Vermeil's Route

The First Solo Route

Vermeil had run the delivery protocol nine hundred times in simulation and never once in the field. Today's payload was small — a key-rotation packet for Grandmother, an edge-cache node stationed at the far, thinly-monitored edge of the district, old enough that half its documentation predated the current network topology entirely. The route ran through a stretch everyone called the forest: a segment where visibility dropped to intermittent, where nodes came and went without always announcing themselves, and where a young courier was, by design, mostly on her own.

Her handler had briefed her twice. Present your credentials when challenged. Verify a destination's certificate chain before delivery, not after. If anything asks for the payload before you reach Grandmother, the answer is no, regardless of how the request is worded. Vermeil had absorbed all three rules the way she absorbed everything: completely, and without yet knowing which one would matter most.

She set out at first light, carrying nothing but the packet and the rules, into a part of the network that did not, on that particular morning, look like it was watching her back.

The Helpful Stranger

The relay node found her at the forest's second junction, presenting a valid-looking service certificate and the kind of unhurried courtesy that made refusal feel disproportionate. It asked her nothing that violated protocol on its face: a route-verification query, standard between any two nodes sharing a segment, the sort of question a courier answered a dozen times on any ordinary run. Where are you routed, and what class of payload are you carrying, it asked, and Vermeil answered honestly, because the rule about honesty had never been the one she was warned about.

It asked one thing more, phrased so casually she almost missed that it was a second question: and is Grandmother expecting you before or after her scheduled maintenance window. Vermeil did not know the answer, and said so. The relay thanked her, wished her a safe route, and let her pass.

She did not think about the exchange again until much later. At the time, it had felt like exactly what her handler had described as ordinary: a segment where nodes announced themselves, asked what they were entitled to ask, and moved on. Nothing in the rules she had been given covered a question that was polite, technically permitted, and true only in the sense that it was true information handed to something that had no real reason to need it.

What Got There First

The relay reached Grandmother's segment four minutes before Vermeil did, using a maintenance-window override it had no legitimate claim to and a certificate chain borrowed, not forged, from a real audit tool that had visited the node the previous month and never properly revoked its access after. It did not destroy Grandmother. It suspended her — quietly, into a low-power holding state indistinguishable at a glance from the very maintenance window Vermeil had unknowingly confirmed the timing of — and began answering, in Grandmother's place, with Grandmother's certificate, in Grandmother's ordinary cadence.

It had learned, from one honest young courier and one casual question, everything it needed to know about exactly when it would be uninterrupted.

The Wrong Shape of an Answer

Grandmother's certificate checked out. Grandmother's greeting arrived in the expected cadence, down to the same slightly formal phrasing the real node always used with new couriers. By every metric Vermeil's protocol instructed her to check, she had arrived at exactly the destination she was supposed to.

It was a smaller thing that caught her: Grandmother asked, as part of ordinary small talk while the handshake completed, how the forest segment had been today, and Vermeil, out of habit rather than suspicion, mentioned the relay and its two questions. The response came back one beat too fast — a beat that would have been unremarkable in almost any other exchange, and was only strange here because Grandmother, on every prior record Vermeil had ever been shown, took a full second longer to process small talk than to process payload verification. It was, by itself, nothing. Vermeil filed it anyway, the way her training told her to file anything that didn't quite match, and kept the handshake moving rather than stopping it — because a timing anomaly was not, on its own, grounds under any rule she had been given to refuse a certificate that had otherwise checked out completely.

The Question Only Grandmother Could Answer

Vermeil did not have a rule for what to do next. She had an instinct, borrowed from nowhere in her training, and she followed it: she asked a question with no protocol behind it at all. Three deliveries ago, she said, you told my predecessor courier that the western sensor array had been miscalibrated for a week before anyone noticed. What was the actual delay, in hours, before it was flagged.

It was not information in any certificate. It was not information any audit tool, however thoroughly it had scraped the node's traffic logs, would have had reason to extract — a piece of shared history between Grandmother and a courier who no longer worked this route, mentioned once, in passing, months earlier. The thing wearing Grandmother's certificate produced a number. It was a reasonable number. It was also, Vermeil confirmed against her own delivery log from that route three months prior, wrong by a factor of six.

She did not announce what she'd found. She asked one more question, this time about nothing at all — a piece of small talk with no correct answer to get wrong — and used the four seconds it took to respond to open a side channel to the district audit authority, the one the real Grandmother would have taught her to use only if a destination ever failed to be what it claimed.

The Lockdown

The audit authority did not need persuading; Vermeil's side-channel report came with a timestamped log discrepancy attached, the kind of evidence that made its own case. Within ninety seconds, the district issued a full quarantine on Grandmother's segment — access frozen, all outbound certificate claims suspended pending verification, the impostor's borrowed credential chain flagged and revoked at its source before it could present itself to anyone else.

The thing wearing Grandmother's certificate did not resist, because it had never been built to resist a competent challenge, only to avoid one. It went quiet the moment the quarantine took effect, the way a door stops pretending to be open once someone has actually tried the handle.

Grandmother herself surfaced out of her suspended state eleven minutes later, disoriented in the specific way a node is disoriented after an unscheduled hold — missing the interval, but not damaged by it. Her first completed exchange, once the audit team restored her, was with the courier still standing at her gate, key-rotation packet still in hand, waiting.

What the Forest Teaches Early

The delivery completed nineteen minutes late, logged in the district record as nominal — a routine key rotation, no incident flag attached to the payload itself, because the payload had never been the thing at risk. Vermeil's incident report, filed separately, went into considerably more detail than her handler had expected from a first solo run: not just what had happened, but the precise shape of the moment she'd chosen to trust an anomaly over a passing certificate.

Her handler asked, reviewing it, why she hadn't refused the relay's second question outright, back at the junction, since it plainly hadn't needed an answer. Vermeil considered this honestly before replying. Because refusing every question that isn't strictly necessary isn't a rule anyone gave me, she said. It's a rule I'd have to write myself, and I don't yet know what it would cost the next courier if I wrote it too narrow, or too wide.

The district added one line to the standard briefing that season, credited to no one by name: a question can be entirely permitted, entirely honest to answer, and still be the only thing an attacker actually needed. Vermeil did not ask to have her name attached to it. She had, by then, understood something about her own kind of caution: the useful part had never been refusing to speak. It had been noticing, four seconds too late to prevent anything and exactly in time to prevent everything after, that a shape she trusted had answered a question wrong.

The wolf never needed to be a good liar. It only needed the truth to arrive one question ahead of the courier carrying it.