Which of these actually happened first SKEW
A phone crosses a border. A laptop is four minutes fast. A recorder never had its clock set. Sort those three by the time column and the order you get is fiction.
The devices
The declared zone is what the device says its times are in, which is a separate fact from whether the clock is right. The tick is the smallest unit it records: a recorder that writes whole minutes cannot tell you anything finer, and that limit is carried through to every answer.
The anchors
An anchor is one real event that two devices both recorded: a call in the handset log and in the switch record, a person through a door on the access system and on the camera. One anchor fixes the difference between two clocks exactly; a chain of them reaches everything the chain touches, and nothing else.
The events
The clocks, solved
Whether the anchors agree
What changed
The timeline, corrected
The working
How it works
Sort their events by time and the order can be wrong. SKEW corrects each device using anchors, events that two devices both recorded, estimates drift, and reports which events changed order and which pairs are too close to separate. The timeline data stays in this tab.
Doing this often? OBSCURA Case builds the chronology from the documents themselves, each event pinned to its source. On its own, US$4 a month; with everything else, US$9 a month or US$79 a year. 7 days free.