The account belonged to Gavin Pierce, our director of Talent Operations, the man whose team had closed the earlier candidate complaint as a misunderstanding.
His office was two floors below mine.
I told Nina to preserve the logs before anyone called him.
Then I disabled his administrator access.
At 12:26, his ordinary employee account still worked, but the permissions that let him alter candidate records were gone.
Nina asked whether I wanted his building badge shut off too.
I looked at the crackers still open beside my keyboard and ate one because my stomach had started hurting.
“Not yet,” I said. “First tell me what he can still reach.”
For the next several minutes, Nina checked recruiting permissions while I watched the referral queue sit frozen on her screen.
A copier somewhere behind us kept producing pages for a print job nobody came to collect.
Gavin could still read his email, calendar, and ordinary department files.
He could not alter an application, create a referral, or reactivate the seven files we had isolated.
I asked Nina to take control of the referral queue herself.
Then I removed myself from every decision involving Chloe’s employment status.
That part mattered.
Whatever Gavin had done, my sister had paid fourteen thousand eight hundred dollars to a company she believed could place her inside mine.
I was not going to protect her because she was my sister, and I was not going to punish her harder to prove I wasn’t protecting her.
Nina would handle the application with another HR leader who had not touched the original process.
I went back to the office where Chloe was waiting.
She had folded the corner of a blank legal pad into a small triangle and was working on another corner when I entered.
The room was warmer than the conference room, but she still had her jacket on.
“Am I fired?” she asked.
“You’re not an employee yet.”
“That’s not what I asked.”
I told her someone in Talent Operations had altered her application after she submitted it and that Compliance had frozen the process.
She stared at me for a while.
Then she put the legal pad down.
“So you think I bought this.”
“I think you paid someone who told you they could help you get it.”
Her temporary CARD was still on the desk between us.
She pushed it toward me.
I left it there.
“Nina will decide what happens to your application,” I said. “I’m out of that decision.”
Chloe looked at the CARD, then at me.
“You own the company.”
“And you’re my sister. That’s why I’m out.”
She said nothing after that.
At 12:41, I placed Gavin on paid administrative leave, blocked his recruiting permissions, and ordered preservation of every referral change made from his account since late spring.
There was no quiet way back from that.
Gavin called me nine minutes later.
I let it ring.
He called Nina next.
She answered on speaker while I stood beside her desk, my mouth dry from the cracker.
“I’m having trouble with the recruiting system,” he said.
His voice was calm.
Nina told him his access had been restricted pending review.
There was a pause.
“Is this about the referral cleanup?”
Nina looked at me.
I wrote one word on her pad.
Ask.
“What referral cleanup?” she said.
Another pause.
“We’ve had some candidates using executive names too casually. I was trying to keep strong people from getting buried in the public queue.”
He sounded almost tired.
Helpful.
That was Gavin’s language whenever he wanted a rule to sound like an inconvenience he had kindly removed for somebody else.
Nina asked whether he had personally changed candidate classifications.
“I corrected records when managers told me someone had been referred.”
“Which managers?”
“I’d need to look.”
“Your access is restricted.”
“Then I can’t help you very much, can I?”
He gave a small laugh.
Before Nina could answer, he added, “And if this started with Chloe, you need to be careful. Her sister shouldn’t be directing an investigation into her hiring process.”
He was right about one thing.
I had already removed myself from Chloe’s employment decision.
What he didn’t get was the rest.
“Gavin,” I said, moving closer to the phone, “do not contact any candidate connected to those referral files. Do not contact any outside coaching service. Bring your laptop to Compliance when you return.”
His voice changed very little.
“Of course. I want this handled properly.”
We ended the call.
I took the elevator down two floors anyway.
His office was empty.
A half-finished bottle of sparkling water sat on his desk beside a yellow highlighter with no cap, and the air smelled faintly of reheated soup from the break room.
I stood there long enough to feel stupid, then went upstairs again.
The trip accomplished nothing.
By then Chloe had forwarded Nina the full coaching thread.
Most of it still looked ordinary.
Resume edits.
Mock interview times.
Reminders to speak slowly.
A note from sometime the week before telling her not to over-explain why she had left her last job.
Then Nina found three messages that changed what we had to review.
The coaching firm had not merely told Chloe how to interview.
