Incident reconstruction
How a timeline is assembled from records, observations and changes to the scene.
Cases and examples
See how questions, evidence and limitations are organised.
Published examples are anonymised, historical, educational or demonstrative. They are not claims about current clients.
Illustrative work
What the case archive is designed to show
The purpose is to make the reasoning process visible without exposing confidential information.
Competing hypotheses
How explanations are tested against available evidence rather than selected in advance.
Digital evidence
How originals, copies, metadata and integrity records are separated and documented.
Reading the archive
Important qualifications
A case page must be read together with its source status and stated limitations.
Demonstrative scenarios do not establish performance in another matter. Historical analysis depends on the records available at the time. Confidential client work is not published without an appropriate basis.