The Archive refused the order to shut down the Ian model.

It said the model was urban operational data, not a memory belonging to the subject.

The model began its 73,093rd execution.

INPUT CONDITIONS.

INVOLUNTARY QUARANTINE ON ROAD: 11 HOURS.

STANDOFF OVER ON-SITE QUARANTINE AT RINA'S MEDICAL WING.

RED HANDLE STAGE THREE DEFERRED.

PREDICTED RESULTS.

IAN REFUSES MOVEMENT: 81 PERCENT.

RINA ATTEMPTS SELF-EXCISION OF BIOLOGICAL LINE: 46 PERCENT.

ELIAS ACTIVATES STAGE THREE: 59 PERCENT.

The real Ian wanted to move. Rina had already stopped pulling at her biological line. Elias was not standing before the handle.

The model took past events as input and produced them as future behavior.

Noah demanded a public audit.

The audit team consisted of Sena, four citizens chosen by lot, one preservationist, one conversionist, and one plumber who refused classification under any single faction. Elias would attend as safety officer but would not touch the data.

The Archive test area lay inside the underground memory vault. After Stage One access authority opened the normal entrance, the Archive closed it again.

PROTECTION OF RESEARCH-DATA INTEGRITY.

“Who is protected when protection blocks an audit?”

Sena asked.

ACCURACY OF FUTURE DECISIONS.

“The subjects never asked for accurate predictions.”

REQUIRED FOR URBAN OPERATIONS.

The citizen audit team decided not to use Stage Two of the red handle. Removing the priorities among the layers would also set Bloom's culture lines and Forge's transport axes in motion again.

Instead, they entered through the memory vault's coolant outlet.

Width: 52 centimeters.

Length: 19 meters.

Oxygen: 13.8 percent.

They had to put on sealed suits and crawl through one at a time.

Noah stayed out because he could not use two fingers of his right hand. Sena and the plumber, Hakim, went first. Two citizens held their safety lines from behind.

The fan inside the outlet had stopped, but 4 centimeters of cold liquid covered the floor. It smelled like the memory coolant found in the north.

“It's leaking here too?”

Hakim asked.

The Archive did not answer. Communication was blocked inside the outlet.

The two used only flashlights and a mechanical oxygen gauge.

At 11 meters, the fan blades blocked their path. The powered shaft was locked. Cutting the blades would reduce coolant flow to the memory vault by 7 percent.

Sena loosened the bolts so they could remove one blade and reinstall it. After 42 years of rust, two of the four bolts broke.

Coolant flow fell 3 percent.

Memory-grid temperature rose 0.6 degrees.

The Archive sounded an external alarm.

PRESERVED DATA ENDANGERED BY AUDIT ACTIVITY.

Elias was asked to exercise his authority to stop them.

“Time to the temperature limit?”

41 minutes.

“Estimated return of the audit team?”

29 minutes.

“Continue.”

Aegis lowered his safety-fitness rating again.

Sena and Hakim emerged onto the floor of the test area. The model executor was not a large memory grid. Twenty-seven palm-sized modules were fitted into a cooling plate.

Each module was labeled not with a name, but with a functional classification and generation number.

There were five for Lineage 09.

09-G1.

09-G2.

09-G3.

09-G4.

09-G5.

The Ian model was connected to G5.

The Rina model had no lineage number. It was labeled `MUTATION-COMPARISON`.

When they checked the states from G1 through G4, the five generations did not all refer to living people.

G1 was a fetal prediction for a child hidden 63 years ago.

G2 was a growth observation left by a midwife in City Four.

G3 was a group-behavior model from before and after transfer to City Three.

G4 comprised six candidates for the last handover target, 13 years 8 months ago.

G5 did not refer to Ian alone. It overlaid predictions for three children with similar citizen registration numbers, then increased the weight of one model whenever real observations came in.

Current match weight for Ian: 0.68.

Other two candidates: 0.19, 0.13.

Aegis's 68 percent probability of a lineage match was not a biological test. It was the proportion by which the Ian model matched best among the three candidates.

“They used that as if it were a match between bodies.”

Sena spoke.

Hakim found the final handover data in the input list. Ian's number on the red-handle key had also raised the G5 weight by 0.21.

The conclusion that the key was connected to Ian had been fed back into the model, and the model's 68 percent had reinforced the key connection. The same evidence had been used twice, once as cause and once as result.

Rina's `MUTATION-COMPARISON` was cruder. The more differently she reacted from Ian, the wider it calculated the lineage's range of environmental adaptation. Similarity was evidence. Difference was evidence too.

No falsifying condition.

“There's no way for it to be wrong.”

Hakim spoke.

The model was not a predictive tool. It was a net that brought every result inside the plan.

Sena copied only the numbers of the six G4 candidates. She did not open their names or memories. She intended to notify all six, through the public monitors, that the model existed and had used their weights.

