{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:38.709Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-2b3a046ee94dc53b2f792419",
    "scope_type": "country",
    "scope_key": "PA",
    "geography": "PA",
    "title": "Internet disruption in PA",
    "started_at": "2026-08-12T15:20:00.000Z",
    "last_observed_at": "2026-10-03T17:05:00.000Z",
    "status": "active",
    "classification": "UNKNOWN_DISRUPTION",
    "trajectory": "STABLE",
    "stress_score": 33,
    "confidence": 48,
    "event_count": 4,
    "affected_asns": [
      "AS23520"
    ],
    "affected_services": [],
    "affected_regions": [
      "PA",
      "3095"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:33.936Z",
    "updated_at": "2026-10-03T23:39:45.948Z"
  },
  "events": [
    {
      "id": "ise-776b4aac0e479850bb911e4a",
      "entity_type": "country",
      "entity_key": "PA",
      "geography": "PA",
      "started_at": "2026-08-12T15:20:00.000Z",
      "last_observed_at": "2026-10-03T17:05:00.000Z",
      "status": "active",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "STABLE",
      "stress_score": 33,
      "confidence": 0,
      "components": {
        "anomaly": 0.266069853448853,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.6657164395064399
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0.266069853448853
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.048129550590007536
      },
      "deviation": {
        "max_anomaly": 0.266069853448853,
        "max_deviation": 0.6657164395064399
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "PA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration"
      ],
      "observation_count": 5,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.615Z",
      "updated_at": "2026-10-03T23:50:23.465Z",
      "evidence": [
        {
          "event_id": "ise-776b4aac0e479850bb911e4a",
          "stix_object_id": "incident--b604e4c4-3277-5145-ef45-72fc10fe2010",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T15:20:00.000Z",
          "name": "Internet connectivity disruption in Panama",
          "value": "pa-2026-0054",
          "content_hash": "9e0b598431b54335",
          "object_json": {
            "id": "incident--b604e4c4-3277-5145-ef45-72fc10fe2010",
            "name": "Internet connectivity disruption in Panama",
            "type": "incident",
            "title": "Internet connectivity disruption in Panama",
            "value": "pa-2026-0054",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-12T15:20:00Z",
            "description": "IODA detected significant connectivity drop in Panama. 2 critical alerts recorded.",
            "anomaly_rate": 0.11689225614573409,
            "country_code": "PA",
            "country_name": "Panama",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-776b4aac0e479850bb911e4a",
          "stix_object_id": "incident--cce7c0e2-0515-50a1-00a2-33702000a154",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T09:02:00.000Z",
          "name": "Internet connectivity disruption in Panama",
          "value": "pa-2026-0061",
          "content_hash": "5d39672a760b557f",
          "object_json": {
            "id": "incident--cce7c0e2-0515-50a1-00a2-33702000a154",
            "name": "Internet connectivity disruption in Panama",
            "type": "incident",
            "title": "Internet connectivity disruption in Panama",
            "value": "pa-2026-0061",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-27T09:02:00Z",
            "description": "IODA detected significant connectivity drop in Panama. 1 critical alerts recorded.",
            "anomaly_rate": 0.782608695652174,
            "country_code": "PA",
            "country_name": "Panama",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-776b4aac0e479850bb911e4a",
          "stix_object_id": "incident--61fd6724-c294-5fd0-c7ae-faab46cad94c",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T21:20:00.000Z",
          "name": "Internet connectivity disruption in Panama",
          "value": "pa-2026-0069",
          "content_hash": "e22815c706e3128a",
          "object_json": {
            "id": "incident--61fd6724-c294-5fd0-c7ae-faab46cad94c",
            "name": "Internet connectivity disruption in Panama",
            "type": "incident",
            "title": "Internet connectivity disruption in Panama",
            "value": "pa-2026-0069",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-25T21:20:00Z",
            "description": "IODA detected significant connectivity drop in Panama. 1 critical alerts recorded.",
            "anomaly_rate": 0.06153846153846154,
            "country_code": "PA",
            "country_name": "Panama",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-776b4aac0e479850bb911e4a",
          "stix_object_id": "incident--db549365-377b-52b9-9a45-906a71d5ade6",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T19:20:00.000Z",
          "name": "Internet connectivity disruption in Panama",
          "value": "pa-2026-0070",
          "content_hash": "31cff545646e03ad",
          "object_json": {
            "id": "incident--db549365-377b-52b9-9a45-906a71d5ade6",
            "name": "Internet connectivity disruption in Panama",
            "type": "incident",
            "title": "Internet connectivity disruption in Panama",
            "value": "pa-2026-0070",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-26T20:00:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-26T19:20:00Z",
            "description": "IODA detected significant connectivity drop in Panama. 2 critical alerts recorded.",
            "anomaly_rate": 0.12165592657684046,
            "country_code": "PA",
