Chapter 4
The financial-control report took thirteen months.
Three hundred eighty pages.
Luca hated it.
Good.
It did not call the midnight transfer an embezzlement scheme.
It called it:
An attempted conflicted investment transaction executed outside delegated authority through misuse of emergency treasury controls and incomplete conflict disclosure.
Boring.
Accurate.
Then recommendations.
Every high-value transfer:
transaction-specific authorization;
conflict attestation;
independent execution;
bank callback;
immutable audit trail.
Every emergency override:
defined trigger;
expiry;
second reviewer;
automatic retrospective review.
Every access credential:
role-based;
time-limited where appropriate;
no inheritance through household relationship.
Good.
Then Moretti Holdings audited every privileged credential.
Surprises.
A former CFO still had read-only investment access.
A deceased executive’s assistant profile remained active.
A family member’s driver had building access long after employment ended.
No villain.
Just forgotten permissions.
Removed.
Then Emma became scheduling manager at the hospital.
More authority.
Her first serious mistake came quickly.
She denied a staff member’s time-off request because the schedule was short.
The employee appealed.
Policy required review.
Emma felt defensive.
Then learned the employee had protected medical leave.
She apologized.
Changed schedule.
Good.
Former victim does not become automatically good manager.
Then Luca and Emma continued dating.
Dinner.
Museum.
Walks.
One evening he asked:
“Can I kiss you?”
“No.”
He nodded.
“Okay.”
Three weeks later, she kissed him first outside a bakery.
Good.
No penalty for no.
Then Vanessa requested to send Emma an apology.
Emma said no.
A year later:
yes.
Written only.
Vanessa wrote:
I told myself the money would be safe because the investment was real.
Then:
That made it easier to pretend your refusal, your hunger, and your fear were temporary inconveniences.
There.
Then:
I am sorry.
No request for forgiveness.
Emma did not reply.
Choice.
Then Luca asked:
“Did it help?”
“Some.”
“Do you forgive her?”
“Parts.”
Good.
Then North Bridge.
The investment that Moretti had nearly entered produced a fourteen-percent return over three years.
A board member said:
“See? We should have done it.”
Luca stared.
“No.”
Then:
“A profitable outcome does not retroactively create authority.”
Good.
That line entered training.
Then Martin’s old argument came up.
He had predicted Luca would approve if he saw returns.
The board used the case to teach:
good result does not validate bad process.
Good.
Then Moretti bank redesigned its hardware.
Tokens now display:
transaction amount;
destination;
approver name;
expiry.
No generic black cord.
Emma laughed when she saw a demonstration.
“What?”
Luca asked.
“Nothing.”
Then:
“It looks harder to steal by accident.”
Good.
Then food policy testing.
At a large holiday dinner, staffing shortage hit.
A manager tried to postpone meal breaks.
System required backup plan.
Service slowed for fifteen minutes.
Guests waited.
Nobody died.
Staff ate.
Good.
Then one guest complained.
Luca said:
“You can wait for soup.”
Simple.
Then housing policy testing.
An employee was terminated for theft.
Serious.
Did housing transition still apply?
Yes.
Three days emergency housing while handoff occurred.
Not thirty, because safety concerns and policy had tiers.
Good.
Protection did not erase employer rights.
Then one employee was cleared of misconduct.
Transition extended until new room found.
Nuance.
Then Luca asked Sofia:
“Have we made this too complicated?”
“Some parts.”
Good.
They simplified forms without removing rights.
Controls need usability.
Then Emma visited the mansion once as Luca’s guest.
Basement door closed.
She stopped.
“Want to leave?”
“No.”
Then:
“I want to know it stays closed because I don’t have access.”
Interesting.
She tried her guest badge.
Red light.
DENIED.
She smiled.
Good.
Boundaries can feel safe.
Then Luca did not override it.
Perfect.
The revised access system also required periodic re-certification by managers who did not control the credentials themselves. Ownership of access review moved away from the people benefiting from convenience.
That was the fourth correction.
When the bank tested the new token design, several senior executives failed because they approved the destination without reading beneficial-owner disclosures. The exercise was repeated until people learned to slow down at the right point rather than everywhere.
The mansion’s guest-access system also lost its broad “executive guest” role. Visitors received only the rooms they actually needed. Convenience became a list of permissions instead of a title.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
May you like
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
A later audit showed one denied high-value transfer was legitimate but missing a conflict form. The paperwork was completed and the payment resubmitted. Controls delayed it by twenty minutes, not forever.
