Chapter Two: An Eighteen-Hour Chain of Evidence

During Chen's investigation, she had said nothing in his defense, but had “accidentally” left a business card behind. Later, Hanhai terminated her contract when she refused to backdate an evidence record. She arrived at eight in a gray coat and examined the drive seal before looking at Chen. “You have one chance. Hanhai will claim anything new was fabricated after your departure.” “That's why we'll use the company's own clock against it.” Chen requested a read-only forensic image under continuous video. The `Tide-Mirror` creation time was August 19 at 2:13 a.m.—the exact moment his account last accessed Hanhai's internal network. “That looks bad,” Su said. “Check the compiled artifacts.”