Malik Odhiambo alifika kituo cha polisi na toolbox ndogo.
Inspector Ruth alimwambia aiache reception.
“Ndani kuna screwdriver tu,” alisema.
“Leo kila screwdriver ina story.”
Malik akaitoa na kupewa receipt.
Alivaa shati la check, miwani na uso wa mtu ambaye alikuwa amelala kwa vipande. Clinical engineer hospitalini alikuwa mtu wa kuitwa mashine ikikataa kufanya kazi, halafu kusahaulika ikianza tena.
Ruth akaanza:
“Umesema server za hospital zina time tofauti.”
“Ndiyo.
Lakini lazima tutenganishe systems.”
Akachora kwenye karatasi.
CCTV ya zamani ilikuwa upande wa local server ndani ya hospitali.
Monitors za Room 13 zilipata time kutoka server hiyo baada restart.
Kompyuta za rekodi ya dawa zilitumia application server tofauti, walau baadhi ya terminals zilikuwa na cache ya local time.
Access cards zilikuwa kwenye cloud ya vendor, zikitumia network time.
M-Pesa, simu na ambulance GPS zilitumia network time.
“Kwa nini local server ilionekana nyuma?”
Ruth akauliza.
“Jumapili tulifanya generator test.
Power ilikatika sekunde kadhaa wakati UPS moja ilikuwa na battery mbaya.
Server ilirudi na clock ya BIOS ambayo ilipatikana nyuma.
Vendor contract ya automatic synchronisation iliisha miezi miwili iliyopita.”
“Uli-report?”
“Niliandika maintenance ticket.”
“Ilifungwa?”
Malik akasogeza miwani.
“Ilifungwa na IT administrator bila kazi kufanyika.
Comment: non-critical.”
“Ni nani ali-authorise closure?”
“Account ya IT admin.
Lakini Dr. Gichuru ndiye alikuwa ana-pressure tickets za billing na theatre zipewe priority.”
“Clock ya Room 13?”
“Niliona message ya Faith.
Nilipanga kuangalia shift inayofuata.
Sikufika.”
Sauti yake ilibadilika.
“Mgonjwa amekufa kwa sababu hukufika?”
Ruth akauliza.
“Hapana.
Clock haikuua. ingawa clock mbaya imefanya mtu afiche nini kilitokea.”
Alifungua laptop ya police yenye copy ya logs.
Access card record:
- Wanjiku enters Room 13 — 02:12 network time. - Wanjiku exits — 02:19. - Gichuru enters — 02:16. - Gichuru exits — 02:18. - Brian’s card enters — 02:22. - Faith’s card entries hazikuwa kamili kwa sababu nurses mara nyingi hawakuswipe wakiwa mlango wazi.
“Wanjiku anaingia 2:12, lakini CCTV local inaonyesha 2:05,” Malik alieleza.
“Difference consistent: seven minutes.”
“Medication record?” Ruth akauliza.
“Entry ina 2:13.
Tunahitaji raw database audit, si screen.
Screen inaweza kuonyesha clinical time iliyowekwa manually au cached.”
Hospital ilikuwa imewapa exported PDF pekee.
Malik akasema hiyo haitoshi.
“PDF ni story iliyochaguliwa na application.
Audit log ni history ya nani alibadilisha story.”
Ruth akaomba warrant ya data kupitia prosecutor.
Wakili wa hospitali alipinga kwamba database ina confidential records za wagonjwa wengine.
Court ikaweka scope: Jonah case, user sessions zinazohusiana, system clocks, admin changes na access logs.
Malik alirudi hospitalini akiwa na police forensic IT officer.
Gichuru hakuwapo; alikuwa “sick leave”.
Server room ilionekana chini ya administrative block. Harufu ya vumbi na hewa baridi ilijaa.
IT administrator, Pauline, alisema backup ya audit logs ni siku saba pekee.
“Death ilikuwa siku mbili zilizopita,” officer aliongeza.
“hata hivyo automatic cleanup imefanyika.”
Malik akasimama.
“Retention policy ilipatikana siku tisini.”
Pauline akasema storage ilikuwa full.
“Change ticket?”
Hakuna.
Forensic officer akapiga image ya drives kabla kuendelea.
Katika active logs, entry ya dawa ilionekana na user **WNALIAKA**, lakini field nyingine ilionyesha **ADMIN_OVERRIDE**.
Terminal ID: **ADM-04**.
Location katika asset register: ofisi ya COO.
Dr. Gichuru.
Pauline alitamka admin override hutumika emergency ikiwa daktari hawezi kufungua account.