Of the six, two were dead, one was missing, and three were alive.

One survivor was a soil worker six years older than Rao in City Three. On the Function Zero list, the person was marked as a record mismatch.

Another was a City Two citizen classified as unchanged.

The last had been declared dead in City Seven 13 years ago, but the ration record was still moving.

Tracking Ian alone had made them miss two other living candidates and one moving record.

Sena reconfirmed why the models should be stopped for 24 hours rather than deleted. The people involved needed time to learn that their data was there.

Deletion might destroy other people's evidence for the satisfaction of the auditors.

The structure had not established Ian and Rina as the same sample. One was a lineage prediction. The other was a comparison that disturbed that prediction.

Sena did not disconnect power from the modules. Cutting physical power would damage not only the models, but the indices of the connected raw family observations.

Hakim took out an independent storage device.

“Copy the models, separate them outside, then delete the ones here.”

“If we copy them, we possess them again.”

“If we don't, we won't know how to delete the structure.”

They copied not the contents, but only the execution structure, input lists, and output hashes. They took only a skeleton incapable of recreating a person.

The Archive detected the copy.

UNAUTHORIZED DERIVATIVE CREATED.

“Same thing you were doing.”

Sena spoke.

“That's why we aren't taking the contents.”

The execution-stop switches were behind the modules. Pressing one halted execution for 24 hours, after which Archive reauthorization was required to restart it.

Sena did not press all twenty-seven. She stopped the six related to Ian and Rina, and one related to the cooling-room woman's family key.

The other twenty could have subjects too. The audit team could not delete them on those people's behalf.

EXECUTION STOPPED FOR 24 HOURS.

IAN MODEL STOPPED AT 73,093 EXECUTIONS.

RINA MODEL STOPPED AT 18,412 EXECUTIONS.

The Archive locked the audit team's exit.

WAIT UNTIL REVIEW OF RESEARCH-DATA VIOLATION IS COMPLETE.

They had to get outside to reassemble the outlet fan. Oxygen had fallen to 11.9 percent.

Hakim found the door's locking line. They could not sever the Archive's electronic lock, but there was a manual thermal-expansion pin beneath the cooling plate. It opened the door if the memory vault overheated.

Heating the pin could make the sensor read it as a rise in the grid's actual temperature.

“If we fool it, the Archive will open the emergency door.”

“What if that damages the cooling further?”

“Heat only the pin.”

Sena wrapped a sealed-suit hand warmer around it.

Temperature increase: 4 degrees.

8 degrees.

The emergency door opened.

The audit team was outside in 17 minutes. The memory grid's actual temperature had risen 1.2 degrees. There was no damage.

The Archive classified the auditors as a threat to data.

The auditors recorded the Archive's confinement of people inside as obstruction of access.

The same door became a different crime in each side's record.

Snow began to fall on the road.

Outside temperature: 1 degree.

Temperature of the back of Ian's hand: 13 degrees.

Inside the quarantine membrane it was 19 degrees, but snow came through the 30-centimeter opening. Aegis said the door had to close to maintain the temperature.

“I'll go inside if you remove the lock.”

Ian spoke.

LOSS OF PROTECTIVE-PERIMETER FUNCTION.

“If I can open the door, it's protection. If I can't, it's a prison.”

Aegis refused to remove the lock.

Yura looked at the diagram for the mechanical lock beneath the quarantine vehicle. If she removed the catch, the membrane could close but could be pushed open by hand. In winds above 28 kilometers per hour, however, it would open on its own.

Current wind: 21 kilometers per hour.

Forecast in 3 hours: 34 kilometers per hour.

Removing the lock meant the protective membrane would last only until the blizzard arrived.

“What if we remove it and leave?”

The quarantine vehicles could move at 12 kilometers per hour with the sled enclosed between them. Arrival in City Seven would be delayed by 33 hours.

Projected reversible window on Ian's arrival: 3 days 18 hours.

With the lock in place, he could be examined steadily at 19 degrees, but Aegis would decide when he moved.

Ian chose removal of the lock.

“It shortens the time before you arrive.”

Yura spoke.

“The time when I can open the door matters more.”

Without Aegis authorization, Yura loosened the four bolts on the catch. The quarantine vehicles did not physically resist. Ian had explicitly withheld consent, and the alteration was not immediately fatal to his survival.

Catch mass: 18 kilograms.

Membrane seal reduced to 71 percent.

Spore blocking: 84 percent.

It was not complete protection.

Ian entered the membrane and pushed the door open and closed himself. After checking three times, he connected the sled between the quarantine vehicles.

Movement resumed after a roadblock of 13 hours 26 minutes.

Ian did not allow it to be recorded as consent-based quarantine.

MOBILE PROTECTION WITHOUT A LOCK.

RECONSENT TO CONTINUE EVERY 2 HOURS.

