Raw audit log ya hospitali ilipatikana kutoka backup ambayo IT administrator Pauline alidhani imefutwa.
Haikuwa backup rasmi.
Database engine iliweka transaction journal kwenye drive nyingine kabla cleanup.
Forensic officer aliweza kurejesha entries za saa chache.
Malik alitazama kupitia screen ya police lab, si laptop yake.
Entry ya dawa ya Jonah ilikuwa na hatua nne:
1. Order shell created under WNALIAKA. 2. Administrative override opened from terminal ADM-04. 3. Clinical time manually entered as 02:13. 4. Record committed at 02:20:43 network time.
“Commit ndiyo wakati system ilihifadhi?”
Ruth akauliza.
“Ndiyo.”
“Na 02:13 ni value mtu aliandika?”
“Ndiyo.”
Terminal ADM-04 ilikuwa kwenye office ya Gichuru.
Access card logs zilionyesha Gichuru alitoka Room 13 2:18 na card yake kuingia administrative block 2:19.
CCTV local time ilikuwa nyuma kwa dakika saba na gap ya maintenance mode.
Kwa network time, angeweza kufika office 2:19 na ku-create record 2:20.
“Dawa ilitolewa lini?”
Ruth akauliza.
Audit log haikujibu.
Iliandika chart, si mkono.
Wanjiku alikuwa cafeteria 2:20.
Brian alikuwa wapi?
Access log ilionyesha card yake Room 13 2:22. Lakini door ilikuwa inaweza kubaki wazi kabla. Faith alimwona karibu mlangoni aliporudi.
Syringe wrapper ilikuwa na fingerprints za Wanjiku na Brian.
Needle cap ilikuwa na DNA isiyotosha kuidentify.
Stock log ilionyesha Wanjiku ali-count box hiyo saa 11:40 p.m. Brian alisaidia.
Kwa hiyo fingerprints hazikuthibitisha nani alidunga.
Medication cabinet ilikuwa na electronic lock.
Log ilionyesha ilifunguliwa 2:15 network time kwa code ya head nurse.
Head nurse hakuwa hospitalini.
Code yake ilitumika kwenye keypad, si card.
“Ni nani alijua?”
Ruth akauliza.
Nurses wengi wa senior, Brian, Gichuru na pharmacy supervisor.
Code ilikuwa imeandikwa kwenye karatasi ndani ya drawer kwa sababu keypad ilikuwa inajifunga mara nyingi.
Wanjiku alihisi uchovu wa mfumo mzima.
Password binafsi.
Code ya pamoja.
Clock mbili.
Camera maintenance mode.
Admin override.
Kila convenience ilitengeneza shimo.
Pauline alikiri Dr. Gichuru alimwomba afungue ADM-04 session mapema jioni kwa “report ya billing”.
Aliondoka bila logout kwa sababu Gichuru alisema atamaliza.
“Kwa hiyo mtu mwingine angeweza kutumia?”
Achieng akauliza.
“Ofisi ilikuwa locked.”
“Nani ana key?”
Gichuru, assistant wake na security master key.
Assistant alikuwa off.
Security key log ilionyesha hakuna checkout, lakini master key ilikuwa inaning’inia ndani ya control room bila seal.
Ruth akasema hawatamfunga Gichuru kwa assumptions.
Alikuwa na opportunity na audit manipulation, lakini physical act bado haijafungwa.
Gichuru kupitia lawyer alikataa interview nyingine mpaka arrest warrant au summons rasmi.
Police walipata summons.
Katika interview, alisema alitumia override kurekebisha record baada death kwa sababu nurse alikuwa ameandika dawa kwenye loose paper ambayo haikupatikana.
“Ni nurse gani?”
Ruth akauliza.
“Huwa sikumbuki kila jina.”
“Kwa nini uliweka 2:13?”
“Niliona kwenye screen.”
“Screen ya saa gani?”
Hakujibu moja kwa moja.
Alisema Wanjiku alimwambia kwa simu kwamba ametoa dawa.
Phone records hazikuonyesha call kati yao.
“Labda ilikuwa hospital extension.”
PBX log haikuonyesha.
Gichuru akasema system ya simu ilikuwa incomplete.
Kila record iliyokataa story yake aliita incomplete.
Ruth akamuuliza kuhusu M-27.
“Ni procurement issue ya kampuni ya Jonah. Sina involvement.”
Signature yake kwenye county technical review ikawekwa mbele.
“Nilitoa opinion kama consultant.”
“Ulipwa?”
“Kawaida.”
