The reconstruction followed a methodical series of steps that turned scattered clues into a coherent timeline and a prosecution-ready case. Key strands that linked the suspects to the attempt included: