Chapter 11 - LIVE VALIDATION
Logan Price initially said he was fixing billing errors.
Then his own spreadsheet made that impossible to maintain.
State investigators walked him through one route at a time.
The first host rides:
Real children.
Real transportation.
Wrong IDs.
Illegal recordkeeping.
Questionable reimbursement.
Then correction failures.
Then duplicate billing.
Then empty GPS loops.
Then today.
Logan finally said:
“The audit system was going to treat everything as fraud.”
The investigator answered:
“Some of it was fraud.”
“Some.”
“Yes.”
“Not all.”
Also true.
Logan had inherited a broken workaround.
At first, he saw a technical problem.
NorthStar transported Javier.
District billed under Mia.
Later district was supposed to correct.
Sometimes it did not.
Logan believed NorthStar should still get paid because a real van and real driver had moved a real student.
Reasonable starting point.
Then state reimbursement asked for student-level verification.
The wrong IDs made legitimate rides look fictitious.
Logan faced a choice.
Disclose the host scheme.
Risk repayment demands.
Risk contract suspension.
Risk showing NorthStar had accepted obviously false documentation.
Or manufacture supporting data.
He chose the second.
First:
He reassigned old GPS traces.
Then:
He duplicated route logs.
Then:
Empty loops.
Finally:
Actual children.
Why actual children?
Because the upcoming audit could request random route verification against geofence data and school-release timestamps.
A live ride under Mia’s ID would create:
Westbridge checkout.
Vehicle GPS.
Cedar Bridge arrival.
Home drop-off.
Every system agreeing.
Then Logan could argue missing historical data resulted from migration rather than nonexistent rides.
He was not trying to hurt Mia.
He was willing to use her as a piece of evidence without her parent’s consent.
That was enough.
Then he admitted accessing the district system.
How?
Not hacking.
Worse in a more ordinary way.
NorthStar had a vendor integration account.
Years earlier, June Ellis gave Logan temporary elevated access during a billing reconciliation.
When permissions were reduced, one API credential remained able to submit transport updates.
It could not approve them alone.
So Logan needed HREED-ADMIN.
Where did he get the mirrored token?
A photograph.
June once brought the continuity token to NorthStar during a training session.
The six-digit serial and QR enrollment code appeared in a training photo uploaded to a shared project folder.
Logan used it to clone the token months later.
The token system should have rejected duplicate enrollment.
It did not because the vendor’s “continuity” mode explicitly allowed two devices.
Bad configuration.
Logan never entered Reed’s office.
No nighttime intruder.
No stolen hardware.
Then signatures.
Parent signatures copied from old school forms in district attachments.
Reed’s HR-19 block copied from NorthStar annual certifications.
Court order copied from the district training PDF.
Everything used legitimate documents from legitimate workflows.
Reassembled into a lie.
Then Logan answered the hardest question.
“Who taught you host IDs?”
“June.”
“Who allowed them?”
“June. Reed. Other principals.”
“Who told you to create empty routes?”
“No one.”
“Who told you to create live validation?”
“No one.”
There.
Unequal responsibility.
The system had been built by several adults.
The escalation belonged to Logan.
Then investigators asked about Dana Voss, NorthStar’s owner.
Did she know?
Logan said:
“She knew there were reconciliation issues.”
“Empty routes?”
“No.”
“Host IDs?”
“Yes.”
“Actual children used under other identities?”
“She knew the district sometimes corrected after transport.”
“Did she know NorthStar kept billing before correction?”
“Yes.”
Dana denied knowing specific current fraud.
Emails supported both.
She had asked very few questions because NorthStar’s district contract represented twenty-eight percent of company revenue.
She trusted Logan.
Conveniently.
Then the state auditor produced a route sample from another school.
Host IDs.
Same pattern.
Logan looked at it.
“That isn’t mine.”
The investigators stopped.
“What?”
“Different school. Different finance code.”
The ride predated Logan’s first host reconciliation by nine months.
June Ellis stared.
She had used host IDs there too.
But the document contained the same fake court-order template.
June said:
“I never used court orders for host rides.”
Someone had combined the two methods before Logan.
May you like
The current fraud had a clear perpetrator.
The template problem was older.
