Hargrove looked away.
For several seconds, he didn't answer.
The silence was documented.
The most damaging evidence appeared in an older internal review.
A compliance analyst had raised concerns about Project Meridian shortly after the pilot began.
She questioned whether the preliminary screening method was consistent with the bank's published account requirements and whether geographic indicators could create inappropriate differences in service.
The analyst recommended pausing implementation until the model received additional review.
The recommendation was entered into the internal system.
But the final project file described Compliance's review as complete.
Aisha Bennett examined the discrepancy.
She had not approved the program.
Nor had she delegated approval through the usual process.
The independent IT team reviewed the electronic workflow.
It found that the project had been moved to an approved-looking status through a regional administrative account with permission to manage certain operational documents.
That account did not carry the authority to issue compliance approval.
The system's design had allowed the status to be changed without enforcing the required independent sign-off.
The investigators didn't immediately conclude that someone had forged a signature.
The evidence showed an approval-control failure and a potentially misleading representation of Compliance's involvement.
Determining who made the change, and whether they intended to deceive, required further work.
But one point was already clear.
Project Meridian should not have been implemented as an approved compliance-reviewed program under those circumstances.
Aisha brought the finding to the board's audit committee.
For several minutes, the directors were quiet.
Then Robert Ellis asked, "How many other regional projects could be approved through the same weakness?"
The IT representative looked uncomfortable.
"We're examining that now."
Robert turned toward Amelia.
She met his eyes.
For a moment, she felt the full weight of her responsibility as CEO.
The issue was no longer confined to one branch.
If the bank's systems allowed operational staff to present a project as compliance-approved without the required independent authorization, similar problems could exist elsewhere.
Amelia took a slow breath.
"Expand the control review across the company."
The committee agreed.
And the investigation that began with a card on a marble floor became a bank-wide examination of how the organization approved and monitored decisions affecting customers.
That expansion created another problem.
Some directors feared the bank was taking on too much at once.
One board member, a former investment executive, argued that the company should focus on the downtown branch, discipline the responsible employees, and avoid encouraging regulators to examine unrelated operations.