
The kiosk access window remains open on Miller’s secured laptop when Grand Central’s security feed stutters, then loses several minutes at once. A red process begins overwriting the preserved camera cache.

Detective Miller
That command is remote. The session token is active on a maintenance terminal below us.
Miller locks the laptop to the station network and starts isolating the connection. The overwrite continues, chewing through the footage faster than his countermeasures can contain it.

Detective Miller
I’m staying here to stop the wipe. Anna, follow the physical trail. The terminal is somewhere deeper in the station.
He remains beside the secured laptop, broad shoulders hunched over the controls. Anna stands at the edge of the concourse with the visitor-pass image and the contractor trail still unresolved.
A maintenance access indicator flashes on a service map, then vanishes. Far below the concourse, a door alarm chirps once, followed by the muted roll of equipment wheels.

Detective Miller
There. East service passage, below the shuttle level. Move now, before the cache and whoever’s using that terminal disappear.
✓ Quest Accepted
Recover the erased surveillance footage
“I hurry down the east service passage toward the alarm and rolling wheels.”
SUCCESS (Good Agility, rolled +1)

Anna hurries down the east service passage, her footsteps sharp against concrete. The alarm’s chirp repeats below the shuttle level, guiding her past locked utility doors and humming conduits.
The rolling wheels grow louder. She reaches a maintenance junction where a steel door stands open, its indicator dark and its access panel still warm.

Anna
The door was opened recently, and the equipment is moving away from the alarm.
Beyond the doorway, a service bay contains a portable terminal on a wheeled cart. Its screen shows the camera-cache overwrite, while a silver access case rests beneath it.
The cart’s wheels have stopped beside the freight lift. A visitor pass hangs from its handle, bearing the same contractor identification captured in the station reflection.

Detective Miller
Anna, I have the connection pinned to your position. The wipe is still running, but now we know exactly where it originates.
The terminal accepts no local input without a security key, but its status window exposes the active session identifier and a live destination: the station’s east service network.
“I seize the visitor pass and access case and examine them.”
SUCCESS (Superb Investigation, rolled +2)

Anna takes the visitor pass from the cart handle and lifts the silver access case from beneath it, keeping both clear of the terminal and its active connection.
The pass is genuine but temporary, issued yesterday to a named security contractor. Its barcode matches the credential trail, while the photograph has been deliberately obscured by glare.

Anna
The pass authorized movement through the station, but not access to the casino security account.
Anna opens the case. Inside are a compact laptop, a badge encoder, spare visitor passes, and a printed service map marked with the east passage and shuttle level.
A receipt tucked beneath the encoder records the contractor pass issue, but the signature line is blank. The equipment is ordinary, arranged for quick deployment rather than long-term concealment.

Detective Miller
Tell me what you found. I can preserve the connection, but I need to know whether that case identifies our operator.
The pass identifies the contractor account, and the case contains the tools used to create the duplicate credential. Anna now has both in hand, with the active terminal beside her.
+ New Item Acquired
Visitor pass
+ New Item Acquired
Silver access case
“I trace the contractor through the visitor pass”
SUCCESS (Superb Investigation, rolled +1)
Anna scans the visitor pass barcode with the secured terminal, keeping the active overwrite session isolated. The station registry returns the contractor’s complete issue record.
The pass belongs to Elias Voss, an independent security contractor hired through MetroShield Services. His authorization was issued yesterday at 2:18 p.m. for station systems inspection.

Anna
The pass is genuine, but the inspection authorization is being used as cover.
Anna cross-references Voss’s badge number with the casino credential trail. The same number appears in the duplicate-badge request, entered manually from the casino security office.

Detective Miller
Elias Voss is our operator. The casino logged his visitor pass yesterday, and Grand Central logged this one today.
The registry adds a current contact address and a scheduled maintenance window at Grand Central, ending at 5:00 a.m. Voss is authorized to use the east service network.

Detective Miller
I’m locking his contractor file and sending officers to the listed address. Preserve the case and the terminal. This trail finally has a name attached to it.
Quest Complete
Identify who accessed the service corridor during the camera gap
Attribute Upgrade: Agility Good→Great
“I use the active terminal to recover the footage”
SUCCESS (Fair Advanced Digital Forensics, rolled +0)

Anna connects the secured terminal to the active overwrite session and redirects its cache index into a forensic recovery partition. The progress window fills with fragmented timestamps.
The terminal’s fan surges, and a warning siren sounds through the service bay. Anna keeps the recovery process isolated while the damaged footage reconstructs around the missing minutes.

Anna
The deleted footage is still present in the cache fragments.
At 3:51:42, the recovered video stabilizes. Elias Voss enters the kiosk area carrying the silver case, then uses the public terminal and checks the contractor pass before leaving toward the shuttle passage.
A second recovered angle shows Voss at the maintenance junction, placing the portable terminal on the cart. His face is clear for four seconds before he turns toward the freight lift.

Detective Miller
I have the restored files copied to evidence storage. The siren probably alerted him, but we have his face, route, and timing now.
The recovery completes, but the terminal overheats and shuts down, ruining its local drive. The footage survives on Anna’s secured partition, while the service bay falls abruptly quiet.
Quest Complete
Learn who sent the burner phone messages
Attribute Upgrade: Agility Great→Superb
Quest Complete
Recover the erased surveillance footage
Attribute Upgrade: Agility Superb→Legendary
