Awais Khan — Weekly Evidence

About this report. The table below breaks the engagement into weekly periods. Each week links to a full evidence page showing every screenshot captured by Upwork's time tracker, alongside the per-minute keyboard and mouse event counts extracted from the tracker's activity panel.

"Recurring screen" clusters are groups of screenshots where the code visible in the editor is substantively identical (≥90% OCR text match on the cropped code region) yet keyboard and mouse events were being logged throughout. Each cluster card shows a large hero image of the repeated screen, the timestamps of every recurrence, and the total input events logged during those captures. A single code view reappearing 10–20+ times across a workday while hundreds of keystrokes are recorded — with zero visible code mutation — is the primary anomaly this analysis detects.

Per-screenshot flags shown on individual shots include: TIME TRACKER FOCUSED (the tracker itself was the active window — clearest single bot signal), ACTIVITY LOCKED 10/10 (maximum activity with no natural variance across consecutive slots), KEYSTROKES ≠ CODE CHANGE (keyboard events logged while the visible code didn't change), and STASIS STREAK (consecutive near-identical screenshots). Each flagged screenshot that belongs to a recurring cluster also carries a cross-reference note listing every other time the same screen appeared that day.

Click any week label to open the full evidence page. PDF versions are formatted for Upwork dispute submission (landscape Letter, under 25 MB).