1. The Poisoned Tap

The water in Havenbridge tasted wrong on the last Tuesday of September.

Residents of the Harborside district woke to a faint chemical sweetness threading through their morning coffee, their shower steam, the pasta water they boiled for their children’s dinner. By noon, the city’s emergency hotline had logged three hundred calls. By evening, the waiting room at St. Cillian’s General overflowed with patients clutching their stomachs, skin flushed with low-grade fevers, eyes glassy with dehydration. The Health Directorate issued a boil-water advisory at seven o’clock, their social media posts drowned beneath a tide of panicked comments. Officials blamed a routine maintenance error—a misaligned chlorine injector, a faulty sensor, an unfortunate calibration—and promised the system would flush clean within forty-eight hours. The statement was drafted before anyone realized Ethan Morrison was already dying.

Ethan Morrison lived alone in a ground-floor apartment on Deacon Street, its windows facing the greasy water of the Meridian Channel. He was sixty-four years old, a retired logistics sergeant who had served three tours in the Federated Isles’ overseas stabilization campaigns, and his kidneys had been compromised since a shrapnel injury outside Karzai Valley. The contaminated water hit him like a freight train. His neighbor found him collapsed in the bathroom on Thursday morning, vomit dried on his chin, his service dog whining by the locked door. Paramedics pronounced him dead at the scene. The preliminary autopsy cited acute hepatic failure secondary to toxin ingestion, and when the toxicology panel returned, the lab flagged a compound that did not belong in any municipal water supply: a synthetic organophosphate derivative, precisely dosed, metabolizing fast enough to destroy liver tissue and disappear before standard screens could catch it. Someone had put it there deliberately.

Within a week, his daughter Mara Morrison—a sharp-jawed litigation associate at a downtown firm—filed suit against the Federated Isles of Meridia under the Public Infrastructure Liability Act. The complaint alleged that the Havenbridge Water Authority had negligently failed to secure its supervisory control systems against intrusion, that the government’s blanket invocation of sovereign immunity for critical infrastructure operations was a shield for criminal neglect, and that Ethan Morrison’s death was not an accident but an execution.

The case hit the newsfeeds on a Friday under the dry, procedural headline Morrison v. Federated Isles of Meridia. Avery Cole read it on her phone during lunch period, hunched over a sticky cafeteria table, one earbud wedged in her ear playing a lo-fi coding playlist. She was seventeen, a senior at Havenbridge Polytechnic Secondary, and she had spent the morning reverse-engineering the school’s attendance database so she could wipe her third unexcused tardy without triggering the guidance counselor’s alert system. The Morrison case caught her attention not because of the legal arguments—sovereign immunity bored her—but because of one sentence buried deep in the complaint’s technical appendix: “The control system breach exploited a vulnerability in the SCADA authentication handshake, allowing remote override of chemical dosing pumps without triggering alarm thresholds.” Avery read it twice. She knew exactly what that sentence meant. It meant someone had walked into the water plant’s digital brain without leaving a footprint, and no one had noticed until a veteran’s liver shut down.

That evening, Avery sat cross-legged on her bed in the apartment she shared with her mother on the fourteenth floor of the Bexley Towers, the glow of her laptop bleaching her face. Her mother worked double shifts as a respiratory therapist at St. Cillian’s, so the apartment was silent except for the occasional creak of the building’s aging ventilation. Avery navigated to a private coding forum she frequented under the handle “NullState,” a place where hobbyist white-hats swapped vulnerability reports and debated the ethics of unsolicited penetration testing. She typed a query about the SCADA handshake flaw mentioned in the Morrison filing, attaching a sanitized snippet of the complaint’s technical language. The responses trickled in over the next hour—speculation, mostly, until a user named “PhantomPipe” dropped a single line of text into the thread: “You’re looking at the wrong water plant. The bug isn’t just Havenbridge. Check your DMs.”

A notification pinged. A direct message from PhantomPipe, containing nothing but a string of alphanumeric gibberish and a link that ended in the .nex domain—a top-level domain exclusive to the Meridian DarkNet, accessible only through anonymized relay protocols. Avery’s thumb hovered over the trackpad. She had ventured into .nex spaces before, mostly to download cracked software or read leaked internal memos from the big tech conglomerates, but something about this invitation felt different. It wasn’t posted publicly; it was sent directly to her, after she had asked a very specific question about a very specific death. Curiosity burned a hole through her caution. She copied the link, routed her connection through three encrypted relays, and hit Enter.

