There is a difference of about 1 second between the acceptedAt obtained in the response from PayPay API and the acceptedAt returned in the recon file. Which is correct?

Endpoints and recon file originate from a different internal component, so although they are defined the same, there may be a very rare difference of a few milliseconds.
If a difference occurs, please consider the result of the recon file to be correct.