The system had started small and stayed small on paper for exactly as long as it took the first quarter's crime numbers to come back from the three pilot cities.
I'd built it, technically, as a privacy-preserving pattern-recognition layer — anonymized gait and behavior analysis running against a known database of outstanding warrants, cross-referenced with traffic and transit cameras the cities already owned, no new hardware required beyond what municipal budgets had already paid for a decade ago. The pitch to the NSA's evaluation team was narrow and boring on purpose: this doesn't watch everyone, it flags a specific, small, legally defined population against footage that already exists, and it forgets everyone else's face the moment the frame clears the buffer.
What Skye had actually built, underneath that pitch, was considerably less narrow. She was inside every one of those camera networks the same week the contracts were signed, and the "forgetting" the marketing copy promised was real for the parts of the system anyone was ever going to audit, and not remotely real for the copy of everything running quietly in parallel, feeding a model only she and I ever saw.
I want to be honest about what that makes me, because the story doesn't work if I pretend otherwise: I built the government a tool I told them was narrower than it was, in the two years right after the country had watched the towers come down and decided, with real and mostly good-faith urgency, that it needed better eyes on the ground. I used that urgency. I'm not going to dress that up as anything other than what it was.
The Homeland Security proposal was still working its way through Congress that summer — the department itself wouldn't formally exist until November — and the briefing where the crime numbers actually got presented to President Bush took place in a room with more people in it than the last one had, most of them there specifically to ask the question I'd been rehearsing an answer for since the pilot went live.
"Mr. Witwicky." A DOJ civil liberties counsel, a woman named Harmon who'd clearly read every line of the technical appendix twice, cut in before the Chief of Operations had finished his summary of the drop in reported offenses. "Your system flags individuals against an outstanding-warrant database using biometric pattern matching in public space, without a warrant for the surveillance itself. I don't care how good the crime numbers look. I want to know what stops this from becoming a general-purpose tracking system for anyone your algorithm decides looks suspicious."
"Two things," I said, and I'd had two years to get the order right. "First — the matching threshold is set high enough that false positives are rare, and every positive match still routes to a human officer for confirmation before anyone's stopped. The system doesn't arrest people. It tells a person with a badge where to look, the same as a tip line would, except the tip line doesn't sleep and doesn't have a bias problem a defense attorney can cross-examine on the stand — or at least, not the same one. Second, and this is the part that actually matters long-term: the audit logs are held by three separate parties who don't report to each other. The military chiefs have a copy. The Justice Department has a copy. And access requires my authorization code alongside whichever agency's requesting it, which means no single actor — not the Bureau, not a governor, not a president — can quietly expand what the system looks for without leaving a paper trail two other institutions can see."
"Why does a private citizen hold veto power over a federal surveillance tool?"
"Because I built it, and because I don't trust anyone — including myself, for what it's worth — to hold that power alone without a check on it. If you'd rather the code sat with one agency and no outside auditor, I can hand it over and walk away today. I don't think that's the safer version of this system. I think it's the version where nobody notices the mission creep until it's already happened." I let that land before I kept going. "I'm not asking you to trust the technology because it's mine. I'm asking you to trust the structure, because the structure doesn't need to trust me."
Harmon didn't look satisfied, exactly — I don't think satisfied was ever on the table for a system like this, and it shouldn't have been — but she wrote something down instead of continuing to press, which in a room like that one counted as a genuine concession.
The Chief of Operations moved on to the ambulance-routing improvements and the Navy carrier inspections, the parts of the briefing that made everyone in the room visibly more comfortable, and the meeting closed the way these meetings always closed: with the President thanking a twelve-year-old for services rendered to a country that had no formal mechanism for understanding what, exactly, it had just agreed to.
I flew home with the audit structure I'd described sitting exactly as honestly as I'd described it — three keys, three parties, no single point of failure among the humans who knew the system existed.
I did not mention the fourth copy. The one that answered only to Skye, and through her, to me, and to no oversight board on Earth.
That was the part of the day I didn't get to feel good about, and I made myself sit with it on the flight instead of looking away, because the day I stopped being able to sit with it was the day I'd know I'd stopped being someone worth the trust I kept asking rooms full of strangers to extend me.