The recipe uses `exec_count` ordering but I need raw digest-level counts from slow query logs. Let me check the `sql` subcommand help and the data-proxy subskill to understand the right query shape.Now I have all I need. I'll use the `sql` subcommand with `slow_query_logs` for both windows. The date partition is `20260721`, and I need to use epoch-second `time` predicates. Let me run both queries in parallel.Both queries returned 10 rows. The summary only shows 3 samples each — I need the full rows. Let me read the persisted evidence file to get all 10 rows for each window.I have all the data. Now let me build the final JSON output with the proper fields, SQL truncated to 200 chars, and sorted by occurrence_count DESC then digest lexicographic.```json
{
  "cluster_id": "10989049060142230334",
  "comparison": {
    "previous_window": {
      "start": "2026-07-21T02:50:00Z",
      "end": "2026-07-21T03:00:00Z"
    },
    "current_window": {
      "start": "2026-07-21T03:00:00Z",
      "end": "2026-07-21T03:10:00Z"
    }
  },
  "evidence_sufficient": true,
  "new_sql_digests": [
    {
      "sql_digest": "2d142ccf344650a9226ea89d072cdae8eeb850fff82d96e8bf0406cdf52ee69f",
      "sql_statement": "SELECT `dh_active_receive_logs`.`id`,`dh_active_receive_logs`.`activeType`,`dh_active_receive_logs`.`useridx`,`dh_active_receive_logs`.`username`,`dh_active_receive_logs`.`account_type`,`dh_active_rec",
      "occurrence_count": 883
    },
    {
      "sql_digest": "82e12f641a02f5f1b77c6e122f529f4b3585021f9ac0f23a6577dc8c0a9bd3bf",
      "sql_statement": "/* job 42/270 */ UPDATE `dh_app_5073`.`dh_active_user_coupon` SET `is_delete`=1, `status`=3, `update_time`=1784602824, `expire_time`=IF((`expire_time` = 0), 1784602824, `expire_time`), `front_remark`=",
      "occurrence_count": 129
    },
    {
      "sql_digest": "9a79d3bceafdec75e6c59ed6687bdb7c2993a525a13cbfc134306732bc254685",
      "sql_statement": "SELECT `id` FROM `dh_active_receive_logs` WHERE `activeid` IN (?) AND usercurrency = ? AND activetype = ? AND (update_time >= ? and update_time <= ?) AND site_code IN (?) AND log_category in (?) AND l",
      "occurrence_count": 126
    },
    {
      "sql_digest": "18576e217f5f93fa2a934f84290447caa4b783cab493503c4ad71c912ea16930",
      "sql_statement": "SELECT * FROM `dh_audit_record` WHERE (user_id = ? and site_code = ?) AND status in (?,?,?) AND charge_time < ? ORDER BY charge_time asc,id asc [arguments: (677577915, \"5073\", 1, 2, 7, \"2026-07-21 11:",
      "occurrence_count": 124
    },
    {
      "sql_digest": "7d75919b6fcc6bbbc8516539ac4a165887c4a9765b9e986314ef43ab77267874",
      "sql_statement": "SELECT ? as create_ymd,t2.register_currency as currency,IFNULL(t2.club_id,0) as club_id,count(distinct t1.useridx) as login_persons FROM dh_user_action_logs as t1 left join dh_account_basic as t2 on t",
      "occurrence_count": 95
    },
    {
      "sql_digest": "67a28431a20b995bf91fa37e2691be34a00d1c353e1f0efc9c67e418dd499878",
      "sql_statement": "SELECT t1.register_currency as currency,t1.regpkgid as channel_id,ifnull(t2.parent_cids, '[]') as parent_cids,t3.register_os_type,t0.valid_bet FROM dh_user_day_report t0 left join dh_account_basic as ",
      "occurrence_count": 94
    },
    {
      "sql_digest": "4afa34fab28500dd78a9d5a531dcf93b2c8f36f525d970c99028638c243f2c3b",
      "sql_statement": "SELECT a.id,a.site_code,a.useridx,a.username,a.register_currency currency,a.realname_secret,a.account_type ,a.user_status,a.loan_status,a.game_gold,a.member_level,a.vip_level, a.register_time,a.regpkg",
      "occurrence_count": 88
    },
    {
      "sql_digest": "5ed3c66a6505fd76ff485d8829bf90185120209653739e7ed473e676d622ce5b",
      "sql_statement": "SELECT '699' as site_code,20260720 as create_ymd,case when t2.register_os_type in (2,11,12,13,20) then 1 when t2.register_os_type in (1,9,10,14,18,19) then 2 else 3 end as kind,case when t2.register_o",
      "occurrence_count": 74
    }
  ]
}
```