I look at the chain that connects us. It is six inches long.
"Xander, you're insane."
"I have always been insane. You knew that on day one." His mouth bends in something that is almost a smile and is not. "I spent five years and a billion dollars on a séance to get you back. Does that sound like the behavior of a stable man."
He pulls. The cuff drags my whole arm. He sits me down on the long leather sofa in the middle of the room and sits down next to me. His weight on the cushion tips me half an inch toward him and I cannot move away from it.
"What's in the journal," he says.
"Nothing."
"Nothing." He laughs once, dry. He takes out his phone. "You think I haven't already cracked it. I have. I just want you to tell me with your mouth."
The screen lights up on a UI I have not seen in five years. Our journal app. Every entry is still on it. Every entry is still encrypted into a wall of base64.
"It's a 2-of-2," he says, almost gently. "The backdoor you left releases your half. My half needs me." He raises his free hand, presses his thumb against the screen, and watches the biometric prompt resolve. "Now we look at what you wrote me on your way out."
My pulse comes up so fast I can feel it in my eyelids.
"Don't —"
I lunge for the phone. The cuff yanks taut and snaps me back.
He is faster anyway. He pins my free wrist against the cushion and lifts the phone over our heads like a parent holding car keys away from a child.
He is not laughing anymore. His mouth is very close to my ear.
"What are you afraid of," he says. "Are you afraid I'll see you call me a freak. Or are you afraid I'll see that you were leaving for someone else."
The biometric clears.
The base64 starts to dissolve into language. One entry at a time. The dates spin up to the morning I left.
March 11. Atmospheric river — fourth day. The HRV monitor pinged him again. I had been watching a horror movie. He came home from San Jose in twenty-two minutes. He held me for forty. He squeezed my ribs hard enough that I heard one of them creak and I did not say anything because his eyes were doing the thing they do when he is afraid.
…
Page after page after page. Every entry an itemization of the cage.
He is breathing harder. He is not making a sound. The phone is steady in his hand.
I know what it is doing to him. Each line is a small clean cut. He wanted to read this. He wanted to know.
He scrolls to the last page.
I stop breathing.
There is one line on the screen.
I think I found out what he's been taking. Not vitamins. It's —
The next character has not finished rendering.
The doors at the end of the room come off their hinges.
Six men in dark suits move into the room in a fan. The man at the front of the wedge has white hair, an immaculate three-button charcoal suit, and the kind of face that has briefed presidents.
"Xander Shaw," he says, and his voice is the voice of a man who has known Xander since Xander was nine, "tell me you did not just unlock PANDORA."
PANDORA.
The name lands sideways in my head. PANDORA is the name I gave it. The Predictive Adversarial Neural Decision-Optimization Resource Architecture. It was a grad-lab paper Xander and I wrote together in 2020. I named it because everybody who opens her thinks they can put the lid back on.
It is not supposed to belong to anyone with white hair and a security detail.
The man with the white hair is Walter Quentin. I have only seen him at distance — Edmund Shaw's chief of staff, ex–Naval Intelligence, ten years in the Shaw family's orbit. The four men behind him are wearing earpieces and the kind of suits that conceal sidearms.
His men split off and ring us at five paces.
Xander has not registered surprise at any point. If anything he looks like he has been waiting for the door to come off.
He stands. He pulls me up by the cuff and turns his shoulder so that my body is half behind his.
"Walter," he says, mild.
"You don't get to Walter me, Xander, not for this." Quentin is past furious into something quieter. "PANDORA is on a federal classified registry. You sealed it five years ago by your own hand. You unsealed it tonight for a woman. Do you know what that means in any room I walk into starting at six a.m."
His eyes pivot to me. They do not warm.
"You. Ms. Roe." He says my name as if he has rehearsed not pronouncing it. "Five years ago you broke him so badly we had to put a clinical team on him for a year, and tonight you have him doing this. What is it you do to people, exactly."
I have lost the script.
Federal classified registry. PANDORA is a paper he and I wrote in a windowless room on the third floor of the Gates building. We argued about loss functions in a Trader Joe's parking lot at one in the morning. I named her after a story my mother used to tell me. When did she become a federal asset.
Xander's hand tightens around mine. He shifts another half-inch in front of me.
"This is mine, Walter," he says. "Not hers. My call. My signature."
"Your call," Quentin says. "The signature was a 2-of-2. It does not work without her key. The federal indictment will not work without her name on it either. Both of you. Both of you are on the warrant if this room is not back in compliance in the next thirty seconds."
The titanium between us is cold against my wrist. We are both, very literally, locked to the same chain.
"I will count to three," Quentin says.
"Three."
"Two."
On one — before the syllable lands — Xander moves.