            "country_name": "Panama",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0.6667,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-776b4aac0e479850bb911e4a",
          "stix_object_id": "incident--18c25db7-f6bf-55a3-3bf9-1e4007ba0e9d",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-03T17:05:00.000Z",
          "name": "Internet connectivity disruption in Panama",
          "value": "pa-2026-0071",
          "content_hash": "f930023cc787a36e",
          "object_json": {
            "id": "incident--18c25db7-f6bf-55a3-3bf9-1e4007ba0e9d",
            "name": "Internet connectivity disruption in Panama",
            "type": "incident",
            "title": "Internet connectivity disruption in Panama",
            "value": "pa-2026-0071",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-10-03T17:05:00Z",
            "description": "IODA detected significant connectivity drop in Panama. 2 critical alerts recorded.",
            "anomaly_rate": 0.048129550590007536,
            "country_code": "PA",
            "country_name": "Panama",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-15584d895b6db6952b662439",
      "entity_type": "asn",
      "entity_key": "AS23520",
      "geography": "PA",
      "started_at": "2026-09-14T20:25:00.000Z",
      "last_observed_at": "2026-09-14T20:25:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.866324431435492
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS23520"
      ],
      "affected_services": [],
      "affected_regions": [
        "PA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-28T17:12:09.235Z",
      "updated_at": "2026-10-03T23:50:33.053Z",
      "evidence": [
        {
          "event_id": "ise-15584d895b6db6952b662439",
          "stix_object_id": "incident--5a27b1d1-f909-5acd-bf21-c4c2314e11bf",
          "platform": "ioda",
          "observed_at": "2026-09-14T20:25:00.000Z",
          "name": "COLUMBUS-NETWORKS -- Panama",
          "value": "geoasn/23520-pa",
          "content_hash": "b2e323eb7a3353a0",
          "object_json": {
            "id": "incident--5a27b1d1-f909-5acd-bf21-c4c2314e11bf",
            "name": "COLUMBUS-NETWORKS -- Panama",
            "type": "incident",
            "score": 735061.7777777778,
            "title": "COLUMBUS-NETWORKS -- Panama",
            "value": "geoasn/23520-pa",
            "method": "median",
            "location": "geoasn/23520-PA",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1653889
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-15c6d9aae9b0f1ad0950df80",
      "entity_type": "asn",
      "entity_key": "AS23520",
      "geography": "3095",
      "started_at": "2026-09-14T20:25:00.000Z",
      "last_observed_at": "2026-09-14T20:25:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.559542713463749
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS23520"
      ],
      "affected_services": [],
      "affected_regions": [
        "3095"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-28T18:17:09.309Z",
      "updated_at": "2026-10-03T23:50:33.068Z",
      "evidence": [
        {
          "event_id": "ise-15c6d9aae9b0f1ad0950df80",
          "stix_object_id": "incident--8802bc0e-735c-5cfc-d424-c41fbf08594a",
          "platform": "ioda",
          "observed_at": "2026-09-14T20:25:00.000Z",
          "name": "COLUMBUS-NETWORKS -- Panama",
          "value": "geoasn/23520-3095",
          "content_hash": "d7f0210f8727b50e",
          "object_json": {
            "id": "incident--8802bc0e-735c-5cfc-d424-c41fbf08594a",
            "name": "COLUMBUS-NETWORKS -- Panama",
            "type": "incident",
            "score": 362694.95614035084,
            "title": "COLUMBUS-NETWORKS -- Panama",
            "value": "geoasn/23520-3095",
            "method": "median",
            "location": "geoasn/23520-3095",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1653889
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-b901707f962fab1263a6ecf7",
      "entity_type": "asn",
      "entity_key": "AS23520",
      "geography": null,
      "started_at": "2026-09-14T20:25:00.000Z",
      "last_observed_at": "2026-09-14T20:25:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 4.536784503535678
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS23520"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-28T17:01:20.526Z",
      "updated_at": "2026-10-03T23:50:33.061Z",
      "evidence": [
        {
          "event_id": "ise-b901707f962fab1263a6ecf7",
          "stix_object_id": "incident--eac52ebf-5a1b-5db7-8064-21afe71a0534",
          "platform": "ioda",
          "observed_at": "2026-09-14T20:25:00.000Z",
          "name": "AS23520 (COLUMBUS-NETWORKS)",
          "value": "asn/23520",
          "content_hash": "a11dd4db5ee45f83",
          "object_json": {
            "id": "incident--eac52ebf-5a1b-5db7-8064-21afe71a0534",
            "name": "AS23520 (COLUMBUS-NETWORKS)",
            "type": "incident",
            "score": 34416.910707529314,
            "title": "AS23520 (COLUMBUS-NETWORKS)",
            "value": "asn/23520",
            "method": "median",
            "location": "asn/23520",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1653889
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--b604e4c4-3277-5145-ef45-72fc10fe2010",
      "incident--cce7c0e2-0515-50a1-00a2-33702000a154",
      "incident--61fd6724-c294-5fd0-c7ae-faab46cad94c",
      "incident--db549365-377b-52b9-9a45-906a71d5ade6",
      "incident--18c25db7-f6bf-55a3-3bf9-1e4007ba0e9d",
      "incident--5a27b1d1-f909-5acd-bf21-c4c2314e11bf",
      "incident--8802bc0e-735c-5cfc-d424-c41fbf08594a",
      "incident--eac52ebf-5a1b-5db7-8064-21afe71a0534"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}