Marcus worked the trace from a PC bang in Sindorim that charged by the hour and didn't ask for ID.
He'd chosen the location for three reasons, all of which he explained to Caden in the clipped, qualifier-heavy shorthand that meant he was operating at full capacity and didn't have time for complete sentences. First: the PC bang's internet traffic routed through a commercial ISP node that aggregated thousands of simultaneous users, which made isolating any individual session computationally expensive. Second: the IG administrative system he needed to query had a public-facing document portal that logged access by IP range, not individual address, and this ISP node fell within the same range as three government office buildings in the Yeongdeungpo district. Third: the coffee was terrible but the owner left you alone.
"Twelve hours in," Marcus said over the encrypted line at 0600 Wednesday morning. "The research pattern is real. Someone inside Epsilon has been accessing IG complaint procedure manuals, whistleblower protection statutes, and internal affairs reporting templates. The access timestamps cluster between 2200 and 0100âoff-duty hours, personal device, not Epsilon's operational network."
"Can you identify the device," Caden said.
"Working on it. The access goes through a VPN, but the VPN provider has a known authentication handshake pattern that narrows the subscriber pool. I need another six hours to cross-reference the subscriber timing with Epsilon personnel schedules." A pause. "Friend, this person is being careful. Not sloppy-carefulâactually careful. Whoever they are, they understand operational security well enough to route through civilian infrastructure and space their queries across multiple sessions."
"Which means they're either genuinely trying to hide from Cho," Caden said. "Or they're smart enough to make it look like they are."
"Allegedly," Marcus said. "Both options remain on the table."
---
Vera found him at the Yeongdeungpo office at 0800, doing what he'd been doing since 0400: reviewing his skill inventory in the notebook with the obsessiveness of a card player counting a short deck.
Four skills. [Skill Theft], which couldn't be lost. [Ground Sense], D-rank, running automatically, good for environmental awareness but useless in a direct fight. [Pain Resistance], C-rank, passive, the kind of utility that kept you standing when you should be on the floor. [Comm Spoof], B-rank, the strongest tool in his collection and functionally deadâJeon Su-ah had the activation signature, and any use near monitored infrastructure would light up like a flare.
Three functional skills against a world that required six.
Vera sat across from him at the folding table Marcus had installed. She looked at the notebook.
"You've been staring at that for hours," she said. Not a question.
"I'm running scenarios."
"You're avoiding the conversation."
He closed the notebook.
She waited. Patient the way someone is who'd been watching younger thieves talk themselves in circles for over a decade.
"The math is bad," he said. "Four skills. One can't be lost. Three in the pool. If I kill someone and take a skill, I gain one and lose one at random from my three. That's a thirty-three percent chance of losing [Pain Resistance], thirty-three percent [Ground Sense], thirty-three percent [Comm Spoof]."
"Comm Spoof is burned."
"Burned isn't gone. Jeon has the signature for major infrastructureâports, transit hubs, government comm systems. But [Comm Spoof] still functions in areas outside her monitoring grid. Local networks, commercial buildings, private security systems." He paused. "It's degraded, not dead. There's a difference."
"There's a difference," Vera agreed. "And you're using that difference as a reason to avoid acquiring a replacement."
"I'm using probability assessment to determine whether the expected value of a kill justifies theâ"
"Stop." She said it quietly. "You sound like a textbook."
He stopped.
She leaned forward. "You avoided kills through most of Arc 1. I called that out. You told me it was operational calculusâthe status quo had acceptable expected value and the risk of gambling wasn't justified."
"It wasn't."
"And the eighth kill," she said.
The room got smaller.
"That's what this is about," she said. "Not the math. The math has always been bad. Four skills, three in the pool, thirty-three percentâyou ran worse odds in the first six months and didn't hesitate." She watched him. "The math hasn't changed. You have."
He said nothing.
"You killed Bae Seong-woo without a decision point," she said. "And now you're afraid that the next kill will be the same. That you'll act before the calculation finishes. That the gamble will happen without your consent."
"That's notâ"
"It is, though." She didn't raise her voice. She got quieter. "Caden. You need a communications skill. [Comm Spoof] is compromised and we're entering a mobile phase where secure communication is the difference between operating and getting caught. You know this. I know you know this because you've been staring at that notebook for four hours running the same numbers."
