Watchlist comparison and observation windows

An N/N-1 comparison describes two saved observations of the same exact object. It shows endpoint differences. It cannot show every intermediate movement, the cause of a change or uninterrupted provider coverage.

Reuse the exact WIF identity from L02. N-1 captured_at is 2026-10-02T06:50:30.221Z, with priceUsd 0.26172428980166795 and marketCapUsd 261493378. N captured_at is 2026-10-02T07:00:29.846Z, with priceUsd 0.2609206096228144 and marketCapUsd 260614125. The pair comes from owner-independent public.zecoin_radar_signal_snapshots; no private Watchlist envelope is involved.

Subtract the UTC capture timestamps: 599625 milliseconds, or 9 minutes 59.625 seconds. Subtract N-1 from N using exact decimal input values: priceUsd delta -0.00080368017885355 and marketCapUsd delta -879253. These are derived endpoint computations, not additional provider observations.

Both endpoints preserve review, riskSignalCount=1, onChainRiskSignalCount=0 and revoked mint/freeze authority states. Their equality is an endpoint comparison, not proof that those states never changed between captures. N has supplied JSON generatedAt and capturedAt; N-1 does not. Leave its JSON timestamps UNKNOWN rather than filling them with database captured_at. Provider coverage, missing intervals and within-window behavior are also UNKNOWN. A sampling window is not a surveillance guarantee.

The valid statement is “The saved N value is lower than the saved N-1 value across this window.” The sentence “Price fell continuously for ten minutes while nothing else changed” goes beyond two endpoints and rounds away the actual interval. A price delta does not establish intent, fraud or a financial action.

OBSERVED is bounded to the specified saved artifact or explicitly fictional fixture. INFERRED claims name their inputs and assumptions. Two persisted signal endpoints for one exact object; no private Watchlist state or continuous-monitoring proof. N-1 JSON generation/capture times were not supplied.

UNKNOWN fields remain absent. INSUFFICIENT EVIDENCE does not prove the opposite. No unsupported human attribution, guaranteed safety/profit, financial recommendation or executable transaction follows.

Promoting UI or aggregate fields into raw provider records; substituting dates across sources; inventing hidden identity or links; treating a timestamp or commercial badge as proof.

Produce an endpoint table, interval calculation, price/market-cap deltas and an unchanged-field list. Add a gap register. Correct the statement “Watchlist monitored every event, and revoked authorities prove this change is harmless.”

A two-point historical signal timeline with exact endpoint values, dotted unobserved interval and separate rows for unchanged selected flags. Annotate derived deltas differently from saved observations. Never interpolate a smooth path or label the gap continuously monitored.

SPECIFICATION_ONLY — final visual production is not part of this content run.

• Name the exact artifact and identity boundary.
• Preserve source/time/dataStatus for each claim.
• Keep OBSERVED, INFERRED, UNKNOWN and INSUFFICIENT EVIDENCE distinct.
• Preserve limitations without private data or current substitutes.

• Artifact integrity is distinct from factual completeness.
• Origin and timestamp precision survive reuse.
• A bounded conclusion must survive its unknowns.

P14-L05

Offline evidence-reading exercise only. No provider refresh, private account access, real-money exercise, wallet signing, entitlement change or runtime output generation.

• PAIR: Controller-verified owner-independent WIF N/N-1 pair — Two persisted signal endpoints for one exact object; no private Watchlist state or continuous-monitoring proof. N-1 JSON generation/capture times were not supplied.

HISTORICAL — Two persisted signal endpoints for one exact object; no private Watchlist state or continuous-monitoring proof. N-1 JSON generation/capture times were not supplied.

2026-10-02T07:00:29.846Z (specified product/UI time; not universal provider time)

needs_review