The Revocation They Called Automatic

The request to revoke administrator privileges on the external service was explained as an automatic procedure, but the revocation target included the preservation log for the 4:03 token. Seojin preserved the revocation request itself without confirming the approver's name. Calling something automatic didn't mean no one was involved, and it wasn't a phrase that erased anyone's responsibility.

Yeoreum read over the explanatory document meant for Moon Serim's family again. The medication might have been moved from the warehouse's refrigerated storage, and the delivery completion photo might have been created afterward. There were traces of the external cleanup service reissuing the token, but who had ordered it remained unconfirmed. The document separated fact from hypothesis by color, but for the family, order mattered more than color.

"Don't you even know yet where my sister died?" the younger brother asked.

"The place she was found was the warehouse. Where the injury occurred and where the medication was moved both still need to be confirmed."

"Then why do you bring up the delivery photo first?"

Seojin paused for a moment. The photo had opened up a question about the case, but for the family it meant explaining the tampering of records before explaining the sister's death. She changed the first sentence of the document. "The cause and location of Moon Serim's death are being confirmed through forensic and physical evidence, and the delivery records are material used to verify that timeline."

The brother read the sentence and still didn't lift his head. "Written like this, I don't know what I'm supposed to believe."

"I'm not asking you to believe anything right now. I'm distinguishing what's confirmed from what we still don't know."

He took the document with him. The fact that Gray Thread hadn't promised a fast resolution wasn't a comfort, but at least it hadn't pushed a premature conclusion onto the family.

In the afternoon, Minwoo proposed expanding the preservation scope for the external service's privilege revocation request. The logistics company's legal account had sent the request, and revocation approval required two internal administrators. Minwoo argued they should seize the company's entire server. Yeoreum said personal information and protected parties' data could get swept in together, and pushed to narrow the scope instead.

"If we narrow the scope, whoever revoked it can erase the record."

"If we widen it, unrelated people become subjects of investigation."

Seojin wrote down both of their statements in the meeting log. Until now the team had shared an implicit priority between speed and consent, but now it was clear they were each working from different rules.

Yeoreum proposed splitting preservation from access. The original revocation request, the approval timestamp, and the privilege change history would be preserved immediately. Personal data inside the account would be separated out first by an outside reviewer. Only the portions confirmed to be relevant to the crime would then be viewed by Gray Thread. Minwoo still called it insufficient, but Seojin agreed to the plan.

"If we decide who the outside reviewer is, that's not independent."

"Then let's have each side designate one person." Yeoreum answered.

Minwoo started to object, then closed his mouth. It was the moment he admitted Gray Thread couldn't hold every authority.

Song Juhyeok confirmed that one of the approver accounts on the revocation request was his own company's account. He didn't open the entire account right away. Instead, he provided only the approval timestamp and the privilege change. The revocation request had been drafted at 23:18, and the approver had logged in at 23:21. Song Juhyeok submitted call records showing that at that time, he had been on the phone with a protection agency.

Minwoo looked at him and said, "It's confirmed that it wasn't you, but that doesn't rule out someone else in your company."

"So I'm refusing to open my entire account just to find that person."

"You could be hiding the crime."

"Then find independent material that can confirm that possibility."

Song Juhyeok never gave the name of the person he was protecting. But he didn't hide the fact that an administrator account was tied to the revocation procedure. He was careful not to blend protection and company liability into the same sentence.

Seojin considered using her ability to analyze the material. If she heard the raw statement of whoever sent the revocation request, she might pick up an unconscious word. But the preservation state of the original statement hadn't been confirmed, and using the ability would cost her another ordinary word. She decided not to use it, and instead cross checked the login times and approval order of the people in charge.

Minwoo asked, "Still not listening?"

"If it's not the original, the condition isn't met. Even if it is the original, independent material comes first."

"That could look like you're hiding your judgment."

"That's why I record the non use too."

Seojin wrote in the ability usage log, "Not used. Reason: original preservation uncertain, independent material exists." Yeoreum didn't edit the sentence. She quoted it exactly rather than explaining Seojin's judgment for her. The trust between the two of them wasn't built through a warmer tone. It was built by not changing the other person's words.

The outside review found that the revocation request hadn't been an automatic policy at all. It had been manually re-executed by an administrator. But the administrator's name was hidden behind the service contractor's account. There was no way to tell whether the revocation request was concealing a crime or simply ending a contract, so the team sent a written inquiry to the logistics company asking for the reason behind the approval.

