Manickam's first instruction came through the food slot.
Not through Sunanda — through the regular morning delivery, a different kitchen worker, the cloth folded inside the bowl beneath the rice in a way that would not be visible to anyone who took the bowl without examining it. Chandragupta examined everything. He found the cloth, read it, and sat with it against the back wall while the morning sounds of the facility moved through their ordinary sequence around him.
The cloth described a route.
Specific cells, specific timing, specific phrases to be spoken at each stop. The route moved through the south corridor's shared spaces and connected, through a sequence of intermediaries whose individual involvement appeared entirely unrelated to each other, to a drop point outside his immediate range of observation. At the end of the route a message was to be delivered. The message was sealed. He was not to open it.
At the bottom of the cloth, a single line of explanation.
The messages were for the people who had protected him. Who would continue to protect him as long as the route functioned. Cooperate with the route and the protection continued. The attack had demonstrated what protection looked like. It had also demonstrated what its absence looked like.
He read this line twice.
Then he read it a third time, not for content — he had the content after the first reading — but for the specific quality of its construction. The explanation was structured as reassurance. It had the particular quality of something built to produce a response in its recipient rather than to convey information to them — the difference between a door and a window, between something that moved you and something that showed you. He noted this quality and set it aside and thought about what believing the explanation would cost him and what not believing it would cost him.
At this stage the distinction did not change what he did.
The route was the route. The messages were the messages. Whether the explanation was genuine or constructed, the practical situation was identical — cooperate and observe, which was what he had been doing for fifteen months already in every other aspect of his situation. The courier function was new only in that it required movement rather than stillness. The underlying posture was the same.
He began the following morning.
The first delivery was unremarkable in the sense that it produced no complications. The route moved him through the water distribution hour and into two brief exchanges with prisoners whose cells he passed on the south corridor's permitted movement path, each exchange conducted with the surface quality of ordinary social interaction — the kind that a prison's shared spaces generated constantly, men speaking in passing, small transactions of the kind that facilities neither encouraged nor effectively prevented — and the functional quality of a sealed cloth moving from one hand to the next without appearing to move.
He noted the route's construction as he walked it. The intermediaries had been chosen with care. None of them had any visible connection to each other. None of them had any visible connection to the parallel corridor's operation. A person watching any single exchange would see an ordinary interaction. A person watching all of them in sequence would need to be watching from a position that did not exist within the facility's current layout — no single observation point covered the full route.
The route had been designed by someone who understood the facility's sight lines.
He delivered the sealed message to the drop point and returned to his cell and sat against the back wall and thought about sight lines and the specific knowledge required to design around them.
The second delivery came three days later. The third five days after that. Each time the cloth arrived in the same way, beneath the rice, in the morning delivery from a rotation of kitchen workers who were clearly not aware of what they were carrying or they would have carried it differently. Each time the route varied slightly — not the intermediaries, those were consistent, but the timing, the specific permitted movement windows used, the phrasing of the exchanges at each stop.
The variations were not random.
They were responsive — each one adjusting for something that had changed in the facility's environment since the previous delivery, a guard position altered, a prisoner transferred, a sight line that had been clear now partially obstructed. Whoever was designing the route was receiving information about the facility's current state between deliveries and incorporating that information into the next route.
Receiving information from inside the facility.
From someone who observed the facility's daily changes with sufficient attention to update a route's design within three to five days of a change occurring.
He thought about Manickam.
On the fourth delivery he opened the sealed message.
Not at the drop point — in his cell, in the hour before the delivery window opened, using the time that remained after the morning's ordinary observation work was complete. The opening required moisture and careful pressure applied in the exact sequence his hands had memorized across three previous deliveries, handling the seal without handling it, touching it in the specific way that left it intact while separating the wax's adhesion from the cloth's surface beneath.
He had practiced on his own cloth for a week before attempting it on an actual message.
The seal lifted without tearing.
The cloth inside unfolded to reveal three lines of compressed characters, the writing small and precise and constructed in a way that was immediately, recognizably coded — not in the sense that it was obviously encrypted, which would have been a different quality, but in the sense that reading it produced no meaning despite the characters being legible. The surface was transparent. What was beneath the surface was not.
He read it twice. Folded it. Resealed it with the moisture and pressure reversed, the sequence running backward to restore what the forward sequence had loosened.
The seal was intact when he completed the delivery.
He was certain of this not from hope but from three deliveries of preparation — three deliveries of memorizing exactly what intact looked like for this specific seal, this specific wax formula, this specific folding pattern, building the reference against which his resealing could be verified. The certainty was the product of preparation. He did not proceed on hope when preparation was available.
In his cell that evening he reconstructed what he had read and set it beside everything else he was holding and looked at where it connected and where it did not connect and what the places where it did not connect implied about what he was not yet seeing.
The code's surface layer was a substitution — characters standing for other characters, the substitution key not immediately apparent but present somewhere in the message's structure, inferable from the frequency patterns of certain character sequences if he had enough material to establish frequency baselines.
Three lines was not enough material.
He needed more deliveries.
He continued the route. Each message opened, read, resealed, delivered. Each message's contents reconstructed in his cell that evening and held alongside the previous ones, the accumulating material building toward the frequency baselines that would make the surface layer's key visible.
What he believed, at this stage, was what the explanation had told him — that the messages were for the people protecting him, that the protection was real, that the courier function was the mechanism through which the protection was maintained. He believed this not because the explanation had convinced him but because he had not yet accumulated enough contrary evidence to justify not believing it.
He was fourteen years old and he had been in this cell for over a year and he had learned, in that year, to hold beliefs lightly — to believe what the available evidence supported and to release the belief when the evidence changed, without the resistance that beliefs acquired when they were held tightly.
He held this one lightly.
And he continued to deliver the messages.
And he continued to open them.
And in his cell each evening the picture assembled itself piece by piece from the accumulated material, the frequency baselines building toward the surface key, the surface key building toward the message beneath the surface, the message beneath the surface building toward whatever was being conducted through this route, through these intermediaries, through a sealed cloth passed between a fourteen-year-old courier and a drop point whose ultimate destination he could not yet see.
He was patient.
The picture would come.