Our verification reconstruction has a timeout, disagreeing Python, PLC and controller clocks, and a reused job label after restart. One acknowledgement could fit either attempt. What surviving evidence could assign it without choosing the nearest timestamp?