premise: The first operational evidence that something was abnormal on United 175 came at 8:47, when the aircraft changed beacon codes twice within a minute.
hypothesis: It is normal for an aircraft to change beacon codes.