Finding
Move one level above the incident to name the recurring mechanism, while retaining the person, pathway and limits of the evidence.
How the mechanism works
A moved controller becomes a placement dependency; a changed password becomes cross-device credential inconsistency; a silent watch becomes loss of the notification outcome.
Evidence boundary
Repeated evidence may support a recurring mechanism, but it does not prove that mechanism explains every case.