there's a way to actually tell those apart: look at raw firehose delivery, event counts or lag, during the window, instead of the coverage stat. if delivery stayed flat while coverage dipped, it's the eval tool. if delivery actually dropped too, something real broke and came back.