Skip to content

Reconstruction and Probabilistic Reasoning

Forensic reconstruction pieces together what happened at a scene from physical evidence, but every conclusion is an inference from incomplete data, not a recording of events. This topic covers how reconstruction works, the hierarchy of propositions from source to activity level, and why probabilistic tools like likelihood ratios and Bayesian reasoning give forensic conclusions an honest and communicable foundation.

Last updated:

Share

Forensic reconstruction is the process of reasoning backward from physical evidence to determine the most defensible account of how a scene came to be in its observed state. Because the same physical effect can have multiple causes, reconstruction produces probabilistic conclusions rather than absolute ones: it identifies which scenarios are consistent with the evidence and which can be eliminated. The logical tools that give these conclusions rigorous form are the likelihood ratio and Bayesian inference, which quantify how much evidence shifts the probability of a hypothesis. The hierarchy of propositions governs which type of question the evidence can actually answer, distinguishing source-level findings, activity-level inferences, and offence-level determinations that belong to the court.

A forensic scientist walks into a scene. There is a broken window, a bloodstain on the floor, a spent cartridge case by the door, and a body near the far wall. None of these things explain themselves. Each is a physical fact, a frozen fragment of a sequence of events that has already ended. The task of reconstruction is to work backward from those fragments and build the most defensible account of what produced them.

Physical evidence does not come labelled with its cause. A bloodstain spatter pattern is consistent with several mechanisms. A bullet trajectory is an angle, not a biography. The forensic scientist builds hypotheses, tests them against the evidence, and eliminates what cannot be reconciled. What remains is a probabilistic account: not 'here is what happened' but 'here is what is most consistent with what we observed, given what we know about how these things work'.

This topic covers how physical evidence is used to sequence events and test scenarios, the statistical machinery of likelihood ratios and Bayesian inference, and the hierarchy of propositions that defines which type of question the evidence can actually answer.

By the end of this topic you will be able to:

  • Explain what forensic reconstruction achieves and where its limits lie, distinguishing what the physical evidence can establish from what it cannot.
  • Apply the hierarchy of propositions to classify a forensic finding as source-level, activity-level, or offence-level, and explain what additional data each level requires.
  • Calculate and interpret a likelihood ratio, stating correctly what it measures and what it does not measure about probability of guilt.
  • Identify the prosecutor's fallacy in a forensic testimony or case summary, and explain why P(evidence | innocent) is not interchangeable with P(innocent | evidence).
  • Describe the logical structure of a sound reconstruction report, including how hypotheses are formed, tested against physical facts, and expressed as probabilistic conclusions.
Key terms
Reconstruction
The process of analysing physical evidence to develop a scientifically supported account of the events that produced the scene. Reconstruction is inferential, not direct observation.
Hypothesis
A proposed explanation for observed evidence. In reconstruction, competing hypotheses are evaluated against the physical facts and background knowledge. A good hypothesis is specific enough to be testable and falsifiable.
Likelihood ratio (LR)
The ratio of the probability of the evidence under one hypothesis to the probability of the same evidence under an alternative hypothesis. Values above 1 support the first hypothesis; values below 1 support the second.
Bayesian reasoning
A framework for updating beliefs in the light of evidence. Prior probabilities are combined with the likelihood of the evidence to produce posterior probabilities. Forensic scientists use Bayesian logic to quantify how much evidence changes the probability of a conclusion.
Hierarchy of propositions
A framework that classifies forensic questions at source level (where did this come from?), activity level (what was the person doing?), and offence level (was a crime committed?). Each level requires more inference and carries more uncertainty.
Activity-level interpretation
An opinion about what activity produced or deposited the evidence, rather than simply what the source of the evidence is. Activity-level conclusions require background data on transfer and persistence and are more uncertain than source-level ones.

What reconstruction does and does not do

Reconstruction is not about recreating every moment of an event. The physical evidence at a scene is a sample, not a complete record. Evidence is damaged, contaminated, missed, or moved before scientists arrive. What reconstruction actually does is more limited and more honest: it produces a set of scenarios that are physically consistent with the observed evidence, and it eliminates scenarios that are not.

The method is abductive: reasoning to the best explanation. You observe a set of effects (bloodstain at this location, fracture pattern on this glass, spent cartridge here) and ask what cause or sequence of causes could have produced them. Unlike deduction, abduction does not guarantee a unique answer. Multiple causes can produce the same effects. This is the fundamental reason forensic conclusions are probabilistic and why a good forensic scientist never says 'this is the only way this could have happened'.

Sequencing deserves special mention. Locard's exchange principle tells us that contacts leave traces. Reconstruction uses those traces to order contacts in time. Blood over a disturbed surface versus a disturbed surface over dried blood. Glass fragments inside a vehicle when the window was broken from outside versus fragments on the exterior when broken from within. These physical sequences can establish what happened before what, independent of any witness account, and they are some of the most reliable outputs of reconstruction.

