{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:41.560Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-02825b6fbd573c966ed10f31",
    "scope_type": "country",
    "scope_key": "AZ",
    "geography": "AZ",
    "title": "Internet disruption in AZ",
    "started_at": "2026-08-10T00:00:00.000Z",
    "last_observed_at": "2026-10-02T23:35:00.000Z",
    "status": "resolved",
    "classification": "APPLICATION_RESTRICTION",
    "trajectory": "RESOLVED",
    "stress_score": 39,
    "confidence": 14,
    "event_count": 1,
    "affected_asns": [
      "AS29049",
      "AS48830"
    ],
    "affected_services": [
      "Tor",
      "Proton VPN",
      "ProtonVPN",
      "Facebook",
      "Instagram",
      "Signal",
      "TikTok"
    ],
    "affected_regions": [
      "AZ"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:32.584Z",
    "updated_at": "2026-10-03T23:39:44.805Z"
  },
  "events": [
    {
      "id": "ise-0a201073cbe0acab94d8e5c0",
      "entity_type": "country",
      "entity_key": "AZ",
      "geography": "AZ",
      "started_at": "2026-08-10T00:00:00.000Z",
      "last_observed_at": "2026-10-02T23:35:00.000Z",
      "status": "resolved",
      "classification": "APPLICATION_RESTRICTION",
      "trajectory": "RESOLVED",
      "stress_score": 39,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.4600000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.09523809523809523
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS29049",
        "AS48830"
      ],
      "affected_services": [
        "Tor",
        "Proton VPN",
        "ProtonVPN",
        "Facebook",
        "Instagram",
        "Signal",
        "TikTok"
      ],
      "affected_regions": [
        "AZ"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration"
      ],
      "observation_count": 24,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.080Z",
      "updated_at": "2026-10-03T23:50:19.679Z",
      "evidence": [
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--e277521e-6367-5c04-8051-709d15ea678f",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1561",
          "content_hash": "8f63b7ac7595f80e",
          "object_json": {
            "id": "incident--e277521e-6367-5c04-8051-709d15ea678f",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1561",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-10T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-10T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--69270daa-cba1-54d2-967d-d2f5f8ed3cfd",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1563",
          "content_hash": "620343e45c6131f6",
          "object_json": {
            "id": "incident--69270daa-cba1-54d2-967d-d2f5f8ed3cfd",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1563",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-11T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-11T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--8b930dfe-c39a-52ed-b182-8588ae0facf4",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1565",
          "content_hash": "1adf72b6cc4c050b",
          "object_json": {
            "id": "incident--8b930dfe-c39a-52ed-b182-8588ae0facf4",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1565",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-12T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-12T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--b50aa748-6495-5601-acad-db67ad891e54",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T06:50:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1562",
          "content_hash": "c561c6392afccfa8",
          "object_json": {
            "id": "incident--b50aa748-6495-5601-acad-db67ad891e54",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1562",
            "status": "active",
            "sources": [
              "ioda",
              "censoredplanet"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-12T06:50:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded. CenAlert confirms censorship activity.",
            "anomaly_rate": 0.3148148148148148,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "mixed",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--437ba0e1-cc8f-59d7-bef9-34522f9247ca",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-13T20:35:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1566",
          "content_hash": "4f48466b98f96cc7",
          "object_json": {
            "id": "incident--437ba0e1-cc8f-59d7-bef9-34522f9247ca",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1566",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-13T20:35:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded.",
            "anomaly_rate": 0.043478260869565216,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--1c4737cb-cb58-53af-ebd5-9913e3002428",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1590",
          "content_hash": "d87d697559f0d550",
          "object_json": {
            "id": "incident--1c4737cb-cb58-53af-ebd5-9913e3002428",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1590",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-08-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS29049"
            ],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [
              "protonvpn.com"
            ],
            "affected_services": [
              "Proton VPN",
              "ProtonVPN",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--2e551f29-aacd-5b3a-4fdd-9f7739e73828",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1592",
          "content_hash": "8d0707e2018b7b57",
          "object_json": {
            "id": "incident--2e551f29-aacd-5b3a-4fdd-9f7739e73828",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1592",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--5be07e32-b889-5fbc-0197-65e95bf6df44",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:40:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1591",
          "content_hash": "b4b958501de77347",
          "object_json": {
            "id": "incident--5be07e32-b889-5fbc-0197-65e95bf6df44",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1591",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-28T00:40:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded.",