“Kwa nini override itumie username ya Wanjiku?”
“System ina-copy ordering clinician.”
“Nani aliweka ordering clinician?”
Hakujua.
Audit fragment ilionyesha record iliundwa 02:20 network time, walau clinical administration time ikawekwa manually 02:13.
Saa 2:20, Wanjiku alikuwa akinunua maji.
Mtu katika ofisi ya Gichuru alikuwa ameunda record ya nyuma.
“Je, Gichuru alikuwa ofisini?” Ruth akauliza.
CCTV ya administrative corridor ilikuwa na gap ya dakika kumi na moja.
System ilisema camera ilipoteza network.
Malik akakagua switch log.
Camera haikupoteza network.
Feed iliwekwa **maintenance mode** kwa account ya security supervisor.
Supervisor alijibu Gichuru alimwambia camera inamulika vibaya na a-restart.
“Kwa simu?”
“Ndiyo.”
Phone records zingeombwa.
Malik aliporudi nyumbani jioni, alipata barua pepe ya suspension.
Sababu: unauthorised disclosure of system architecture.
Alimtumia Achieng kupitia njia rasmi.
Wanjiku alimwona kesho yake kwenye office ya lawyer.
“Pole,” alisema.
Malik akaketi.
“Nilifunga ticket ya clock kichwani.
Sikufunga upande wa system.”
“Hukufunga wewe.”
“Niliona message ya Faith na nikasema baadaye.”
Wanjiku alijua hilo neno.
Baadaye.
Mama yake alikufa katika hospitali ambayo watu wengi waliona pressure ya oksijeni ikishuka na wakaandika baada.
“Hatutaweza kurudi nyuma kwa kila warning,” aliahidi.
“Lakini tunaweza kuacha kujifanya warning ndogo haina owner.”
Malik akatoa flash drive.
“Sijachukua data ya wagonjwa.
Hii ni copy ya maintenance tickets nilizokuwa natumiwa kwa email yangu ya kazi, pamoja na certificate ya generator test.”
“Uli-download baada suspension?”
“Hapana.
Email client yangu ilipatikana offline copy kabla.”
Achieng akasema asiifungue mpaka police ipokee na chain iandikwe.
Malik akakubali.
Kwenye certificate ya generator test, company iliyosaini ilikuwa **Kibo Technical Services**.
Director mmoja: Kelvin Kibet.
Ndugu ya Naserian.
Mtoto wa Jonah.
Wanjiku akatazama jina.
Saa haikudanganya yenyewe.
Mtu aliiacha nyuma, akafunga ticket, akatumia gap, kisha akaandika muda mwingine katika record.
Dakika saba sasa zilikuwa na mlango, terminal na account ya juu.
Malik na forensic officer walifanya test ya controlled timeline baada images za original system kuchukuliwa.
Waliweka simu inayotumia network time mbele ya camera ya CCTV.
Kwenye video, simu ilionyesha 11:07 wakati timestamp ya camera ilisema 11:00.
Wakafanya test mara tatu upande wa cameras tofauti.
Difference ilionekana ileile.
Kisha wakaangalia monitor ya Room 13.
Ilikuwa nyuma kwa dakika sita na sekunde hamsini na nane.
Wall clock ilipatikana nyuma kwa dakika saba na sekunde kumi na moja.
“Kwa nini si exact?” lawyer wa hospital akauliza.
“Devices haziku-reset sekunde ileile,” Malik alisema.
“Error range iko hapa.”
Report ikaweka margin, si nambari ya uchawi.
Forensic officer pia aligundua local server haikupokea external time-sync requests tangu vendor certificate i-expire.
Alerts zilitumwa kwa IT mailbox mara kumi na nne.
Mailbox hiyo ili-forward alerts kwa folder iliyokuwa haifuatiliwi.
Gichuru hakutengeneza certificate expiry.
ingawa alijua ticket iko deferred na alitumia mazingira hayo.
Hilo lilikuwa tofauti muhimu kwa case: negligence ilitengeneza shimo; plan ilichagua kulipitia.
Malik alipoandika report, alijumuisha ticket yake ambayo hakufuatilia.
Lawyer wake inaweza kumfanya aonekane careless.
“Nilikuwa careless,” alishikilia.
“Nisipoandika, defence itaiona na kusema nimeficha.”
Wanjiku aliona accountability ambayo hakuhitaji mtu ajifanye perfect.
Saa ilikuwa imesema uongo kwa sababu watu wengi waliiacha.
Crime ilionekana mtu kuijua na kuifanya alibi.