Maya told the technician to preserve the certificate activity, but not disable the credential.
Mercer looked at her. "You're leaving an account active that you believe may have exceeded its authority?"
"I want to see whether it connects again."
Rebecca shook her head. "You're waiting for someone to make a mistake."
"I'm preserving evidence of what the account does on its own."
The distinction ended the discussion.
Lena opened another folder containing the project's testing reports. Each document stated that backup systems had passed verification before final acceptance. Maya noticed that the test reports shared the same digital author: Calvin Sloan.
Lena nodded.
"And who witnessed the tests?"
Lena searched the forms. The witness field was blank on several reports. On others, the entry simply read: APD authorized personnel. No individual was named.
Maya asked Mercer, "Did you personally witness the final system test?"
"No."
"Did Rebecca?"
Mercer looked toward her.
Rebecca answered for herself: "No. My responsibility was physical security."
Maya turned back to Lena. "Then find whoever did."
Lena searched the project calendar, staff assignments, and IT records. After several minutes, she stopped. "I can't find anyone."
Maya looked at the "paid in full" authorization again. The city had released millions of dollars for equipment recorded as installed, tested, and operating. Much of that equipment remained sealed in storage. The final testing reports did not identify a departmental witness, and the contractor retained system access broader than the written agreement described.
She gave the federal team its next instructions: "Preserve every invoice, every acceptance certificate, every payment authorization, and every Sloan administrator session. Keep the police systems running, but mirror all contractor activity."
Lena nodded.
Maya then looked at the active network diagram on the wall monitor. "Now compare this diagram with the building's physical infrastructure."
The technician began loading the plans. If Asheford's official system could not account for its equipment, Maya wanted to know whether another system was operating where the record said nothing should be.
By early afternoon, the federal team had built a document chain that connected the technology project from purchase to final payment. Each record answered one question and raised another.
Maya stood beside a conference table where the files had been arranged in order: purchase authorization, delivery records, contractor work orders, security approvals, completion certifications, and payment releases.
One of the FBI agents pointed to the first document: "Equipment purchased with federal and municipal funds." The next file showed delivery to Asheford. The third showed the equipment transferred for installation. The fourth certified the work as complete. The fifth released final payment.
Maya looked at the signatures: Calvin Sloan had certified the technical work; Chief Daniel Mercer had accepted the completed project on behalf of the department; Rebecca Sloan had approved restricted area access during multiple installation periods.
Rebecca stood across the table. "We've already covered my signature. It certifies access. It does not certify installation."