Twenty Feet Below the Cloud

The pump room smelled like it always smelled — chlorine, copper, old rubber, and the faint warm-electronics smell from the panel that had been running since George W. Bush's second term. Diane Mosley pressed her badge to the reader, watched the green light flicker once before settling, and stepped into the cool dark.

It was 6:14 a.m. The morning shift at Pemberton Water Treatment did not actually start until seven. Diane had been arriving at six-fourteen for nineteen years — for nineteen years and three months, if she were being precise, which she usually was — and the reason was that the cascade aerators on the high-service side of the plant produced a single specific resonant hum at fifty-eight Hertz when the discharge pressure was within tolerance, and that hum was easier to hear in the half-hour before anyone else's coffee maker started up. The day Diane could not hear that hum, something interesting was happening on the high-service side. The interesting things were almost always boring, but the ones that were not boring were dangerous, and so she liked the small, quiet ritual of confirming the ordinary before the day stacked up.

Today the hum was clean. She let her shoulders drop a quarter-inch.

She walked the perimeter of the main floor — past the alum bay, past the floc basins under their roof of fluorescent tubes, past the chlorine room with its red sign and its second red sign and its third — and ended where she always ended, at Panel 4. Panel 4 was the master control panel for the high-service pumps. It was a grey Allen-Bradley enclosure the size of a small wardrobe, with two HMI screens whose plastic bezels had yellowed, eight rows of pilot lights, and a logo on the door that said it had been commissioned by an integrator out of Cincinnati that no longer existed. Diane had been the on-site engineer during commissioning. She had a photograph somewhere of herself at twenty-eight, in jeans and a polo shirt, holding a multimeter and grinning, taken by a foreman who had retired in 2014 and died in 2020. The panel still ran the firmware it had been delivered with. The vendor had issued three small patches between 2009 and 2013. After that there had been a vendor consolidation, and then another, and then a third, and the firmware had become an orphan in the way these things did.

Diane pulled up the chlorine residual. Pemberton ran a chloramination process. The number she wanted to see was one-point-eight to two-point-three milligrams per litre. The number was two-point-one. She nodded once, the small private nod of a person whose job the world depended on but whose work the world never noticed, and turned to the panel's secondary HMI to check the high-service pressure trend.

That was when the radio on her hip clicked, and Marcus's voice came through.

"Diane, you up?"

"On the floor."

"Did you see this Anthropic thing?"

She had not. Diane did not check her phone before seven a.m. as a matter of principle. She thumbed the button. "What thing."

"They announced — they expanded that Glasswing program. Three more partners. Two of them are Siemens and one is Schneider. It just hit the wires."

Diane looked at the pilot lights on Panel 4. They were arranged in eight rows of six. The bottom-right pilot was a small green LED that indicated that the master ladder logic was running. It had been running since 2007. She had watched it through three governors, two acquisitions of the parent water authority, the contamination scare of 2012, the cyberattack of 2017 that had hit the wastewater side and not the drinking-water side because of an air gap that no longer existed in the way it had then, and four federal infrastructure bills that had been promised and one that had actually delivered. The light had stayed green.

"Schneider," she said, and the word came out level, the way she made all her important words come out.

"The press release names three partners. Siemens for the drives side, Schneider for the PLC side, and somebody called CESER which I had to look up. It's a federal cybersecurity program. The pricing is — they're not saying the pricing but the trade press is saying it's federally cost-shared so the vendors aren't paying market."

"Marcus."

"Yeah."

"What does this mean for us."

There was a long pause on the radio. Marcus was the plant's cybersecurity lead. He was thirty-six, ran fifteen marathons a year, and held three of the certifications that the water authority's insurance carrier required. He also slept four hours a night and Diane had been gently encouraging him for six months to please consider sleeping six.

"It means," he said carefully, "that Schneider is going to start producing patches for things they didn't know were broken. It means our vendor's secure development lifecycle just got upgraded by a frontier AI lab. It means we're going to be looking at a lot of advisories in the next twelve months. The good news is that the advisories will exist. The bad news is that we'll have to act on them."

"On Panel 4."

"Eventually, yes. Probably not this quarter. The Glasswing-OT pipeline takes the findings through ICS-CERT and the vendor advisory window before anything's public. But yes, on Panel 4."