            "anomaly_rate": 0.014084507042253521,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--c6ed2d8b-2ca3-5db7-0e5e-7f81b04ee3e9",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1593",
          "content_hash": "ee18713333a15cee",
          "object_json": {
            "id": "incident--c6ed2d8b-2ca3-5db7-0e5e-7f81b04ee3e9",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1593",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--3b1ff884-3cfe-5663-d523-feefa8d4cf59",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-22T21:30:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1632",
          "content_hash": "a70072e90dfb887e",
          "object_json": {
            "id": "incident--3b1ff884-3cfe-5663-d523-feefa8d4cf59",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1632",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-22T21:30:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded.",
            "anomaly_rate": 0.09523809523809523,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--d3380cab-66ef-5633-b695-1342202c25b4",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1636",
          "content_hash": "bad51cc1be941857",
          "object_json": {
            "id": "incident--d3380cab-66ef-5633-b695-1342202c25b4",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1636",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-23T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-23T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--0dffa7a8-e237-542e-9b6e-a4e03c6cc568",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Internet censorship detected in Azerbaijan",
          "value": "az-2026-1634",
          "content_hash": "63b3aa275f81b5ae",
          "object_json": {
            "id": "incident--0dffa7a8-e237-542e-9b6e-a4e03c6cc568",
            "name": "Internet censorship detected in Azerbaijan",
            "type": "incident",
            "title": "Internet censorship detected in Azerbaijan",
            "value": "az-2026-1634",
            "status": "suspected",
            "sources": [
              "censoredplanet"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T00:00:00Z",
            "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 2/2 probes anomalous (100.0%) for bbc.com.",
            "anomaly_rate": 0.01,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS48830"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "facebook.com",
              "getlantern.org",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "signal.org",
              "substack.com",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com"
            ],
            "affected_services": [
              "Facebook",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "TikTok"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--4e9a78b7-8271-5fc3-9fb8-1980d4977132",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1637",
          "content_hash": "88104f2a2a914a65",
          "object_json": {
            "id": "incident--4e9a78b7-8271-5fc3-9fb8-1980d4977132",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1637",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-24T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-24T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS29049"
            ],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [
              "protonvpn.com"
            ],
            "affected_services": [
              "Proton VPN",
              "ProtonVPN",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--7052343c-46c5-5257-c735-bba380159819",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1638",
          "content_hash": "e989368332995c10",
          "object_json": {
            "id": "incident--7052343c-46c5-5257-c735-bba380159819",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1638",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-25T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-25T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Signal",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--e74ecdb9-3ef7-5b27-544d-7ce68947542f",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1639",
          "content_hash": "ff5994a4fb17f759",
          "object_json": {
            "id": "incident--e74ecdb9-3ef7-5b27-544d-7ce68947542f",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1639",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-26T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-26T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--65696c89-c801-528e-424f-5960fe7a790b",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1640",
          "content_hash": "3f2c54a5eec23450",
          "object_json": {
            "id": "incident--65696c89-c801-528e-424f-5960fe7a790b",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1640",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS48830"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "getlantern.org",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "signal.org",
              "substack.com",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com"
            ],
            "affected_services": [
              "Instagram",
              "ProtonVPN",
              "Signal",
              "TikTok",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--a2b7630c-169c-519a-59f0-28e0e0099e06",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1642",
          "content_hash": "76b8b5e0d46b5362",
          "object_json": {
            "id": "incident--a2b7630c-169c-519a-59f0-28e0e0099e06",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1642",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS29049"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "protonvpn.com"
            ],
            "affected_services": [
              "ProtonVPN",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--650e4ac8-3bed-5baf-d9c2-f0735a923dda",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1643",
          "content_hash": "38fe5fab57183aba",
          "object_json": {
