Your marker squeaks as you step back to admire the wall. You build the board from whichever fragments you have gathered so far. Here is what you know, pinned to the wall: **What you are trying to prove:** Isabella Laurent, Director of Risk Oversight at Blackridge, has a habit of delaying internal risk alerts. When the firm's positions start losing money, the PRAP system is supposed to escalate automatically to senior management. Isabella can place a "hold" on that escalation, buying time. You believe she does this routinely, waiting for the market to recover on its own before anyone above her sees the damage. If you can confirm this pattern, you can time the ransomware attack to hit exactly when she is holding, when Blackridge is most exposed and least able to respond. **The evidence on the board:** - Did you explore the intern trail? - Did you investigate Marc's complaints? - Did you find the annual report footnote? - Did you uncover the compliance memo? - Did you find the silent-alert ticket? - Did you discover the missing escalation email? Not every route gave you every piece, but the pieces you do have now come from more than one category. One clue is a rumour. Two clues from different sources become a pattern. Three begin to describe a habit. ![[investigation-board.svg|EX-08, paper trail constellation]] The room smells like dry-erase marker and old coffee. You realise you are not only mapping Blackridge; you are mapping yourself, what you are willing to use, and who gets hurt when you use it. The pattern feels incomplete; some threads still need verification. You do not have enough clues: [[Paper Trail Not Enough|Keep investigating]]. The pattern is clear. It's time to act: [[Paper Trail Enough|Trust the pattern]].