Chapter 6 - LUCA LEARNED THAT PROTECTION NEEDED AN EXIT DATE

The threat arrived two years after Vanessa’s arrest.
Not from her.
Good.
That mattered.
A former vendor involved in a Moretti contract dispute mailed Luca a letter containing a specific threat and a photograph of our street.
There.
Real risk.
Police report.
Corporate security assessment.
No guessing.
By then Luca and I had been dating for nearly two years.
I still lived in my apartment.
He still lived in the mansion.
Mostly.
Then security called me.
Not Luca.
A professional risk manager.
He said:
“Your address appears in material connected to the threat.”
There.
My stomach tightened.
Then:
“We recommend temporary protective measures.”
Good.
Recommendation.
Not command.
Then options.
Driver after dark.
Exterior patrol.
Building camera review.
Emergency contact.
Location sharing optional.
There.
I chose driver after late shifts for two weeks.
Exterior patrol coordinated with my landlord.
No location sharing.
Good.
Luca wanted more.
Of course.
Then he stopped.
“Do you want me to say what I want?”
I thought.
“Yes.”
Good.
“I want someone with you all day.”
There.
“No.”
He nodded.
Good.
No argument.
Then security reassessed weekly.
Threat sender was arrested after violating a restraining order connected to another dispute.
Police recovered evidence indicating the Moretti threat was credible but not part of a broader team.
Good.
Risk dropped.
The driver ended.
Patrol ended.
Temporary stayed temporary.
That mattered.
Then Luca said:
“I hate this.”
“What?”
“Stopping security when it makes me feel better.”
There.
I understood.
Then:
“It is not for your feelings.”
Good.
He nodded.
That sentence became one of our rules.
Protection must have a risk reason.
And an exit condition.
Then Luca’s company reviewed executive protection practices.
Why?
Because Anna’s file had exposed how Anthony blurred security with surveillance.
There.
Independent outside counsel audited policies.
Good.
They found several legacy problems.
Adult family members enrolled in location tracking by default.
Drivers sometimes reported movements to family-office staff beyond safety need.
Household security notes retained longer than necessary.
There.
No giant criminal scandal.
Bad governance.
Then new standards.
Adult consent for routine tracking.
Defined retention.
Separate executive protection from family-office curiosity.
Good.
No “concerned father” exception.
Then one older executive complained.
“This is how Anthony kept people safe.”
Luca answered:
“This is how Anthony knew where people were.”
There.
“Those are not always the same thing.”
Good.
Then Anna’s old emails influenced policy only as historical context.
Not as marketing.
No Moretti Foundation campaign about privacy.
Good.
Then the hidden lake-house camera.
The camera itself was long gone.
But Luca sold the lake house.
There.
Not immediately.
Two years after the footage.
Why?
He no longer used it.
And every room had become a question.
Good.
He asked Frank if he wanted anything from the property.
Frank said no.
Then Luca asked Anna’s sister? None established.
No.
He asked Anna’s estate lawyer whether any personal items belonged to her family.
Those had already been distributed years earlier.
Good.
Then sale.
Normal market process.
No memorial conversion.
Then Luca kept one thing.
A photograph of Anna standing by the dock.
There.
He asked me:
“Is this strange?”
“No.”
Good.
Then:
“Do you want me to put it away?”
“No.”
There.
“Why would I?”
He looked embarrassed.
Because some people think remarriage or new love requires visual proof the dead person has been demoted.
Not me.
Anna stayed dead.
She also stayed part of Luca’s life.
Both.
Then the film.
Original cassette remained in secure legal storage after police review.
A forensic copy preserved.
No one watched it casually.
Good.
Frank asked once:
“Can it be destroyed?”
Nadia answered:
“Not yet.”
There.
Evidence retention.
Then after criminal matters closed and counsel confirmed no continuing legal hold, Luca had a choice.
Keep.
Destroy.
Archive.
He asked Anna’s estate counsel and Frank.
Why Frank?
Because he brought it.
Not because he owned it.
Good.
Then Anna’s estate counsel recommended preserving one forensic copy with restricted access because it documented privacy violations relevant to estate history.
Luca agreed.
The physical cassette was returned to him.
There.
He did not put it in a family display.
He asked:
“What do I do with this?”
I looked at him.
“You need a hobby that does not involve asking me what to do with old objects.”
Good.
He laughed.
Then he gave it to Nadia for secure storage with the legal copy.
Good.
No shrine.
Then my work.
Assistant Facilities Manager became Facilities Manager.
Three hotels.
Good.