The inferential structure of forensic conclusions

Reasoning from evidence to conclusion is always reasoning from effect to cause. This is the reverse of the direction in which physical processes run, and it is harder. A cause uniquely produces its effects, given the laws of physics. But an effect can have multiple causes. A bloodstain is consistent with a fall, a punch, a cut, or a spray. Each is a different cause. The forensic scientist must evaluate the relative probabilities of each cause given the observed effect and everything else known about the case.

Cause ACause BObserved evidenceforward (physical process)backward (forensic inference)
Inferential direction in forensic science: from effect back to cause.

This asymmetry is why forensic conclusions should always name the competing hypotheses they are assessing. A statement like 'this glass fracture is consistent with a blow from outside' is only meaningful when it is paired with 'it is not consistent with being broken from inside, for the following physical reasons'. The conclusion gains weight from the comparison of alternatives, not from standing alone.

Some forensic scientists describe the structure of their reasoning explicitly as comparative. They identify a prosecution hypothesis, typically the claim made by investigators or the charge, and a defence hypothesis, the most plausible alternative. They then ask: given this evidence, how much more probable is the prosecution hypothesis than the defence hypothesis? That is the likelihood ratio question, and it is a more precise version of what good forensic scientists have always done informally.

Likelihood ratios and Bayesian inference

The likelihood ratio (LR) is the central tool for expressing the weight of forensic evidence in a probabilistically coherent way. It is defined as:

LR = P(Evidence | Hypothesis 1) / P(Evidence | Hypothesis 2)

P(E | H1) is the probability of observing the evidence assuming hypothesis 1 is true. P(E | H2) is the probability of observing the same evidence assuming hypothesis 2 is true. If H1 is 'this DNA comes from the suspect' and H2 is 'this DNA comes from an unrelated person from the population', then the LR is how many times more likely the DNA evidence is under H1 than under H2. An LR of 1,000,000 means the evidence is a million times more probable if it came from the suspect than if it came from a random person.

LR valueVerbal equivalentWhat it means for the evidence
1No evidential valueEvidence equally probable under both hypotheses; no support for either
1 to 10Weak support for H1Evidence slightly more probable under H1; provides limited weight
10 to 100Moderate support for H1Meaningful but not strong; consistent with corroborative evidence
100 to 1,000Strong support for H1Evidence substantially more probable under H1
Greater than 1,000,000Very strong support for H1Used in DNA reporting; evidence extremely more probable under H1

The Bayesian framework does not require a forensic scientist to assign numbers to everything. The logic of updating a prior belief with new evidence is the same whether the updating is formal and numerical or qualitative. A pathologist who says 'this injury is more consistent with a fall than a punch' is applying likelihood reasoning without writing the formula. The formal LR just makes the implicit explicit and allows the reasoning to be scrutinised and challenged.

The hierarchy of propositions

Forensic questions operate at different levels, and evidence that is strong at one level may be weak or silent at another. This framework is called the hierarchy of propositions, and it was developed prominently in the work of Ian Evett and colleagues at the UK Forensic Science Service.

  1. Source level
    The proposition concerns where a piece of evidence came from. 'This DNA originated from the suspect' versus 'this DNA originated from an unknown person'. This is the level where forensic analysis is most direct and most reliable. The examiner can measure the evidence, compare it to a known sample, and quantify the result.
  2. Activity level
    'The suspect fired the weapon' versus 'the suspect was in the area but did not fire'. This asks what the person was doing, which requires reasoning about how evidence is generated by activities. Transfer and persistence data, background rates, and case-specific context all matter. More uncertainty, more inference.
  3. Offence level
    'The suspect committed the crime' versus 'the suspect did not commit the crime'. This is a legal conclusion, not a scientific one. Forensic scientists should not testify at this level because it invades the function of the trier of fact and requires weighing non-scientific evidence that the expert is not in a position to assess.
Source levelActivity levelOffence level (legal)most direct, most reliablemore inference, more uncertaintyfor the court, not the expert
Hierarchy of propositions in forensic interpretation.

The hierarchy has practical consequences. A DNA match is a source-level finding: the profile is consistent with the suspect being the donor of the sample. It says nothing, by itself, about what the suspect was doing or whether they committed an offence. If the defence proposes that the DNA arrived by secondary transfer, or by innocent prior contact, the relevant question becomes activity-level: how probable is it that the DNA was deposited by the alleged activity versus the innocent alternative? That requires different data and a different kind of reasoning than the source-level match.

Why forensic conclusions are probabilistic, not absolute

Forensic science operates under several constraints that make absolute conclusions impossible in principle, not just in practice. Physical evidence degrades. Crime scenes are disturbed. Samples are contaminated. Background rates of trace materials in the population are not always known. Any one of these constraints introduces uncertainty, and the honest expert names it rather than papering over it with confident language.

