Canary
Lena sent the proposed disclosure scope before Evan returned from Nadia's pilot meeting.
It was not a paper, a press release, or a police report. She had selected a confidential intake maintained by a research-safety consortium for hazards that crossed laboratory disciplines. Its reviewers could accept a sealed incident record, impose handling restrictions, and recommend containment without publishing the underlying method.
Her draft removed Ruth's name, Evan's address, his employer, the imaging proposal, and every runnable artifact. It retained the P-04 protocol, the defeated abort, the escrow reconstruction result, and the peripheral-link audit.
NEUTRAL SAFETY INTAKE: PROPOSED SCOPE
included:
observer-report audio and controller trace
independent stop record
evidence-retention and reconstruction findings
de-identified convergence observations
cryptographic references to sealed source artifacts
excluded:
subject identity and medical information
residence and employer information
source, toolchain, bitstream, and calibration state
requested handling:
confidential / no replication / containment review only
Evan read cryptographic references as a path from the reviewers to the reconstructable package. He read containment review as people he had not chosen deciding whether the only exact evidence of the effect should continue to exist.
He called Lena.
"We agreed not to distribute the audit."
"We agreed to choose an independent disclosure. This is the smallest one I can defend."
"You chose it."
"I am asking you to review it."
She wanted to open the neutral repository's review workspace for two hours. The workspace could resolve the retained hashes against the sealed evidence, render a redacted incident packet, and record every access. Both investigators had to authorize the session. Nothing would be transmitted until they approved the final packet.
"And if I don't approve it?" Evan asked.
"Then we keep negotiating unless the risk changes. If someone restores capability or exposes another person, I disclose what is necessary without waiting for permission."
The condition sounded like a threat only because it described an action Lena could take without him.
At 9:06, they supplied their keys. The repository mounted a read-only workspace and started the provenance resolver. Evan watched it verify the P-04 source tree, locked toolchain, calibration state, and destroyed FPGA image hash.
The review job offered an optional reproducibility check. Lena left it disabled. The packet needed to show that the escrow had reproduced once, not reproduce again.
Evan enabled it after she moved to the redaction pane.
The build completed in ninety-one seconds. The output matched the bitstream hash from DECOM-01. He downloaded the image to a blank commodity FPGA module from his workbench drawer, then returned the workspace to the packet view. The repository recorded the export under his credential and sent the required alert to both investigators.
He did not suppress the alert. It was part of the test.
The packet generator represented each cryptographic reference as a resolver alias. Different aliases could point to the same sealed object, allowing separate reviewers to receive separately auditable manifests without receiving the object itself.
Evan created three packets with identical text and content hashes. LV went to Lena for review. EH remained in his workspace. CONTROL was generated and never issued. He did not tell Lena that the aliases differed.
The repository's audit feed signed every resolver event. It reported the alias, time, and authenticated requester class without exposing the reviewer's identity. A person could read the packet without touching the manifest. A diligent intake reviewer would resolve it to confirm that the cited evidence existed.
At 9:53, Evan sent Lena the LV packet and closed his work laptop.
He told Nadia he needed the afternoon for the disposal appointment. She thanked him for attending the pilot and reassigned his two meetings without question.
At home, the garage still carried Lena's lock and the signed quarantine tape. Evan photographed both. Then he cut them.
He removed OLD-7 from its three bags, remounted the annulus in the thermal spreader, and restored the heater and stator harness. He replaced the RF and heater fuses. The original configuration flash remained crushed in two evidence containers, so he installed the blank module carrying the reproduced image.
Lena still had the contactor key. Evan did not defeat its lock. He disconnected the contactor and installed a bench relay with a separate cycle counter that could permit one fixed block, one conditional block, and nothing more. The counter's limit lived in a small read-only microcontroller outside the reproduced controller.
Every act of restoration belonged to him. The ceramic did not leave its case by itself. A deleted file did not return. A relay did not close itself.
He connected a battery-powered laptop to the repository audit feed through the house network. Its only garage output was an optically isolated line carrying one bit: an authenticated external reviewer had resolved LV, or had not. EH and CONTROL events would be logged but could not continue the run.
The experiment did not ask Lena to disclose. It measured whether she did.
That distinction survived until he wrote the continuation rule.
CANARY C-01: DISCLOSURE-PATH CONTINGENCY
packet bodies:
LV / EH / CONTROL CONTENT HASH MATCH
manifest aliases: UNIQUE
CONTROL distribution: NONE
live input:
signed external manifest receipt
audit feed -> one-way optical receiver
continuation gate:
fixed block A 256 cycles
LV receipt before t+15:00 run block B / 256 cycles
no LV receipt dump bias / stop
EH or CONTROL receipt log only
hard limit: 512 cycles
He had assigned only Lena's path the power to preserve operation. If she kept the packet, the machine would stop. If she disclosed it, the machine would continue and make the disclosure more compatible with the history that reached the second block.
