The Token Only the Review Room Could Open

The original of the duplicate token could only be opened in the external review room. Gray Thread had secured the physical records inside the case, but exactly how and where the token had been reissued still lived in summary form. Song Juhyeok would not open his entire company account, and Nari would not release the original text of her senior reporter's notebook. Human choices were drawing the boundaries of the material.

Seojin split the case board into four bundles. Drug movement, photo generation, token reissue, external cleanup service contract. If all four bundles were assumed to be one person's actions, the evidence connected quickly, but if even one belonged to a different actor, the structure of the case changed.

Minwoo opened the token version records together with the external reviewer. The normal completion token was version 3.2, and the cancellation token was 3.2-R, derived from a relay request under version 3.2. The two shared the same order number, but the issuing services differed. The normal token came from the delivery platform, and the cancellation token from the external cleanup service.

"The external service canceled the delivery completion," Minwoo said.

"Canceling and reissuing aren't the same thing," Seojin answered. "This token didn't erase the normal completion record. It added a separate one."

When they opened the token's payment record, the external service account showed a small cleanup fee attached. The payer was the logistics company, and the payment approval time was 04:04:02, forty five seconds after the photo was generated. That gap raised the possibility that someone had cleaned up the record after generating the photo, but it could also have been an automatic settlement.

Seojin built the automatic settlement hypothesis first. A structure where, if a delivery error occurred, the system automatically reissued and attached a fee. If this hypothesis held, the two tokens could have been created without any human intervention at all. The platform would need to submit its automatic rule table.

Song Juhyeok said he would not open the relevant clause of the external service contract. Instead, he passed the hash of the contract authority and the fee approval record to the protection agency. He knew when his company had applied the automatic rule, but he would not release the original document, since it would also expose another worker's account.

"With this material, we can't tell whether it was automatic or someone pressed the button," Minwoo said.

"That's why we look at the access trail," Seojin answered.

The external reviewer compared the access logs of the token issuing server. The automatic rule was supposed to be issued only from a designated server, but at 04:03:18, an administrator access path had opened once. The accessing party was masked behind a contract agency account, and that account had been newly activated one month before the incident. It was access that couldn't be explained by the automatic rule alone.

But that didn't mean administrator access had created the token. The system could open the same path even when the automatic rule was manually re-executed. Both the possibility of human intervention and the possibility of automatic re-execution remained standing.

Seojin split the two hypotheses into a table. First, an external service employee saw the delivery photo and manually reissued the token. Second, the automatic rule failed and an administrator re-executed it, and the order of the photo and the token overlapped by coincidence. Neither hypothesis directly explained the drug movement or Mun Serim's death.

Minwoo laid the case's internal material alongside it. The refrigerated storage power, the phase change label, the test phone's sensor defect. The drugs had moved out of the warehouse first, the photo had been made afterward with the test phone, and the token had branched off again from the external service. It was a structure where the physical incident and the record cleanup sat in parallel.

Song Juhyeok read the external service section of that table for a long time. He knew the name of the contract agency, but he didn't say it right away.

"If you don't tell us, we could miss the next preservation deadline," Seojin said.

"If I tell you, even the people who worked at that company will get investigated."

"Then let's define a scope that reduces that risk first."

After a call with the protection agency, Song Juhyeok disclosed only the contract agency's company name and the dates its authority had been valid. He left out employee names and personal contacts. With that information, the external reviewer compared the contract authority table against the account types in the access log.

Nari confirmed only that the same company name repeated on a specific page of the notebook. She didn't hand over the original text, and Seojin didn't demand a copy. Instead, her confirmation statement recorded only the page number and the time of confirmation. The external organizational link had grown stronger, but no conclusion that a single organization had directed every case had emerged yet.

Yeoreum suggested delivering the partial answer inside the case to the family first. For Mun Serim's family, that meant explaining the possibility that the drugs had been switched inside the warehouse and the trace that the delivery record had been cleaned up after the fact, while leaving the external organizational link as an unconfirmed hypothesis. If the story of an organization was given to the victim's family first, the direct path of the death itself could end up blurred.

Minwoo put together the material to explain to the family. The phase change on the cold pack label, the storage unit's power, the timestamp of the test phone photo, the token version and the fee. The four were marked as confirmed facts, and the external service's manual intervention was marked as a hypothesis still under verification.

Seojin sat in on that explanation. Without looking at the photo, Mun Serim's younger sister asked whether they could tell where the drugs had moved.

"Based on what's confirmed now, it's likely they moved out of the refrigerated storage inside the warehouse first. We haven't determined who moved them yet."

"Then is the delivery completion photo a lie?"

"It's true that the photo was taken. Whether the photo represents the actual moment of delivery is still being verified."