  • Incomplete data: the evidence at a scene is a sample of what was produced, not the complete record. What is missing is itself unknown.
  • Alternative explanations: physical evidence is consistent with more than one cause. Ruling out all alternatives is impossible; ruling out the most plausible alternatives is the achievable goal.
  • Measurement uncertainty: every measurement instrument has a precision limit. The result is not a single value but a range, and conclusions must reflect that range.
  • Population data gaps: calculating an LR requires knowing how common a feature is in the relevant population. For many trace evidence types, those population databases are limited or unavailable.
  • Transfer and persistence variability: the same activity under different conditions produces different amounts of trace. A single data point from one case cannot be extrapolated without reference to the range of outcomes documented in research.

The adoption of probabilistic language in forensic testimony reflects scientific maturity, not weakness. A DNA analyst who says 'the LR for this profile is greater than a billion, meaning the evidence is a billion times more probable if it came from the suspect than from an unrelated person' is giving the court more useful information than one who says 'the match is conclusive'. The first statement allows the court to weigh the evidence; the second preempts that weighing.

Putting it together: reconstruction as structured inference

Reconstruction starts with the physical evidence, formulates the possible hypotheses that could explain it, and tests each against the full body of physical facts. Starting with a narrative and seeking evidence to support it is confirmation bias, and it has contributed to serious miscarriages of justice in forensic history.

The logical structure follows the same pattern as scientific hypothesis testing. A hypothesis makes predictions: if this scenario is true, then we should expect to see this pattern of blood, this trajectory, these footwear impressions. The reconstruction checks whether the predicted evidence matches the observed evidence. A single contradiction between prediction and observation is enough to challenge a hypothesis, though it may not be enough to eliminate it entirely if alternative explanations for the discrepancy exist.

Sequencing adds a time dimension. Physical chemistry, biology, and physics allow statements like: blood that dried before glass was broken will not appear on glass fragments, so the presence of blood on shards implies the glass broke first. Rigor mortis and body temperature give time-of-death windows. The progression of decomposition, wound aging, and trace persistence all carry temporal information that can be read as a rough clock. These physical sequences are often more reliable than witness memory because they obey known rules.

Check your understanding
Question 1 of 4· 0 answered

A forensic scientist concludes that dried blood was present on the floor before the glass was broken, because there are no bloodstains on the glass fragments. What function of physical evidence is being used here?

Key Takeaways

  • Reconstruction works backward from physical evidence to the most defensible account of events, using the logic of abduction: reasoning to the best explanation from effects to causes.
  • Forensic conclusions are probabilistic because the same physical evidence can be produced by more than one cause, and ruling out all alternatives is not possible.
  • The likelihood ratio quantifies how much more probable the evidence is under one hypothesis than another, giving forensic testimony a rigorous probabilistic form that courts can weigh alongside other evidence.
  • The hierarchy of propositions distinguishes source level (where did this come from?), activity level (what was the person doing?), and offence level (was a crime committed?). Forensic scientists are most reliable at source level and should not testify at offence level.
  • The prosecutor's fallacy, confusing P(evidence | innocent) with P(innocent | evidence), is a well-documented source of wrongful conviction and underscores why probabilistic literacy matters for everyone in the courtroom.
What is event reconstruction in forensic science?
Event reconstruction is the process of working backward from physical evidence to develop an account of what happened. It involves collecting and analysing evidence, forming hypotheses about how the scene came to be in its observed state, and testing those hypotheses against the physical facts. The result is not a definitive account of events but a set of scenarios that are consistent or inconsistent with the evidence.
Why are forensic conclusions probabilistic rather than absolute?
Physical evidence does not record events like a video. A bloodstain, a fibre, or a fingerprint can be explained by more than one scenario. Forensic scientists reason from effect to cause, which is the harder logical direction: multiple causes can produce the same effect. Because alternatives always exist and cannot all be ruled out, any conclusion carries uncertainty, and expressing that uncertainty honestly is what separates scientific testimony from false certainty.
What is a likelihood ratio in forensic science?
A likelihood ratio is the probability of observing the evidence given one hypothesis divided by the probability of observing the same evidence given an alternative hypothesis. An LR greater than 1 means the evidence is more probable under the prosecution hypothesis than under the defence hypothesis. LRs allow an examiner to quantify how much the evidence shifts the probability of a conclusion, without claiming certainty.
What is the hierarchy of propositions in forensic interpretation?
The hierarchy classifies forensic questions at three levels. Source-level propositions ask where a sample came from. Activity-level propositions ask what the person was doing. Offence-level propositions ask whether a crime was committed. Analysts are most reliable at the source level and should generally not testify to offence-level conclusions, which belong to the court.
What is the difference between source-level and activity-level interpretation?
Source-level interpretation asks where a trace came from: is this DNA from the suspect? Activity-level interpretation asks how the trace got there: did the suspect carry out the alleged activity? A DNA profile on a surface proves source, not activity. The trace could have arrived by secondary transfer or innocent contact. Activity-level conclusions require additional reasoning about how traces are typically deposited and carry more uncertainty than source-level ones.

Test yourself on Basics of Forensic Science with free, timed mocks.

Practice Basics of Forensic Science questions

Found this useful? Pass it along.

Share

Spotted an error in this page? Report a correction or read our editorial standards.

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.