Research question
How should incident analysis account for missing, delayed, or contradictory telemetry?
Core idea
Treat telemetry quality as a first-class signal. Incident response should reason about both system behavior and the reliability of the evidence used to infer that behavior.
Why it matters
Without evidence-quality controls, a response system may produce confident explanations from incomplete observations.
Contribution
The work treats completeness, delay, contradiction, provenance, and recovery of telemetry as measurable properties rather than assuming the observation layer is always reliable.
Limitations
Published evaluation results describe the reported experimental setting. Different systems may require different evidence signals, thresholds, and recovery policies.
Status
Accepted public research work on distributed stream processing and evidence integrity.