06/04/2026
The project manager quietly overwrote my dynamic Excel formulas with fake numbers to hide a three-million-dollar deficit, completely unaware that I had secretly built a hidden audit macro that recorded every single manual keystroke. My name is Michelle Chang.
I work as a construction estimator at Cargill-Hennessey Construction.
My desk is on the third floor of the office building.
On a Wednesday morning, I was reviewing a concrete formwork bid for the East Vergon Interchange.
The project was a state highway replacement scheduled for a twenty-month build cycle.
The total contract value was forty-one million dollars.
I opened the subcontractor's pricing breakdown.
They had used a labor multiplier of 1.38.
The regional union had recently moved the multiplier to 1.42.
Across six thousand labor hours, that mistake created a seventy-four-thousand-dollar gap.
I called the subcontractor's estimator.
I gave him the correct multiplier.
He sent a revised bid an hour later at 2.374 million.
I do not just fill in spreadsheet cells.
I calculate the math underneath them. Steven Gallagher was the highest-revenue project manager in the firm.
He wore a brown leather jacket to job-site visits.
He carried takeout coffee.
He walked through the office with the relaxed posture of a man who always brought his projects in on time. At 11:42 AM, I ran the monthly cost report for the East Vergon Interchange.
The report generated a clean one-page PDF for the project management team.
I looked at the steel line item.
The PDF showed steel at 1.83 million dollars.
That was 3% under the original budget allowance. I had been following a tariff matter in the trade press.
The commodity steel index price had spiked 12% over the previous four weeks.
The project did not have a locked-in long-position contract with the supplier.
A 12% index spike could not result in a number that was 3% under budget. I clicked into the steel cell on my master estimate workbook.
The dynamic formula was gone.
There was only a typed number.
The number was 1,832,740.
I copied the value to a blank side cell.
I typed in the password to unprotect the hidden commodity index sheet.
I ran the audit log macro. The macro returned twenty rows.
Twenty different cells across the summary tab and four cost-category tabs had been manually overwritten.
All overwrites occurred within the previous fourteen days.
The user account on every single overwrite was SGALLAGHER.
The timestamps were clustered between 5:30 PM and 7:00 PM.
These were evening hours when only Steven and the cleaning crew were in the building.
The overwritten cells covered steel, concrete admixtures, structural fasteners, asphalt cement, and fuel allowance.
The macro automatically recalculated the original dynamic outputs using the real-time commodity feed.
The original dynamic total was $43,112,481.
Steven's hardcoded summary total was $40,236,400.
The deficit between the two was $2,876,081.
Nearly three million dollars. I sat at my desk.
I did not pick up the phone.
I closed the workbook.
I locked my desk drawer.
I walked to the kitchen.
I poured a cup of coffee.
I walked back to my desk.
I opened the workbook again. I confirmed the macro output.
I confirmed the audit log timestamps.
I confirmed the user account.
I confirmed the math.
The math held.
The firm's bonding capacity was capped at forty-five million dollars.
This meant the firm could not run more than four million over the contract value without losing its surety standing.
A three-million-dollar hidden deficit would land squarely on the firm's bonding capacity by the end of the project.
(Read more in the first comment below)