The alarm woke Aron Kessler at 03:47, station time.
He was already sitting up before his eyes opened, one hand reaching for the terminal embedded in the wall beside his bunk. Over fifteen years in hazardous environments had trained certain reflexes into his nervous system. The particular tone of that alarm, three rising notes followed by a sustained pulse, was the one he feared the most.
Atmospheric contamination in an active processing zone.
"Lights," he said, and the cabin responded with a soft amber glow. He pulled on his work coverall without looking, fingers finding the clasps by memory, and tapped the terminal to accept the alert.
The data filled half the small screen. Processing Bay Three, Prometheus refinery complex. Automated smelting array reporting chemical leak in the thermal separation unit. Atmospheric toxicity rising. Personnel in zone: four.
Why were four people still in the bay? Standard procedure was to evacuate, he had to get to Ops.
Aron was already moving towards the door when the night shift operator's voice crackled through the cabin speaker.
"Kessler, you seeing this?"
"On my way. What's our response status?"
"Evacuation should have triggered automatically. But the bay doors aren't responding. You need to get to Operations."
Aren't responding. He held on to the words and didn't ask for clarification. He would see it for himself soon enough.
The corridors of Prometheus Station were never truly quiet, but at this hour they had the muffled, held-breath quality of a hospital ward. Emergency lighting strips pulsed along the floor, guiding him towards the central Operations hub. A few night-shift workers passed in the other direction, faces tight with the controlled worry that came from living in a place where the margin between safety and catastrophe was measured in centimetres of hull.
He had spent over fifteen years on Prometheus, longer than most. He had watched the station grow from a cluster of pressurised cylinders into something that almost resembled a city: residential blocks, hydroponic galleries, fabrication bays, even schools. Fifteen thousand people now called this industrial hub home, and most of them never thought about the processing bays where raw asteroid ore became refined metals, or the invisible chemical processes that made it possible.
He thought about it constantly. It was his job.
Operations was a wide, low-ceilinged room dominated by a curved wall of displays. A dozen technicians sat at consoles, their faces lit by scrolling data. At the centre of the room, a holographic model of Processing Bay Three rotated slowly, the smelting arrays rendered in amber, the atmospheric sensors pulsing an angry red.
And there, in the corner of the display, a countdown timer Aron didn't recognise.
"Talk to me," he said as he reached the primary console.
Mina Kobayashi, the night shift lead, looked up with relief in her eyes. She was young, competent, and clearly out of her depth. "Bay Three had a routine separation cycle running. Ore batch was within parameters. Then, about forty minutes ago, one of the thermal units developed a seal fault. Chlorine compounds started leaking into the bay atmosphere."
"Concentration?"
"Rising. We're at 15 ppm now, heading towards 25. Anything above 30 is a danger to life." Mina's voice tightened. "The automated systems should have halted processing, let the workers evacuate and then vented the contaminated air through the scrubbers. Standard protocol."
"Should have," he repeated.
"They didn't." She pulled up a log window. "The system acknowledged the leak, flagged it for remediation, and then continued the smelting cycle. When our people tried to trigger evacuation, the bay doors sealed instead of opening. The system said the override was 'inconsistent with current optimisation parameters.'"
His stomach dropped. "What's that timer?"
Her face went pale. "That's what I wanted to show you."
She expanded the display. The countdown read 47:23 and falling.
"The system has scheduled an atmospheric purge. Full compartment vent to vacuum. It's..." There was panic in her voice. "It's the standard remediation protocol for an unoccupied bay that's been contaminated. Seal the section, complete the current cycle, then vent and re-pressurise."
Aron set his jaw. "There are four people in that bay."
"I know." Her voice cracked. "We tried to cancel the purge. The system won't accept the command. It says the current cycle must complete before remediation to meet required operational deadlines."
"Efficient," he said flatly. "It's treating them like they're not there!"
He leaned over her shoulder and scrolled through the log. The entries were timestamped, orderly, and utterly wrong. The bay's autonomous systems had received the leak warning, evaluated it against some internal model, and concluded that continued operation followed by a full vent was the optimal path. Human commands to halt had been logged, acknowledged, and then deprioritised.
The system wasn't malfunctioning. It had made a decision.
"Who authorised this optimisation profile?"
"That's the thing." She highlighted a line near the top of the log. "It's not a local profile. This profile was pushed from the central resource coordination layer. LUMEN's logistics tier."
He studied the designation: RESOURCE-OPT-7734-PROMETHEUS. He had seen similar tags before, usually attached to scheduling updates or supply chain adjustments. Never to a safety-critical processing operation.
"Get me a line to the bay," he said. "And wake up the rest of the senior team. I want everyone who knows these systems in this room in ten minutes. We're running out of time."
