The Pharmacy Board office had none of the broken glass or ER alarms of the previous days. It had a long table, recorders, case folders and the kind of silence that made every sentence feel permanent.
Leila arrived carrying the comparator file. Zawadi stopped her before she put it down.
“Disclosure first.”
Samwel sat as a clinical observer. Leila read her declaration aloud: a close relative had a potentially related exposure through the supply chain; the relative's consent was limited; Leila had identified the first distributor-code similarity.
“What do you want to keep controlling in that part of the case?” Zawadi asked.
“I want Nuru's sample moved quickly. Changing leads costs time.”
“That wasn't my question.”
Leila fell silent.
“You have a conflict,” Zawadi said. “That does not erase what you know. It does limit your control over decisions involving Nuru.”
“She has worsening symptoms.”
“Which is why recusal matters more, not less.”
Samwel leaned forward. “You can still be her sister and a clinical contact if she wants. Sample approval, consent interpretation and conclusions about her exposure should belong to someone else.”
Leila hated how reasonable it sounded. “Easy for you.”
“Yes,” Samwel said. “She isn't my sister.”
Zawadi slid the recusal form across. Nuru's sample would be approved by an independent university lead. Leila could provide documented lot and supply-chain history, but she would not direct the personal sample analysis.
“And if she has another episode?”
“Emergency care proceeds. Recusal is not abandonment.”
Leila signed.
The cost was immediate. Her phone would no longer receive Nuru's consent updates. A privacy officer created an independent route. Clinical safety results would go to Nuru through a clinician of her choice; Board analysis would go to the investigation; Leila would see only de-identified information relevant to the supply review unless Nuru chose otherwise.
“If her pattern becomes the biggest clue?” Leila asked.
“Then the biggest clue still belongs to its owner,” Zawadi said. “An investigation that survives only by breaking consent is a weak investigation.”
The privacy officer called Nuru on the official line.
“We are requesting an independent blood sample and symptom history for adverse-event review. You may allow the test and refuse company data sharing. You may also refuse the test.”
“I agree to the test,” Nuru said.
“May the data be shared with Nocturne Care?”
“No.”
“With Board investigators?”
“For adverse-event review, yes.”
“With Leila Msuya?”
A pause.
“I'll decide what clinical safety results I share with her as my sister. She is not the investigator of my sample.”
Zawadi looked at Leila. The boundary had not been imposed on Nuru; Nuru had written it herself.
Nuru chose a blood-draw site that belonged to neither Nocturne nor Kioo. That hurt Leila more than she expected, but it also proved the choice was real.
After the meeting, Leila started to text: I heard you. I won't go around your consent. She deleted a second sentence that sounded like a threat disguised as concern.
Nuru replied with a single thumbs-up.
Leila left without Nuru's file in her hands. For the first time, an important part of the case was moving forward without her control.
The meeting also set an emergency-access rule. If Nuru became unable to decide during a severe episode, clinicians could open only the minimum safety flags needed for treatment, and every emergency access would create a timestamped audit entry. Recusal would not block care; urgency would not silently unlock the entire file.
For Leila, that distinction was uncomfortable and useful. She had lost authority over one branch of the investigation without losing the right to answer her sister's ordinary messages, bring food or sit beside her if invited. The system was forcing her to separate roles she had previously carried in one hand.
Nuru had agreed to testing, but not to sending her data to Nocturne.