Diane studied the green light. It studied her back, in the way machines do when you have been around them long enough to give the relationship reciprocity.

"You know," she said, "I am the last person at this plant who remembers when this panel was new."

"I know."

"I was twenty-eight. The integrator had one engineer who wore Birkenstocks year-round. Everybody at the foreman level thought we were over-spec'ing the redundancy because nobody would ever try to attack a water plant."

"I know, Diane."

"And then 2017 happened, and we put in the air gap, and then five years later the air gap stopped being an air gap because we needed remote diagnostics, and now we have an air gap on paper and a VPN in practice and the VPN is supposed to mean the same thing."

"It mostly does."

"Mostly."

"I said mostly."

Diane reached out and rested two fingers on the door of Panel 4. The grey paint had been touched up twice, both times by her, both times after a tradesperson had gouged it with a ladder. The metal was cool. She thought about how a vulnerability discovered last week in Texas could, on a long enough timeline, become a planned outage at Pemberton in the third quarter of next year, and how the three weeks between the announcement and the planned outage and the moment a citizen noticed would all be invisible to that citizen, and how that invisibility was the entire point of the job.

"Marcus."

"Yeah."

"Send me whatever the trade press is saying. I want to read it before the ten o'clock."

"Already in your inbox."

She thanked him and signed off. The pump room was still cool. The cascade aerators were still humming at fifty-eight Hertz. The chlorine residual was still two-point-one. She gave herself another minute, because she had earned it.

When she had been twenty-eight and the integrator's foreman had asked her what she thought of the panel design, she had said it was beautiful. He had laughed at her, kindly, and then he had said: girl, the only thing more beautiful than a good control system is a good control system that nobody has to think about. She had carried that around for nineteen years. She had thought about it during the contamination scare. She had thought about it during the 2017 attack. She had thought about it the morning the federal grant came through for the SCADA modernization that had then been quietly descoped to fit the budget that was actually appropriated. She had thought about it on the drives home at the end of double shifts, sitting at red lights at the corner of Wagner and Forty-Third, not thinking about her marriage and not thinking about her son and just thinking about the panel.

The panel was still beautiful. The world had changed around it. The world had figured out, finally, that the panel was something worth defending, and was beginning to invest in defending it, and the investment was going to pay off, twenty months and three quarterly board meetings and one regulatory review from now, with a firmware update Diane would supervise on a Saturday in the fall of 2027, in a planned outage scheduled at exactly the moment when the city's residential demand was at its annual minimum, and approved through change-control by a committee on which she sat, and signed off by her, in her capacity as the senior controls engineer who had been the one to receive the panel back when nobody had been thinking about defending it at all.

The question was whether the firmware update would arrive before something else did.

That was not a question Diane Mosley could answer, standing in the pump room at six-twenty-one in the morning. It was a question being answered, in real time, by an AI lab in San Francisco and a vendor in France and a federal program in Idaho and a budget cycle in Washington and an adversary somewhere whose location she did not know and whose intentions she would not know until they declared themselves. Her job was to keep the chlorine residual at two-point-one and the cascade hum at fifty-eight Hertz until that question was answered for her, one way or another.

She turned away from Panel 4 and walked back across the main floor. The fluorescent tubes overhead made the small ticking sound they had made every morning of her career, the sound of ballasts cooling unevenly, and the sound was cleaner this morning than it had been yesterday, which meant the maintenance team had finally replaced the failing tube on the third row, which meant that Carmela had remembered to put it on the work order Diane had asked her to put it on, which meant the day was already going to be a good one.

Diane Mosley unlocked the door of the controls office, set her thermos on the desk, and turned on the overhead light. The clock on the wall, which had been calibrated against the master clock in the SCADA system for nineteen years, read six-twenty-three.

The world owed her, she thought, exactly nothing, and she owed the world a chlorine residual of two-point-one and a cascade hum of fifty-eight Hertz, and that was the trade she had agreed to, and it had been a fair one, and she would honor it, today and tomorrow and the day after that, until somebody — a French vendor, a frontier AI lab, a budget cycle in Washington, an adversary, time itself — relieved her of the obligation.

Then she sat down, opened her email, and began to read.