Maya kept watching until the recording finished. The official case file said the card had been found during that search; the original recording showed otherwise.
She turned to the technician: "Preserve every version connected to Nathan Cole. Then map every directory on this server."
He nodded.
Maya looked at Mercer and Rebecca: "We're no longer dealing only with missing equipment."
Neither responded. On the monitor behind them, the hidden server continued indexing records Asheford's official system did not admit it had, and somewhere inside those directories was an answer to a larger question: who had been using this system, and what else had they kept outside the record?
The federal team moved the recovered body camera file to an isolated forensic workstation and compared it with the version stored in Asheford's official evidence archive. Maya stood beside the technician while Lena reviewed the file history.
The original recording showed the entire search of Nathan Cole's belongings: the officer removed his wallet, keys, phone, temporary work badge, and several personal items. No restricted municipal access card appeared at any point.
The official evidence version contained an additional segment recorded later: in that clip, an officer held up the missing access card and stated that it had been recovered from Nathan's property.
Maya asked, "Are these two segments from the same recording session?"
The technician shook his head. "No. The official archive presents them that way, but the source identifiers are different."
"Could that happen during a normal export?"
"Not without leaving a conversion record. I don't see one."
Lena opened the evidence history. "The second segment entered the case archive after Nathan had already been detained."
Chief Mercer stood several feet away. "That still doesn't establish who placed the card there."
Maya looked at him. "Correct."
Rebecca seemed surprised again by Maya's refusal to go further than the evidence.
Maya continued, "What it establishes is that the record used to support the detention was not the original recording."
The technician compared timestamps, export logs, and file signatures. "The official version was assembled after the fact. Whoever created it kept the visible case timestamp, but the compression signature changed."
Mercer asked, "Could software maintenance account for that?"
"Not selectively on one segment."
Rebecca looked at Lena. "Who had permission to modify body camera evidence?"
"Normal users couldn't change source files," Lena said. "It required elevated access."
"How many people had that?"
"Very few."
Maya asked for the list. Lena opened the administrator permissions table: her own evidence administrator account appeared first; Rebecca had security privileges with limited evidence management functions; Chief Mercer held executive-level administrative authority; Sloan Integrated Systems had several contractor certificates, including one with broader permissions than the written maintenance agreement described.
Maya asked, "Could the Sloan certificate alter file metadata?"
The federal technician checked the permission set: "Yes."