At noon, Grace Muthoni entered the Airport Duty Operations Room and placed her phone on the table.
“Everybody put your clock here,” she said. “We begin with what a source can prove, not with accusations.”
Juma liked the sentence because it was almost exactly the rule he had been building since Gate B12.
Ruth Kendi brought the gate scanner report. Inspector Wanjala had the security incident references. David from baggage carried the movement log. Esther Wambui represented the airline. Naima kept the original video on her own phone.
Grace wrote three times on the whiteboard: `11:28 / 11:31 / 11:34`.
Ruth said the G-17 scanner event appeared in the gate system at 11:28. Juma’s Beatrice printout showed `EM-04 mapped G-17 11:28`.
Wanjala placed his security request on the table. “Hold request for two people: 11:31.”
With her own consent, Naima played the relevant section of her original video. The ribbon incident occurred around 11:34.
“The mapping event is not necessarily the denial event,” Esther said. “It could be a preparatory code.”
Juma nodded. “Agreed. Don’t call it denial until the scanner record shows denial.”
Ruth produced Juma’s and Halima’s scanner times. G-17 was active before the official security escalation.
Grace drew a line underneath the three times. “Three minutes is not proof of motive. It is an order of events.”
David added the 09:17 baggage event from that morning: EM-04 group reprotection. Esther asked whether the movement was a manual action or an automated batch triggered by the credential.
“The initiator extract must be preserved,” David said. “The movement side carries the credential, but we need the rule and initiator history.”
Naima started to say that Mrema had sent her bag after Juma rejected the settlement. Grace stopped her respectfully.
“We preserve the timing. Retaliation is a separate conclusion.”
Naima swallowed her anger and nodded.
Juma then placed his addressed settlement draft on the table. The group-membership clause was tied to compensation. Esther did not deny the document; she had issued it.
“The wording is standard closure language,” she said.
“Noted,” Grace replied. “It is also evidence of how the records remained linked.”
They had thirty minutes before shift change. Grace refused to let the meeting become a series of speeches. Every item received an owner and a limitation: gate record—Ruth; security—Wanjala; Juma’s booking history—Juma; video—Naima; baggage—David; settlement—Esther.
Juma asked the room not to say “all twenty-one were innocent.”
“We do not know every person’s individual conduct. We know the group action linked the records.”
“And I have my warning issue,” Naima said.
“Exactly,” Wanjala replied.
Grace opened an operational-review case and issued a preservation order covering group-mapping history, station credential events, the reissue-queue relationship and baggage reprotection. She did not give raw employee or passenger data to Juma. She ordered the airline to preserve it for authority review.
Esther said the airline would cooperate but objected to the phrase “collective penalty” before review was complete.
Grace changed the wording to `collective operational hold alleged; individual adjudication requested`.
Juma accepted it because the phrase did not outrun the evidence.
The eleven crucial minutes now sat on the whiteboard: the first mapped event, the official security request three minutes later, and the ribbon incident after that. The simple story that “the disturbance caused the group hold” could no longer stand without explanation.
Ruth had been quiet for almost the entire meeting. When Grace capped the marker, Ruth raised her hand.
“Can I speak privately?”
“Do you want a union observer?” Grace asked.
“Yes.”
Juma stood to leave. Ruth looked first at him and then at Grace.
Before they broke, Grace added a rule: every evidence item had to carry both its source and its limitation. Wanjala’s letter established Juma’s security status, not the status of all twenty-one. Naima’s video established sequence inside its frame, not what happened outside the camera. Juma’s booking history established an EM-04 action on his booking, not automatically on every record. The baggage log established a group-reprotection rerun on Naima’s tag.
The reconstruction became less dramatic and more defensible.
Esther objected to the phrase `before security incident` because two people had already attracted attention before the formal request. Grace changed the board to `before official security hold request`. Juma agreed. Naima muttered that this was lawyer language. Wanjala told her timestamps had to say what records could prove, not what anger wanted them to say.
When the clocks were compared, they confirmed that Naima’s smartphone and the gate report both used the same local time zone. David’s server timestamp had been rendered into local time on the printout. Grace wrote a conversion note so the three-minute difference could not later turn into a time-zone dispute.
Juma offered the redacted KT-21 matrix, but Grace refused to treat it as proof of all twenty-one bookings. She used it only to show that multiple booking channels shared a reissue descriptor, then ordered the airline to preserve and produce its own authorized history. The passenger reconstruction would trigger the official check, not substitute for it.
When Naima supplied the section showing her pulling the ribbon, Esther looked surprised.
“That may affect your compensation.”
“Then let it affect mine,” Naima said. “It does not make Juma become me.”
Grace entered `individual conduct review pending`. Including the damaging section made their request for individual adjudication more credible.
The preservation order generated a confirmation number, which Grace read aloud. From that point, the mapping history was not supposed to be purged while the complaint remained open.
Before shift change, Grace gave each participant their summary line to check. Ruth corrected a scanner time by a few seconds. Wanjala confirmed the official request time. David corrected the distinction between a movement scan and a reprotection event. Naima confirmed her video time. Esther did not agree with the conclusion, but she accepted the recorded sequence.
Grace saved the whiteboard reconstruction as an authority note with the objections recorded, not as a passenger manifesto. Juma received only the reconstruction reference number. He did not receive raw logs or employee data.
Grace also required the preserved logs to remain held until the review closed, not merely until the shift ended. The airline representative accepted that condition in the duty note.
Ruth waited until the others were moving toward the door. Then she spoke quietly.
“I saw the reason written down before they told me to use the code.”