Chapter 7 - THE SYSTEM THAT WORKED TOO WELL
None of the other ranges showed pre-fire passes.
Good.
That prevented the story from becoming a nationwide conspiracy.
They did show the same pattern:
Sensor faults.
Manual adjustments.
Informal confidence that experienced instructors could tell when the machine was wrong.
Orion’s warranty dashboards treated manual corrections as resolved training events rather than equipment failures.
That reduced reported fault rates.
Company lawyers hated that sentence.
So did Navy contracting.
An independent technical review began.
Orion did not collapse.
No executives went to prison.
The evidence did not support bribery, sabotage or intentional qualification fraud directed from corporate leadership.
It did support a badly designed incentive.
Local engineers were evaluated partly on unresolved fault rates.
Service credits hit regional performance.
Manual reconciliation made faults disappear from the metric once corrected.
Nobody needed to say hide problems.
The dashboard taught the lesson.
Miles Arden took the hardest personal consequence on the contractor side.
He had used Ryan’s cached credential knowingly.
That crossed a line separate from bad incentives.
Orion fired him.
The government suspended his system access while investigators reviewed whether any other credential misuse occurred.
No criminal charge at that stage.
Why?
Because evidence showed he had used the access to perform work he believed was authorized, not to steal information or enrich himself directly.
Still unauthorized.
Still serious.
Ryan hated hearing that.
“He changed records.”
“Yes.”
“So did you.”
He stopped.
We were in a standards conference room by then.
Two months after the range incident.
Ryan had spent eight weeks reviewing qualification policy instead of running live fire.
He despised staff work.
Useful.
It made him read.
He had found a problem nobody else did.
Current policy required dual-observer manual verification only for systems in approved degraded mode.
But degraded mode could be declared locally for up to one training day.
After that, outside approval.
At two ranges, officers had repeatedly closed degraded mode at midnight and reopened it the next morning.
Technically new period.
Operationally permanent degradation.
Ryan put the logs in front of me.
“Same trick.”
“Not a trick if they think policy allows it.”
“It defeats the limit.”
“Yes.”
He looked annoyed that I agreed.
“What?”
“You’re supposed to argue.”
“I’m trying something new.”
He smiled.
Then said:
“I would’ve done this six months ago.”
“I know.”
There.
The important part was not that Ryan became cautious.
He was still aggressive.
Still believed training should be hard.
Still rolled his eyes when people used twenty words where five worked.
But he had become suspicious of any sentence beginning:
We always do it this way.
That was useful.
Daniel’s review concluded too.
His decision to retain the legacy manual fallback without a true decommission plan had been a governance failure.
His email pressure around training throughput had contributed to culture but did not direct score manipulation.
He received a formal letter of caution and was removed from direct oversight of the Orion contract while the technical review proceeded.
He remained commander.
Real consequences.
Not theater.
Then my turn.
The inspector asked why I had not checked whether Raven Exception survived into later production systems.
I could have said:
Not my job after transfer.
True.
I could have said:
Vendor responsibility.
Also true.
Instead:
“I assumed my objection had become part of the architecture.”
There.
It had not.
I had left.
New people inherited a compromise.
The memo did not say:
Delete before future fielding.
It said:
Disable outside approved degraded-mode operations.
Different.
I wanted removal.
I signed language allowing controlled survival because Daniel convinced me the test could finish.
There.
My signature.
Eleven years later, everyone remembered my refusal.
Nobody remembered my compromise.
Including me.
The review recommended no disciplinary action—there was nothing to discipline now—but documented the legacy design issue.
I asked them to include my approval memo.
They already planned to.
Good.
No heroic self-report needed.
Orion redesigned the software.
Not by removing all manual correction.
That would have been another fantasy.
Sensors fail.
Humans sometimes know more.
Instead, manual reconciliation became impossible without creating a separate reportable equipment incident.
If a score changed, the fault stayed visible.
There.
Do not make the thing that fixes the person erase the evidence that the system broke.
Simple in hindsight.
Expensive in software.
Useful.
The twenty-six Coronado qualification records were reviewed.
Four could be independently verified through target video.
Nine through redundant spotter records.
Eight required requalification.
Five were already superseded by later qualifications.
Walker re-shot.
Passed clean.
Ryan attended?
No.
He chose not to.
That surprised me.
“Why?”
“He needs to know it’s his score.”
There.
Good.
Not redemption.
One choice.
Walker later found Ryan.
Told him:
“I hated you for making me do it again.”
Ryan asked:
“And?”
“I’m glad I know.”
There.
That was enough.
Then training command offered Ryan a path back to instruction.
Not lead range authority immediately.
Assistant standards instructor for six months.
Observed.
No public-humiliation teaching methods.
Required instructor-development course.
He almost rejected it.
“Assistant?”
He had been Master Chief running the range.
Pride.
He called his mother.
She said:
“Your father would tell you to quit.”
Ryan laughed.
Then Susan added:
“That’s why you shouldn’t ask him.”
There.
The dead no longer got the deciding vote.
Ryan accepted.
Six months.
Review date written.
No automatic restoration.
May you like
Temporary with an ending.
He was learning to read clocks too.