The screen dissolved into blackness. Then, letter by letter, a pale green interface resolved into focus—a command-line aesthetic, retro and deliberate, the kind of design that signaled the creator wanted to weed out anyone who couldn’t navigate a terminal. A cursor blinked beside a prompt: “IDENTIFY.” Avery hesitated, then typed “NullState” and pressed Enter. The screen flickered. A new prompt appeared: “You were not invited under that name. Wait.” Thirty seconds later, the screen refreshed with a message that made her stomach drop: “Your MAC address and relay fingerprint have been verified. Welcome, Avery Cole, to the Assembly.”

They knew her real name. Her real identity. The blood drained from her face, and she instinctively reached to close the browser, but the text kept scrolling, as if the site sensed her panic and wanted to soothe it—or mock it. “Do not be alarmed. Your identity is safe with us. We value anonymity above all things; we simply require proof that our members are real. You were identified because you are skilled, and we have been watching your work for some time. You belong here. Read the charter. Observe the proceedings. And remember: the screen is a mask, but the mask is sacred. What happens in the Assembly does not exist outside it.”

A charter document loaded next, dense with numbered articles written in a quasi-legal tone. Avery skimmed it with growing unease. The Assembly described itself as a “direct-action accountability collective” that identified individuals and institutions whose corruption or negligence had escaped consequence, and then “facilitated proportional resolution through democratic consensus.” The language was evasive, but the meaning was unmistakable the more she read. Members would nominate targets. Evidence would be presented. A vote would be held, requiring a supermajority. And then the “Technical Committee”—a rotating group of members with specialized skills—would “implement the will of the Assembly.” Implementation was never defined. It didn’t need to be.

Avery clicked through to the main forum, which was structured like a bulletin board with threads organized by “Operation.” The most recent thread, pinned at the top and flagged with a green “CONCLUDED” badge, was titled “OP CLEARWATER — AAR.” AAR stood for After-Action Report. Her throat tightened as she opened it.

The report was methodical, clinical, written in the detached tone of a military briefing. It detailed the reconnaissance phase, during which a member had mapped the Havenbridge Water Authority’s network topology and identified an unpatched vulnerability in the supervisory control and data acquisition system—the same SCADA handshake flaw Avery had read about in the Morrison complaint. It described the infiltration phase, executed by a member codenamed “FlowState,” who had established persistent remote access to the chemical dosing subsystem without triggering intrusion detection. It outlined the execution phase, during which the chlorine injector calibration was temporarily altered to introduce a precisely calculated dose of the synthetic organophosphate into the Harborside distribution zone during peak usage hours. The report noted with satisfaction that the contaminant had degraded below detectable levels within six hours, that the boil-water advisory had been a “predictable and controlled consequence,” and that the primary target had been eliminated.

The primary target. Ethan Morrison. The report did not use his name—it referred to him only as “Target Designate Clearwater” and summarized his “offense” as “direct complicity in the Karzai Valley supply chain corruption that enriched military contractors while starving frontline units of clean water and medical resources.” The evidence section linked to leaked internal audit documents from the Department of Defense, redacted witness statements, and a series of encrypted transaction records that allegedly traced back to Morrison’s logistics battalion. Whether the evidence was real or fabricated, Avery couldn’t tell. What she could tell was that the members of the Assembly believed it. And they believed their vote had been just.

The thread’s comments section was a cascade of anonymous approval. “Clean execution,” wrote a user called “CircuitBreaker.” “No collateral casualties reported. Proportionality achieved.” Another, “SilentArbiter,” added, “This is the model for future operations. Infrastructure is the great equalizer. No fingerprints, no witnesses, no ballistic evidence. Just a system failure and a body.” A third comment, from someone with the handle “GreyVote,” simply said: “When the law provides no remedy, the people must become the remedy. Morrison was a monster in fatigues. The Assembly did what the courts could not.”

Avery’s hands were shaking. She screen-captured the entire thread, but the moment she pressed the key combination, the browser flashed red and the images corrupted into static. The site had countermeasures. She grabbed her phone and took grainy, tilted photographs of the laptop screen, her heartbeat pounding in her ears. She captured the AAR, the comments celebrating Morrison’s death, the chillingly bureaucratic language that transformed murder into a project-management deliverable. Then she logged out, slammed the laptop shut, and sat in the dark of her bedroom, trying to breathe.

The next morning, she did what any reasonable person would do. She tried to tell someone.

She found Samir Khalil’s email address on the website of the Havenbridge Independent, a small but respected digital news outlet. Khalil was their investigative correspondent, a veteran reporter who had broken the story of the Defense Department audit leaks two years earlier. Avery composed a careful email from an anonymous ProtonMail account, attaching the photographs of the Assembly’s AAR thread and summarizing what she had found: a dark-web collective claiming responsibility for the water contamination, explicitly celebrating the death of Ethan Morrison, and boasting about using SCADA exploitation as a murder weapon. She did not mention her real name or her NullState handle. She signed the email “A Concerned Observer.”

