Keep the model as a claim-bearing result about selected evidence until one Method is admitted and the episteme passes A.3.2.
“Several candidates form one concern.”
Return one account per candidate; create a separate comparison subject only for a named use.
“One expert performance proves the reusable way.”
Use it to open a hypothesis; seek several grounded occurrences or lower the result.
“The log is raw fact.”
Name preparation Method, configuration, source, dated Work, correlation, encoding, window, and resulting event-log episteme.
“Unknown means fill the standard field.”
Keep unsupported positions unknown and preserve their use limits. Add a distinguishing question only when it changes the receiving use; a missing field does not commission evidence collection.
“Every recovery needs a full study.”
Stop at the smallest source-traceable candidate or record-only result; enter ME.18 only for specialist reconstruction.