"The numbers sayâ"
"The numbers say what you want them to say. You're a mathematician. You can make any equation give you the answer you're looking for if you weight the variables right." She paused. "I've watched thieves do this. Sit with a shrinking deck and tell themselves the odds aren't right yet, the timing isn't perfect, the target isn't ideal. They wait and wait and the deck gets shorter and shorter until someone else makes the decision for them."
She stood up.
"You're not there yet," she said. "But you're pointed in that direction. And I've been adjacent to the House long enough to know what happens to thieves who stop playing."
She left the room.
He sat with the notebook and the numbers and the thing she'd said about the eighth kill that he hadn't been able to argue against because she was right.
---
Kane's update arrived at 1030.
*Field intelligence group status: active and expanding scope. Two-person surveillance teams have now checked Na-young's registered office, the Jongno building where her firm operates, and three of Na-young's known professional contacts. The checks are documentedâwarrant-authorized, legitimateâbut the pattern is aggressive for a by-the-book operation.* A pause. *Cho is building the network map faster than I expected. He has Na-young at the center, which is correct, and he's working outward from her professional connections toward personal ones.* Another pause. *He doesn't have the Yeongdeungpo location. He doesn't have Marcus. He doesn't have the relay infrastructure. But his perimeter is closing.*
*How long before he maps to our operational layer,* Caden sent.
*Days, not weeks. Na-young's office is the bridgeâher client communications, her court filings, her correspondence with Sato's office all generate metadata that Cho's team can subpoena through the field intelligence authorization. If he gets a court order for Na-young's telecommunications recordsâ*
*He maps the encrypted channels.*
*He maps the endpoints. Not the contentâthe encryption holds. But he sees who Na-young contacts, when, and how often. From there, it's pattern analysis. Cho is good at pattern analysis.*
He forwarded the update to Na-young.
Her response came in four minutes: *I've been compartmentalizing since Monday. Client communications now route through a secondary firm account that doesn't connect to my personal channels. It buys time. Not much.* A pause. *I've also retained a colleagueâBaek So-yeonâto handle the surface-level court filings going forward. My name stays off the new documents. If Cho's mapping my communications, the trail forks.*
He looked at that.
Na-young, running defensive operations on her own professional infrastructure without being asked. A lawyer who'd been preparing contingencies for a scenario most lawyers would never face.
*Good,* he sent. *Thank you.*
*It's my practice at stake too,* she replied. *Not just yours.*
He sat with the reminder that Na-young's involvement had costs he hadn't fully accounted for. Her career. Her other clients. The professional reputation she'd spent years building, now being layered with operational security measures because Cho's surveillance teams were mapping her life.
---
At 1415 Wednesday afternoon, Kane forwarded a court notification.
*Judge Oh has granted the supplemental examination request. Thursday's session will include expanded scope covering the inquiry's evidence-gathering methodology, the chain of custody for container-sourced documentation, and Shin's knowledge of the protective custody arrangement's operational parameters.*
He read it twice.
*Operational parameters,* he sent to Na-young.
*They want to know who arranged the protective custody, who maintained it, and what security infrastructure was in place,* she said. *This is the scope expansion we anticipated. Shin's answersâeven truthful, carefully bounded answersâwill give Chae's team structural information about the network.*
"How much structural information," he said. He'd switched to voice. The typing felt too slow for this.
"Shin knows the Dobong unit existed. She knows I managed her protective custody. She knows you were involved in the relocation decisions. She knows Vera by first name. She's met Kane by title." Na-young's voice was measured but faster than usual. "Under expanded scope, Chae's team can ask about all of it. I'll challenge every question that targets operational specifics, but the expanded authorization gives them more room to argue relevance."
"What's the worst case."
"Worst case: Shin confirms the existence of a multi-person support network with legal, intelligence, and operational components. Chae's team maps the general structure without getting specific names or locations." She paused. "That's information Cho can use to refine his field intelligence picture. It doesn't give him addresses. But it gives him a framework to match against the metadata he's already collecting."
The picture was getting worse. Every legal mechanism they'd built was also a mechanism that could be turnedâShin's testimony creating intelligence that fed Cho's surveillance that mapped toward their infrastructure.
"Na-young. The scope challenge strategy for tomorrow."