Bank records kupitia warrant zilionyesha Kibo Technical Services ililipa consultancy company ya Gichuru baada reviews tatu.
Gichuru akasema ni legal work.
“Medical opinion kupitia kampuni yako ya consultancy?”
Ruth akauliza.
“Ndiyo.”
“Ulitaja conflict kwa county?”
Hakuna form.
Ruth hakumkamata siku hiyo.
Alimwambia passport yake ishikiliwe kwa order ya court na asikaribie witnesses wa hospital.
Gichuru akatoka akiwa na tabasamu.
Media ikasema police hawana evidence ya arrest.
Wanjiku alikasirika.
“Audit log inaonyesha alifalsify record.”
Achieng akasema, “Inaonyesha terminal yake na override. Prosecution bado itathibitisha yeye ndiye alitumia na kwa nini.”
“Tunangoja nini? Video ya mkono wake?”
“Tunajenga case ambayo haitavunjika kwa press conference.”
Usiku, Wanjiku alipokea email kutoka account ya hospitali.
**Confidential data copied by suspended staff has been detected.**
**Return all records within 24 hours or face criminal complaint.**
Attachment ilikuwa list ya files Malik alikuwa ametuma kwa police.
Ni nani hospitalini alijua exact names za files?
Pauline alikuwa ametoa inventory kwa investigators.
Malik hakuwa ame-copy baada suspension.
Lakini hospitali ilikuwa sasa inawageuza whistleblowers kuwa data thieves.
Achieng akajibu rasmi kwamba files ziko kwa police chini ya lawful process.
Kesho, hospital ilitoa report kwa police dhidi ya Malik na Faith.
“Counterattack,” Wanjiku alisema.
Achieng akamrekebisha.
“Ni complaint.
Usiipe label kabla tuone details.”
Wanjiku akamwangalia kwa hasira.
“Unafurahia kunisahihisha?”
“Ndiyo kidogo.”
Walicheka kwa mara ya kwanza siku nyingi.
Kisha Ruth akapiga simu.
Ambulance medic aliyekuwa leave amepatikana.
Alisema Jonah alikuwa na mtu mwingine kwenye gari kabla ambulance kufika.
Mwanaume mwenye jacket ya Kibo Technical Services.
Aliondoka baada kusema yeye ni “family safety officer”.
Medic alimwona akitoa kitu kwenye pocket ya Jonah na kumpigia Gichuru.
“Unaweza kumtambua?”
Ruth akauliza.
“Labda. Niliona uso kwa light ya gari.”
Police wakamwonyesha procedure ya identification ambayo haikumpa suspect mmoja pekee.
Medic akamtambua Peter Mwangi, operations officer wa Kibo.
Peter alikuwa binamu wa Kelvin.
Terminal ya Gichuru ilitengeneza record.
Peter alikuwa kwenye eneo la ajali.
Brian aliingia Room 13 baada Gichuru kutoka.
Ruhusa ya juu ilikuwa wazi.
Mkono wa mwisho bado ulikuwa gizani.
Board ya Mwangaza ilifanya meeting ya dharura baada admin override kujulikana.
Members wawili walitaka Gichuru asimamishwe mara moja.
Chair alisema kufanya hivyo kutaonekana kama admission ya hospitali.
Naserian, kupitia lawyer, aliomba minutes zihifadhiwe. Wanjiku hakuwa shareholder wala employee active, kwa hiyo hakuruhusiwa ndani.
Baadaye whistleblower wa board alitoa minutes kwa regulator, si kwa media.
Gichuru alishiriki meeting kwa video akiwa “sick”. Alisema overrides ni sehemu ya clinical governance na junior staff wamegeuza routine correction kuwa conspiracy.
Director mmoja akauliza kwa nini record iliwekwa nyuma kwa dakika saba.
Gichuru akasema clinical time mara nyingi hutofautiana na entry time.
“Source ya clinical time?”
“Verbal handover.”
Hakuna jina.
Board haikumsuspend.
Ilimpa “voluntary leave” na access ya email ikaendelea.
Usiku huo, attempt ilifanywa kufuta compliance mailbox.
Cloud provider retention ikazuia deletion ya kudumu.
Regulator ilipoona, ikaamuru access yake isimamishwe.
Wanjiku alisikia na kusema, “Board ilitaka kulinda image.”
Achieng akasema, “Na sasa decision yao yenyewe ni evidence ya governance failure, si necessarily murder.”
Ruhusa ya juu haikuwa tu password.
Ilikuwa watu wengi wanaoogopa kumwambia executive: hapana, huwezi kuendelea kuona system ambayo unachunguzwa kwa kuitumia.