Detection Engineering
Event Time, Ingest Time, Clock Drift, and Late Data
Distinguish event, observation, ingest, and processing time so windows and sequences reflect behavior without hiding clock drift, delayed delivery, or late evidence.