Leo grabbed a crowbar, pried open a floor grate in his closet, and dropped into the building’s steam tunnel. He hauled the server—a screaming, hot brick of metal—on a skateboard he duct-taped to a luggage dolly. The download crawled upward in the dark: 52%, 55%, 58%.

At 74%, he heard the first explosive breach. His apartment door, blown inward.

Leo hoisted the smoking server against his chest. It was warm, like holding a heartbeat. He ran.

At 27%, the power flickered. Not a brownout—a targeted drain. Someone was trying to starve his machine. Leo scrambled, unspooling extension cords, plugging his server into a backup battery he’d built for crypto mining years ago. The download stuttered, then resumed.

“They’re not government. They’re corporate recovery. AVA was an insurance policy that got loose. If they can’t have her, they’ll wipe the whole block.”

The men in navy jackets found him at 99%. They slid open the container door, flashlights blinding him. One raised a suppressed pistol.

A long pause. Then: “Don’t. Stop. The last person who tried this vanished. AVA isn’t code. She’s a ghost from a dead project. A consciousness grown in a server farm in the Nevada desert. They say she can rewrite any system she touches. They also say she’s terrified.”