Chapter 26 - THE CORRECTION CODE HAD MY HANDWRITING ON IT

The Inspector General finally completed the casualty-record review.
There was one technical problem.
Homefront Legacy claimed it had never received an authoritative machine-readable correction sufficient to override the original masked fatality feed.
It had received letters.
Yes.
But their lawyers argued:
restricted casualty cases sometimes produced contradictory documents.
The foundation relied on the original database classification until formal correction arrived through the partner feed.
Convenient.
Possibly important.
Then the Army archive located the 2009 protocol-development folder.
I had helped write part of it.
Not casualty law.
Field process.
Our unit had experienced identity-protection problems before.
During planning, somebody asked:
What happens if temporary false-death status escapes into outside systems?
My twenty-six-year-old handwriting appeared in the margin:
Need positive survivor confirmation, not just deletion. Otherwise old copies become permanent truth.
That was me.
I remembered the argument.
Deleting a record does not correct databases already exported.
You need a replacement message.
Someone turned my comment into a procedure.
Every masked casualty record received a paired survivor-validation identifier.
Mine:
R7-114-C
When the protection window ended, the corrected feed should send:
original casualty identifier,
survivor-validation identifier,
status:
RECOVERED / ALIVE
and release authority.
Homefront Legacy’s 2012 correction packet contained:
R7-114-C.
Kessler’s own casualty software manual explained exactly what it meant.
The foundation’s claim that the correction was ambiguous collapsed.
But the real twist sat in their server logs.
In 2014, Homefront Legacy updated its donor database.
A contractor imported the correction feed.
My record automatically changed from:
deceased
to:
recovered/alive.
Then, forty-three minutes later—
an administrator manually changed it back.
User account:
RKESSLER
Raymond Kessler.
No more vague legacy error.
No more inherited database.
He had personally resurrected my death.
Why?
An email sent that afternoon explained.
Fundraising director:
Whitaker profile is featured in Lockwell pitch. Changing status now will require narrative replacement and may jeopardize restricted ask.
Kessler:
Restore legacy status until grant closes. We’ll reconcile later.
Later lasted twelve years.
That was the first half of the twist.
The second was the reason the correction log existed at all.
The software vendor preserved manual reversals because the original casualty protocol required immutable correction history.
Whose recommendation?
Mine.
Another handwritten note:
If somebody overrides alive status, log who did it. Nobody should be able to kill the same person twice on paper without leaving fingerprints.
I stared at the sentence.
Twenty-six-year-old Dana had been less poetic than forty-three-year-old Dana.
But she had understood systems.
The man who kept me dead believed my old classified history protected him from scrutiny.
Instead, the system built during that same history preserved his exact click.
No secret witness.
No newly discovered spy.
An audit log.
Timestamp.
Username.
Action.
Truth in order.
I had not saved myself from Kessler.
Hundreds of people built the process.
But one angry young major had insisted that corrections leave evidence.
May you like
Years later—
they did.