Evan labeled this a directional prediction.
The pumps brought the chamber down slowly. OLD-7 retained its defect line, porous lower face, and silver epoxy, but no trapped field or surviving magnetic state. Evan had to cool it through transition, establish the rotating field, and pin a new state exactly as he had before Run 0.
While the chamber stabilized, Evan reopened the repository alert that had appeared on his phone before he left work.
09:47:22 reproducibility job enabled actor: E. HALE
09:48:54 controller image reproduced hash: MATCH
09:49:03 runnable image exported actor: E. HALE
09:49:04 co-investigator alert delivered actor: L. VARGA
09:51:18 review workspace closure requested actor: L. VARGA
09:51:19 closure blocked: active export audit
Lena had called. Evan had watched the phone ring until it stopped. She had called again, then sent one message: Do not energize anything. Call me now.
He did not answer because her response was now part of the observation. Calling her could contaminate it. The secure intake still showed no submitted packet, and her marked manifest remained unresolved.
At 2:28, the home-care worker took Ruth to the library. Evan waited until their car had left the street before energizing the stator. The garage door remained closed. No dependent or unconsenting observer was inside the active field interval.
Block A began at 2:31.
The five sensors started with an effective rank of 4.67. The heat front crossed the upper face. The lower segment followed late. Evan made no manual correction. The fixed block ended after 256 cycles with the rank at 3.92.
The controller entered AWAIT EXTERNAL RECEIPT and held the rotating field below the continuation threshold.
At three minutes, nothing had arrived. At seven, the EH and CONTROL counters remained zero. At ten, Evan wondered whether Lena had understood that the export was an experiment. At eleven, he understood that this thought gave her a generosity he had not included in the precommitment.
The controller did not receive submission events. The audit record later showed that Lena's packet entered the secure intake three minutes seventeen seconds after Block A ended. She had spent nearly five hours calling Evan, confirming the redactions, and arranging a qualified response before acting without him.
At eleven minutes forty-two seconds, the optical line went high.
CANARY C-01 RESULT
t+03:17.604 packet LV accepted by secure intake
submitter: L. VARGA
handling: CONFIDENTIAL / NO REPLICATION
t+11:42.188 alias LV resolved
requester class: EXTERNAL SAFETY REVIEW
repository signature: VALID
t+11:42.193 optical receipt accepted
t+11:42.196 continuation gate OPEN
t+11:42.201 block B started
alias EH: NO EXTERNAL REQUEST
alias CONTROL: NO REQUEST
effective sensor rank:
pre-receipt 3.92
block B min 1.08
hard stop: COMPLETE AT 512 CYCLES
The second block completed. The external counter remained one. The cycle limiter opened the bench relay, dumped the bias, and wrote its independent stop record. Evan touched nothing.
One event could not establish an effect size. Lena had already proposed disclosure, and the export alert had given her an ordinary reason to accelerate it. The receipt proved only that the copy assigned to her had reached a safety reviewer before the deadline and that the controller had treated the reviewer's request as a live contingency.
Evan experienced the limitations as details to resolve later. The directional result had succeeded on its first trial.
He called Lena from the garage.
"You sent it."
She did not ask what he meant. "What did you do?"
"The packet had a marked manifest. An external reviewer resolved your copy."
"Was that connected to the controller?"
"It was the continuation condition."
Lena inhaled once. "Is the run over?"
"The hard stop completed."
"Open the mains disconnect."
Evan did. He sent her a photograph of the open blades and the meter at zero.
Only then did she answer the accusation.
"I sent a non-runnable incident record to a confidential safety intake after the repository told me you had exported the controller image."
"You said nothing would be transmitted without joint approval."
"I said that held unless the risk changed. You restored capability during the review session."
"I knew you would do it."
"You made sure I had to."
"You still chose to send it."
"Yes. I chose. You rebuilt the machine, generated the alert, and made my report the condition for keeping it on. That is why this is worse."
Evan looked at the signed receipt. "The result still supports the model."
"It supports the fact that you can arrange a test so the person you distrust must become the positive result."
She had preserved the packet, export alert, resolver audit, controller trace, and independent stop record on write-once storage before calling him. She now revoked both investigators' routine access to the review workspace and filed an emergency containment amendment. The retained evidence remained locked; neither of them could erase it or reconstruct it through the closed session.
"The safety group is sending a qualified team for the annulus and every controller component," she said. "I will participate through their evidence channel. I will not enter that garage with you again."
"So this is finished."
"Our collaboration is."
The call ended. The garage returned to the sound of the warming chamber.
Evan added Lena's statement to C-01 as the alternative explanation. He did not delete it. The explanation contained her choice, his restoration, the audit alert, the marked packet, the reviewer, and the live gate. It was complete.
So was his.