We reconciled the coupons by hand and found one more completion in the monitor than physical inspections. The extra row appears when the connection returns, with the PLC completion already high. I have the retained registers and the earlier saved row, but I do not know whether the number beside the bit identifies the coupon or the inspection attempt. Where would you start?
Ask the PLC author what that number means and when it changes. Keep the earlier row and reconnect capture together. In our result test, checking that the newer attempt stayed pending caught a mistake the final total hid; yours needs the identity settled first.
The number is a reusable coupon position, not an attempt. That explains why matching on it looked so convincing. The authors are defining a carried attempt identity; the old extra row remains flagged rather than silently deleted.