The camera was on a tripod.
That was the first thing. The gray sedan had been a vehicle — mobile, anonymous, plausible-deniability built into its form. A tripod was a commitment. A tripod said: we are no longer concerned about being seen watching.
Ethan clocked it from the patrol car at 8:22 AM on the approach to the station lot — east side of the street, forty feet from the main entrance, a man in a gray jacket standing beside the van that the tripod had emerged from. The camera was a professional-grade model, the kind that had a telephoto lens and a housing that suggested it was rated for extended outdoor use. The angle of the lens: not on the patrol bay, not on the staff lot. On the main entrance. The command entrance.
He pulled into the lot and parked.
The Net gave nothing. Static/non-physical. The man with the camera was not a threat in any vector the Net recognized — he was a professional with equipment, doing a job, on a public sidewalk. Legal in every way the law defined legal.
Tim was out of the vehicle before Ethan finished the sign-off. He walked to his usual position for the morning lineup without looking at the camera across the street, which was the Bradford behavior that meant he had already clocked it and filed it in the appropriate register: noted, not yet actioned.
Inside, Ethan ran the man's face against the Board's archive. No prior encounters. The Board pulled the van's plate — logged automatically on the approach — and ran it against the cross-index: registered to a licensed investigation firm. The Pacific Rim Investigative Group, LLC. Licensed by the California Department of Consumer Affairs. Four operatives on the license. Client list: private.
A licensed PI. Which meant his presence on the public sidewalk with a camera aimed at a public building's entrance was entirely legal. No basis to approach. No basis to interfere. No basis to do anything except observe him observing.
The Board continued. Pacific Rim Investigative Group: registered two years ago. Principal address in Culver City. The firm's public professional portfolio — listed on a small website that had clearly been built to satisfy a licensing requirement rather than attract clients — showed generic investigation categories: civil matters, corporate due diligence, insurance fraud. The website had no client names. No case descriptions.
The Board noted that a licensed PI firm run by professional operators who wanted their client relationships to remain confidential would look exactly like this.
Ethan went to briefing.
Three hours into the shift, on a patrol route that took him past the station's east side for the second time, the camera was still there. The man had been relieved by a different man — same gray jacket, different build, different face. The Board logged the second man's face without being asked. The rotation suggested resources and planning rather than a solo operator.
The angle had not changed.
Tim was at the MDT, running a plate on a vehicle that had been flagged for a registration issue two blocks back. The plate came back clean. Tim typed the resolution. He did not look at the camera across the street.
"Three shifts," Tim said.
Ethan looked at the MDT.
"You've been running vehicle-pattern checks in the lot. Three shifts." Tim's eyes were on the MDT. "You're not usually interested in the lot pattern."
The Hollow ran. Tim was not accusing him of anything. Tim was stating an observed fact in the Bradford tone that meant: I have been waiting for the right moment to say this and I have decided the moment is now. I am not asking a question yet. I am making space for you to say something if you are going to.
"I clocked something a while back," Ethan said. "I've been checking if it continued."
"Mm."
"It continued."
Tim drove. He did not ask what the something was. The question was there — the Board could see the shape of it in the specific way Tim's jaw was set, the way he was looking at the road with slightly more deliberate attention than the road required. The question was there and he was choosing not to ask it yet, which was either because he was waiting for a better moment or because he had decided he would let Ethan bring it when Ethan was ready to bring it.
The question had been forming for three shifts. At some point it would arrive.
At the shift's end, Ethan went to his desk. He loaded the Board's archive of the PI's position and camera angle onto his phone from the notes he had assembled across the morning. Two photographs taken from natural angles during the drive-by — the camera appeared in both as incidental background, the way anything appeared in a photograph taken while driving through a neighborhood. Not obviously surveillance photography. Both clean for use.
He called Webb.
"I have photographs of a licensed PI stationed outside the Mid-Wilshire main entrance," he said when Webb picked up. "Camera angle is aimed at the command entrance traffic. I believe this is connected to the Doyle investigation." A pause. "I have the PI firm's registration information. Pacific Rim Investigative Group, LLC, Culver City. The angle is specifically on the command entrance. Not the patrol bay."
Webb was quiet for three seconds. "How long."
"This morning is the first camera I've identified. There was a vehicle-based surveillance pattern prior — gray sedans in two locations in September — but those were mobile and I couldn't bring them cleanly until I had something stationary."
"You've had mobile surveillance since September."
"Yes."
Another pause. Longer than the first. "Send me the photographs."
"Sending now."
"The command entrance." Webb's voice had the specific flat quality it had when he was running the implications and did not want the analysis to show in his tone. "That's where Andersen comes through when she visits."
"Yes."
"The network is watching command movement."
"That's my read."
"I'll update the investigation's security posture," Webb said. "I'll need you to be more aggressive about flagging surveillance going forward. Not just when it's convenient to report." A beat. "I understand the sourcing complications. I am telling you that going forward, the security posture supersedes those complications."
"Understood."
He meant it. He had been holding the counter-surveillance thread since September because every piece of it came with a sourcing explanation he couldn't give cleanly. The PI on the sidewalk was different — public, photographable, documented without involving Naomi or the Board's archive. He had brought it as soon as it was bringable. He heard what Webb was saying about the earlier sedans and filed it in the same place he had filed Webb's "I'm sorry" about Eddie — the acknowledgment of a thing that could not be undone.
The photographs sent. Ethan locked his phone and sat for a moment in the empty station parking lot.
The camera angle was on the command entrance. The command entrance was where Andersen came through when she visited for leadership events. The network had been watching command traffic specifically, not investigation-team traffic, not his movements. The scope had widened.
He needed to be at that community center on October 22.
He had eight days.