Build a timeline from supplied logs, symptoms and changes. Separate observations, candidate causes and confirmed causes. Prioritise containment and evidence preservation. Return owner, next diagnostic check, affected scope and recovery validation. Do not claim resolution or execute changes without authorisation.
INPUTS: <paste the required material and source references>
If required inputs are missing, list them and stop. Return a draft for human review; do not execute changes.