The sister lowered her head. Seojin knew this explanation wouldn't bring the family immediate comfort. A partial answer was less satisfying than a complete conclusion, but it was the minimum honesty required not to turn an unconfirmed person into a culprit.

That evening, the platform released part of the approval path for the 3.2-R token. At the time of the incident, the region of the normal delivery device and the region of the external service administrator account had been the same. But the region covered the entire logistics warehouse and didn't pinpoint the account user's location. Seojin recorded that fact only as "same location zone."

Minwoo said, "Isn't this enough to say the external service cleaned up an internal crime?"

"The likelihood that it was cleaned up has gone up. Who ordered it is still open."

At that point, Song Juhyeok offered up one more piece of partial evidence for the first time. It was the hash of a contract change request sent from inside his company to the external cleanup service the day before the incident. He didn't disclose the contents of the document, but the date the change request shifted from delivery error cleanup to manual approval review was confirmed. The change had happened two weeks before the incident.

"Why give us this now?" Minwoo asked.

"Because now we can see the contract structure without needing a person's name."

Seojin passed that material to the external reviewer. The time of the contract change and the time the administrator account was activated were close together. It raised the possibility that the external service had prepared manual intervention authority even before the incident, but that couldn't be taken to mean it had been prepared for this case specifically.

The Gray Thread team decided not to disclose the external organizational link. Instead, they recorded the partial answer to the crime inside the case and the long term question of the external cleanup service's expanded authority as separate entries. Song Juhyeok didn't monopolize the identity of the person he was protecting, but he handed over only part of the company contract. The information he held hadn't become the team's, but the boundary of the case had widened.

At eleven that night, someone sent a request to withdraw the external service's administrator authority table. The requester was the logistics company's legal account, and the withdrawal target included the preservation log of the 04:03 token. Yeoreum immediately updated the preservation status, and Seojin recorded the time the withdrawal request was sent.

Minwoo put on his coat. "This time the company is trying to take the material back directly."

"That doesn't mean you write it down as the same organization."

He gave a bitter laugh. "You're still saying that."

"I have to keep saying it for the next hypothesis to be accurate."

Seojin wrote at the end of the case board.

'Inside the case, the link between the drug switch and the record reissue has been confirmed. The external cleanup service's administrator authority and the payment and access traces are escalated to a long term investigation. The command structure remains unconfirmed, and it will be proven through counter approval logs and contract authority, not by disclosing the original documents.'

The blue triangle receipt's customer number and the 3.2-R token version went into the same file archive. The tool from the first case was touching the records of the second case. But Seojin still hadn't written the name of that hand. The next morning, Mun Serim's family came back to Gray Thread. Seojin didn't tell them the external service's name first. She explained first the possibility that the drugs had moved out of the warehouse's refrigerated storage, and the possibility that the delivery completion photo had been made after that movement.

Without looking at the photo, the sister asked, "Then who left my sister in the warehouse?"

"That part is still under investigation. We're not treating the person Mr. Song Juhyeok is protecting and the person who made the photo and the token as the same person."

"Is protecting that person more important than my sister?"

Seojin chose her words for a moment before answering. "It's not a matter of importance. It's a matter of keeping to the range of confirmed facts. If we release an unconfirmed name, your sister's case could also head in the wrong direction."

The sister wasn't easily convinced, but she took the explanatory document with her. In it, confirmed facts and hypotheses were marked in different colors. It also noted the date on which the family could later ask again or request a correction to the scope of disclosure.

Hearing that explanation, Song Juhyeok additionally preserved his own hash for the contract change. He didn't say the name of the person he was protecting, nor did he specify who inside his company had expanded the external service's authority. Instead, he handed over only the time the approval authority changed and the approval stage.

Minwoo said, "If you keep giving us only partial evidence, we might not find the rest."

"Then you bear the responsibility for not finding it. I won't let you fill in the blanks with a person's name."

Seojin recorded that in the meeting log. Song Juhyeok wasn't monopolizing the information, but by setting the conditions of disclosure, he was controlling the pace of the investigation. That control was uncomfortable, but it was the result of the involved party's right to refuse actually working.

The request to withdraw the external service's administrator authority table was confirmed as an automatic procedure from the legal account. Whether a person had tried to hide the case, or it was simply cleanup following a contract termination, was still unknown. Yeoreum preserved the withdrawal request and decided to formally ask the logistics company in writing for the reason for withdrawal and who had approved it.

Seojin laid the blue triangle's customer number and the 3.2-R version's payment identifier side by side. The likelihood that they belonged to the same lineage had grown, but confirming that likelihood required not a repeating shape but a counter approval log and contract authority. The next step wasn't to expose the original documents, but to confirm who had held what authority to change the records.