One question is did the operator do anything after Germany suspended the certification on September 22. Like decreasing pressure or increasing pressure. Those seem unlikely to cause leak but would explain the timing.

We also don’t know anything about the leaks. It should be obvious to investigators if Nord Stream 2 was not an explosion.