My name is Carol Whitfield. I am a licensed pharmacist of twenty-two years — and when the DEA audit found three controlled-substance entries I never made, I already knew who had made them.

The DEA audit found three controlled substance log entries I didn’t make, on dates I wasn’t in the building, signed with my name – and my brother-in-law looked at them and told me it was a software glitch.

My name is Keisha Fontaine. I am a licensed veterinarian and practice owner. My DEA controlled substance registration is the most consequential document my practice holds. I am personally liable for every entry in the dispensing log. I know that. That is why I kept a shadow log. That is why this is solvable.

I keep a shadow dispensing log. Handwritten, separate from the practice software. Every controlled substance, every patient, every date, my initials. I started it after a dispensing discrepancy at my previous practice – a small difference between physical inventory and the software record that turned out to be a data entry error, not a diversion, but it took three days and a full audit to confirm that. In those three days I understood something permanent: a DEA registrant is personally liable for every entry, which means a DEA registrant cannot rely on a single system maintained by other people. I started the shadow log the week I opened my own practice. I have never missed an entry.

Marty Lennox is my sister Tanya’s husband. He came to work as practice manager eighteen months ago when his marketing firm closed. He had organizational skills. The practice needed someone to manage billing and scheduling and free me to focus on clinical work. I liked Marty. He was easy to be around, competent at the administrative work, and within three months I gave him full software access. Tanya said: I knew you’d get along. She was right, in the way that people are right about the wrong thing.

Year one with Marty: the practice ran smoothly. He built systems. He was organized and precise and handled the things I had been handling badly – the billing follow-ups, the scheduling backlogs, the cash payment reconciliation. I was grateful. A year into his tenure, the monthly revenue looked slightly lower than I expected given the appointment volume. I mentioned it to Marty. He said the mix of services had shifted – more preventive, less surgical, lower average invoice. I checked the appointment mix. It was plausible. I moved on.

I was looking at the wrong number.

In year two, Marty began managing cash payments directly. For efficiency, he said. Some clients preferred paying in cash and the front desk had been handling it inconsistently. Marty built a system. The system was for his own benefit, but it looked like a system, and I thanked him for the organization. Three months before the DEA audit letter arrived, my controlled substance inventory count came up short by twelve units at my quarterly internal check. I assumed a counting error. I ran the count again and it was closer but still off. I noted it in my shadow log and planned to review the dispensing records more carefully. The audit letter arrived before I had time.

The audit found the shortage. The three altered entries in the practice software were the explanation Marty had planted – they showed dispensing quantities that would account for the inventory deficit, in my name, on dates he had chosen carefully: a continuing education conference I had attended, my daughter’s school performance, a personal medical appointment. Three dates I was definitively not in the building. He had used the software’s autocomplete feature to populate my name as the dispensing veterinarian. He did not know about the shadow log. He had never asked about it. He had seen it in the cabinet many times and told me once that it seemed redundant. Every clinical supervisor I had ever had called it best practice. I kept doing it.

The DEA audit letter arrived on a Tuesday. I reviewed the software to prepare and found the three entries. I showed them to Marty. He was calm. Software glitch, he said. I’ve seen it do this before. He was prepared. He had been prepared since he made the entries.

I sat with his explanation for approximately forty-five seconds.

Then I opened the shadow log.

Date one: the continuing education conference. My shadow log entry for that date: blank. Not blank because I forgot – blank because I was not in the building, and the shadow log only records what I personally dispense, and I had not personally dispensed anything because I was in another city at a conference on veterinary pain management. The practice software showed a controlled substance dispensed under my name. My shadow log showed nothing. I cross-referenced with the practice calendar: conference registration confirmed, hotel confirmation confirmed, absence noted.

Date two: my daughter’s school performance. Shadow log: blank. Software: a dispensing entry under my name.

Date three: personal medical appointment. Shadow log: blank. Software: a dispensing entry under my name.

Three dates. Three software entries in my name. Three blank pages in my shadow log.

