Check provenance
Inspect the source, query time, status and original data in a finding. For a file fragment, check the original, page or other locator and checksum. Upload time in BlockSpam is not necessarily the event date.
Examine a relationship
The graph helps identify matching identifiers and relationships in material. An edge does not prove common ownership: multiple customers may share an IP and text may be copied. Identify the supporting observation, its date and any independent confirmation.
Form a conclusion
Distinguish established facts, interpretation, alternatives and missing information. Check a machine conclusion's basis and evidence references. When primary sources are absent or observations conflict, record the limitation and next check rather than a confident attribution.