Priya was clear about her limits.

She could not reconstruct events from screenshots alone, and some server logs no longer existed.

Then she noticed an overlooked detail in an export attached to the trial exhibits.

The disputed approvals had come from a workstation identifier associated with Monica’s office computer, not my laptop.

More important, the system allowed delegated access, and a configuration file showed that my credentials had been granted to a shared administrative process.

“Does that prove Monica did it?” I asked.