He Called It ‘Market Strategy’ — Until I Opened the Audit Trail

I am a power grid reliability engineer at a regional transmission organization, and when I overlaid a generation owner’s day-ahead offers against their own cost-based offer reference and the cold-snap make-whole payments, I realized their VP of trading was getting paid extra for forcing on units he had quietly bid out.
The control room was a cavern of cool LED lighting and the constant, low hum of server cooling systems. Beyond the blast-proof glass, our footprint covered four million customers across two states. I sat at my primary console, tracing a printed day-ahead offer curve with the blunt end of a silver pen. Next to me, David, a junior operator only three months off his training rotation, leaned in close to the array of monitors.
“Look at the bottom of the stack,” I told him, tapping the physical paper. “Minimum-run cost. It is exactly what it sounds like—the baseline dollar amount required just to ignite the boilers and synchronize the thermal unit to the grid.”
David frowned, tracing the arc of the line. “But if they price the minimum-run too high, the day-ahead clearing software just skips them, right? It selects the cheaper generation.”
“Correct,” I said. “The algorithm prioritizes economical power. If you inflate your minimum-run cost, the market software assumes you are too expensive to use. You sit out the day. You clear zero megawatts.”
I slid the printed curve back into its manila folder. It was a simple mechanism, designed to keep the grid balanced and the pricing fair. But simple mechanisms were always the first target for complex men.
Six months earlier, at the annual regional stakeholder dinner in a downtown hotel ballroom, Hal Cordova had poured my wine.
Hal was the Vice President of Trading and Generation Strategy for one of the largest generation owners in our footprint. He wore bespoke suits and spoke with the fluid, practiced cadence of a long-tenured market trader who viewed the entire regional market as his personal trading floor. To him, the RTO was not an authority. It was an arena. And he saw me as a market operations technician inside it. Useful for clearing queues. Predictable. Harmless.
“Competitive markets reward operational excellence, Jenny,” he had said, smiling down at me as the dark red liquid filled my glass. His gold cufflink had clinked against the crystal rim. He believed his bidding conduct was edge of the rules, but strictly on the rules’ side. A lawyer’s hand at the tariff. I had thanked him for the drink. I had not argued.
Now, the region was three days away from a forecasted severe cold snap. The temperature models were dropping. The reserve margins were thinning.
I sat alone at my secondary desk outside the main control floor. The glow of the monitor reflected off the glass partition. On the screen was the dense, unformatted text of FERC Order 2000. I scrolled through the historical tariff language regarding physical withholding. I cross-referenced it with a 2018 enforcement matter from the Federal Energy Regulatory Commission, pulling the exact citation from memory.
An offer is a story a generator tells the market software. The cost reference is a story they filed under FERC oath. The audit trail is a story the market system writes itself. Three of them must agree if the conduct is honest.
I opened the market system to review the incoming day-ahead forecast updates for Hal’s portfolio.
Two specific thermal units stood out.
I pulled the unit-level data.
I opened the generation owner’s cost-based offer reference file.
The numbers did not match.
During the cold-snap forecast updates, the minimum-run offers for those two thermal units had jumped. They were artificially elevated well above their submitted cost-based reference. They were never corrected.
He was pricing himself out of the day-ahead commitment.
But a cold snap meant emergency conditions. It meant the RTO would eventually have to force those units on to maintain regional reliability, overriding the day-ahead schedule. And when the RTO forces a unit on, it pays a “make-whole” uplift.
He was intentionally bidding them out, waiting for the grid to desperately need them, and collecting the uplift.
It was technically inside the market software’s tolerance. It was outside the FERC tariff’s physical withholding prohibition.
I took my hand off the mouse.
I set my pen down on the desk. I aligned its silver clip with the edge of the keyboard. I looked at the dark screen of my muted desk phone.
The memory of the wine glass clinking against his cufflink flashed in my mind. The heavy, unbothered certainty in his voice when he spoke about operational excellence. A man who assumed I relied solely on standard market reports, completely unaware I had access to the raw unit-level offer data inside the system.
High on the wall of the operations bullpen, the digital clock clicked forward.
10:00.
The day-ahead market clearing time.
Routine. Industrial.
I reached back to the keyboard. I pressed ‘Print Screen’ on the audit trail of the bid changes. I saved it to a local drive.
My name is Jenny Bui. I am a power grid reliability engineer. Hal Cordova thought minimum-run offers were a trader’s tool, but he forgot the audit trail keeps its own time.
The next morning, I logged into the market operations data warehouse. I used the read-only credentials I was issued three years ago when I helped architect the unit commitment query. I did not need elevated administrative permissions. I just needed to know where the architecture stored the history.
