On his first morning at home, Juma watched two versions of himself circulate online.
One clip called him the heroic hotel manager who had saved a guest.
Another called him the negligent manager whose systems had allowed a kidnapping.
He answered neither.
His mother called.
“Have they fired you?”
“No. I'm under review.”
“They say you rescued someone.”
“The police rescued him. I knew the latch.”
She laughed. “You never liked being praised incorrectly.”
The problem was not modesty alone. The hero version erased the manager token left alive on BQ-17, the disposal weakness and the pressure culture that had made shortcuts ordinary.
Juma visited Wanjiru in hospital with permission.
“I don't want you to forgive me because I was tied up,” she said.
“I didn't come to give a verdict.”
She described small steps. Allowing Gideon into the cafeteria without a formal sign-in because he was a familiar vendor. Accepting help with her mother's medical debt. Sharing schedule details she should have kept private. Agreeing to guide Elias into the service route because she believed he was in danger.
Each step had looked smaller than the next.
“I kept telling myself I'd stop after this month.”
Juma did not tell her she had done nothing wrong. That would erase the choices she wanted to face.
“Pressure doesn't make every decision acceptable,” he said. “But a system with no safe way to report pressure helps the person applying it.”
Wanjiru wanted to return to work eventually.
“Not under a supervisor who can see my complaint before HR does.”
“We can propose a protected channel.”
“Don't propose it for me without asking.”
Juma nodded. “Fair.”
Elias also refused an exclusive media deal.
“If this becomes a brave-manager story, the other hotels will keep the same vendor weaknesses,” he said. “Evidence goes through police and the editor. Not through a viral thread.”
Halima met Juma in a café with staff proposals.
Some were too blunt: ban casual workers from night events, ban all contractors after ten, abolish manager overrides completely.
“We can't build rules people will start breaking on day two,” Juma said.
They narrowed the principles: accountable sponsorship, verified device disposal, dual approval, protected coercion reporting and visible exceptions.
They also rejected rules that would punish workers with the least power simply because an attacker had used a casual staffing gap.
A recruiter called offering Juma a job elsewhere. It was tempting. Leaving now would create a clean personal story.
He declined to decide during the review.
Walking away could be another form of refusing to live with the consequences of a system he had helped run.
The board secretary finally called.
“We want you back tomorrow.”
“For the promotion?”
“No. To design new controls.”
Juma asked one question.
“Will Wanjiru and Naomi be part of that discussion?”
A pause.
“Why?”
“Because the failed controls pressured them in ways the board did not see.”
The secretary agreed.
Juma's control notes included several rules he knew his former manager-self would have disliked: dual approval, immutable logs and an independent staff-reporting channel.
Before the incident he would have called them slow.
That admission mattered.
The problem had not been a shortage of good intentions. Juma had considered himself responsible and security-minded while still tolerating convenience that created single points of failure.
He also rejected a proposal to ban casual night workers from sensitive events. Attackers had exploited weak identity records around casual staff, but punishing the least powerful workers was not the same as fixing identity controls.
Halima agreed.
“Make verification stronger. Don't make a whole class of people suspicious by default.”
They also discussed Wanjiru's possible return. Some staff feared her; others wanted management to treat her only as a victim.
Juma refused both simplifications. A protected phased return could include role limits, review, support and accountability at the same time.
The goal was not to choose the nicest label.
It was to build a process that could hold more than one truth without turning either one into a weapon.
For the first time since losing his badge, Juma felt he might be useful without needing every door to open for him.
The board secretary called again. They were not offering a promotion; they wanted him back to present a new system.