"Aggressive. I'm filing a motion tonight requesting that the expanded scope be limited to the inquiry's documentary evidence chainânot the protective custody arrangement. The argument is that the custody arrangement is a separate legal proceeding managed through different judicial authority, and Chae's defense team has no standing to examine witnesses about parallel proceedings." She paused. "It's a strong argument. But Oh has been ruling in Chae's favor consistently."
"I know."
"I'll also have Baek So-yeon present as co-counsel. If my name is generating surveillance, having a second attorney on record distributes the exposure."
"Do it."
---
Marcus called at 2100 Wednesday.
"Two names," he said.
Caden put him on speaker. Vera came to the doorway.
"The VPN subscriber timing cross-referenced against Epsilon personnel schedules narrows the field to two candidates. Both are mid-levelâoperational officers, not command. Both were assigned to the field component during the Gwangjin extraction attempt. Both have records consistent with the kind of person who documents things." Marcus paused. "First name: Lieutenant Yoon Hye-jin. Seven years in the Hunt, transferred to Epsilon eighteen months ago from an administrative compliance unit. Her background is regulatoryâshe came up through the oversight side, not the operational side."
"A compliance officer embedded in an operational squad," Vera said.
"Exactly. She'd notice procedural irregularities because that's literally what she was trained to notice. And she'd know how to document them because that's what compliance officers do." Another pause. "Second name: Sergeant First Class Park Dae-sung."
Caden went still.
"Park Dae-sung," he said.
"Yes. Twelve years in the Hunt, Epsilon for the last four. Field operations background, senior NCO, described in Kane's personnel notes asâ" Marcus stopped. "You recognize the name."
"Kane mentioned him," Caden said. "Three weeks ago. During the Gimpo situation. Park Dae-sung was the NCO who reported the anomaly in Epsilon's deployment orders that led Kane to discover the off-books extraction authorization."
Vera's arms uncrossed.
"Park reported a procedural irregularity to Kane's back channel," she said. "And now Park is researching IG complaint procedures on his own time."
"That's a pattern," Marcus said.
"That's also a very convenient pattern," Caden said.
The room went quiet.
"If Cho discovered that Park reported the deployment anomaly," Vera said, "and decided to use Park as a honeypot for anyone looking for internal dissentersâ"
"Then the research pattern is real but the dissent isn't," Marcus finished. "Park is doing what Cho told him to do, and anyone who makes contact is walking into a mapped channel."
"Can you determine which scenario is more likely," Caden said.
"Not from the outside," Marcus said. "The research pattern is identical in either caseâgenuine dissent and manufactured dissent look the same from the network layer. The only way to tell the difference is human intelligence. Talking to Park, or talking to someone who knows Park well enough to read his intentions."
Caden looked at Vera.
"Kane," she said.
"Kane knows Park," Caden said. "Kane used Park's report as a basis for his own IG filing. If Park was turned afterwardâif Cho got to him between the Gimpo report and nowâKane might be able to read it."
"Or Kane might be wrong," Vera said. "Kane's judgment on his own people hasn't been tested in this specific way."
"No," Caden said. "It hasn't."
Marcus waited on the line.
Caden thought about the convergence. Thursday's examination in twelve hours. Cho's surveillance perimeter closing. Two names on a list, one of whom had a prior connection to their network through Kane. The Dealer relay still silent, which meant either the House had no opinion or the House had an opinion it wasn't sharing.
"Hold," he said to Marcus. "Don't approach either candidate. Don't contact Kane about Park. Give me until after Thursday's examination."
"That's cutting it close, friend. The research pattern shows the IG complaint procedures have a filing window thatâ"
"After Thursday," Caden said. "If the examination goes badly enough, the calculus on approaching an Epsilon insider changes. If it goes well, we might not need the risk."
Marcus was quiet for a moment.
"Understood," he said. "But Cadenâthe compliance officer, Yoon Hye-jin, is the safer bet on paper. No prior connection to our network, no established channel that could have been compromised. If you're choosing between the twoâ"
"I'm not choosing yet," Caden said. "I'm waiting."
He ended the call.
Vera looked at him from the doorway.
"You're hoping Thursday goes well enough that you don't have to decide," she said.
"I'm gathering information before committing to a bet."
"Same thing," she said. "Dressed up in poker language."
She went back to the other room.
He sat in the dark of the Yeongdeungpo office and thought about two names and a Thursday that was now less than eleven hours away.
