A soft ping from the rack announced another alert. Maren rotated to face the wall of monitors. The map showed a cluster of nodes blinking like a constellation—each a municipal sensor, a traffic controller, a hospital triage tablet. Someone, somewhere, had flipped a remote kill. The pattern didn’t fit a random failure; it read like intent.

“We’re on deadline,” Jace said. “The city admin already pinged maintenance. They’ll pull the plug if we don’t have a clean roll-in in thirty.”

Outside, thunder scrolled like white noise. Maren took a breath and spun the plan out loud, because plans were anchoring spells when the world threatened to tilt. “We can’t break the policy—too visible. But we can provide a legitimate-looking chain that satisfies the controller and carries our agent inside. We forge a delegation token tied to a verified admin identity in the system. It’ll look like a sanctioned patch.”

“Status?” Jace’s voice was low, clipped; he crouched beside her, rain pooling on the shoulders of his jacket. He held a battered data slate with one battered corner missing—its casing peppered with stickers from hacktivist meetups and obsolete startups. The sticker that mattered, though, was a small white rectangle near the top: LUMINAL, phosphorescent and proud.

The log threw back an error: AUTH_REVOKE_0x53. Not a missing certificate—not exactly. Someone had layered an external policy controller onto the system: an inert mid-layer designed to stop exactly what Luminal did. Jace frowned. “That’s not civic software. That’s corporate orchestration. Heavily obfuscated.”

Jace set the slate down and rubbed his temples. “Which means?”

Jace’s eyebrows went up. “Forgery is illegal theater. If we get it wrong, the city kicks us out, and the contractor blacklists the devices. We’re done.”

“Who?” Maren whispered, more to the monitor than to him.