Evidence and Timeline

The goal is not to collect the most screenshots. It is to build a fact chain another dealer can reproduce.

Build the timeline

1. Fix the Account, Ticket, Symbol, issue and review window.
2. Record each source timezone and align it to Server Time.
3. Sequence request, Order, Decision, Execution, open/close, Tick, Event and Alarm records.
4. Attach the page, stable ID, exact time and search filters to every item.
5. Separate confirmed facts, unknowns and hypotheses. Missing data is not zero or normal.
6. Expand scope only when shared evidence supports it.

Start with Single Order → Single Account → Multiple Accounts → Symbol / Time Window → System Wide, recording the reason for every expansion.

Investigation Result template

Investigation Summary
Account:
Ticket:
Symbol:
Time Window:
Issue:

Evidence
- Holding Time:
- Lots:
- Profit/Loss:
- Entry/Exit:
- Tick:
- Spread:
- Event:
- Similar Orders:
- Related Accounts:

Scope
Single Order / Single Account / Multiple Accounts / System Wide

Junior Assessment
Normal / Watch / Suspicious / Unable to Confirm

Action
Continue Monitoring / Escalate / Handover

Continue to Escalation and Handover.