Chapter 18: THE ALERT GAME
CIA Headquarters, Langley — Week 9, Thursday, 9:15 AM
Suleiman's network moved money on Wednesday night, and by Thursday morning the entire T-FAD floor was burning.
Alfred arrived at eight to find Greer already at the whiteboard, marker in hand, adding new nodes to the financial web. Ryan was at his desk with three monitors open and a phone pressed to each ear alternately — the posture of a man triaging information faster than one conversation could deliver it. Diane's candy bowl sat untouched, which meant the office had passed the threshold where comfort food became irrelevant. Six analysts Alfred recognized from the working group occupied a cluster of desks near the window, their screens showing financial tracking databases and satellite imagery feeds.
The financial transfer that had triggered the escalation was a $2.3 million wire from a shell account in the Cayman Islands to a series of intermediary banks in Turkey, France, and Germany. Ryan's monitoring flags — the same flags he'd planted weeks ago, the automated tripwires that scanned global financial traffic for patterns matching Suleiman's operational signature — had caught the wire at three AM Eastern.
Alfred sat at his desk and pulled up the financial data. The transfer chain was elegant — layered routing, timed delays, intermediary accounts that opened and closed within forty-eight-hour windows. The money was moving toward Europe with the purposeful velocity of operational funding, not investment.
This is it. The show depicted this transfer in Episode Four — Suleiman funding the Paris operation. The money is moving to the logistics company in the northern suburbs. The same company my DGSE intelligence package identified. The same company Cigale is presumably monitoring.
Ten days. The attack is ten days away.
The morning brief was standing-room only. Greer ran it from the front of the conference room, the whiteboard replaced by a projection screen showing the financial transfer chain in real time. Singer was present — back row, arms crossed, the same body language Alfred had read with the SDN weeks ago. Two Operations Directorate officers stood by the door, their presence signaling that T-FAD's analytical product was crossing into operational territory.
Ryan presented the financial analysis. Twelve minutes, sharp, urgent, the controlled passion of a man who knew the numbers meant people were going to die and was trying to make a room full of bureaucrats feel the same urgency. The transfer chain pointed at Western Europe. The timing suggested an imminent operation. The target remained unknown.
Singer spoke after Ryan finished. "Operational planning requires target specificity. We can't deploy assets against a continent."
"The French are already flagging chemical precursor movements," Ryan said. "Their CT liaison has been—"
"I'm aware of the French activity." Singer's voice was flat. "Hatfield wrote the analysis. But French internal reviews don't constitute actionable intelligence. They constitute French paranoia."
The dismissal landed in the room like a door closing. Alfred watched Singer from the third row — the SDN cold read arriving unbidden, sharper than before. The gut impression that had registered at fifty percent during Singer's first dismissal of the Suleiman analysis weeks ago now read at something closer to seventy. Singer wasn't dismissing the intelligence because he believed it was weak. Singer was managing the intelligence cycle to maintain a specific institutional posture — one that preserved his political position while allowing the operational clock to run.
He's not an antagonist. He's a bureaucrat optimizing for career survival in an environment where being wrong about a threat is career-ending but being right too early is career-limiting. The show made him a villain. The reality is sadder — he's a man whose incentive structure is misaligned with the mission, and he knows it, and he does it anyway.
Greer overruled Singer. Not publicly, not dramatically — a quiet conversation at the front of the room after the brief cleared, voices pitched below the threshold of casual eavesdropping. Alfred watched through the glass partition as Greer's body language hardened and Singer's shoulders dropped a centimeter. The outcome was visible in Greer's stride when he returned to his office: authorized.
The counterterrorism alert would go to European stations. The question was when.
---
Thursday, 2:30 PM
The CIA's counterterrorism alert distribution ran on a weekly cycle. Tuesday distribution. Standing schedule. The machinery of institutional communication, as predictable as the HVAC system and as resistant to acceleration.
The next Tuesday was six days away. The Paris attack was ten days away. If the alert distributed on Tuesday, DGSE would receive it with four days to refine their security posture. Four days of bureaucratic processing, operational coordination, and protective deployment — measured against a timeline that allowed zero margin for institutional friction.
Alfred needed those four extra days.
He sat at his desk and studied the distribution protocol. The CPC — Counterproliferation Center — managed the pipeline. Standard threat updates distributed Tuesdays. Emergency updates distributed immediately upon classification. And between those two categories existed a third: "urgent supplement" — an analytical product deemed time-sensitive enough to warrant same-day distribution but not emergency classification.
Urgent supplement. I used that classification for the original sarin precursor report. It worked — the report entered the pipeline without questions. But that was a standalone analytical product from a mid-level analyst. This is a counterterrorism alert that's been authorized by a division chief and reviewed by the Deputy Director. The institutional weight is different. The scrutiny is higher.
