He had moved an experienced security sergeant to another duty and placed the blonde officer at the inspection table shortly before the federal appointment.
The investigators examined her service record.
She had received prior counseling over confrontational communication with members of the public. One earlier complaint had alleged that she used unnecessary verbal aggression during a routine encounter, although that complaint had not resulted in a sustained disciplinary finding.
The deputy chief had access to those records.
Whether he deliberately selected her because he expected a confrontation remained under investigation.
But the timing was no longer explainable as an ordinary staffing change without further scrutiny.
A more important discovery came from the building's security records.
The senior officer seen watching the confrontation had entered an administrative corridor shortly after the agent arrived.
He had used his credentials to access a records workstation.
Several minutes later, the system recorded an attempt to retrieve information related to a sealed federal liaison file.
The account did not have permission to view the complete record.
The attempt was denied.
A second access request originated from the deputy chief's administrative account.
That one succeeded in opening a scheduling summary showing the evidence-transfer appointment.
The agent examined the audit trail.
Then asked, "Was this access necessary for the chief's meeting?"
The records supervisor answered.
"Not for the deputy's assigned duties that afternoon."
The agent nodded.
"Who authorized it?"
"We haven't found an authorization."
The room became silent.
The records supervisor looked nervous.