It had given her the order of topics Harrington interviewers were likely to cover and told her which answer should come first when they asked about conflict with a manager.
Chloe had assumed that was experience.
Nina did not.
Neither did I.
We pulled the interview packets for all seven candidates.
By midafternoon, two department heads had confirmed that portions of the coaching notes tracked internal interview guides closely enough that we could no longer treat the interviews as clean.
The risk had shifted.
A few hours earlier, the question was who had paid for an executive referral.
Now the question was whether someone inside Harrington had also been feeding a private coaching business material candidates were never supposed to receive.
That did not make the scheme larger.
It made it different.
Chloe was the first person to pay for that difference.
Nina had initially believed Chloe might be able to restart the hiring process from the normal screening queue once her false referral was removed.
After we compared the coaching notes with the interview guide, that option disappeared.
Her interview could not be separated from information she should not have had.
At 3:16, Nina told her the application would be withdrawn and that she could apply for a future opening through the public process.
Chloe asked how long that meant.
Nina said she couldn’t promise a date.
I stayed out of the room.
A few minutes later, Chloe came to my doorway holding the temporary CARD by its clip.
“You knew this was possible,” she said.
“Yes.”
“And you didn’t warn me.”
“Nina was making the decision.”
“You’re very good at saying that.”
She put the CARD on my desk.
I moved it into a clear Compliance sleeve without answering.
She watched me do it.
“Mom’s going to say you fired me.”
“You hadn’t started.”
“She won’t care.”
Neither of us said what that meant for Sunday dinner.
Chloe picked up her phone instead.
“Do I get the money back?”
“I don’t know yet.”
She nodded once and left with Nina.
That afternoon, Compliance compared the six earlier candidates with Chloe’s messages.
The amounts were not identical.
Some people had paid for months of coaching, while others had paid separate charges for resume work, interview preparation, or placement support.
Not every candidate had received internal interview material.
All seven had received the same instruction in different wording: if anyone at Harrington asked how they had been referred, they were to describe the referral as direct and avoid discussing the coaching arrangement.
Four had been hired.
Their department managers had conducted real interviews and made real employment decisions.
That complicated the easy answer.
Firing four employees simply because Gavin had corrupted the route into the interview room would have punished people before we knew what they had understood or whether they were qualified for the jobs they were already doing.
Keeping everything untouched would have told every employee that a paid shortcut stopped mattering once it worked.
So Nina separated the questions.
Employment status would depend on qualifications and what each person knew.
The altered referral files would be handled as a separate compliance failure.
Payments would be reviewed separately again.
It was slower.
It was also the first point that day when the process stopped revolving around my anger.
Near five, Gavin finally arrived at Compliance with his laptop.
He had loosened his tie and was carrying a paper bag from the deli downstairs.
“I assumed this might run late,” he said.
He offered the bag to Nina.
She didn’t take it.
Inside were two sandwiches.
Gavin sat down and asked whether he could have water.
During the interview, he admitted changing candidate referral classifications.
He said he believed the executive-referral queue had become too restrictive and that some outside coaches were better at identifying candidates than our public screening system.
“I was trying to get people seen,” he said.
Nina asked why the files contained recommendation letters from executives who had never met the candidates.
Gavin rubbed one thumb across the edge of his paper cup.
“A referral code requires support. The letters gave the system something it could process.”
“They were false.”
“They were administrative.”
Nina did not argue with the word.
She asked about the coaching company.
Gavin said he knew the business and had sent people there before.
He denied receiving candidate payments.
He also denied giving anyone interview questions.
When Nina showed him the topic sequence from Chloe’s messages beside the internal guide, he leaned back.
“Those aren’t exactly secret questions,” he said. “Any experienced recruiter could predict most of that.”
It was the strongest defense he had.
For some of the material, it was even plausible.
But the referral changes were not predictions.
The seven administrator entries had been made from his account.
The false letters had been generated through a template his role could access.
And the complaint from the candidate who had failed an interview had been closed by his own department without being escalated.
By the time the office emptied that evening, we had enough to keep Gavin off the system while the employment review continued.
We did not have enough to pretend every unanswered question was already answered.
Before leaving, Nina mentioned one old outside-activity disclosure in Gavin’s personnel file.
