The workshop technician looked from the wall clock to the small server screen in the rack.
“Backup rotation starts at midnight,” he said. “If you put a hold on it now, the entire maintenance window moves.”
The county legal officer placed a preservation notice on the desk.
“That is why we came before midnight.”
Amina stood near the office door, not the keyboard. The contractor was a separate company from Mwangaza, and its system contained routes belonging to other clients. The notice was deliberately narrow: vehicle IDs connected to Mwangaza, KJN-2 route dates, work-order references and approval fields.
The contractor manager, Mr. Chege, read it and frowned. “This server contains commercial data. You are not taking an image of everything.”
“We do not need everything,” the officer said. “Preserve the listed records, pause the deletion job and create a scoped export with chain of custody.”
“And if you disrupt maintenance?”
“We record the impact.”
Chege called his lawyer. While he spoke, the technician showed the job queue without opening route records. One line read: **AUTO PURGE — 00:00 — archived GPS/work-order cache > retention threshold.**
After the legal officer confirmed it was within scope, Amina wrote only the job name and time.
“Routine?” she asked.
“Routine,” the technician said. “It was scheduled before you arrived. It is not a deletion created tonight because of you.”
“Good. Record that too.”
Chege returned. “We will comply, but we reserve the right to challenge scope and recover costs.”
The officer gave him the objection section of the notice. “Write it.”
The technician placed the purge job on hold in front of them. The system generated a timestamped confirmation. He then exported only the permitted fields. A hash was generated, written onto the chain-of-custody receipt and copied for the contractor.
Amina did not receive the raw database. She received a printout of route rows already filtered by the vehicle IDs in the notice.
The first date matched Musa’s Kijani Transfer Support payment.
The second matched a progress-video metadata date.
The third matched the van Amina had followed on the public road.
The approval field showed: **D. MBELE / PROGRAM OPS.**
Amina looked at the legal officer. “That proves route approval, not what happened at the site.”
“Correct.”
Chege said, “And account approval could be an administrative batch.”
“We record that too,” the officer replied.
The work orders described a transfer vehicle, route KJN-2, pickup at the main campus, and return or standby status. The filtered export contained no children’s names. It was enough to connect the route to operational authorization without dragging every passenger into the case.
“Tomorrow you’ll tell the hearing the director secretly ordered children moved,” Chege said.
“No,” Amina replied. “The record says his account approved these work orders. Motive needs something else.”
“Why are you talking like our lawyer?”
“I am not speaking for you. I want every claim to say exactly what the record says.”
The technician produced the maintenance ticket from the previous night. Main-campus staff had requested a GPS-cache sync and archive rotation after a server warning. The wording looked routine, though the request came after the inspection process had begun. Amina did not call it a cover-up. The officer preserved the ticket and its metadata.
Chege filed an objection concerning delayed maintenance and other clients’ privacy. The officer signed receipt of it.
“And the purge job now?” Amina asked.
The technician turned the screen toward them: **PAUSED — LEGAL PRESERVATION HOLD.**
The hash matched both copies.
Amina felt relief and disliked how much of it depended on minutes. If the notice had arrived after midnight, routine retention could have removed the cache, and everyone would have spent the next day arguing about whether the loss had been deliberate.
The officer sealed the export for county evidence storage. Amina would receive reviewed summary fields later, not the raw file.
Twenty minutes before midnight, the system monitor confirmed the hold was active.
Amina sent Neema a short message: **Preservation served. Scoped export sealed. KJN-2 work orders match transfer dates; D. Mbele account in approval field. Purge job paused before 00:00.**
Neema replied: **Good. No public claims tonight. Hearing tomorrow.**
They had not hacked a server or broken a password. They had arrived with a lawful notice before the system performed the routine action it was configured to perform.
The server has a job scheduled to delete data at midnight.
#