USER: JANITOR_SVC

But they weren't identical. Leo overlaid the frames. The second clip was a perfect copy of the first—except the timestamp had been digitally painted over, and a subtle noise filter had been applied to fool basic checks. The event was the same. The reality was a lie.

The janitor himself. Or someone using his credentials.

He traced the network path of the original duplicate. It wasn't created by an automated system. It was injected from a user account.