He told her the aircraft had passed every check on fuel systems, flight controls, engines, and hydraulics without exception. Audrey asked about a load test that had been postponed the previous night. Robert told her the test was unnecessary because the software simulation had already covered the same scenario in full. What he did not tell her was that he had personally canled the test because it risked exposing the replacement control unit installed days earlier. Audrey trusted him.
Robert had been with the company longer than she had, and in the two years since she took over as chief executive, he had never once given her cause to doubt his judgment. He had guided her through supplier disputes, engineering delays, and a near collapse of investor confidence the year before. She had learned to rely on his calm. Before she could ask another question, Robert added one more remark almost offh hand. He mentioned that a minor incident caused by a contract employee earlier that morning had been handled and was nothing worth mentioning to the press.
The remark planted a quiet seed of suspicion in Audrey's mind well before she ever laid eyes on Nathan Mercer. While Audrey reviewed her opening remarks with a communications aid, Nathan remained beneath the aircraft, tracing the length of a signal wire that should never have existed in its current form. Two versions of the same morning were unfolding at once. In one, a chief executive studied reports that had been quietly rewritten to look flawless. In the other, a mechanic in stained coveralls studied hardware that told a very different story.
Nathan pulled back a section of the access panel, and found a serial number stamped on the replacement unit, a designation that belonged exclusively to ground test equipment, never approved for installation on an aircraft carrying passengers. He photographed it without touching anything else, aware that whatever came next would need proof stronger than his own word. Nathan did not rush to conclusions. He photographed the serial number, the manufacturer date, and the certification seal, then pulled a small flashlight from his pocket and examined the edge of the seal itself. The adhesive along one corner was newer than the rest, slightly discolored from heat, as though it had been lifted from a certified unit and pressed onto the replacement part in its place.
He traced the signal wiring further. In the original design, the fuel balance system relied on two independent sensors to confirm whether the aircraft was on the ground or airborne. The computer would only begin shifting fuel toward the rear tank once both sensors agreed the aircraft had reached stable cruising altitude. The unit installed now accepted input from a single sensor routed through a makeshift jumper wire that bypassed the redundancy entirely. He explained it plainly to Austin, keeping the language simple.
If that one sensor sends a false signal once the landing gear retracts, the system will believe the aircraft has reached cruising altitude, it will start pumping fuel from the center tank toward the tail. Austin asked what that would actually do. Once enough weight shifts to the back, the nose lifts on its own. The harder the pilot pushes to bring it down, the more the system thinks it needs to correct in the opposite direction. Eventually, the aircraft loses speed and stalls.
Austin asked why the computer wouldn't simply limit how much fuel it moved. Nathan pointed at the housing because this isn't the unit written for this aircraft. He photographed everything and filed an emergency technical hold through the maintenance system. The system confirmed receipt immediately. A minute later, the status changed from critical to minor vibration non-urgent and Nathan's access credentials were revoked without explanation.