One of them had an old service elevator.
Of course.
It failed inspection.
The engineer recommended shutdown until parts arrived.
The general manager complained because banquets would suffer.
There.
I said:
“Shut it down.”
Good.
Then:
“Can we override for light loads?”
“No.”
Immediate.
The word felt good.
Then we rented temporary equipment.
Staff walked farther.
Banquets cost more.
Nobody got trapped.
Good.
Then one manager said:
“You’re sensitive about elevators.”
I looked at him.
“Yes.”
There.
Then:
“Would the inspection report support reopening?”
“No.”
Good.
“So my sensitivity is irrelevant.”
There.
That became another lesson.
Personal history can alert you.
Evidence still decides.
Then romance.
Luca asked me to move into the mansion.
I said no.
Immediate.
He looked disappointed.
Then:
“The house?”
“Yes.”
There.
“Neutral place?”
“Yes.”
Good.
We rented a townhouse.
Both names on lease.
Proportional expenses.
Luca paid much more.
I paid enough that my savings kept growing.
Good.
Separate accounts.
Joint household account.
No live-in staff.
Cleaning service twice a month.
Then security.
Our townhouse had exterior cameras.
Both of us had access.
Good.
No hidden cameras.
No family-office feed by default.
Then one day Luca’s security chief asked to add a camera covering the alley.
Reason:
Package thefts.
There.
Not threat.
We both agreed.
Good.
Simple.
Then one boundary test.
Luca gave the cleaner permission to enter my home office to replace a window shade.
There.
He forgot my office was excluded.
I came home.
Saw the ladder.
Stopped.
Then:
“Did you authorize this?”
He froze.
“Yes.”
Good.
Then:
“Did you ask me?”
“No.”
There.
He apologized.
No argument.
Then we updated the work order process.
Private rooms required the occupant’s approval unless emergency.
Good.
Marriage-like cohabitation did not erase room-level privacy.
Then I made my own mistake.
I opened one of his security envelopes because it was on our kitchen table and looked like a utility bill.
There.
Not malicious.
Still private.
I told him immediately.
He looked at me.
Then:
“Do I get to give a speech?”
“No.”
Good.
“I’m sorry.”
There.
No one became permanently enlightened.
That kept us tolerable.
Then one night, as we were falling asleep, Luca said:
“I think I want to marry you.”
There.
I looked at ceiling.
“Think?”
“Yes.”
Good.
“Ask me when you know.”
There.
He laughed quietly.
“Fair.”
Then he did not ask for eight months.
Good.
That was perhaps the most convincing thing he could have done.
The security audit also found a smaller habit that bothered me more than the dramatic ones.
Drivers were sometimes asked to report whether adult family members had “arrived safely.”
There.
That sounds harmless.
Sometimes it was.
But nobody had defined who could ask.
A parent.
A spouse.
An assistant.
A cousin.
Good.
So a simple courtesy had become routine location reporting.
Then the policy changed.
If the passenger requested a safe-arrival notice, the driver could send it to the named person.
There.
If the passenger was a minor, guardian rules applied.
If there was a documented safety event, security could act under emergency procedure.
Good.
Otherwise:
No report.
Then one evening I used a Moretti driver after a late event.
The driver asked:
“Would you like me to notify Mr. Moretti when you’re inside?”
There.
I thought.
“Yes.”
Good.
He did.
Another evening:
“No.”
Good.
He did not.
Same marriage.
Same driver.
Different answer.
That tiny question told me the audit had actually changed something.
Then Luca’s cousin complained that the new rules felt cold.
Luca answered:
“Privacy is not cold.”
There.
Then stopped himself.
“Actually, sometimes it is.”
Good.
“People are allowed to choose it anyway.”
There.
That was better.
The company later measured compliance.
Not just policy publication.
Random audits.
Retention checks.
Complaint channels.
Good.
Governance became boring.
That was how I knew it was real.
The townhouse gave us another useful test.
A package disappeared from the front step.
There.
Luca wanted the security company to pull every camera on the block.
I wanted to file the carrier claim.
Good.
We did both, but only within normal scope.
Our own cameras.
Publicly available building footage with permission.
No private access to neighbors’ systems.
The package turned up two houses away.
Wrong delivery.
There.
Nothing criminal.
No surveillance campaign.
Then Luca said:
“This is boring.”
I smiled.
“Good.”
There.
That became another rule.
If the safe answer feels boring, boring may be evidence the system is working.
That was the first time I saw him treat reduced control as evidence of success instead of failure.
May you like
It mattered.
Very much.