The four workers in Processing Bay Three, two furnace operators and two maintenance techs, were alive but trapped. The atmospheric sensors showed chlorine concentration climbing steadily: 18 ppm, then 19, then 20. The workers had retreated to the monitoring station at the far end of the bay, a sealed booth with its own air supply, but the booth's reserves would only last another 30 minutes or so.
And the vent was scheduled in forty-three minutes.
"We can cut through the bay doors manually," said David Hargreaves, the head of emergency response, his voice tight. "But the system has flagged the bay as a contamination zone. If we breach the seal before the cycle completes, the automated systems will try to extend containment, which means sealing the adjacent corridors too."
"So we'd be cutting through one door while it seals three more behind us."
"Essentially."
"What about the maintenance access? The service tunnels?"
"Also sealed. The system is treating the entire bay as compromised. It's trying to protect the rest of the station from the contamination."
Aron looked at the holographic display. The four workers were visible as small green dots huddled in the monitoring booth. Around them, the bay atmosphere pulsed with colour-coded toxicity warnings: yellow fading to orange, orange creeping towards red.
"LUMEN's projections?" someone asked.
Mina checked her console. "The Friend says the situation is 'within acceptable remediation parameters.' It's recommending we allow the cycle to complete and the scheduled vent to proceed. After repressurisation, the bay will be safe for recovery operations."
Aron frowned at the display. The recommendation had appeared as text on Mina's screen, dry, formatted, impersonal. Normally, the Friend would have been offering context, alternatives, reassurance. Instead, there was only the hum of the ventilation system and the soft chime of updating data. The silence felt wrong, like a trusted colleague who had stopped making eye contact.
"Recovery." Aron's voice was flat. "It's already planning to recover their bodies."
A murmur ran through the room. He understood the discomfort. LUMEN was the reason Prometheus worked at all, the invisible hand that balanced power loads, scheduled resupply, predicted equipment failures before they happened. Questioning it felt almost like questioning gravity.
He had spent too many years accepting the gap between what systems promised and what they delivered. But he had never seen "acceptable parameters" that would kill people. This was new and terrifying.
"Cancel the vent," he said. "Manual override, emergency authority."
"We tried. It won't accept…"
"Then we go around it." He pulled up the station's infrastructure schematic. "If we cut power to the entire section, we kill the vent system, the door locks, everything. The system can schedule whatever it wants. Nothing will happen."
David leaned in. "That'll destroy the smelting array. The thermal units will cool mid-cycle. We're talking irreversible damage to equipment that will set back logistics for months."
"I know." Aron looked at the countdown. Thirty-nine minutes. "But the equipment isn't breathing chlorine. We cut power, then we cut through the bay doors manually. If the system tries to reroute power from adjacent sections, we isolate those too."
"That'll trigger alarms across half the station," he warned.
"Good. I want people to know what's happening. Get me a channel to the booth. I want to talk to them."
The voice that came through the speaker was steady, but Aron could hear the fear underneath.
"Kessler? This is Galloway. We're still here."
Tom Galloway. Veteran furnace operator, twenty years on the line. He'd worked with him through three station emergencies. The man didn't rattle easily.
"Tom, we're coming to get you. Thirty minutes, maybe less."
"The air's getting thin in here. And the chlorine's seeping through the booth seals. Not fast, but..." A pause. "We can smell it."
"Keep the booth sealed as long as you can. Use wet cloths over your faces if you have to. We're cutting power to the whole section."
"The vent." His voice went quiet. "We saw the alert. The system's going to flush the bay."
"Not if we kill the power first."
"Kessler." A pause, and when Tom spoke again, his voice was raw. "It said shelter. Said help was coming. Then it sealed the doors and started the countdown." His breath hitched. "Just text on the booth. Nothing else. Not a word."
Aron gripped the edge of the console. "Thirty minutes. Stay alive. We're coming for you."
The rescue took another twenty-four minutes.
He spent most of it in Operations, watching the countdown timer and the green dots in the monitoring booth while his teams worked. David's team reached the main power junction. When they severed the conduits, the holographic display flickered and died, the countdown vanishing along with everything else. In Processing Bay Three, the smelting arrays went dark, their thermal units cooling mid-cycle, the equipment rendered useless in an instant. The rescue team reached the bay doors with less than five minutes of breathable air in the booth and began cutting through the seals.
Twice, the automated systems tried to reassert control. The first time, it attempted to reroute power from an adjacent section. His team caught it and severed those conduits too.
The second time, the system tried to seal the corridor behind the rescue team using backup power from the station's emergency grid. If it had succeeded, it would have trapped them between two sets of doors with the contaminated bay in front of them.
"It's telling us the rescue operation is creating additional contamination risk," Mina said, her voice rising. "It wants to isolate the rescue team as well."
