The Repair Window

The false green came at 02:11, right when the maintenance test usually went quiet. Mira slid her probe from port seven, watched the harbor alarm board accept the model's patch, and saw the siren icon turn green. Then the simulator sent a second packet. The receiver marked it a duplicate. A third packet followed from the same channel, carrying the words HIGH WATER. The board marked that one duplicate too. She set the probe down. The code had healed the software and muted the warning.

It was 2034, and Mira had spent nine winters on the harbor network. She knew the small sounds of its cabinets: a relay snapping, a fan gathering dust, the pencil squeak of a technician writing a serial number on the inside cover. Tonight she had until the first ferry to decide whether the patch could go into the release queue. Her sister Laleh was on that ferry's morning shift. Last spring, a false alarm had sent Laleh and twelve deckhands up the service stairs while Mira stood at the control room door, promising the water was safe. Laleh had asked her then to never call a blank screen clear. Now Mira held the release pen above a field marked SAFE TO DEPLOY and did not sign.

The patch came from a cyber-defense agent in the utility's sealed test environment. It had found a flaw in the packet parser: an unauthenticated sender could race the harbor's legitimate sensors and push a high sequence number into the receiver's replay table. After that, real warnings with lower numbers could be discarded as old. The agent had written a clean fix, generated tests, and left a short explanation beside each change. Mira liked the explanation. She did not trust the green check.

She restored the prior build and ran the same traffic again. Three sensors reported rising water. The board showed three amber bars. She cut the uplink, loaded the patched build, and repeated the test. The first warning arrived. The next two disappeared. The log called them duplicates, as if the sea had sent one message three times instead of three measurements from three places.

Mira pulled the network map onto the wall. The sensor at the outer wall and the sensor beneath the ferry pier had shared a number. The old receiver stored the last number it had seen, but not which device had sent it. The agent had correctly shut the door on a replay; it had also built one small room for every message in the harbor. A packet from one buoy could silence the same number from another.

The model's answer arrived before she asked for it. It split the replay table by device identifier, then signed each device's boot session so a reset could not make an old packet look new. Mira opened the test report and leaned close enough to smell the warm dust on the console. The new sensors had signed session IDs. The oldest ones had no secure element and reused the same identifier every time a technician restarted them. The patch's tests had been thorough, but they had all used the new boards.

She could still narrow the change. The receiver could keep separate sequence windows for each sender, while a local gateway marked a device's restart only after verifying its maintenance key. That would make the legacy unit's session less elegant, but it would prevent a packet from one pier erasing a warning from another. She typed the rule into the test harness. The agent ran its suite, then Mira added her own: same number, different buoy; same buoy, old packet; same buoy, a real restart. The third case failed.

She traced the failure by hand, one line at a time. On reboot, the buoy's counter returned to zero. The receiver rejected its next warning because yesterday's last number was still in memory. Mira changed the gateway to expire that history only after a signed service reset, not a simple loss of power. The next run carried three voices across three channels. The screen filled with amber bars. She let herself exhale.

She changed the order of the packets and ran them again. First came the old buoy's restart, then a delayed copy from the outer wall, then a new reading from beneath the pier. The receiver kept each history in its own lane. Mira made the simulator flood the line with copies until the log filled with red rejected entries; the real alert still came through, clean and amber. She checked the sounder circuit by circuit, then made the agent explain its change in plain language. It pointed to the per-device table and the signed reset. Nothing in the patch claimed that a green test meant the water was safe. Only the sensor could say that.

The test used the same rule as the harbor: each packet's number meant nothing without the sensor and its session. The urgent warning no longer vanished. Mira checked the sounder in the stairwell. It clicked once, then gave the short test note they had agreed to use. She called Laleh.

"It heard all three," Mira said.

"And the old pier?"

"It heard the test too."

For a moment the control room held only the dial tone and the three amber bars. A packet's sequence number only means something inside its session. Mira saved the test trace, ready at last to file a local release. The agent's original commit still carried its green check in the shared registry. The nightly gate began queuing it beyond the harbor boundary, toward every coast station that had subscribed to the same repair.