The duty manager’s quiet office had a small window overlooking the apron. Ruth Kendi placed her shift notebook on the table. Lydia Chebet, a union observer, sat beside her and identified her role before the conversation began.
“This notebook is mine,” Ruth said. “It is not a screenshot of the system.”
“We want your contemporaneous notes,” Grace said. “We will compare them with preserved logs. Nobody is asking for your password or other passenger data.”
Ruth opened the previous day’s page.
`11:24 — downsize + oversell 9 + security watch = G hold.`
Juma read without touching the notebook. “You wrote this before the G-17 mapping?”
“Yes. Mrema called. The aircraft swap had already reduced capacity by nine seats. KT-21 was the queue holding passengers whose seat assignments had been broken.”
“And `security watch`?” Grace asked.
“Two people. He said that to stop the gate from reopening reaccommodation, the whole queue should become a disruption group until the situation was cleared.”
Lydia set down her pen. “Ruth, you also need to state your part.”
Ruth tightened her jaw. “I know.”
“You stamped `group conduct`.”
“Yes.”
“And you executed the denial at the gate?”
“Yes.”
“Did you have an individual override?” Juma asked.
“Not on the gate interface. But I could have escalated before I stamped it. I did not. I wanted to avoid delaying departure any further.”
That mattered. Ruth was not an innocent clerk with no choice at all. Her authority was smaller than Mrema’s, but she had made her own decision.
“I do not want you removed from the record just to make your statement clean,” Juma said. “Each action should stay with the person who took it.”
Ruth looked surprised. “I thought you brought this here to use me against him.”
“I don’t want a hero witness or a villain clerk.”
Grace received an email from the IT preservation team. A preliminary extract was ready. She opened it on her own screen and read the critical field aloud.
`G-17 CREATED 11:27:48 — EM-04.`
The room went quiet.
Wanjala’s security request was at 11:31. Ruth’s 11:24 note showed that the plan for a group hold existed before the official security request arrived.
“Did Mrema know the identities of the serious security subjects?” Juma asked.
“He was told there was a security watch on two people,” Ruth said. “I did not know the details.”
Grace said the preserved history would show calls and events; they would not speculate beyond that.
Ruth wrote her statement by hand. She described the aircraft downsizing, nine-seat oversell pressure, the two-person security watch, the instruction to apply a G-hold to the KT-21 queue, and her own decision to use the group-conduct stamp. Lydia read the draft and asked Ruth to rewrite one sentence that made the stamp sound as though “the system” had applied it when Ruth herself had done so.
Ruth corrected the sentence.
Juma respected that more than an easy confession. Accountability was becoming layered: the aircraft swap and overselling created pressure; Mrema chose a shortcut; Ruth executed it and added the stamp; downstream systems propagated the code through boarding, accommodation and baggage.
Grace checked the time. Evening inventory was approaching. “If G-17 stays as one object, cleared passengers will continue being rejected on later flights.”
“Can you split it?” Juma asked.
“In bulk?”
Grace called ticketing systems. After listening for two minutes, she said, “No safe bulk split. Individual verification is required.”
“Then do it individually.”
Naima, who had been waiting outside, was invited in for a process update without receiving details from Ruth’s employee statement that did not concern Naima’s booking.
“Does my warning remain?” Naima asked.
“If the conduct review supports it, yes,” Grace said. “But G-17 membership will not remain automatic.”
“Fair,” Naima said, though she did not look pleased.
Grace ordered a temporary rebooking station opened in the arrivals hall. Deadline: four in the afternoon, before evening-flight inventory closed.
Lydia at ticketing ran an administrative preview command, not a passenger change. The system returned a long message.
Before Grace read it, Lydia asked Ruth whether the 11:24 note had been written during Mrema’s call or afterward.
“While he was still talking. I use shorthand on every shift.”
Lydia showed Grace earlier pages with similar handwriting and abbreviations but did not remove the notebook from the room. Grace said HR and the union process would scan it; Juma would not become custodian of an employee record. Provenance could be preserved without handing internal material to a passenger.
Juma asked what `oversell 9` meant. Ruth explained that the larger aircraft had been replaced with one carrying nine fewer seats in the relevant cabin configuration. KT-21 had been created to reassign people whose seat maps were disrupted. When Mrema saw the two-person security watch enter that queue, he chose the G-hold to prevent automatic rebooking while the gate stabilized.
The shortcut was attractive precisely because the object already contained many records; he did not need to identify every passenger again.
“That is an operational explanation,” Grace said. “Now the review will determine whether the discretion exceeded its limits.”
She did not use the word fraud. Juma agreed.
Ruth added one more distinction. Mrema had not dictated the exact phrase on the `group conduct` stamp. That wording came from the gate template. Ruth used it without adding an exception for passengers who had not been involved.
“I assumed complaints would sort it out later,” she said.
“And that was your choice,” Lydia replied.
Ruth accepted it.
Juma could now see why a simple scapegoat would be inaccurate. Mrema had made the central operational decision, but the stamp, the template and downstream automation gave the shortcut far greater reach. That was what he wanted the final hearing to address.
When the preliminary log extract arrived, Grace asked IT to preserve the raw event and audit metadata before anyone used it to reach a conclusion. EM-04’s creation time matched Ruth’s note and Juma’s booking history. Three sources now met without depending on Mrema confessing anything.
Grace sent the manual-split order to ticketing. The first reply said the disruption object was locked because claims, rebooking and baggage associations were cross-linked. The only safe solution was to verify each passenger, detach G-17 and preserve any individual security or conduct notes separately.
Ruth signed her statement only after Lydia read every paragraph. Nobody forced her to use the words fraud or retaliation. Her account remained her own: pressure, instruction, her stamp and her decision not to escalate before gate closure.
Grace finally read the administrative-preview message on the screen.
`21 records locked as one disruption object`.