I pulled the unit-level day-ahead offer data for Hal’s portfolio. I opened a second window on the left monitor. I loaded the generation owner’s cost-based offer reference filings—the baseline operational costs his firm had submitted to the RTO under federal oath.
The offer-vs-cost-reference gap was mathematical. It was undeniable.
I moved to the settlement records. I pulled the make-whole uplift payment history from the previous winter’s localized freezing event. The pattern was a carbon copy. A distinct cluster of make-whole payments on the exact same thermal units. He had bid the minimum-run costs high.
The day-ahead market had ignored them due to the inflated price. The grid had strained. The RTO operators, following reliability protocols, had forced the units on in real-time. Hal’s firm had collected the inflated make-whole uplift payments for saving the grid from a shortage he had artificially engineered.
Hal Cordova believed the conduct was on the right side of the tariff because it was technically inside the market software’s tolerance. He assumed an RTO reliability engineer could not move faster than his firm’s market lawyers.
At 2:00 PM, I walked down the hall to the Market Monitoring Unit. The MMU operated behind keycard-restricted glass. I knocked once on the open door of Thomas, the lead market monitor. He was a former federal investigator. He did not speak in hypotheticals.
“I need you to look at a bid-change audit trail,” I said.
I placed a single printed page on his desk. It showed the third layer of the architecture: the exact timing of Hal’s bid changes relative to the RTO’s cold-snap forecast updates.
Thomas put his reading glasses on. He looked at the timestamps. He looked at the cost-reference delta. He did not ask me if I was sure. He did not ask for a summary.
“He is using the weather forecast updates to time the physical withholding,” Thomas said quietly.
“Yes.”
Thomas removed his glasses. He looked directly at me. He recognized exactly what I had built, and exactly how meticulously I had built it. “Leave the file.”
10:00.
The cold-snap day-ahead market clears at 10:00. Once it clears with the withheld offers, the inflated uplift payment pattern settles into the official market record for that operating day. The hour stops being a clearing ritual. It becomes the moment another operating day’s worth of market harm is recorded into a settlement that has to be unwound through FERC enforcement. It was no longer just time on a clock. It was a deadline for institutional fraud.
That night, my apartment was entirely silent. The kitchen table was covered in paper. I sat under the single overhead light, reading FERC’s published anti-manipulation rule guidance. I cross-referenced the historical enforcement cases line by line, matching the precedent to the audit trail.
I closed the data warehouse on my laptop.
I gathered the printed offer-vs-cost comparisons. I gathered the audit trail excerpts.
I aligned the edges of the paper perfectly. I placed them in a heavy manila envelope. I sealed the clasp. I pressed the adhesive flap flat.
I picked up the desk phone. I dialed the direct line to the RTO MMU.
I drafted the formal MMU referral package. I attached the evidence files. I opened a new document and drafted a parallel written notice. The primary recipient line read: Federal Energy Regulatory Commission, Office of Enforcement Division of Investigations. I cc’d the market conduct divisions of the two affected state Public Utility Commissions.
I saved the drafts.
At 6:15 AM on Thursday, the RTO market operations scheduling notice populated across all primary control room monitors. The red alert banner was reserved for severe system constraints.
The cold-snap forecast had intensified overnight. Temperatures were projecting twelve degrees lower than the Tuesday models. To ensure adequate real-time capacity, the scheduling office was accelerating the day-ahead market clearing for the worst day of the snap. It was moved up by one full cycle.
It would clear at 10:00 tomorrow morning.
If the market software locked at 10:00 with Hal’s inflated minimum-run offers still active, the RTO would be forced to commit his units outside of the merit order. The automated system would generate the make-whole uplift payments. The fraud would become the official settlement record, requiring years of federal litigation to claw back. I printed the scheduling notice. The paper felt rough against my fingers.
At 8:30 AM, I stood at the back of the regional conference center auditorium. The Market Subcommittee was holding its final public stakeholder meeting before the winter protocols took full effect.
Hal Cordova was at the center podium. He wore a tailored navy suit. The projector screen behind him displayed a graph of his firm’s generation availability. It was a masterpiece of selective data presentation.
“Our winter readiness is second to none,” Hal told the room, projecting his voice effortlessly over the low murmur of utility representatives and state regulators. He leaned against the edge of the podium, entirely relaxed. “We have invested heavily in weatherization. We are prepared to run our units at maximum output to ensure grid stability when the region needs us most.”
He paused, letting his gaze sweep over the front row where the RTO market monitors sat. He offered a slight, knowing smile.
“And of course, we are committed to transparent pricing. I know Thomas and his team at the MMU are watching. They keep us all honest.”
