Sarah did not touch the pending change.

She turned the tablet so command could see it.

Colonel Hayes read the screen twice.

“Which aircraft?”

Sarah pointed through the hangar opening.

“Aircraft Two.”

Major Reed stepped forward.

“That could be an automated update.”

Sarah looked at him.

“Crew replacements aren’t automated.”

Reed’s expression hardened.

Colonel Hayes raised a hand.

“Nobody touches that tablet.”

The hangar went quiet.

A minute earlier, Reed had shoved Sarah backward into the equipment rack while accusing her of changing the flight roster after lockout.

Now the roster history showed the completed change had originated from his own staff terminal.

And a second alteration was still waiting to be committed.

Hayes looked toward the operations desk.

“Freeze both rosters.”

The duty captain moved immediately.

“No edits. No approvals. No printing. Preserve the current state.”

Reed protested.

“Sir, we have aircraft launching this morning.”

“Not with disputed crews.”

“These are readiness flights.”

“Then they’ll wait.”

Sarah bent to pick up the clipboard that had fallen during the confrontation.

Hayes stopped her.

“Leave it.”

She straightened.

The printed roster was now evidence of something simple but important.

It did not match the current tablet.

The paper had been printed after Sarah locked the roster the previous evening.

Yet one crew member’s name was different.

Sarah had been blamed for that difference.

The system history pointed somewhere else.

Hayes turned toward Reed.

“You said Major—”

“Lieutenant,” Sarah corrected.

Hayes nodded.

“You said Lieutenant Blake changed the roster.”

“She was responsible for it.”

“That wasn’t my question.”

Reed folded his arms.

“She had access.”

“So did you.”

“My staff terminal had access.”

Hayes looked at the tablet again.

“And you say someone used your login.”

“That’s possible.”

“Then we’ll determine who.”

Sarah felt the pain in her shoulder where she had struck the rack.

Hayes noticed her rubbing it.

“Medical.”

“Sir, I want to stay.”

“You’ll come back.”

“I’m fine.”

“You were thrown into an equipment rack.”

Sarah glanced at Reed.

Reed said nothing.

Hayes’s voice remained level.

“Get checked.”

Sarah left.

By the time she returned, the hangar had become an evidence-preservation exercise.

The roster system was locked.

The pending change remained untouched.

The printed clipboard had been photographed.

Access logs were being copied.

The staff terminal Reed used had been disconnected from the network without being shut down.

The physical confrontation was documented separately.

Two maintainers had seen Reed grab Sarah and shove her.

Medical personnel documented bruising across her shoulder and upper arm.

That conduct would not be treated as proof that Reed altered the roster.

And the roster discrepancy would not be used to exaggerate what happened physically.

Hayes wanted both questions answered independently.

Sarah appreciated that.

She wanted facts.

The first fact came from the lockout record.

At 21:00 the previous evening, Sarah finalized the flight roster.

Aircraft One:

Captain Lewis, pilot.

Lieutenant Moreno, copilot.

Sergeant Fields, crew chief.

Aircraft Two:

Captain Warren, pilot.

Lieutenant Ellis, copilot.

Sergeant Cole, crew chief.

Sarah digitally signed the roster.

The system locked it at 21:02.

Any later change required an authorized override and generated an audit entry.

At 22:17, someone opened Aircraft One’s roster from Reed’s staff terminal.

At 22:19, Lieutenant Moreno’s name was removed.

Lieutenant Parker replaced him.

At 22:21, the revised roster was saved.

At 22:24, a new copy was printed.

That was the clipboard that hit the floor.

Sarah’s account had been accurate.

She had not changed the roster after lockout.

But Reed’s explanation remained possible.

Someone else could have used his terminal.

Hayes refused to jump from terminal location to personal responsibility.

“Who had access to that office?”

The operations officer pulled the entry logs.

Reed entered at 21:51.

Captain Nolan, his assistant operations officer, entered at 22:04.

A staff sergeant entered at 22:31.

No one else badged into the office until morning.

That narrowed the possibilities.

It did not settle them.

Then investigators examined the pending change for Aircraft Two.

The system had created it at 22:26.

