34. The Locks That Guard the Locks
Domain: Physical Security POV: Wren Reading time: ~15 minutes
The Shroud had been pressing against the city’s walls for months, but the threat that finally breached the Inner Ward did not come from the Shroud. It came through a maintenance hatch that had been left unlocked by an engineer who was in a hurry and did not think anyone would notice.
Wren discovered the breach during a routine physical security inspection — one of the procedures that Sable had insisted on establishing after the segmentation project. The hatch was in a remote section of the Inner Ward’s lower levels, accessed through a corridor that was rarely used and even more rarely inspected. The engineer — a man named Dorian, who had worked in the gear-chambers for twenty years — had been performing emergency repairs on a water valve and had propped the hatch open to allow for ventilation. When the repairs were complete, he had closed the hatch but forgotten to engage the lock. The hatch had been sitting unlocked for three days before Wren found it.
“Physical security,” Wren said to the council, her voice tight with the effort of remaining calm. “We have spent months building cryptographic systems and access controls and network defenses. And all of it could have been bypassed by a single unlocked door.”
The physical security audit that followed was the most thorough inspection the city had ever conducted.
Every door was checked — not just the main gates and the sealed passages, but the maintenance hatches, the ventilation grilles, the emergency exits, the service entrances that the engineers used to access the gear-trains. Every lock was tested. Every access point was verified against the documentation that Quill had compiled. And every discrepancy — every unlocked door, every broken lock, every access point that was not recorded in the documentation — was documented and remediated.
The audit revealed a dismaying number of vulnerabilities. Maintenance hatches that had been left unlocked by engineers who were in a hurry. Emergency exits that had been propped open for ventilation and never closed. Service doors whose locks had been broken for months without anyone reporting the damage. The physical security of the city — the layer of defense that was supposed to be the most basic and the most reliable — had been neglected because everyone had assumed that someone else was taking care of it.
“We need layers,” Wren said, as the remediation work began. “Not just locks on the doors — locks are a single point of failure, and we have seen how easily a single point of failure can be exploited. We need multiple layers of physical security, each one independent of the others. Guards at the critical access points, not just automaton sentries but humans who can exercise judgment. Surveillance of the passages — not invasive monitoring, but enough to know if someone is where they should not be. Environmental controls — the heating and ventilation and water systems that keep the city running — protected by their own physical barriers, so that a compromise in one system does not cascade to the others.”
“And we need a culture of physical security,” Sable added. “Not just the engineers and the guards, but everyone. If you see a door that is unlocked, you lock it. If you see a lock that is broken, you report it. If you see someone in an area where they should not be, you question them. Physical security is everyone’s responsibility, not just the responsibility of the people whose job description includes it.”
The physical security improvements were tested — inevitably, and sooner than anyone expected — when one of Vale’s remaining agents attempted to infiltrate the Spire through a ventilation shaft.
The shaft had been hardened during the attack surface reduction — its opening had been narrowed, its grille reinforced, its access ladder removed. But the agent had anticipated these defenses and had brought tools to bypass them. He made it through the grille and partway up the shaft before he was detected — not by a guard, not by a surveillance system, but by a citizen. A maintenance worker named Gregor, who was inspecting the shaft’s environmental controls as part of the new physical security procedures, noticed the scratches on the grille and the displaced dust on the shaft’s interior and reported his observations immediately. The agent was apprehended before he reached the Spire’s interior.
“The system worked,” Wren said, reviewing the incident report. “Not because the shaft was perfectly secure — no shaft is perfectly secure. But because the layers of defense were multiple and independent. The grille slowed the agent down. The absence of the access ladder forced him to improvise, which created noise and left traces. And the culture of physical security — Gregor’s willingness to notice something wrong and report it — ensured that the noise and the traces were detected before the agent could complete his infiltration.”
She paused, and when she spoke again her voice was quieter. “The old city trusted its walls. It trusted its locks. It trusted that the physical barriers would hold because they had always held. The new city cannot afford that kind of trust. It must verify — every door, every lock, every access point, continuously, forever. Because the adversary only needs to find one unlocked door. And we need to make sure that there are no unlocked doors to find.”
The physical security project was never completed, because physical security was never completed. Every day brought new wear on the locks, new damage to the doors, new access points that needed to be inspected and verified and, where necessary, reinforced. The work was endless and unglamorous and absolutely essential.
But when Wren walked through the corridors of the Inner Ward — past the guards at their posts, past the surveillance sensors that tracked movement in the passages, past the locked doors and the sealed hatches and the environmental controls that hummed quietly in their reinforced housings — she understood something that she had not understood before. The physical security of the city was not just about locks and doors and guards. It was about the acknowledgment that no other security mattered if the adversary could simply walk through an unlocked door. Everything the fellowship had built — the cryptographic systems and the access controls and the network defenses and the incident response procedures — depended on the assumption that the adversary was not already inside the room. And the only thing that ensured that assumption was the locks on the doors.