A polite ripple of laughter moved through the audience. Hal adjusted his microphone. He was securing the narrative. He was establishing a public record of proactive cooperation, knowing his shadow bids were already queued in the market software, quietly waiting to trigger the multi-million dollar uplift constraint. He stepped away from the podium to shake hands with a state commissioner. His gold watch caught the overhead lights.
I stepped out of the auditorium into the quiet carpeted hallway. I had noticed the original uplift discrepancy seven months ago. I had spent those seven months building the query architecture, verifying the cost-based references, and waiting for a pattern to repeat. I had required absolute mathematical certainty before I spoke. I had let his firm operate through two minor capacity alerts while I compiled the data.
If the accelerated clearing finalized tomorrow at 10:00, that delay would cost the region an estimated four million dollars in fraudulent uplift for this weekend alone. I had seven months. I had the access. I did not act sooner. I required the perfect weapon, and the cost of building it was leaving his hand on the lever while I worked.
I bypassed my desk entirely and walked straight to the executive floor. I swiped my badge at the glass doors of the Chief Compliance Officer’s suite.
Thomas, the MMU lead, was already sitting at the conference table. The RTO Chief Compliance Officer, Sarah Vance, looked up from her monitors as I entered.
“The clearing has been accelerated,” I said.
“We saw the notice,” Sarah said. She picked up the heavy manila envelope I had submitted the night before. “Thomas has briefed me on the referral package. The audit trail is definitive. But FERC takes months to authorize action.”
“We do not have months. We have until 10:00 tomorrow.”
I walked to the table. I placed both hands flat on the polished wood.
“I am formally requesting that the RTO invoke the tariff’s market-power mitigation provision before the 10:00 clearing cycle,” I said. “We have the generation owner’s cost-based reference on file under oath. We have the audit trail proving physical withholding. Override his day-ahead offers. Force them back to the baseline reference.”
Sarah looked at Thomas. Thomas nodded once. He slid a printed copy of the tariff rule across the table.
“If we mitigate his bids manually and we are wrong,” Sarah said, tapping her pen against the envelope, “his firm will sue the RTO for market interference. He will claim we are suppressing legitimate operational costs.”
“We are not wrong,” I said. “The audit trail is not an estimate. The cost reference is his own sworn filing.”
The digital clock on Sarah’s wall read 9:14 AM. The 10:00 clearing cycle for the next day was locked in the queue. The mechanism was armed.
My phone vibrated in my pocket.
I stepped back from the table and pulled it out. It was an automated secure email receipt.
Federal Energy Regulatory Commission. Office of Enforcement Division of Investigations. Notice of Receipt.
I looked up at Thomas. “The referral has been received.”
I turned away from the conference table. I pushed through the glass doors of the executive suite. I walked toward the elevators, the phone still in my hand. I pressed the button for the ground floor. The Market Subcommittee meeting was reconvening for the morning session. I walked toward the auditorium.
At 09:30 AM, I walked down the center aisle of the regional conference center auditorium.
The morning session of the Market Subcommittee had just resumed. Hal Cordova stood at the center podium. The projector behind him displayed a static slide titled System Resilience. He was answering a question from a transmission owner, his hands resting easily on the edges of the wooden lectern.
I stopped at the floor microphone positioned in the third row.
I reached up. I tapped the microphone head once.
The hollow thud echoed through the PA system. Hal stopped speaking. The low murmur of the auditorium ceased.
I looked up at the stage.
“The RTO scheduling office has issued a directive,” I said. My voice carried flat and clear through the speakers. “At 09:55 AM, the RTO will formally invoke the tariff’s market-power mitigation provision on two thermal units in your portfolio.”
Hal did not move his hands from the lectern. He tilted his head a fraction of an inch. The polished, unbothered smile remained, but his posture went entirely still.
“The 10:00 AM accelerated clearing cycle will proceed,” I said. “It will proceed with those units’ day-ahead minimum-run offers overridden and forced back to their sworn cost-based reference.”
The silence in the room was absolute.
“Our offers are inside the market software’s tolerance,” Hal said. The warmth was gone from his voice. The volume increased. “We follow tariff.”
“Tolerance is not the same as cost-based reference,” I said. “The audit trail shows exactly when the offers diverged. It correlates to the minute with the cold-snap forecast updates.”
Hal leaned forward into the podium mic. His knuckles whitened against the wood. “Make-whole uplift is what the tariff pays.”
“Make-whole uplift is what the tariff pays a generator that did not lock its own units out of commitment with offers above cost-based reference,” I said.
I took my hand off the microphone stand. I looked directly at him.
“An offer is a story, Hal,” I said. “The cost-based reference is on file under your firm’s FERC oath. The audit trail is on the RTO market system. The MMU has all three.”