And the urgent supplement classification technically falls within my analytical authority to apply. The protocol manual — section 4.3.2, which I read during my first-week audit of Hatfield's desk because reading protocol manuals is what data analysts do when they're terrified — specifies that "any analyst with sector responsibility may apply urgent supplement classification to time-sensitive analytical products pending supervisory review within 24 hours."
Supervisory review within 24 hours. Meaning: I can apply the classification now, the alert distributes today, and Greer reviews and approves tomorrow. By the time anyone questions the classification, the alert is already in French hands.
The risk was visible. Filing an urgent supplement was unusual for a mid-level analyst. It would draw attention — Diane's attention first, then Greer's. The pattern of Alfred Hatfield applying accelerated distribution to intelligence products that turned out to be operationally significant was a pattern, and patterns were what intelligence professionals were trained to detect.
But the alternative was waiting until Tuesday. And Tuesday meant four days instead of eight. And four days meant the difference between DGSE having time to refine their protective posture and DGSE receiving the alert too late to change anything.
Alfred opened the distribution portal. His cursor hovered over the classification dropdown.
If I do this, Greer notices. If Greer notices, he asks questions. If he asks the wrong questions, my cover starts to crack. This is a calculated risk — expanding the French security window by four days at the cost of increasing Greer's suspicion of me by an increment I can't quantify.
306 people.
He selected URGENT SUPPLEMENT. Filed the counterterrorism alert — Greer's authorized threat assessment, Ryan's financial analysis, Alfred's French CT pattern report, compiled into a single distribution package — with same-day priority.
The system accepted the submission at three-twelve PM.
Diane flagged it at three-twenty-seven.
"Hatfield." She stood at his cubicle partition, reading glasses perched on her nose, the expression of a woman who'd been processing intelligence distribution for two decades and knew when something deviated from normal procedure. "You filed a CT alert as urgent supplement."
"Yes."
"That's... unusual. For your level."
"The pattern of French CT activity suggests accelerating threat conditions. I assessed it as time-sensitive enough to warrant accelerated distribution." He met her eyes. Steady. The lie — not a lie, technically, every word was true — delivered with the measured formality that Hatfield would have used. "Section 4.3.2 authorizes sector analysts to apply the classification pending supervisory review."
Diane studied him. The reading glasses magnified her eyes, which were sharp and assessing in a way that her grandmother demeanor sometimes obscured.
"I'll route it to Greer for review."
"Thank you, Diane."
She walked to Greer's office. Alfred watched through the partition. She handed Greer the flagged document. Greer read it. Set it down. Picked it up again. Read the classification stamp.
His intercom buzzed.
"Hatfield. My office."
Alfred stood. Walked the twenty-eight steps to Greer's door. Entered. The door stayed open this time — deliberate, a signal that this was a question, not an interrogation.
"Urgent supplement." Greer held the classification stamp between two fingers the way a man holds a piece of evidence he's deciding whether to enter into the record. "You've filed two urgent supplements in six weeks. Average for your pay grade is zero per career."
"The data supports accelerated distribution, sir." Alfred's voice was level. His hands rested at his sides — no pockets, no fidgeting, the posture of a man making a professional assessment rather than defending a decision. "The French CT activity pattern correlates with the Suleiman financial transfer. If the threat is real and imminent, a five-day delay in distribution could—"
"I've read the analysis. It's sound." Greer set the stamp down. "I'm approving it."
The word but hung in the air, unspoken. Greer's eyes held Alfred's for three seconds — the same evaluative silence he'd used since his first day, the silence that measured and weighed and filed.
"Pattern analysis, sir." Alfred offered the phrase like a shield. "That's—"
"What they pay you for. Yes." Greer's voice was quiet. Not angry. Not suspicious, exactly. Something else — the tone of a man watching a puzzle assemble itself and recognizing that one of the pieces doesn't quite match the box art. "You're dismissed."
Alfred walked out. Twenty-eight steps back to his desk. His hands were steady. His heartbeat was 120, hammering against his ribs with the force of a system-stress response that his face didn't display. The skull pressure was silent — completely, eerily silent, as if the GPIS had withdrawn from his awareness during the Greer exchange, leaving him alone in the interaction without guidance or interference.
He's watching. Not in the paranoid sense — in the professional sense. Greer has been watching his people since Karachi, scanning for anomalies the way a field officer scans rooms. And I'm registering as an anomaly. Not a threat. Not yet. But an anomaly — an analyst whose timing is too good, whose instincts align too precisely with operational reality, whose career trajectory shifted from invisible to significant at the exact moment the Suleiman threat materialized.