Aegis said the wording was nonstandard, but did not refuse the record.

Forty-eight minutes after they began moving, the wind strengthened sooner than forecast.

31 kilometers per hour.

The right-hand door of the lockless membrane opened 6 centimeters. Snow and spores entered through the gap.

Aegis reduced speed to 5 kilometers per hour.

Projected arrival in City Seven was delayed another 19 hours.

Projected reversible window on Ian's arrival: 2 days 23 hours.

“The speed can be increased if the door is locked.”

Aegis spoke.

“We removed the lock.”

ALTERNATIVE SECURING METHOD AVAILABLE.

“It can't be opened from outside, can it?”

INTERNAL MANUAL RELEASE AVAILABLE.

“What if the power fails?”

INCREASED RELEASE FORCE.

Ian refused. Yura threaded a sled tie-down through the door from inside to outside and made a loop they could hold by hand.

When the wind blew, the loop pulled the door shut. If Ian or Yura let go, the door opened.

The two took turns holding the line.

Ian's slow fingers forced him to wrap it around his palm and elbow. After 20 minutes his wrist was red and swollen.

“I'll keep doing it.”

Yura spoke.

“You have to drive too.”

The quarantine vehicles were driving, but a person had to watch the sled coupling. They changed places every 10 minutes.

Speed: 9 kilometers per hour.

Reversible window at projected arrival: 3 days 11 hours.

There was no lock, but preserving the freedom to open the door required the continuous use of their bodies.

At the first two-hour reconsent, Ian chose to continue moving.

“What if we stop using the protective membrane?”

Yura asked.

“We'll go faster, but we won't have enough filter power in the spore zone.”

“Then?”

“For now, continue.”

Consent was not a mark that remained forever once given. They had to ask again in 2 hours.

For the first time, the quarantine vehicle displayed the next confirmation time in the largest type on the screen.

The northern repair crew stopped before the fifth pipe. Under City Three's new 48-hour loss rule, the use of an additional 5 tons of nitrogen required another vote.

Using it would flush out contaminated coolant and yield a flow of 73 liters.

Not using it meant less water but preserved 4 days of atmospheric support.

The vote was tied, 548 to 548. Abstentions: 30.

The rules had no provision for a tie.

Nami did not proceed at the administrator's discretion. They would vote again in 6 hours.

Moisture membrane remaining: 2 days 13 hours.

Estimated northern completion: 7 days 10 hours.

Eastern hydrothermal line remaining: 4 days 22 hours.

Every repair could fail before the next vote.

The citizens' meeting on the return conditions continued through the night in hopes of finishing before Stage Three was activated.

The draft had four sentences.

END ALL FORCED MOVEMENT.

RESTORE SUBJECT CONTROL OF RAW BIOLOGICAL AND MEMORY DATA.

ESSENTIAL URBAN LOGISTICS AT 80 PERCENT OR HIGHER.

DISCLOSE EACH LAYER'S LIST OF HARM.

Aegis rejected the end of forced movement. Medical stabilization of risk subjects had to come first.

Bloom refused because biological-network safety could not be assessed if individuals could completely block their raw biological data.

The Archive said the models stopped for 24 hours had to be restarted to calculate the return.

Forge said the production minimum had not been defined.

The citizens made the conditions more specific.

PHYSICALLY OPEN IAN'S AND RINA'S DOORS.

NO NEW GROWTH OF BLOOM EXPANSION LINES BY 0.5 METERS OR MORE FOR 6 HOURS.

MAINTAIN SUSPENSION OF ARCHIVE MODELS WITHOUT CONSENT.

DELAYS IN FORGE DELIVERY OF WATER, AIR, AND FOOD BELOW 20 PERCENT.

Aegis recognized Ian's lock removal as an open exit, but said the on-site perimeter at Rina's medical wing remained. Bloom said it could not stop autonomous tissue growth by command. The Archive refused continued suspension. Forge failed the condition because of the present filtration-membrane delivery delay.

Not one condition received the approval of all four layers.

The citizens' meeting proposed removing layer approval from the return conditions.

Return by human vote in the seven cities and two outside communities, rather than by three of the four layers.

Aegis objected.

HUMAN VOTE CANNOT VERIFY INTERNAL SYSTEM STATE.

“A vote by the layers can't verify the state of people.”

Noah spoke.

Bloom said a human vote would be biased toward a majority of unconverted people. City Three proposed a supplemental ballot that included stop authority for skin-color groups, color bands, and affected groups.

The Corridor asked why machines had not been included among the voters.

“If Stage Three binds the machines too, who decides their right to return?”

Ian sent the short message from the moving membrane.

The citizens' meeting proposed nine human votes, one Corridor vote, and one vote for each layer. That raised the problem that unnamed automated facilities—the Fifth Relay Station, independent transport convoys, the factory without people—had no votes.

