Returns the four derived signals for the window, each stating separately whether it could be measured at all and what it found.

The two are independent, and that is the point. measurable: true with count: 0 means the question was asked and nothing qualified. measurable: false means the window does not hold the inputs the signal derives from — the question could not be asked. A control that cannot fire is otherwise indistinguishable from a clean result, and on a security surface that is the more dangerous of the two.

No signal takes a threshold from the caller. Every bound is derived from the data — a percentile over the window's own sample, a reader against their own trailing median — because a threshold a caller can move is a signal a caller can silence.

Each signal carries the explorer filter the server actually used, so a click opens the contributing rows with nothing re-derived in the browser. HIGH_VOLUME_READ is why: its threshold is a percentile the server computed over this window, a number no client has.

Two kinds of signal, and two units on the ones that have contributors

A signal whose population IS one row predicate carries that predicate in filter and no contributors. A signal whose population is a SET - (reader, subject) pairs, or readers in burst - carries an EMPTY filter and lists its contributors instead, each with the precise predicate for its own rows. An empty filter means the window alone and must never be followed as a link: doing so is how a card reading "4 found" came to open every row in the window.

unit names what count counts and contributorUnit names what each contributor's count counts, and on a set-valued signal they are deliberately different: the card counts pairs or readers, each contributor counts rows. Four pairs containing sixty-three rows are two numbers, and a client that renders them under one phrase is stating something the server did not.

The contributor list is BOUNDED and count is not: the count is the exact population and the list is its top slice by rows, so a client renders "showing N of M" rather than reading the list's length as the answer. An empty list beside a positive count is legitimate - retention can remove the rows between the two reads - and is not an error.

Every contributor filter is expressed in getAllAccessLogs's own declared parameters, so it can be replayed there verbatim.

Every derivation travels as three fields, always all three. derivationKey is derived by convention from the closed signal vocabulary, derivationParams carries every value the sentence interpolates, and derivation is the English sentence itself. A client renders the key in the reader's language when it knows it and falls back to the sentence when it does not — so a threshold that moves reaches the operator in both languages with no client release, and an unknown key is never a blank line.