I am becoming a pattern. And Greer is a man who reads patterns for a living.
---
Friday, 4:00 PM
The CPC distribution portal confirmed the alert had been transmitted to all European stations at four-seventeen PM Thursday. Same-day distribution. DGSE would have received it by Friday morning, Paris time.
Eight days. The attack was eight days away, and DGSE now had eight days of enhanced operational posture instead of four.
Alfred closed the portal. Opened the MENA shipping data. Typed numbers he didn't need. The performance continued — the man at the desk, the analyst doing his job, the invisible competent nobody who kept producing work that mattered at moments that mattered.
The operations board in T-FAD updated hourly. Ryan's Suleiman profile occupied the center, surrounded by financial chains and operational assessments and satellite imagery of compounds and shipping routes. Alfred's French CT analysis was pinned to the right side. The red lines Greer had drawn connected them — two parallel investigations converging on a threat that neither analyst had fully mapped alone.
Alfred watched Greer study the board at four-thirty. The division chief stood with his coffee — black, no sugar, the same preference Alfred had known before meeting the man because he'd watched a scene on television where Greer and Ryan discovered the shared habit — and traced the red lines with his eyes.
Every card Alfred held for Paris had been played. The sarin precursor report, routed through CPC weeks ago. The DGSE intelligence package, transmitted through a Cold War relay to an asset named Cigale. The targeting nudge — religious venues, community gathering sites, the closest he could push without revealing foreknowledge. The accelerated alert, urgent-supplemented through the distribution pipeline, buying DGSE four extra days of security posture.
Four interventions. Four attempts to redirect the institutional machinery of two intelligence agencies toward a church in Paris where 306 people would gather on a Sunday morning that was now eight days away.
None of the interventions specified the church. None of them could. The gap between what Alfred knew and what he could prove was the gap between certainty and evidence, and intelligence agencies ran on evidence, not certainty. He'd seeded the right questions into the right channels and pushed the right buttons at the right times and done everything a desk analyst with stolen knowledge could do without exposing the theft.
It might not be enough. It probably wasn't enough. The show had depicted 306 dead, and Alfred's interventions operated at the margins of institutional response — enhancing monitoring, expanding windows, shifting priorities. Marginal improvements to a system designed to process threats that fit its categories, and a church full of Sunday worshippers did not fit the categories that counterterrorism professionals were trained to protect.
Eight days. Nothing more I can do from this desk. Nothing more I can do from Arlington. Nothing more I can do without boarding a plane to Paris and standing in the church doorway and physically preventing people from entering, which would save zero lives and end my career and my freedom and every future intervention I might make in a world full of people I've watched die on screens.
So I wait. I do my job. I type numbers and attend briefings and drink coffee from a mug that calls me the world's okayest analyst. And on Sunday, eight days from now, I sit in a room full of people watching a church fill with gas, and I hold my composure, and I count the dead, and I live with the number.
He saved his work. Logged out at five-fifteen. The routine — Torres, parking garage, silver Accord, Route 50, Arlington — carried him home on rails of habit that had become the structural skeleton of a life built from nothing in eight weeks.
The apartment was dark. He didn't turn on the lights.
The satellite phone was charged. The cipher kit was under the floorboard. The SIGs were in the closet. The money was in the freezer and the coat and the bank accounts. The Greer dossier was in the messenger bag. The OBSERVATION CANDIDATES folder was on the nightstand.
Every tool, every resource, every piece of intelligence the system had provided — and Alfred stood in the kitchen of a dead man's apartment, eight days from an attack he'd spent six weeks trying to prevent, with empty hands and a splitting headache that had nothing to do with the system and everything to do with the weight of doing everything you can and knowing it might not be enough.
He poured a glass of water. Drank it. Set the glass beside the mug on the drying rack — the same glass, the same rack, the same kitchen where he'd burned OTP pages and eaten cold pad thai and laughed until his eyes watered at the absurdity of his existence.
Eight days stared at him from the calendar on Hatfield's wall. Each one a square. Each one a countdown. And somewhere in Paris, in the security offices of the DGSE, an urgent supplement from an American counterterrorism division was being read by analysts who didn't know that the intelligence chain behind it started with a man watching television on a couch in Portland and ended with a dead man's hands transmitting codes through a network that predated the agency they both served.
To supporting Me in Pateron.
with exclusive access to more chapters (based on tiers more chapters for each tiers) on my Patreon, you get more chapters if you ask for more (in few days), plus new fanfic every week! Your support starting at just $6/month helps me keep crafting the stories you love across epic universes.
By joining, you're not just getting more chapters—you're helping me bring new worlds, twists, and adventures to life. Every pledge makes a huge difference!
Join now at patreon.com/TheFinex5 and start reading today!