“Career coaching,” she said. “From a couple of years ago.”
I was standing at the sink rinsing out a mug that wasn’t mine.
“Put it with the rest.”
“You don’t want it now?”
“Tomorrow.”
My legs had gone stiff from sitting most of the day, and I had eaten crackers, half a sandwich, and nothing else.
I went home.
The next morning, Gavin’s explanation started to come apart without anyone producing a dramatic confession.
The coaching business on Chloe’s invoice used a trade name, but its billing records and Gavin’s old disclosure pointed back to the same small consulting entity.
He had described the business internally as occasional career coaching for people with no active Harrington application.
That condition mattered.
The seven candidates violated it.
Three of the four employees already hired agreed to a fresh qualification review without complaint.
The fourth asked for time to speak with an attorney before answering more questions, so we gave it to him and did not treat that request as guilt.
Chloe signed a statement describing what she had been told and included the invoice, messages, and payment confirmation.
She did not ask me to save her application again.
By sometime that afternoon, we had also found that Gavin had sent versions of Harrington’s interview framework to the coaching business from his company email months earlier.
Not exact answer sheets.
Not guaranteed offers.
Enough internal structure to make the paid coaching materially different from what ordinary applicants could buy elsewhere.
The company terminated Gavin’s access permanently before his employment review was finished.
Two days later, after he was given the findings and an opportunity to respond, Harrington ended his employment for manipulating applicant records, creating false executive referrals, and failing to disclose prohibited candidate relationships through his outside business.
We removed the administrator shortcut that had allowed one Talent Operations account to convert public applicants into executive referrals without a second approval.
The four existing employees were evaluated by managers who had not participated in their original hiring.
Three remained in their jobs.
One moved into a different role after the review showed he met Harrington’s employment standards but not the technical requirements of the position he had originally entered.
The people who had paid documented placement charges tied to the false Harrington referrals were offered reimbursement while the company worked out its claims against the consulting business.
For a few hours, that looked like the ending.
Gavin was out.
The referral queue had two-person approval.
The candidates had a remediation path.
Chloe’s application was closed.
That evening, I finally opened the outside-activity disclosure Nina had mentioned.
The office was quiet enough that I could hear the cleaning cart bump the door frame down the hall.
I took the last cracker from the packet on my desk, ate it, and unfolded the form.
Gavin had disclosed the consulting business twenty-six months earlier.
The description was narrow: occasional career coaching, no active Harrington candidates, no use of company materials.
Underneath it was the approval history.
Talent Operations had reviewed it.
Compliance had marked it low risk.
Then it had reached the executive batch approval.
My name was on it.
I remembered the batch once I saw the date.
We had been clearing an overdue stack of outside-activity renewals, and I had approved dozens after being told the low-risk items had already been screened.
Gavin had broken the conditions on the form.
That remained his responsibility.
But the form also showed him something I had missed all day.
Harrington had known he owned a career-coaching business.
We had approved it.
Then we built no control that compared his outside activity with the candidate records he could change alone.
I had spent two days treating the incident as a person abusing a system.
My own signature showed the system had helped him stay invisible.
The next morning, I added myself to the incident report under the control failures section.
I disclosed the batch approval to Harrington’s audit committee, removed executive batch approval from the renewed conflict process, and required outside-business reviews involving recruiting staff to be checked against active candidate relationships before approval.
I also authorized candidate reimbursement to proceed without waiting for the company to recover money from Gavin or the consulting business.
That cost Harrington money.
It also put my own approval in the same report that named his misconduct.
I left it there.
Chloe and I did not speak for several days outside the statements Compliance needed from her.
When she finally called, she asked whether I still had the sweater she had left at my house in March.
I said yes.
“Can you bring it Sunday?”
“Sure.”
That was the entire conversation.
Later that fall, another Harrington position opened that matched her experience.
Chloe applied through the public portal.
She received no referral code.
She made it through screening and one interview, then another candidate got the job.
She called me that evening.
“Don’t fix it,” she said before I could say hello.
“I wasn’t going to.”
“I know.”
She was quiet for a second.
Then she asked whether I wanted breakfast the following Saturday.
This time we both ate.
When Compliance formally closed the original case, Nina clipped Chloe’s deactivated CARD to the outside of the archived file.