I understood what this meant. I understood it fully, standing at my desk at 11PM with both records in front of me. A DEA registrant has no good explanation for a discrepancy between their own log and the DEA record unless the DEA record was altered by someone else. I knew what I needed to prove. I also knew that the practice software has an access log – which user credentials created which entry, at what time, on what date. I had administrator credentials. I had never needed to look at the access log before.

I opened it.

Each of the three disputed entries was made from Marty’s practice manager login credentials. Not my clinician login. His. On the dates I was not in the building, Marty’s credentials were the ones that created session entries in my name.

I closed the shadow log carefully and put it in my bag. I did not leave it in the building that night. I took it home because I understood that what I was holding was no longer just a documentation habit – it was the record that did not match the fraud.

I called Constance Fisk at 7AM.

Constance asked me to bring everything: shadow log, access log screenshots, practice calendar, the DEA audit letter. I drove to her office that morning. She reviewed the materials for forty minutes. Then she said: we’re going to meet with the DEA investigator and bring all of this. She also said: do not confront Marty before the meeting. I didn’t.

The meeting was in a conference room at the practice. Keisha, Constance, the DEA investigator, Marty, and Marty’s attorney. Marty arrived in a jacket and tie. He looked organized. He looked like someone who had prepared an explanation.

The DEA investigator opened with the access log.

Mr. Lennox, these three software entries were made from your practice manager login credentials. Can you explain that?

Marty said: I sometimes log entries on behalf of Dr. Fontaine when she’s with a patient – she directs me to do it as part of our workflow.

Constance placed the shadow log on the table. It was open to the three dates in question. She placed my continuing education conference registration beside it. She placed the practice calendar beside that. She said:

On these same three dates, Dr. Fontaine was not in the building. She was at a continuing education conference, a family event, and a medical appointment. She has documentation for each. She also has her shadow dispensing log, which shows zero controlled substance dispensings on these dates – because she was not here to administer any. A practice manager entering a dispensing record for a veterinarian who was in a different city is not a workflow. It is a falsification.

I looked at Marty. He was looking at the shadow log. He had seen it in the cabinet for eighteen months. He had told me it was redundant. He had not known what it was.

I said: I kept a shadow log because I knew I was personally liable for every entry in the DEA record. I knew this before I opened the practice. I have known it for sixteen years. A DEA registrant does not rely on someone else’s system to maintain their own record. That log is mine. Every entry in it is mine. These three entries are not.

Marty’s attorney asked for a recess. Marty stood. He did not look at me. He straightened his jacket lapel – a small, automatic gesture, the kind you make when you need your hands to do something and there is nothing left to do. He followed his attorney out.

Tanya was in the reception area. She had been waiting there since the meeting started. I do not know if Marty had told her why he needed an attorney. I do not know what he told her. I stayed in the conference room. I did not go to the reception area.

The DEA cleared my registration. The civil fraud complaint against Marty proceeded separately – the financial investigation found eighteen months of diverted client payments alongside the log falsification. The DEA audit notation stays in my practice file permanently: audit conducted, resolved with no finding against registrant. When I applied for hospital privileges at a regional veterinary specialty center, the credentialing committee asked about it. I explained the situation. They granted the privileges. I have explained it a total of four times in three years. I have a version of the explanation that takes forty-five seconds and does not require me to name Marty. I use that version. I have become precise about it in the way I have become precise about everything that matters in this practice.

A normal Tuesday morning. I open the shadow log at the beginning of the clinical day. I add the first entry: date, patient, substance, my initials. The handwriting is steady. It has always been steady. The log was the thing that saved my license and it is also just the thing I do every morning, the same way I have done it for sixteen years, the same way I will do it tomorrow.

Marty thought the practice software was the record. He altered the record because he needed the inventory shortage to make sense. He forgot that a DEA registrant who has been doing this for sixteen years doesn’t rely on one system. He forgot the shadow log. He thought it was unnecessary. That is a very specific kind of mistake to make about someone who keeps it