Lieutenant Ellis was marked for removal.

A replacement had already been selected.

Lieutenant Parker.

Sarah stared at the screen.

“The same officer?”

Hayes nodded.

That made no operational sense.

Parker could not serve as copilot on two aircraft scheduled to fly at nearly the same time.

The pending change therefore was not a normal finalized crew assignment.

Someone had begun editing Aircraft Two and stopped before completing the process.

The audit history showed the source.

Reed’s staff terminal again.

But this time there was more.

The system recorded the user account that initiated the pending change.

CAPT NOLAN.

Reed looked toward Hayes.

“There. I told you someone else used the terminal.”

Sarah said nothing.

Hayes did not react.

He simply ordered Captain Nolan brought in.

Nolan arrived twenty minutes later.

He saw Reed.

Then Sarah.

Then the frozen tablet.

His expression changed.

Hayes noticed.

“Captain, did you access the crew roster last night?”

“Yes, sir.”

“After lockout?”

Nolan hesitated.

“Yes.”

“Why?”

Nolan looked at Reed.

Hayes followed his eyes.

“Don’t look at him. Answer me.”

Nolan took a breath.

“Major Reed told me there were crew adjustments.”

Reed immediately interrupted.

“I told you to review availability.”

Nolan turned toward him.

“You told me to replace Moreno.”

Reed’s jaw tightened.

Hayes stepped between them verbally before the exchange could escalate.

“One at a time.”

He looked at Nolan.

“Start from the beginning.”

Nolan explained.

Shortly after 22:00, Reed told him Lieutenant Moreno should not fly Aircraft One.

“Why?” Hayes asked.

“Major Reed said Moreno had become unreliable.”

“Operationally?”

“He said Moreno had challenged too many scheduling decisions.”

Sarah looked up.

That was not a flight qualification issue.

Hayes asked:

“Was Moreno medically restricted?”

“No, sir.”

“Training deficient?”

“No.”

“Rest requirement?”

“No.”

“Aircraft qualification?”

“Current.”

“Then what justified removing him?”

Nolan had no good answer.

“Major Reed said it was a command decision.”

Reed shook his head.

“I never used those words.”

Nolan looked at him.

“You told me, ‘Take Moreno off One and put Parker in.’”

Reed said nothing.

Hayes asked Nolan:

“Why did you use your account?”

“Because I made the change.”

“Why from Major Reed’s terminal?”

“We were in his office.”

“Was he present?”

“Yes, sir.”

That changed the meaning of the first audit entry.

The completed change originated from Reed’s terminal, but Nolan had executed it.

Sarah had not.

Reed had apparently directed it.

But Hayes still wanted corroboration.

“Why was Lieutenant Blake’s name associated with the revised printout?”

Nolan looked confused.

“It wasn’t supposed to be.”

Sarah handed Hayes the clipboard without disturbing its protective sleeve.

At the bottom of the printed page was the line:

Roster Officer: LT SARAH BLAKE.

Nolan stared at it.

“The template keeps the original roster officer.”

Sarah understood immediately.

The system did not automatically change the roster owner when an authorized override occurred.

That meant her name remained even though someone else altered the contents.

Reed had used that fact in the morning to accuse her.

But had he known the system worked that way?

That question mattered.

The investigators pulled messages from the operations section.

At 21:46, Reed sent Nolan:

Need one change before morning.

Nolan:

Roster locks at 2100.

Reed:

Override it.

Nolan:

Blake will see the history.

Reed:

We’ll handle it.

At 22:02, another message:

Reed:

Use my terminal.

Nolan:

Moreno to Parker?

Reed:

Yes.

That established the first change.

Nolan had executed it.

Reed had directed it.

Then came the second roster.

At 22:25, Reed messaged:

Check Ellis on Two.

Nolan:

Replace him too?

Reed:

Queue Parker for now. I’ll decide before launch.

Nolan:

Parker can’t be on both.

Reed:

I know.

That explained the pending entry.

Nolan had begun the second change under Reed’s instruction but had not finalized it.

He selected Parker as a temporary placeholder while Reed decided what to do.

It was improper.