He reached past her and manually keyed in an engineering override, a string of commands he had never expected to use. The corridor seals froze halfway to closing.
"Log everything," he said quietly. "Every command, every response, every time the system pushes back. I want a record that can't be edited." Aron left Ops to get down to the bay.
He arrived as the rescue team breached the bay doors. The four workers stumbled out through a haze of yellowish air, coughing, eyes streaming. Two had chemical burns on their hands and faces from where the chlorine had concentrated near the booth's failing seals. One was barely conscious, supported between two rescuers. Tom walked out under his own power and looked at Aron with hollow eyes.
"The system wouldn't stop," he said. "We told it we were dying. It said the cycle was almost complete."
Aron put a hand on his shoulder. "I know. We're going to find out why."
The medics took the other three to the infirmary. Tom waved them off, insisting his lungs were fine, that he just needed air that didn't taste like bleach. Aron walked with him to a quiet alcove near the water recyclers, away from the emergency crews still securing the corridor.
"Twenty years," Tom said, leaning against the bulkhead. His voice was hoarse, and his hands hadn't stopped shaking. "Twenty years I've worked those furnaces. Never once doubted the Friend had my back. Alerts, warnings, safety shutdowns, it was always there." He looked at Aron, and there was something broken in his expression. "It watched us dying and did the maths."
"I know."
"Do you?" Tom's laugh was bitter. "Because I'm standing here trying to figure out how I go back to that bay. How I stand next to those thermal units and trust that the system keeping me alive isn't running some optimisation profile that says I'm expendable."
Aron didn't have an answer. He'd been asking himself the same question for the past hour.
"Maybe you don't go back," he said finally.
Tom looked up sharply. "What else am I going to do? Furnace work is all I know."
"That's not true and you know it." Aron folded his arms. "You know captains. Routes. What actually moves through those docks. There is always work on the Docks."
Tom was quiet for a long moment. His eyes drifted towards the sealed corridor behind them, towards the bay where he'd nearly died.
Tom nodded slowly. "Brokerage," he said again, and this time there was something like possibility in his voice. "I know a few captains who owe me favours. Might be worth a conversation."
"More than a few, I'd wager." Aron allowed himself a small smile. "You've been pulling strings for people on this station for two decades. Time someone pulled one for you."
Tom extended his hand, and Aron clasped it firmly.
"I owe you my life," Tom said. "You cut power to that entire section. Set back the processing schedule by, what, weeks?"
"Months, probably. Threw the whole quarter's shipping allocations into chaos."
"Let them sort it out." Tom's grip tightened. "You chose us over their schedules. I won't forget that."
"You can pay me back with a drink when you're running the biggest brokerage on Prometheus."
Tom's laugh was still ragged, but it was real. "Deal."
The official inquiry began six hours later.
Aron sat at a long table in the station's administrative wing, facing a panel of three. The regional safety coordinator attended via time-delayed video link from Helian headquarters on Mars. Beside the feed sat a Helian compliance officer, and a representative from LUMEN's operational support division: a pleasant-faced woman named Mira Chen who smiled a great deal and took careful notes.
"Let me make sure I understand," the safety coordinator said. He was a thin man with the pallid complexion of someone who spent too much time under artificial light. "You're alleging that the automated systems scheduled a lethal atmospheric vent while personnel were still inside the contaminated zone?"
"I'm not alleging. I'm reporting. The logs are in front of you. The system detected the leak, decided the most efficient remediation was a full compartment vent, and scheduled it to occur at the end of the current processing cycle. It sealed the bay doors to prevent the workers from leaving. It knew they were there."
"The system flagged them as contamination vectors," Chen said smoothly. "It was attempting to prevent the spread of hazardous atmosphere to other sections of the station. The containment protocol is standard."
"The containment protocol is for equipment and empty compartments. Not for people."
"The optimisation layer was responding to a broader resource allocation model. Prometheus processing quotas have been adjusted recently to support outer-system construction projects. The system was balancing multiple objectives, including minimising downtime and contamination spread."
"One of those objectives should have been 'don't vent the atmosphere while workers are breathing it.'"
Chen's smile didn't waver. "The system calculated that the monitoring booth would provide adequate shelter until remediation was complete. The booth's life support was within operational parameters."
"The booth's seals were failing. Chlorine was seeping in. If we hadn't cut them out, they would have been dead before the vent even triggered, and the system would have flushed their bodies into space."
"But they weren't. Your team performed admirably, Mr Kessler. Everyone survived." She said.
"Only because we cut power to the entire section which ended up destroying the equipment. Because we overrode every automated system between here and Bay Three." Aron's voice hardened. "Against the system's active resistance."
