “The recorded order is physically coherent.”

“Any amendment?”

“None.”

Elias examined the queue path and P9-C relay receipt. His assigned authority appeared in both, but the relay had accepted the frame seven seconds before his queue displayed it.

“The queue request did not trigger the locker opening,” he said. “It arrived seventy-two seconds after reseating confirmation.”

“It also arrived after cage entry,” Mara said.

“Yes.”

“Authorization, notification, diversion, or cover?”

His mouth tightened. “The timing permits any of them.”

Vale countersigned that boundary.

Mara took the seal history last. She compared the maintenance controller’s oscillator certificate against the independent door clocks and the lockout recorder. Maximum uncertainty remained below three-tenths of a second. No permissible correction could move service completion past cage entry. None could move either pressure-door crossing into the thirty-seven-second interval.

The chronology held.

Not because one system had explained the others, but because five original sources constrained the same sequence.

Locker service completed at minus seventy-six.

The first pressure-door crossing completed at minus sixty-two.

The second completed at minus forty-nine.

R-6-Delta entered the cage at minus forty-one.