October 2013 — Washington D.C.
Conrad Ellis is not a dramatic man.
He has been in intelligence work for thirty-eight years, long enough to have developed a professional allergy to drama, to the operatic way that younger analysts sometimes narrate their findings, as if the story is the thing rather than the fact beneath it. He values precision. He values patience. He values the particular discipline of sitting with incomplete information and not filling the gaps with assumption.
He has been sitting with the Ethan Reyes file for six months.
It is not officially a file. Ellis has not opened a formal investigation, has not filed a request for enhanced monitoring, has not brought the name to his division chief. What he has is a manila folder — actual manila, actual paper — that he keeps in the locked drawer of his desk at his NSA office in Fort Meade, containing three items: the original financial flag from April, a printout of the public LinkedIn profile for one Ethan Reyes (sparse: bachelor's degree, one prior employer, currently listed as independent consultant), and a single page of notes in Ellis's compressed handwriting.
The notes have grown since April.
In June, a second financial flag came through — a large payment from a Delaware LLC that a deep cross-reference linked to a Microsoft corporate legal entity. The LLC is named Apex Systems. The payment is larger than the Google one. Ellis noted this in the margin of the original page in red pen.
In August, he pulled the incorporation documents for Apex Systems LLC. Standard Delaware filing. One member: Ethan Reyes.
In September, he asked, very quietly, a friend at the FBI's cyber division — not formally, over lunch — whether they'd heard the name. His friend said no.
In October, Ellis requests a quiet background check through normal channels. Nothing alarming. No criminal history, no flagged associations, no foreign travel patterns that suggest intelligence contacts. A clean record so clean it has its own quality: the cleanliness of someone who is either genuinely uninteresting or genuinely careful.
Ellis writes too clean in the margin. Then crosses it out. That's the kind of narrative leap he disciplines himself against.
What he knows is this: a twenty-four-year-old with no prior security clearances, no known team or organization, and a five-year-old laptop has produced findings significant enough that two of the largest technology companies in the world have paid, in aggregate, somewhere north of $150 million for them. In less than a year.
The question Ellis keeps returning to is not what is Ethan Reyes doing — that part seems clear enough. The question is: how.
He is not the only person asking.
Senator Barbara Langford of Virginia sits on the Senate Intelligence Committee. She has sat on it for nine years, long enough to have developed a particular kind of patience for incomplete pictures and a particular kind of impatience for things that should be known and aren't. She is 57, has a background in telecommunications law, and keeps a list — mental, not written — of things that seem to be happening below the waterline of public awareness.
Ethan Reyes does not appear on her list yet.
But her aide, a twenty-eight-year-old named Daniel Park who monitors technology industry financial disclosures with the focused enthusiasm of someone who genuinely enjoys reading SEC filings, has left a note on her desk about unusual payment structures in the technology security consulting space. The note mentions no names. It doesn't have to. It simply says: Someone is finding things that shouldn't be findable. Follow the money.
Langford reads the note on a Tuesday morning between a classified briefing on Chinese cyber operations and a lunch with the chairman of the Armed Services Committee.
She circles one phrase.
Shouldn't be findable.
She writes get me more in the margin and leaves it in Daniel Park's inbox.