#primary-sources

Reconstructing an Incident Timeline From Primary Sources

A vendor advisory, a CVE record, a regulator filing, and a researcher's blog post all date the same event differently. Here is the method we use to reconstruct a defensible AI-incident timeline from primary sources — and how we mark the parts we can't pin down.