Tag
evidence-quality
- Aug 20, 2026 Reconstructing an Incident From Partial Evidence A timeline assembled from logs, traces, metrics, and control-plane records is a model with assumptions. Separating what was observed from what the model implies is what keeps the reconstruction honest. observability
- Dec 23, 2024 How Sampling Rules Decide Which Evidence Survives The telemetry left after an incident is a sample drawn by a rule chosen before the question was asked. Tail sampling, log thresholds, and retention turn the surviving data into a biased census. observability