In the front row, a woman wearing a dark blazer stopped looking at the stage. She was a Federal Energy Regulatory Commission Office of Enforcement attorney. She quietly lifted a leather-bound notebook to her knee. She uncapped a silver pen. She did not look up again.
Two seats to her right, a state Public Utility Commission staff representative stopped scrolling on his phone. He picked up a printed packet detailing the state market-conduct notice. He set it completely flat on the desk in front of him. He aligned the edges parallel to the table.
In the second row, Thomas’s lead MMU analyst sat with a clipboard. He wrote one single line. He underlined it twice. He closed the cover of the clipboard.
The structural destruction was already moving through the institutional machinery. The MMU was formally transmitting the market-power referral to the FERC Office of Enforcement. The investigation would fall under 18 CFR Part 1c, the Anti-Manipulation Rule. It would carry Federal Power Act Section 222 enforcement authority. It meant years of civil penalties. It meant disgorgement of previous fraudulent uplift. It meant individual responsibility exposure for the VP of trading.
The trap was closed. The software would clear at 10:00 with the truth, not the forged narrative.
Hal Cordova looked down at his notes. He looked at the FERC attorney in the front row. He looked at the MMU analyst.
He did not argue. He did not apologize. He did not confess.
“I will refer any further questions regarding our bidding strategy to firm counsel,” Hal said.
He closed his presentation folder. He stepped back from the podium. He walked off the stage.
He did not look at me as he walked up the side aisle toward the exit. His firm would retain outside counsel within the day.
I turned away from the microphone. I walked out the back doors of the auditorium.
Three weeks later, the RTO control room remained a cavern of cool LED lighting. I sat at my primary console at the center of the floor. The constant, low hum of the server cooling systems vibrated steadily through the raised floorboards. Facilities had swapped out my terminal hardware over the weekend. The faint, sharp smell of new keyboard plastic hung in the air, mixing with the scent of ozone from the mainframes.
The federal investigation into the generation owner was entirely non-public, but the energy market felt the shift immediately. Hal Cordova’s firm had retained outside counsel within twenty-four hours of the subcommittee meeting. The day-ahead minimum-run offers across their entire thermal portfolio had plummeted back down to their sworn cost-based reference. The artificial capacity shortage had evaporated.
But the institutional correction did not erase the physics of the severe cold snap.
During the worst of the freeze two weeks ago, the region’s capacity had still strained under the sheer drop in temperature. Two specific transmission-constrained pockets on the edge of the grid experienced rolling outages to prevent a larger system collapse. The blackouts in those neighborhoods lasted exactly forty-five minutes.
Yesterday, at the monthly public operations review, a young man had taken the microphone during the open comment period. He was the grandson of a retired teacher living in a senior-housing complex within one of those constrained pockets. Her oxygen concentrator depended entirely on grid power.
When the rolling outage hit in the early hours of the morning, she had been forced to call 911 in the dark.
She survived. Paramedics had arrived with backup cylinders before her baseline dropped too low.
“We are moving her to a different state,” the grandson had told the room, his voice flat, holding a printed copy of our outage map. “Your system held. My grandmother almost didn’t.”
I had sat in the back row of the auditorium. I did not approach the microphone. I did not speak to him after the meeting adjourned. The legal correction was real, and the multi-million dollar uplift fraud had been dismantled before it could permanently infect the settlement records. But those forty-five minutes in the dark were real, too. I could not change his grandmother’s move.
My desk phone screen lit up. A notification from the external mail gateway bypassed the internal filters.
It was an email from Hal Cordova’s personal address.
Jenny. The FERC subpoena is demanding ten years of personal correspondence and trading logs. I was optimizing a flawed architecture. We both know how the market really works. You didn’t have to tear down my entire career over a technicality.
I read the text on the glowing screen.
Only my index finger moved on the mouse.
Delete. Block.
I turned my attention back to the wall of monitors displaying the grid topology. High above the blast-proof glass, the digital clock clicked forward.
10:00.
The day-ahead market still clears at 10:00 every weekday. It will clear tomorrow. I now read 10:00 as the moment I watch a clean run finish on my console and record the day’s settlement summary in pencil into the reliability engineer’s log. I do not feel triumph. I feel the difference between an hour I fought to keep inside the tariff and an hour I get to close on my own signature. The clock reaches 10:00. The clearing solver finishes. The cooling hums. New keyboard plastic still smells faint.
I picked up my silver pen. I wrote the final megawatt count into the ledger.
I signed the daily reliability engineer’s log in pencil.
I closed the engineer’s log gently and walked across the room to refill my coffee.
Hal thought tolerance was the same as truth. He forgot the audit trail had been keeping its own time.
