Okay, I found a hint in the documentation that suggests setting a larger aggregation time, which I interpret as the window size for aggregation compared to the evaluation frequency. It doesn't explicitly mention clock skew, and my alerts don't actually fit the listed cases, but I take it as a "yes, it can happen."

I'm still open to accepting your answer if you find more information. Thanks!