            "id": "incident--650e4ac8-3bed-5baf-d9c2-f0735a923dda",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1643",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--a4b1099a-41f6-5810-473f-183b49c58e0a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1646",
          "content_hash": "fe5e7c320972edc2",
          "object_json": {
            "id": "incident--a4b1099a-41f6-5810-473f-183b49c58e0a",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1646",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-30T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-30T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--77ceefe1-9206-5270-576b-85fa392d0d5b",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T10:05:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1644",
          "content_hash": "d88c6ce46e14ae3e",
          "object_json": {
            "id": "incident--77ceefe1-9206-5270-576b-85fa392d0d5b",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1644",
            "status": "active",
            "sources": [
              "ioda",
              "censoredplanet"
            ],
            "end_time": "2026-09-30T20:20:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T10:05:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded. CenAlert confirms censorship activity.",
            "anomaly_rate": 0.013888888888888888,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS48830"
            ],
            "incident_type": "mixed",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "getlantern.org",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "signal.org",
              "substack.com",
              "theguardian.com",
              "tiktok.com"
            ],
            "affected_services": [
              "Instagram",
              "ProtonVPN",
              "Signal",
              "TikTok"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--2da58485-01ec-5605-b8b8-f6acbdf8c336",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1648",
          "content_hash": "47dbcd291a22402c",
          "object_json": {
            "id": "incident--2da58485-01ec-5605-b8b8-f6acbdf8c336",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1648",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-10-01T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-01T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [
              "AS29049"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "protonvpn.com"
            ],
            "affected_services": [
              "ProtonVPN",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--3aae3c13-7979-51b2-ed1a-5d29d96023f4",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T08:50:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1647",
          "content_hash": "a8916d36dd9e0016",
          "object_json": {
            "id": "incident--3aae3c13-7979-51b2-ed1a-5d29d96023f4",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1647",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-01T08:50:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded.",
            "anomaly_rate": 0.23636363636363636,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--d59288a0-5dc3-5e13-8833-cf9779054d5c",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T00:00:00.000Z",
          "name": "Censorship detected in AZ",
          "value": "az-2026-1649",
          "content_hash": "587c5239fae8a0e6",
          "object_json": {
            "id": "incident--d59288a0-5dc3-5e13-8833-cf9779054d5c",
            "name": "Censorship detected in AZ",
            "type": "incident",
            "title": "Censorship detected in AZ",
            "value": "az-2026-1649",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-02T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-02T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0a201073cbe0acab94d8e5c0",
          "stix_object_id": "incident--844e6463-0d26-59ce-abad-1300e0894c5c",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T23:35:00.000Z",
          "name": "Internet connectivity disruption in Azerbaijan",
          "value": "az-2026-1650",
          "content_hash": "f40292eafae7d3c9",
          "object_json": {
            "id": "incident--844e6463-0d26-59ce-abad-1300e0894c5c",
            "name": "Internet connectivity disruption in Azerbaijan",
            "type": "incident",
            "title": "Internet connectivity disruption in Azerbaijan",
            "value": "az-2026-1650",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-02T23:35:00Z",
            "description": "IODA detected significant connectivity drop in Azerbaijan. 1 critical alerts recorded.",
            "anomaly_rate": 0.09523809523809523,
            "country_code": "AZ",
            "country_name": "Azerbaijan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--e277521e-6367-5c04-8051-709d15ea678f",
      "incident--69270daa-cba1-54d2-967d-d2f5f8ed3cfd",
      "incident--8b930dfe-c39a-52ed-b182-8588ae0facf4",
      "incident--b50aa748-6495-5601-acad-db67ad891e54",
      "incident--437ba0e1-cc8f-59d7-bef9-34522f9247ca",
      "incident--1c4737cb-cb58-53af-ebd5-9913e3002428",
      "incident--2e551f29-aacd-5b3a-4fdd-9f7739e73828",
      "incident--5be07e32-b889-5fbc-0197-65e95bf6df44",
      "incident--c6ed2d8b-2ca3-5db7-0e5e-7f81b04ee3e9",
      "incident--3b1ff884-3cfe-5663-d523-feefa8d4cf59",
      "incident--d3380cab-66ef-5633-b695-1342202c25b4",
      "incident--0dffa7a8-e237-542e-9b6e-a4e03c6cc568",
      "incident--4e9a78b7-8271-5fc3-9fb8-1980d4977132",
      "incident--7052343c-46c5-5257-c735-bba380159819",
      "incident--e74ecdb9-3ef7-5b27-544d-7ce68947542f",
      "incident--65696c89-c801-528e-424f-5960fe7a790b",
      "incident--a2b7630c-169c-519a-59f0-28e0e0099e06",
      "incident--650e4ac8-3bed-5baf-d9c2-f0735a923dda",
      "incident--a4b1099a-41f6-5810-473f-183b49c58e0a",
      "incident--77ceefe1-9206-5270-576b-85fa392d0d5b",
      "incident--2da58485-01ec-5605-b8b8-f6acbdf8c336",
      "incident--3aae3c13-7979-51b2-ed1a-5d29d96023f4",
      "incident--d59288a0-5dc3-5e13-8833-cf9779054d5c",
      "incident--844e6463-0d26-59ce-abad-1300e0894c5c"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}