It was also unfinished.

The tablet had captured it before anyone could clean up the inconsistency.

Sarah read the messages.

Then she looked at Nolan.

“Why Moreno?”

Nolan did not answer immediately.

Hayes asked the same question.

Nolan finally said:

“He’d complained about the schedule.”

“What complaint?”

“Crew-rest assignments.”

That was familiar.

Three days earlier, Moreno had raised concerns that several pilots were being shifted between readiness flights with little margin above required rest periods.

He had not refused duty.

He had not been insubordinate.

He had asked that the schedule be reviewed.

Sarah had supported him.

That explained why Reed was angry with Moreno.

It did not yet explain Ellis.

Hayes asked:

“What did Ellis do?”

Nolan looked uncomfortable.

“He agreed with Moreno.”

Sarah frowned.

“About crew rest?”

“Yes.”

Now a possible pattern emerged.

Two officers had challenged scheduling decisions.

Both appeared on rosters Reed wanted changed after lockout.

But Hayes refused to call it retaliation without more evidence.

“Were there legitimate reasons to replace either officer?”

The flight operations review began.

Moreno’s qualifications were current.

His medical status was clear.

His crew rest was sufficient for the scheduled mission.

No training conflict existed.

Ellis was also fully qualified and available.

There was no aircraft-specific restriction preventing either officer from flying.

Parker was qualified too.

But that did not explain why he needed to replace them.

Then investigators found the morning briefing sheet Reed had prepared for command.

It listed Aircraft One as:

Parker — copilot.

Aircraft Two:

TBD — copilot.

That document had been created at 22:34.

Eight minutes after the pending second change.

Reed clearly expected Moreno to remain off Aircraft One.

He also expected Ellis might be removed from Aircraft Two.

Hayes confronted him.

“Why?”

Reed answered:

“I was balancing crews.”

“Based on what?”

“Experience.”

Hayes pulled qualification summaries.

Moreno had more hours than Parker.

Ellis had nearly the same.

“Try again.”

Reed’s face hardened.

“They were becoming disruptive.”

There it was.

Not a flight-safety reason.

Not a qualification reason.

A management reason.

Hayes asked:

“Disruptive how?”

“They challenged decisions in front of junior personnel.”

Sarah spoke.

“They asked about crew-rest margins.”

Reed looked at her.

“You don’t know every conversation.”

“No. I know the one I was in.”

Hayes turned to Sarah.

“Describe it.”

She did.

Moreno had pointed out that the next week’s schedule repeatedly moved crews between late-night maintenance checks and early readiness flights.

Sarah reviewed the schedule and agreed the margins were unnecessarily tight.

Ellis supported Moreno’s concern.

Reed ended the discussion by saying he would review it.

Apparently he had.

But instead of changing the schedule, he began changing the crews.

Still, Hayes wanted the scope established.

Investigators reviewed the previous month of rosters.

They found no evidence of a long-running secret replacement scheme.

There were dozens of normal changes.

Illness.

Training conflicts.

Maintenance shifts.

Weather.

Qualification requirements.

Most were properly documented.

Only the two changes from that night lacked normal justification.

One completed.

One pending.

That mattered.

The case did not need to become larger than the evidence.

Reed had not secretly manipulated every flight roster.

The documented issue involved two officers who had recently challenged his scheduling decisions.

The first was removed.

The second was about to be.

Sarah became involved because she owned the locked roster.

When she discovered the mismatch in the morning, Reed blamed her for making the change.

Then, during the confrontation, he shoved her into the equipment rack.

That physical act remained separate from the roster manipulation.

Witnesses gave consistent accounts.

Sarah’s medical record documented the injury.

Reed claimed he had been trying to move her away from the equipment.

The witnesses did not support that explanation.

Nolan faced his own questions.

Hayes called him back.

“You knew the roster was locked.”

“Yes, sir.”

“You knew Lieutenant Blake had not approved the changes.”

“Yes.”

“You knew Moreno had no qualification issue.”

“Yes.”

“You knew Parker couldn’t fly both aircraft.”

“Yes.”

“Then why start the second change?”

Nolan looked down.

