Corroboration
The second source, clock drift between systems, and what a reconstruction can and cannot establish.
What Makes a Second Source Independent
Why three systems reading one badge are one source, the four kinds of independence that matter, and how to count sources honestly before relying on them.
Building a Timeline From Several Systems
How to assemble a timeline that can be relied on: a common clock, a source column, explicit gaps, and the discipline of building it before forming a view.
When the Records Disagree
The five reasons records disagree, why a constant difference is almost never behavioural, and what to do when the disagreement cannot be resolved.
Reconstructing a Day From Fragments
Assembling a day from systems that were never meant to describe one, labelling the result honestly, and the limits of what a reconstruction can carry.
The Employee's Own Account
Why the person's account is evidence rather than a response, how to take it so it is worth something, and what an account that changes actually indicates.
What to Disclose, and When
What has to go to the employee before a meeting, the material organisations hold back and should not, and how to handle records that contain other people.
Writing Up What the Evidence Supports
How to write a finding that survives being read by somebody else: what each record supports, what is inferred, what is disputed, what is missing.