The third was the impossible modification.
Someone had changed the file after it was supposed to have been sealed.
That did not automatically prove who changed it or why.
But it proved something had happened.
And that was enough to ask questions.
The prosecution did not like questions.
Especially not from a woman they had underestimated.
Paul Renner had initially assumed Ivory was an assistant.
When Marcus introduced her during a pretrial conference, Paul had barely looked at her.
“Technical consultant?” he asked.
“Yes,” Marcus said.
Paul had smiled.
“Interesting.”
Ivory remembered the smile.
It was the same smile she had seen today.
The smile of someone who had already decided she was not a serious obstacle.
He was wrong.
Three weeks before trial, Ivory had sent the prosecution a technical memorandum listing twelve inconsistencies in the evidence chain.
Paul responded with six pages of objections.
Ivory replied with eleven pages.
Paul stopped responding directly.
Then, on the morning of trial, he produced the certified video.
According to the official record, it was pristine.
No edits.
No modifications.
No interruptions.
Nothing suspicious.
Ivory watched the footage twice.
Then she noticed a tiny discrepancy between the evidence-management record and the operating-system metadata embedded in the file.
She requested the audit log.
The prosecution objected.
She requested the original storage record.
The prosecution objected.
She requested the chain-of-custody documentation.
The prosecution produced it.
That was when Ivory knew there was a problem.
The paperwork was too perfect.
Real systems were messy.
People forgot passwords.
Files were renamed.
Storage devices were transferred.
Logs contained routine errors.
A chain of custody that looked impossibly clean was often less trustworthy than one that openly acknowledged complications.
Ivory told Marcus:
“Something happened to this file.”
Marcus looked at her.
“Can you prove it?”
“I can prove that the prosecution's story is incomplete.”
“That isn't the same thing.”
“No.”
She looked at the evidence screen.
“But sometimes proving the story is incomplete is enough to stop the court from pretending it knows the ending.”
Marcus had smiled.
“You're enjoying this.”
“No.”
“You're smiling.”
“I enjoy being right.”
“That's worse.”
Now, sitting in the courthouse holding area, Ivory remembered those words.
She was alone.
Her hands were uncuffed now.
Her handbag rested on a metal chair beside her.
A guard stood outside the glass door.
Grant Mercer had left.
Frank Delaney had gone upstairs.
Ivory checked the clock.
2:31.
Fourteen minutes since the contempt order.
She wondered whether Marcus had been allowed to remain in the courtroom.
Then she heard footsteps.
The door opened.
Frank entered.
He looked uncomfortable.
“Ivory.”
“Yes?”
“The judge wants you back.”
She looked at him.
“Why?”
“I don't know.”
“Does she still consider me in contempt?”
Frank hesitated.
“I don't think that's the issue anymore.”
Ivory stood.
“What changed?”
Frank looked toward the hallway.
“Dana found something.”
Ivory's eyes sharpened.
“The audit log?”
“Yes.”
“Who accessed it?”
Frank didn't answer.
“Frank?”
He looked at her.
“The record says the file was accessed from Terminal 3.”
“Where is Terminal 3?”
“Evidence administration.”
“Who has access?”
“Evidence technicians. Clerks. Some prosecutors. IT.”
Ivory picked up her handbag.
“And the access time?”
Frank looked uncomfortable again.
“2:13.”
Ivory stopped.
“AM?”
“Yes.”
“On April nineteenth?”
“Yes.”
“That's the modification time.”
“I know.”
Ivory looked at him.
“Who logged in?”
Frank lowered his voice.
“That's the problem.”
“Why?”
“The credentials belong to someone who was supposedly not in the building.”
Ivory stared at him.
“Who?”
Frank looked directly at her.
“Paul Renner.”
For the first time that afternoon, Ivory's composure cracked.
Only slightly.
But enough.
The Second Copy
When Ivory returned to Courtroom 7B, the room had changed.
The atmosphere was no longer hostile.
It was frightened.
Judge Whitmore sat perfectly still.
Marcus Hale stood beside the defense table.
Paul Renner was no longer smiling.
Dana Ellis had three monitors open.
The jury remained outside.
Ivory walked to the table.
Judge Whitmore looked at her.
“Ms. Bennett.”
“Yes, Your Honor.”
“I owe you an explanation.”
Ivory waited.
The judge continued.
“The audit log indicates that Exhibit 42 was accessed after certification.”
“Yes.”
“It also indicates that the access credentials belonged to Mr. Renner.”
Paul immediately spoke.
“My credentials were compromised.”
Marcus turned.
“Convenient.”
Judge Whitmore raised her hand.
“Counsel.”
Marcus stopped.
Paul looked toward the judge.
“I was not here that night.”
“Where were you?”
“At home.”
“Can you establish that?”
“Yes.”
“Then we will establish it.”
Paul swallowed.
Ivory watched him.
He looked different now.
Not weaker.
More careful.
That was more revealing.
Judge Whitmore looked at Dana.
“Can we determine whether the file was actually opened?”
Dana nodded.
“Yes.”
“Can we determine whether it was copied?”
Dana hesitated.
“Possibly.”
“Do it.”
Dana began typing.
Ivory stood beside Marcus.
He whispered:
“What are you thinking?”
“That we're looking at the wrong file.”
Marcus frowned.
“What?”
“The modified file.”
“That's the one we have.”
“No.”
Ivory pointed toward the screen.
“That's the file they want us to look at.”
Marcus stared.
She continued.
“If someone wanted to alter evidence without destroying the original, they wouldn't necessarily overwrite the original.”
“What would they do?”
“Create a replacement.”
Marcus understood.
“A second copy.”
“Exactly.”
Dana looked up.
“I found something.”
Everyone turned.
“There are two file identifiers.”
Paul's face went pale.
Judge Whitmore asked:
“Explain.”
Dana enlarged the record.
“The evidence system lists Exhibit 42 as one file. But the storage server contains two objects associated with the same case number.”
Marcus stepped closer.
“Can you access the second?”
Dana nodded.
“I can.”
Paul said, “Your Honor, I object.”
Judge Whitmore looked at him.
“On what basis?”
“We don't know what that file is.”
“Then we will find out.”
Dana opened it.
The screen remained black.
Then an image appeared.
Parking garage.
April seventeenth.
6:38 p.m.
The original camera angle.
A vehicle entered.
A pedestrian walked across the frame.
Then the screen showed something the prosecution's exhibit had not shown.
Another vehicle.
A dark sedan.
It entered the garage approximately twenty seconds before the alleged hit-and-run.