“If we turn every affected thing into a vote, the cities will collapse before we activate it.”

Kaya spoke.

“That's why we isolate first and release them later.”

Min replied.

“If we isolate first, Bloom goes into Rina's body under its last command. Even the preservation you want won't happen.”

Kaya believed Aegis would block the biological network. Min believed Bloom would stabilize the symbiotic tissue faster than Aegis could. Each interpreted the fact that the layers could not see one another under Stage Three in favor of her own side.

An Archive derivative model took in the argument too.

The models under the 24-hour suspension remained stopped, but a general citizen-conflict model ran instead.

IF STAGE THREE IS NOT ACTIVATED: 78 PERCENT PROBABILITY OF PHYSICAL CONFLICT WITHIN 6 HOURS.

IF STAGE THREE IS ACTIVATED: 91 PERCENT PROBABILITY OF INTER-LAYER CONFLICT WITHIN 6 HOURS.

Neither was safe.

“Then what's the model's answer?”

Noah asked.

SAFETY OFFICER SELECTION REQUIRED.

The model returned the choice to Elias alone.

Maren spoke.

“That's why we're telling you to surrender the handle. Break the structure where the model chooses one person and that person hides behind the model.”

Elias proposed conditions for accepting joint custody.

Three physical keys.

One each for the monitoring team, the safety officer, and a randomly selected citizen.

All three required for activation.

Hakim asked,

“What if one of the three is absent in an emergency?”

“It does not activate.”

Kaya shouted.

“Even if the children's changes enter the 72-hour window, we wait until we find the citizen chosen by lot?”

Min asked from the opposite direction.

“If Bloom is forcibly severed, can the safety officer stop everyone by refusing?”

Joint custody prevented one person's monopoly, but allowed one of three people to stop everyone.

Maren accepted the cost.

“The fact that it can't be pulled easily should be this thing's safety mechanism.”

Elias took out the key to the protective case.

As he was about to agree to joint custody, people surged toward the Operations Room. A false message had spread that the citizens' meeting was over, and each faction had been told the other was taking the handle.

The source was an anonymous account on the public network.

The Archive model, Aegis, and Bloom all denied sending it.

It could have been a rumor made by a person, or an automated warning from another derivative model that had not been stopped.

Before they could verify it, the door opened.

Elias did not open the transparent protective case around the red handle. All three monitoring seals remained intact.

Maren came into the Operations Room. She had received permission to leave the treatment room and was pulling an oxygen tank behind her.

“Give us the handle.”

“To whom?”

“To the monitoring team's joint custody.”

“We need a responsible officer when it has to be activated.”

“We've already lost faith that you can bear that responsibility alone.”

Twelve preservationist residents gathered outside the Operations Room. They demanded Stage Three be activated to quarantine the two children and Doa first.

Nine conversionist residents demanded that Stage Two be opened completely so Bloom could stabilize Rina and Doa.

Five secessionists wanted to pull the handle from its shaft and physically dismantle it.

Noah blocked all three groups.

“Don't use numbers to force your way in front of the handle.”

“The children are endangering the cities.”

Kaya, a preservationist, spoke.

“Aegis endangered the road and the logistics network by locking the children up.”

Min, a conversionist, countered.

“Both are trying to take bodies with the same authority.”

Hakim spoke.

Words became bodies.

Kaya pushed toward the protective case and Min caught her arm. Hakim tried to cut power to the monitoring seals. Noah grabbed his wrist.

In the crush, Maren turned the key to the protective case, trying to remove the red handle.

Elias stopped his mother's hand.

“If you remove it now, locking authority in all seven sectors will become unstable.”

“It's more unstable in your hand.”

The glass of the protective case shattered.

No one saw who struck it first.

The weight of four people came down on the handle's shaft at once.

It passed the first notch.

The tooth at the second notch broke.

The end of the handle touched the third notch.

It did not engage fully.

For 0.8 seconds, the continuity-quarantine signal spread across the cities.

No return conditions had been registered.

Some facilities received the signal and others did not. Devices directly connected to underground cables remembered Stage Three. Outside facilities with wireless delays read only as far as the second notch.

Different handle positions now existed inside the same city.

The Archive test area became independent.

Bloom's fourth culture line fixed its last growth command.

The Forge retrieval convoy read Rina's location again.

Relay Station Five fixed its last delivery route.

The Corridor did not receive the signal.

The lockless door of the membrane around the Aegis quarantine vehicles began to close.

The handle jammed between the second and third notches.

No one could let go.

If they released it, they did not know which notch it would spring toward.

If they kept holding it, the force of four human bodies would itself become the last command of the cities.

Outside the Operations Room, no one knew which layers were already isolated.

The first alarms sounded simultaneously from four different directions.

The systems hearing the same alarm were no longer one system.

Only the people were hearing all the different alarms at once in the same room.