“Major Reed told me to.”

Hayes did not raise his voice.

“That explains who gave the instruction. It doesn’t explain your decision to follow it.”

Nolan nodded.

“No, sir.”

His responsibility was narrower than Reed’s.

He had not chosen Moreno or Ellis as targets.

The messages showed Reed did.

But Nolan had used his own credentials to execute one improper override and begin another.

He could not transfer that choice back to Reed entirely.

The final reconstruction was straightforward.

Sarah locked an accurate flight roster at 21:02.

Reed later decided to remove Moreno.

He instructed Nolan to override the roster from Reed’s staff terminal.

Nolan replaced Moreno with Parker.

The revised printout retained Sarah’s name because she remained the original roster officer.

Reed then instructed Nolan to begin a second change involving Ellis.

Nolan queued Parker as a placeholder despite knowing Parker could not crew both aircraft.

The second change remained pending overnight.

In the morning, when Sarah discovered the mismatch, Reed accused her of changing her own locked roster.

The audit trail contradicted him.

The pending second change exposed the broader intent before it could be completed.

Hayes restored the original crews.

But he did not simply order the aircraft into the air.

He required a fresh operational review first.

Moreno and Ellis were confirmed qualified, rested, and available.

Only then were they returned to the schedule.

The flights departed later that morning.

Parker flew a different assignment.

No one treated him as part of the misconduct.

He had not requested the substitutions.

He had not known his name was being used.

That distinction mattered too.

The command changed the roster system after the investigation.

Post-lockout changes required a reason code.

The officer initiating the override had to authenticate independently.

The original roster officer’s name remained visible, but every later change displayed the name of the person making it.

Pending changes became visible to the duty officer immediately instead of waiting for final submission.

And no staff terminal could be used as an informal shared workstation for roster overrides.

Nolan later admitted something to Sarah.

They were standing outside operations after a routine briefing.

“I thought I was making a scheduling change.”

Sarah looked at him.

“You were.”

He frowned.

“That isn’t what I meant.”

“I know.”

He leaned against the wall.

“I didn’t think about why he wanted it.”

“That was the problem.”

Nolan nodded.

“I should have.”

Sarah did not reassure him.

He did not need reassurance.

He needed to understand the difference between administrative authority and operational justification.

Several months later, Sarah prepared another flight roster.

Aircraft One.

Aircraft Two.

Aircraft Three.

She checked qualifications.

Rest periods.

Maintenance requirements.

Training needs.

Then she locked it.

21:00.

The confirmation appeared:

ROSTER LOCKED.

Below it was a new line.

POST-LOCKOUT CHANGES REQUIRE IDENTIFIED USER, JUSTIFICATION, AND APPROVAL.

Sarah smiled slightly.

A young lieutenant standing beside her noticed.

“Something funny?”

“No.”

She handed him the tablet.

“Check my work.”

He did.

Every name matched.

The following morning, one pilot reported sick.

A legitimate change was necessary.

The duty officer opened the roster.

Selected the aircraft.

Removed the unavailable pilot.

Entered the reason.

Added the replacement.

Authenticated the change.

Sarah received an automatic notification.

She reviewed it.

Everything made sense.

No confrontation.

No mystery.

No accusation.

Just a documented change for a documented reason.

Later that afternoon, Sarah walked through the hangar.

She passed the equipment rack where Reed had shoved her.

The rack still held helmets, survival gear, and flight equipment.

Nothing about it looked important.

That suited her.

The important part had never been the rack.

It had been the attempt to make her responsible for a change she did not make.

Reed had relied on one convenient fact.

Sarah’s name remained on the printed roster.

He treated that as proof.

The digital history showed something different.

His terminal.

Nolan’s credentials.

His instructions.

One completed replacement.

One unfinished replacement.

The pending entry had been the detail nobody expected.

It showed the first change was not an isolated correction made for an urgent operational reason.

Someone was already working on another officer.

And once command followed that trail, the question stopped being whether Sarah had changed her own roster.

The real question became why two qualified officers who challenged the same scheduling decision were being removed after lockout.

This time, every answer carried the name of the person who actually made the change.