for your first question, my money's on someone altering the build transaction retrospectively, either changing the lot number, or deleting the build entirely.
The deletion you should be able to check for using the deleted transaction audit. The change in lot number.. might be in the system notes?