21. The Poisoned Shipment
Domain: Common Attacks — Supply Chain, Network, Physical POV: Wren Reading time: ~15 minutes
The shipment of gear-oil arrived at the West Dock on a Thursday morning, and everything about it appeared to be exactly as it should be. The barrels were the correct size and the correct weight. The seals were intact — the Guild’s mark, the inspection stamp, the authorization code. The manifest listed the standard consignment: seventy barrels of refined gear-oil, Grade Three, destined for the gear-chambers of the Middle Ring. The courier — a woman named Petra who had been running the West Dock route for twelve years — presented her credentials without hesitation and her paperwork without apparent anomaly.
Everything was correct. And everything was wrong.
Thread noticed it first — a faint discoloration on the underside of one of the barrels, a stain that was barely visible in the dock’s morning light but that Thread’s rain-colored eyes caught immediately. The stain was the color of old bruises. The color of the Shroud.
“Stop the inspection,” Thread said, and their voice was quiet but carried the unmistakable weight of certainty. “Do not open these barrels. Do not touch them. Evacuate the dock.”
The barrels, when they were examined from a safe distance by engineers in full protective gear, were found to contain not gear-oil but a concentrated solution of Shroud-matter — the gray-violet fog, compressed and suspended in a carrier fluid that would release it gradually over a period of days after the barrels were opened. The seals were genuine — the Guild’s mark was authentic, the inspection stamp had been applied by a legitimate inspector. But the contents had been switched somewhere along the supply route — at a transfer point in the outer territories, most likely, where the Guild’s oversight was less rigorous and the courier’s attention was divided among dozens of simultaneous shipments.
“This is a supply chain attack,” Quill said to the emergency council, his voice tight with the effort of processing something that was simultaneously obvious and devastating. “The adversary did not need to breach the city’s walls. They did not need to smuggle a weapon through the checkpoints. They simply corrupted a shipment that was already scheduled to enter the city — a routine delivery, from a trusted supplier, carried by a trusted courier, inspected by a trusted Guild. Every link in the chain was legitimate. And somewhere along that chain, the contents were switched.”
“If we had opened those barrels in the gear-chambers,” Sable said, “the Shroud would have been released directly into the heart of the Middle Ring’s infrastructure. The gear-trains, the automaton assembly lines, the synchronized mechanisms that keep the city running — all of them would have been corrupted simultaneously. It would have been worse than the gate failures. Worse than the service door breach. It would have crippled the city in hours.”
“But we did not open them,” Wren said. “Thread noticed the stain. The inspection caught the discrepancy. The system worked.”
“This time,” Quill said quietly. “The system worked this time. How many other shipments are already inside the city? How many other barrels have already been opened in gear-chambers and archives and maintenance tunnels, releasing their corruption into places we have not yet inspected?”
The question hung in the air of the council chamber, heavy and unanswerable.
The supply chain audit that followed was the most extensive investigation the Citadel had ever undertaken.
Every shipment that had entered the city in the past three months — not just of gear-oil but of brass fittings and precision components and archival materials and food and medicine and every other commodity that the city depended on — was traced back to its source. Every link in every chain was examined: the suppliers who produced the goods, the couriers who transported them, the Guild inspectors who verified them, the warehouse workers who stored them, the engineers who distributed them. Thousands of transactions. Hundreds of people. A web of interdependence so vast and so complex that no single person could hold the whole thing in their mind.
Wren led the investigation, because Wren had learned, over weeks of crisis, that understanding how things moved through the city was as important as understanding how they were defended. She worked with Tessa and the engineers to map the supply routes — every road, every dock, every transfer point where goods changed hands. She worked with Thread to identify the points where the supply chain was most vulnerable — the transfer points in the outer territories, the unsupervised warehouses, the couriers who worked alone and unmonitored. She worked with Quill to design new inspection procedures — not just checks at the city’s gates but checks at every transfer point along the route, so that a corrupted shipment would be detected long before it reached the city’s walls.
“Trust but verify,” Wren said to the team of inspectors she had assembled — a mixture of Guild veterans and citizen volunteers and, increasingly, the compromised insiders who had chosen to cooperate rather than resist. “We have trusted the supply chain for centuries because it has always worked. But the adversary is inside the chain now — not just at the endpoints but at the links, the transfer points, the places where goods change hands and paperwork is processed. We cannot trust that a shipment is legitimate just because it came from a legitimate source. We have to verify every shipment, every transfer, every link.”
One of the Guild veterans — a woman named Helena who had been inspecting shipments for forty years — raised her hand. “That will slow everything down. Every additional check, every additional piece of paperwork — it adds time and cost and friction to every transaction in the city.”
“Yes,” Wren said. “It will. But the alternative — letting corrupted shipments flow into the city unchecked, opening barrels of Shroud-matter in our gear-chambers, poisoning our infrastructure from the inside — is worse. Friction is not the enemy. Friction is the price of verification. And verification is the price of survival.”
The supply chain audit uncovered seventeen additional compromised shipments — twelve of them already inside the city, their contents either consumed or stored or distributed to end-users before the contamination could be detected. The gear-oil that had been diverted to the black market — that was one. The precision components that had been used to build the voice-devices — that was another. The archival materials that had been treated with a slow-acting corrosive agent, designed to degrade over a period of months and destroy the documents they were supposed to protect — that was the most insidious, because the corrosion was not yet visible, and by the time it became visible it would be too late to reverse.
The cleanup took weeks. Contaminated gear-oil was drained and replaced. Corrupted components were removed and destroyed. Treated archival materials were quarantined and, where possible, restored. The supply routes that had been compromised were suspended until they could be re-secured. And the inspection procedures — the multiple checkpoints, the enhanced verification, the documentation requirements that the Guild veterans had complained about — became permanent features of the city’s infrastructure.
“The supply chain is not just a vulnerability,” Wren said, standing before the council at the conclusion of the investigation. “It is an attack surface — one of the largest and most complex attack surfaces the city has. Every supplier, every courier, every inspector, every warehouse — every single one is a potential point of compromise. And because the supply chain reaches into every corner of the city — the gear-chambers and the archives and the residential districts and the food stores — a compromise anywhere in the chain can affect everything.”
“So how do we protect it?” Magistrate Penric asked.
“The same way we protect everything else,” Wren said. “We reduce the attack surface — consolidate suppliers, simplify routes, eliminate unnecessary transfer points. We verify every link — not just the final delivery but every intermediate step. We rotate the inspectors so that no single person has unchecked authority over any single route. And we assume — always — that somewhere in the chain, a compromise has already occurred. That assumption, more than any specific procedure, is what will keep us vigilant.”
She looked around the chamber at the faces of the people who had spent the past months fighting a war they had not chosen and could not afford to lose. The Shroud was still pressing against the walls. Vale was still plotting in his tower. The city was still struggling to survive. But the supply chain was secure — or as secure as it could be, given the complexity of the threat and the limitations of the resources available. And that, Wren understood now, was what security meant: not perfection, but vigilance. Not a single victory, but an endless series of choices, each one making the adversary’s task a little harder and the city’s survival a little more likely.
The poisoned shipment had been caught. The next one would be caught too. And the one after that.
Because Wren, and the fellowship, and the city they were fighting to protect, would not stop watching.