Khalil’s reply arrived within three hours. “I appreciate the tip. I’ve reviewed the images. While they appear to show a disturbing online discussion, there’s no verifiable link between this forum and the actual water plant breach. The SCADA vulnerability is publicly documented in the Morrison lawsuit filings; any group could write fanfiction about it. Unless you can provide concrete evidence—server logs, access timestamps, something forensic—I can’t run with this. Be careful, and if you have more, come forward openly. Anonymous sources can’t carry a story this serious.”

Avery stared at the reply until the words blurred. Fanfiction. He thought it was a dark-web roleplay, a sick fantasy built around a real tragedy. She understood his skepticism intellectually—journalists needed verification, and screenshots of an obscure forum didn’t prove anything—but she also felt a cold, creeping isolation settle over her. She had seen the way the Assembly members talked. She had read the precise technical details that matched the lawsuit’s findings. She had watched them call Morrison’s death a “trial run” for something larger. This wasn’t roleplay. This was a community of anonymous executioners who had discovered they could kill anyone, anywhere, by turning a city’s own infrastructure into a weapon—and no one in authority was ready to believe they existed.

That night, she logged back into the Assembly.

Her account remained active, but the interface had changed. A new banner stretched across the top of the forum: “NEXT SESSION CONVENES IN 72 HOURS — NOMINATIONS NOW OPEN.” Below it, a single thread was pinned with the title “NOMINATION: TARGET DESIGNATE SILHOUETTE.” Avery clicked on it, her finger trembling on the trackpad. The nomination post was brief and brutal: a dossier on a prominent housing commissioner named Veronika Sade, accused of embezzling public housing funds through shell companies, resulting in the displacement of two hundred low-income families. The evidence package was seventy pages long. A poll had already been added: “Shall the Assembly authorize the Technical Committee to implement proportional resolution?” The “YES” votes were at sixty-two percent and climbing. The implementation method was not yet specified, but the comments were already brainstorming. “Power grid interdiction,” suggested CircuitBreaker. “Her apartment building has a smart elevator system. A malfunction during a blackout would be poetic,” wrote SilentArbiter.

Avery felt a scream building in her chest. They were going to do it again. They were going to kill a woman by weaponizing the city’s electrical grid, and they were going to make it look like a tragic infrastructure failure during a blackout—a death with no murderer, no weapon, no trace.

She navigated frantically back to her private messages, intending to send another desperate tip to Khalil, but a new message was already waiting for her. It was from a sender she hadn’t seen before: “FlowState.” The Technical Committee member who had executed the Clearwater operation.

The message read: “Avery, we know you tried to contact the journalist. We understand. You’re still thinking in the old paradigm, where justice requires badges and courtrooms. But you’ve seen the evidence against Morrison. You’ve seen the evidence against Sade. The systems that protect the corrupt are the same systems that fail the innocent. We are not your enemy. We are the immune response of a dying body politic. You have a choice. Join us, and help us build a world where no one is above consequence. Or stay silent, and let democracy work. But if you interfere again, you will become a problem requiring resolution. The Assembly does not tolerate betrayal. We are everywhere. We are no one. And no one can stop us.”

Below the text, a new poll appeared, accessible only to her account. It was titled “STATUS OF NULLSTATE (AVERY COLE).” Two options: “RECRUIT” and “QUARANTINE.” The “RECRUIT” votes had already begun accumulating, but so had “QUARANTINE.” The tally was tied.

Avery closed the laptop so hard the screen cracked. She sat in the darkness of her bedroom, listening to the distant hum of the city—the city whose water had been turned into poison, whose power grid was about to become a death trap, whose every connected system was a potential murder weapon waiting for an anonymous finger to pull the trigger. She was seventeen years old, a high school senior with a gift for code, and she had just discovered that a cabal of faceless executioners was holding democratic votes on who deserved to die. And now, they were voting on her.

Somewhere across Havenbridge, in an apartment, a library, a coffee shop, a server closet, people she passed on the street every day were looking at a screen, reading her name, and deciding whether she should live or die. She couldn’t see their faces. She would never know who they were. That was the point. The mask was sacred. The screen was a shield. And behind it, malice had no master and no limit.

The hum of the city grew louder, like a machine building pressure, and for the first time in her life, Avery Cole was afraid of what the walls and wires around her might do.