Timeline
What changed?
A snapshot names a risk; the timeline names the cause — exposure did not drift on its own, workloads moved it.
No pair yet?authored sample — the same demo estate 30 days apart, across a consolidation
Real collected snapshots
These two files were produced by the collector against the kind lab cluster, 79 minutes apart — no hand-editing. The facility map was rated between the collections, so part of what moved is the model, not the workloads. They load through the same validator as your upload.