Chronicle the Eleventh · The Grand Audit
How to Pass a Security Audit? Ask Dame Maud
The auditors arrived at dawn, as auditors do, with clipboards and the expressions of men who have seen things filed incorrectly. The court had prepared for weeks. The court had rehearsed ceremonies. The court, subject, need not have bothered, and this is the record of why.
Understand what a security audit is: strangers arrive, ask how the kingdom would survive a siege, and require proof rather than pageantry. The court supplied pageantry anyway, at volume. The trumpets performed a fanfare entitled "Compliance". The Idiot Admin was sent on a long errand in a distant wing, carrying his sticky notes with him, which the court briefly believed solved the sticky notes.
The inspection
The auditors asked to see the walls, and found them patched, every stone, with a mason's mark in the corner: a small, neat M. They asked when. "Spring," said the wall, in effect. They asked who authorised it. Nobody had. It had simply been done, the way weather is done.
They asked to see the backups restored, expecting the usual theatre of the Feast. Dame Maud, Chatelaine of the Realm, produced instead a plain ledger of Februaries: tested, tested, tested, tested, going back forty years, each entry in the same hand, each concluding "restored, verified, put back nicely". The auditors asked why February. "Because nothing else happens in February, sire," she said, to a man who was not the King, causing him to stand noticeably straighter.
They asked who could access the treasury, and Maud produced the list, which was short, and the list of people who believed they could access the treasury, which was long, and the two lists' relationship to each other, which is her hobby. The intern of three summers past was on neither, having been revoked, in her words, "on his way to the leaving party, while the cake was cut. No sense wasting a journey."
Sire, I have reviewed the auditors' working papers, by which I mean I stole them at lunch. Every control they tested, forty-one of forty-one, resolves to the same three words: "Done. Tuesday. M." Sire, I have long suspected the kingdom was held up by something. I had assumed it was spite.
The finding
And yet the audit did not pass clean, subject, and the court owes you the truth of it. One finding. The auditors wrote it gravely, in the manner of men delivering a diagnosis: the kingdom's security depends entirely upon one person. Should Dame Maud ever retire, be indisposed, or take the holiday she has been owed since the previous dynasty, the realm's defences would consist of ceremonies, trumpets, and a horse who cannot be phished but also cannot patch.
The auditors' working papers, the Fool reports, carried one further observation, unnumbered, in a smaller hand: an apprentice in the gallery had their findings pre-written in a catalogue of her own, dated three weeks earlier, with two corrections. The auditors have asked to keep in touch with her. She is considering it.
The learned call this a single point of failure, and they append their dreary footnote with unusual sincerity: write the fixes down, share the knowing of things, let no kingdom depend on one quiet hero, however excellent, for heroes deserve holidays and kingdoms deserve to survive them.
The court turned, ashen, to Maud. She let the silence sit for exactly as long as it deserved. Then she mentioned that the manual has been in the library since 2019. Labelled. Indexed. On the shelf at eye level, beside a sign she made herself, reading "THE KNOWING OF THINGS, VOLUMES I THROUGH IX". Nobody has ever opened it. The librarian dusts it fondly and calls it "the monument".
The court responds
The King, upon reflection, awarded himself a small medal for assembling the team. The trumpets have composed a triumphal march entitled "41 of 41" and perform it at meals. The Idiot Admin returned from his errand and asked if we passed. And the auditors departed at dusk, their verdict sealed, their laptop repaired, for Maud had noticed it wheezing in the hall and removed, without being asked, its forty-seven toolbars. The lead auditor is said to have wept. It is the only finding he did not write down.
Asked for her secret before the whole court, trumpets poised, Dame Maud considered the question with the gravity it deserved. "I mostly turn things off before they break, sire, and back on before anyone notices. Also I read the manual." She then bowed to the trumpets, who did not know what to do, and went to fix the drawbridge, which none of us knew was broken. It was broken, subject. It always is. Somewhere, it always is, and somewhere there is a Maud, and the entire internet stands because of her, humming.
