The Killer Was

Rohan Mehta did not jump. He was sedated — four Alprazolam tablets dissolved into his whiskey while he worked late at the office — and then pushed from the 14th floor balcony. At 0.8 mg/L in his bloodstream, he would have been barely conscious: unable to resist, unable to call for help. (E01, E02)

Ananya Rao entered Floor 14 at 22:02 on her own keycard. (E08) Rohan died between 23:00 and 23:20. (E01) She did not exit until 23:28. Cell towers place her phone at Koramangala 4th Block — Innosphere Tower's coverage area — from 19:34 through 23:18. (E15) Her car was in the building basement from 21:44 to 23:31. (E12) Four independent data sources confirm she was there. She told police she was home in HSR Layout all evening. That was a lie.

For six months, Ananya Rao had been secretly selling PaySpark's core asset — its fraud detection algorithm — to a direct competitor: NexPay Solutions. She had written a Python bridge script (aro_nexusBridge_v2.py) that packaged PaySpark's model outputs and sent them to NexPay's Singapore API endpoint. Over 847 API calls. The commercial value of that IP: ₹18–24 crore. (E09, E11, E13)

Rohan found it. Not from a tip — from a routine usage anomaly in their infrastructure logs. He traced the file name, decoded the "aro" prefix as someone's initials, cross-referenced the API key, and landed at NexPay Solutions. He confronted Ananya that Thursday afternoon and gave her 48 hours to come forward before presenting to the board on Friday morning. His notebook entry ends: "If something happens to me — look at the code. Look at the API logs. Find 'aro.'" (E09)

What she had to lose was significant. NexPay Solutions had been paying her through a Singapore shell company — NPX Advisory Ltd — at the rate of approximately ₹48 lakh per month. Over six months: ₹2.88 crore, unreported, routed through a DBS Bank account in Singapore. (E17, E19) Friday's board meeting would have ended not just her career but her freedom.

Ananya didn't wait 48 hours.

Within hours of the confrontation, Ananya had orchestrated a two-part cover-up. First, she messaged Devendra Kulkarni — PaySpark's IT systems administrator, her contact "Dev" — and ordered him to wipe the firewall access logs for the aro_nexusBridge folder. She framed it as a security audit. Devendra complied: he entered Floor 14 at 20:47, spent 16 minutes at his terminal, and left. (E08, E10, E11) He surrendered voluntarily to police the following morning. His immunity statement confirmed: Rohan was alive and at his desk when Devendra left at 21:03. (E16)

Then, at 22:47 — 45 minutes after arriving on Floor 14 — she deleted the source file from GitHub using her own account: aro_cto. (E11, E18) Git history is immutable. Forensics recovered every line of code she wrote.

After pushing Rohan off the balcony, Ananya sat down at his computer. She opened a Word document she had written earlier — at 21:14 that evening, on her own laptop, in just 90 seconds — and sent it to print. The HP LaserJet on Floor 14 printed the "farewell note" at 23:32. (E03)

Rohan Mehta had been dead for between 12 and 32 minutes by then — depending on where within the 23:00–23:20 death window he actually died.

The document's system author field read: ANANYA-CTO-LAPTOP. Her laptop's own event log confirms the RDP connection to Rohan's workstation at 23:27. (E18) The print command was issued at 23:32 — but Ananya had already swiped out of Floor 14 at 23:28 and driven out of the basement at 23:31. She initiated the RDP session before she left, then walked out while it was still running. The session terminated at 23:32:51, one minute after the print fired — when she was already gone.

She had written the note two hours before she killed him.

The financial transfers to ARS Consulting — ₹1.22 crore to a Mauritius entity, all approved by CFO Vikram Shetty — looked damning alongside Rohan's emergency board notice referencing "material fraud by a board-level stakeholder." (E06, E07)

But archived board minutes showed the ARS Consulting engagement was board-approved two months prior, with a conflict-of-interest declaration from investor director Aditya Sharma. Vikram was following authorised procedure. (E14)

The CCTV plate (E04) appeared to match Vikram's company car — but a 1-digit misread (4421 vs 4411) was confirmed when ATM records placed Vikram at a petrol station 1.2 km away at precisely the same time. (E12)

The "material fraud" Rohan intended to expose was never about money. It was always about the algorithm.