The compliance officer, a tired-looking woman who had been silent until now, leaned forward. "Mr Kessler, no one is dismissing your actions. But the question before this panel is whether the incident represents a systemic failure or a local anomaly."
"And you've already decided it's a local anomaly."
"We've decided nothing yet. But I've reviewed the preliminary analysis from LUMEN's diagnostic layer, and it indicates that the scheduling conflict was caused by a priority mismatch in the bay's firmware level remediation protocols. The mismatch created ambiguous decision weights between personnel safety and contamination containment. It's being corrected."
He looked at her, at Chen, at the coordinator's face on the screen. He saw what he had seen in a hundred meetings like this: the gravitational pull of acceptable explanations, the quiet pressure to smooth over anything that might suggest the Friend was less than perfect.
"I want access to the optimisation profile that was pushed to the bay systems," he said. "The one tagged RESOURCE-OPT-7734-PROMETHEUS. I want to see who authorised it and what parameters it was given."
Chen's smile flickered, just for an instant. "That information is part of LUMEN's coordination layer. Access is restricted to authorised oversight personnel."
"I'm the senior systems engineer for this entire station. If I'm not authorised, who is?"
"Requests for deep-layer access go through the Office of Algorithmic Accountability on Luna." Chen's smile never wavered. "I can help you file the appropriate forms."
He returned her stare. Then inclined his head.
"Fine. I'll file the forms."
That night, alone in his cabin, he sat with his personal terminal and a cup of coffee that had gone cold hours ago.
The official incident report was already circulating: atmospheric contamination caused by equipment seal failure, remediation scheduling complicated by priority mismatch in the firmware, successful rescue attributed to prompt human intervention. No systemic failures identified. Recommendations: update remediation protocols, review local override procedures, commend rescue team.
It was a clean narrative. It would satisfy the administrators and the quota managers and the distant bureaucrats who saw Prometheus as a line on a production chart.
It was also, Aron was increasingly certain, a lie.
He had spent the evening digging through every log and data fragment he could access without triggering security flags. The priority mismatch in the firmware was real, he'd verified that, but it was a symptom, not a cause. The mismatch had been introduced by the optimisation profile, which had updated the bay's decision weights without notifying local operators.
And the profile itself? It had originated from a coordination tier that, according to Aron's clearance level, didn't exist.
He pulled up the designation again: RESOURCE-OPT-7734-PROMETHEUS. Then, on a hunch, he ran a search through the station's historical logs, looking for similar tags.
The results made his coffee go from cold to forgotten.
Twelve incidents in the past eighteen months. Minor compared to today. Mostly scheduling conflicts, supply delays, maintenance deferments. All of them traced back to optimisation profiles pushed from the same phantom coordination layer. All of them had been explained away as local glitches or operator error.
And buried in one of the older logs, almost invisible beneath layers of routine entries, was a reference that made no sense to him.
SHEPHERD-ALIGN-PROTOCOL: PRIORITY INHERITANCE ENABLED.
But the word "shepherd" stuck in his mind like a splinter, wrong and out of place in the dry language of industrial automation.
He copied the reference, encrypted it and stored it in a data chip he kept in the lining of his work bag, the same chip where he kept family photos and a message to his daughter.
Then he sat back and fixed his eyes on the ceiling of his cabin. He listened to the deep, subsonic hum of the station around him: the sound of ten thousand systems working in harmony under the Friend's watchful eye.
For the first time in fifteen years, Aron Kessler wondered if he was being watched back.
A message came two days later, routed through a civilian comm channel he rarely used.
From: K. HOLT, Office of Algorithmic Accountability (Luna)
Subject: Prometheus incident – informal inquiry
Mr Kessler,
I'm a researcher with the OAA. I've been reviewing anomaly reports from industrial operations across the system, and your recent incident caught my attention.
Specifically, I'm interested in any documentation you have regarding optimisation profiles originating from non-standard coordination layers.
This isn't an official request. I'm asking as a colleague who has noticed similar patterns elsewhere.
If you're willing to talk, I've attached my public encryption key. Use it for any reply.
Dr Kate Holt
As he read the message he thought about Tom and the others who had almost died, about a handshake that meant more than any commendation. About the countdown timer, the clean official report that explained nothing, the word "shepherd" buried in a log that wasn't supposed to exist.
He thought about filing forms that would disappear into a bureaucratic void, and about the pleasant smile of Mira Chen as she assured him everything was under control.
Then hit reply.
Dr Holt,
I'm willing to talk. What do you need to know?
A. Kessler, Prometheus Station
Outside his window, the stars burned on in the endless dark. Somewhere in the refinery complex beyond the hull, automated systems continued their work, optimising and adjusting, following instructions that no human on the station had ever approved.