The malware activation isn't timed to a calendar date. It's synced to the joint operation's communications protocol. When the exercise goes live and the communication systems reach operational load, the increased traffic triggers the activation sequence. The malware doesn't detonate on a timer. It detonates on usage. The more Tidewater communicates during the exercise, the faster the systems burn, and by the time anyone realizes what's happening, every digital system on base will be dark.
I reach for my phone and call Rivera.
Rivera escalates to Hartwell before I've finished explaining. Within the hour, the SOCOM conference room holds everyone who matters: Hartwell at the head of the table, Rivera beside him, Thatcher and Holden across from each other, and Griff against the wall near the door with his arms crossed and one boot flat against the concrete.
He's positioned himself between me and the exit. I've watched him do it in every room we've shared since the B&B device, placing his body between mine and the nearest door with casual precision that could pass for habit if you didn't know what you were looking at. I know what I'm looking at. I've been studying this man's operational patterns for weeks, and the way he arranges himself around me isn't security protocol. Securityprotocol would put him at a neutral vantage point with sightlines on all entry points. What he does is closer to a gravitational field, his position always calibrated relative to mine, adjusting when I move, resettling when I stop. He does it unconsciously. That's the part that makes it worse.
His eyes find me when I walk in. The look is brief, a full scan compressed into a fraction of a second, and whatever he's cataloging, the assessment is completed before I've taken two steps into the room. I give him nothing, because giving him something in this room in front of these people would mean acknowledging that his opinion of my wellbeing has started mattering more than my own, and that's not a concession I'm handing over in a room full of brass.
I plug my laptop into the room's display and bring up the decrypted traffic analysis.
"The encryption on Garrick's handler communication channel has been broken," I tell the room. "I've decrypted the captured burst transmissions from the relay device, and the content gives us what we didn't have before: a specific activation mechanism and a timeline." I pull up the timeline overlay I built this morning, the one that maps every incident across all three investigations onto a single visual. "This confirms what we briefed last week. The three incidents were sequential phases of a single coordinated campaign. What the decrypted traffic adds is the endgame."
I switch to the new intelligence, and I feel Griff's attention shift behind me. He hasn't moved. His posture hasn't changed. But something in the quality of his stillness has tightened, a shift I've learned to recognize when threat data lands and his brain starts running calculations I can't see.
"The decrypted messages reference the upcoming joint training exercise by its operational designation. The malware activation is synced to the exercise's communication protocol.When the systems reach operational load during the exercise, the increased traffic triggers a cascading activation sequence that will disable radio communications, encrypted data channels, base-wide alert systems, and backup frequencies simultaneously." I look at Hartwell. "Based on the exercise timeline, we have roughly ten days."
Hartwell's jaw tightens. The anger on his face is controlled, compressed, running cold because hot anger makes mistakes. "Who's running this?"
"The handler's communications route through a series of anonymizing relays that strip the origin headers before the messages reach Garrick's endpoint. I can read the content of every message, but the sender's identity is laundered through infrastructure specifically designed to protect it. It's the same compartmentalization doctrine used in covert operations. The field operative never knows who's giving the orders, and the communication architecture enforces that separation." I pull up Garrick's profile. "Garrick is the field operative with both the cyber training and the physical access. His handler is someone with authority and resources sufficient to plan and execute a multi-phase campaign against a joint military installation over an extended period. The operational profile remains consistent with what I briefed Rivera on last week: organized, ideological, and domestic."
Rivera speaks up. "Which aligns with what we got from Rexford. He's been cooperating from prison, and his debrief described the same profile: professional recruitment, military discipline, civilian origin. The network has been targeting Tidewater specifically for months."
"And now we know what they've been building toward," I say. "Every phase was preparation for this. The methodology is portable: compromise the communications, map the responseprotocols, deploy the kill switch. Any joint installation running integrated exercises is vulnerable to the same architecture."
Nobody speaks for a beat. Holden and Thatcher exchange a look that carries something heavier than operational concern, and whatever passes in it, neither of them speaks for a long moment afterward.
Hartwell turns to Rivera. "Where are we on the surveillance?"
"NCIS has the team assembled," Rivera says. "Physical and digital monitoring. Ms. Bradshaw will shadow his network activity while we track his movements on and off base. We're ready to go live today."
"Then make it operational. Now. The ten-day window changes the calculus on patience."
"Run the physical coverage through me before it goes live." Griff's voice cuts from the wall, unhurried, certain, and carrying the authority of a man who doesn't raise his volume because he's never had to. "Garrick built the device in my training cage. He knows that building, knows the rhythms, knows the faces. He'll spot a pattern that doesn't belong before your agents get through their first shift rotation. I'll map the coverage against his known routines and flag anything that puts a familiar face where he'd notice it." He pauses, and the silence feels deliberate. "My shop stays on normal routine. Whoever watches him can't pull from personnel he'd recognize. He sees one face out of place, he burns the whole network and we're chasing ghosts."
"Agreed," Rivera says. "We'll use agents he hasn't been exposed to, and Holland will vet the physical coverage before deployment."
The briefing runs through the rest of the morning, details and assignments and contingencies. I present the technical architecture, answer questions about the malware's activationthreshold, and lay out the monitoring framework I'll build this afternoon to shadow Garrick's digital footprint in real time.
The room thins as assignments pull people away. Holden first, then Thatcher, then Rivera's analysts with their tablets and their case files. Through all of it, Griff stays where he is, and I stay aware of him the way I've been aware of him since the first Tuesday he walked into my comm building and knocked on the doorframe like he was asking permission to enter a space he could have walked into without asking. He didn't ask because he had to. He asked because he chose to, and that single gesture has been dismantling me in increments ever since.
Hartwell dismisses the room and asks me to stay behind with Rivera. By the time I emerge, the corridor is empty except for Griff, who is leaning against the opposite wall in a posture that makes it clear he's been there the entire time.
"You eat today?" he asks.
"I had coffee."
"Coffee's not food, Bradshaw."
"It's a bean. Beans are vegetables. I've had my serving."
"That's the worst nutritional logic I've ever heard, and I've watched Rowe eat gas station sushi."
"Your concern for my diet is noted and filed under 'things I didn't ask for.'"
"Right next to 'things you need anyway.'" He pushes off the wall and falls into step beside me, because Griff Holland doesn't wait for invitations. He occupies space deliberately, completely, and with an ease that suggests he's never questioned his right to be wherever he is. "Comm building or loft?"
"Comm building. I need to set up the monitoring framework for Garrick's digital activity before his handler sends the next burst."