That night, Moon Serim's family reached out again. The brother asked about the hypothesis markers in the document. "If I demand disclosure right now, can I see the original text?"

Seojin checked the options with Yeoreum first. Full disclosure of the original text, keeping the restricted metadata as is, or a joint review with a legal authority. After thinking it over, the brother said he'd keep the restricted metadata and decide again once the injury timeline became clearer.

That choice slowed the investigation down, but it left a record that the family had not been forced into disclosure. Seojin didn't treat the family's choice as a reward for solving the case. It was simply part of the procedure.

At eleven that night, confirmation arrived that the targeted log had been preserved. The original had survived, but inside it, the actual user of the service account was still hidden. Minwoo demanded the entire company server to fill in that blank, and Yeoreum insisted on attaching expanded conditions. The clash between the two of them was no longer personal. It was a clash over authority.

At the end of the meeting log, Seojin wrote: "The right to analyze is separated from the preservation of the original. Two outside reviewers will check the privilege revocation log. Use of the ability, including the reason for non use, will be disclosed. Responsibility for correction stays attached to the name of whoever wrote the original hypothesis."

The team wasn't dissolved, but no one could hold the material alone and push a conclusion through the way one person used to. The change wasn't a restoration of trust. It was a mechanism built to reduce misjudgment even without trust. The next morning, the two outside reviewers looked at the revocation log separately. One checked only the service contract and privileges, the other checked only the token version and access times. Combining the two sets of material was only possible with Yeoreum's approval afterward. Minwoo said the procedure was excessively slow, but the reviewers explained that the split had been intentional, meant to keep either of them from picking material that steered toward the same conclusion.

Song Juhyeok didn't choose which set of material to look at, even after entering the meeting room. He knew his company account might be assigned to the second reviewer, but he insisted the original data, mixed with personal information, had to go through the protection agency first. Minwoo saw that refusal as just another delay. Seojin didn't use the word delay and the word refusal interchangeably.

"A delay needs a reason and an end time." Yeoreum said. "For this refusal, we'll note down the time when the protection agency's review is set to finish, alongside it."

Song Juhyeok signed off on the condition. It was so protection wouldn't turn into a secret with no end. Even if Adil didn't reach out, the outside reviewer would decide whether the case could move forward using the physical records and equipment flow alone.

Within the team, Minwoo went back and checked whose material he had swept up while widening the preservation requests. The victim's family's contact information, the delivery driver's pay records, the protection agency's confidential identifiers. He didn't delete any of it outright. Instead he separated it out of the access list and moved it into a separate archive. Seojin recognized the work as closer to taking responsibility than to tidying up.

"This material should have been separated from the start." Minwoo said.

"It's enough to record the time and reason for separating it now." Seojin answered.

"What about the fact that I didn't do it at the start?"

"That goes into the correction report too."

Minwoo wrote the report under his own name. Yeoreum didn't edit the sentences. She simply separated what could be disclosed from what needed internal review only. Seojin attached the non use record from the ability usage log. The team combined each person's errors into a single document without letting anyone's responsibility get diluted.

At four in the afternoon, the timestamps of the manual re-executions were confirmed in the revocation log. The administrator account had been opened once at 4:04:02 and again at 4:06:11. The first coincided with the cancellation token being issued, the second came right before the preservation request. The user behind both timestamps was still hidden, but the fact that the same privilege had been used twice in a row remained on record.

Seojin added the two timestamps to the case board. The possibility that the external service had cleaned up case records had grown stronger, but there was no evidence that the service had planned Moon Serim's death. These two timestamps were the only point where the internal physical case and the external record cleanup connected.

Song Juhyeok looked at the timeline and said, "So now you can see who the external service was connected to, even without going after the person I'm protecting."

"That's right. But if that material reveals the identity of the protected party, access stops again."

He nodded. It was the expression of someone accepting two facts at once, that a door closed for protection could open someday, and that it wasn't a door just anyone could open. Late that night, Yeoreum closed out the meeting log and said, "The team doesn't follow the rules because we trust each other. The rules have to hold even in the moments we don't."

Seojin quoted the line exactly as it was. Gray Thread's next question was no longer just the culprit's name. It was who had the authority to change the record, and how. The preservation deadline on the revocation log was shrinking again. Minwoo rechecked the preservation timestamps and prepared the next request. No one had closed the conclusion yet. Seojin moved the revocation request's approver and the contractor's authority into a separate table. The crime still couldn't be confirmed, but they could confirm the window of time in which the material could vanish, and who had controlled that risk. The team started over from that confirmation.