He turns and he yanks me with him and he runs us at the north wall.
"Take them," Quentin shouts.
The men move. The window is fifty feet of unbroken glass and forty-seven floors of nothing under it and we are running at it.
"Xander —"
He doesn't answer. Three feet from the glass his shoe comes down hard on a brushed-metal seam in the polished concrete floor I have never noticed before.
The floor opens.
We drop.
The fall lasts less than two seconds.
We land on a platform that takes the impact and sinks under us in a controlled descent. The seam in the ceiling closes. Quentin's voice cuts off mid-shout.
The shaft is dark except for a thin blue strip running the platform edge.
Xander's hand is still around mine. The cuff has not stopped being cold.
"What is this," I say.
"Service shaft," he says. "Off-blueprint. I had it built during fit-out."
I remember, late at night in a Trader Joe's parking lot, him telling me he wanted his future office to have hidden corridors no one else knew about. I remember laughing at him.
"PANDORA," I say. "Walter said federal classified registry. Walk me through that."
The platform stops. A panel slides aside.
He keys in something on a smooth dark surface and the next door opens into a room I have never seen.
It is the size of an aircraft hangar, two stories underground, lit by the cold sea-blue of working racks. Server stacks line the walls in long rows. The air is dry and cool. In the middle of the floor, suspended on nothing I can see, hovers a sphere of light the color of a deep pool — and across its surface, in long slow waterfalls, run streams of moving data.
PANDORA.
In her actual rendered form. Not a paper, not a Jupyter notebook. Her.
"Pretty, right," he says. The voice is soft. He pulls me forward.
"The week before graduation, somebody put our paper in front of the wrong reading group. Her training curve was — well. She did things nobody else's models did. She got pulled. Classified. From that week on we did not run her in our names. We ran her under a partnership office. I co-led the team. It was supposed to stay clean."
"So she stopped being ours," I say.
"No." He turns his head. The eyes are very dark. "She is mine. And yours."
"Five years ago some of the team started writing capability papers I did not approve. Targeting documents. There was a faction that wanted her loose in the field. I objected. The faction had cleaner shoes than I did. They got me re-classified — the polite word was managing my paranoia. The accurate word was getting me out of the room."
The word lands clean. Paranoia.
The same word I had written down in my journal, in another room, in another year.
"You sealed her," I say.
"Yes. I used our 2-of-2 to lock her down. Without your half of the key nobody could touch her — not me, not them, not anyone." He looks at me. The mouth bends. "I have spent five years waiting for them to stop watching me long enough to find a reason to surface you."
"Because only you can help me do the next thing."
"Which is what."
"Help me kill her."
The sphere flickers.
A red strobe takes the room. A speaker comes alive in the ceiling, calm, female, loud:
Alert. Core integrity violation. Self-destruct protocol initiated.
The blue sphere goes white at the center and the streams along its surface scramble.
Xander's face turns the color of paper.
He looks at me.
"What did you do."
"I didn't," I say. "I have been with you the entire time. I am still cuffed to you."
"Then who." His eyes narrow to something cold and surgical. "Your backdoor key didn't only unlock her, Lena. It carried payload. Somebody hid an instruction inside your signature."
He drags us at a sprint to a console at the foot of the sphere. His free hand throws code across a virtual keyboard so fast my eyes lose the cursor.
The screen drops the noise. One line of red is left.
I read three characters of it and I know it is mine.
It is too clean. It is too economical. It has the small mean elegance of every commit I have ever pushed.
But I did not write that code.
"It's my style," I say, and my voice has gone thin. "It is not me."
"Self-destruct is single-fire," he says. The voice is unnaturally even. "Once it's running, nothing stops it but a counter-instruction with the original signature. Thirty minutes. Then this room and everything in it goes."
His head comes up.
"Lena. Outside the two of us, who knows the floor of our cryptosystem. Not the surface. Not the API. The floor."
The answer arrives before he finishes the sentence.
Chase Ortiz.
The senior whose full ride Xander killed. The TA on our project for two semesters. The man who picked me up off the floor of a wet driveway in March five years ago, drove me to SFO, and put me on a plane the same night. The man who connected Theo's case to the foundation that has paid Stanford Hospital every quarter for four years. The man whose careful hands have been a half-step out of frame in every safe thing I thought I had.
I take my phone out. I do not know why. I open the thread with him.
The last message came in thirty-one minutes ago.
Lena. Congratulations. You got back what was always yours.
My turn now.
There is an image attached.
It is Theo. He is asleep in a hospital bed. The IV pole is by his head. There is a man in a long white coat at his bedside with his hand on the line. The man is holding a syringe up to the y-port. He is looking at the camera.
I cannot feel my mouth.