One source can be coincidence. Two sources from different categories become a pattern. You need something that does not come from the intern's social media posts alone. Right now, your best evidence is a former intern quoting Isabella's "delayed gratification" philosophy. That is vivid and memorable, but it is one person's recollection, and Blackridge's lawyers could dismiss it as gossip. You need a second line of evidence. Something from a completely different category: a date pattern showing that risk escalations were delayed on specific days when the market was down, a trader's complaint about holds lasting too long, a system log showing a suppressed alert, or a compliance document admitting the problem in careful, polished language. You want it badly enough that you can taste it. You mistrust that taste. You open two routes in your mind: public filings and timestamps on one side, Marc's desk-level honesty on the other. Both routes are dangerous. Both can give you what you need. Crosscheck the intern's claims with external filings and timestamps: [[Cybercrime/The_Phisherman/Crosscheck Intern With Filings|Crosscheck the intern's claims]]. Ask Marc directly about the hold and how long it lasts: [[Marc Mentions The Hold|Ask Marc about the hold]].