{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:41.936Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-3bc15e470561cc3388b45ed1", "scope_type": "country", "scope_key": "KW", "geography": "KW", "title": "Internet disruption in KW", "started_at": "2026-08-12T10:55:00.000Z", "last_observed_at": "2026-10-03T08:45:00.000Z", "status": "active", "classification": "PARTIAL_OUTAGE", "trajectory": "STABLE", "stress_score": 69, "confidence": 34, "event_count": 1, "affected_asns": [ "AS25242", "AS21050" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ], "affected_regions": [ "KW" ], "source_count": 1, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:33.868Z", "updated_at": "2026-10-03T23:39:45.889Z" }, "events": [ { "id": "ise-e0a25f7c02743bf12a9c3cc4", "entity_type": "country", "entity_key": "KW", "geography": "KW", "started_at": "2026-08-12T10:55:00.000Z", "last_observed_at": "2026-10-03T08:45:00.000Z", "status": "active", "classification": "SERVICE_BLOCKING", "trajectory": "STABLE", "stress_score": 69, "confidence": 15, "components": { "anomaly": 1, "breadth": 0.4600000000000001, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.9897645854657113 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.5, "statistical_significance": 1 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 0.03203342098248864 }, "deviation": { "max_anomaly": 1, "max_deviation": 0.9897645854657113 }, "affected_asns": [ "AS25242", "AS21050" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ], "affected_regions": [ "KW" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "insufficient corroboration" ], "observation_count": 7, "ingestion_method": null, "first_seen": "2026-08-29T22:33:23.381Z", "updated_at": "2026-10-03T23:50:23.237Z", "evidence": [ { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--a1cece44-e476-5931-9627-acbf9cc07035", "platform": "voidly-atlas", "observed_at": "2026-08-12T10:55:00.000Z", "name": "Internet connectivity disruption in Kuwait", "value": "kw-2026-0933", "content_hash": "b10e480199d91ba8", "object_json": { "id": "incident--a1cece44-e476-5931-9627-acbf9cc07035", "name": "Internet connectivity disruption in Kuwait", "type": "incident", "title": "Internet connectivity disruption in Kuwait", "value": "kw-2026-0933", "status": "active", "sources": [ "ioda", "censoredplanet" ], "end_time": "2026-08-12T20:40:00Z", "severity": "critical", "confidence": 65, "start_time": "2026-08-12T10:55:00Z", "description": "IODA detected significant connectivity drop in Kuwait. 1 critical alerts recorded. CenAlert confirms censorship activity.", "anomaly_rate": 0.01023541453428864, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [], "incident_type": "mixed", "duration_hours": null, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--df12365f-3ecc-5ebc-f74c-c0c92ccd6050", "platform": "voidly-atlas", "observed_at": "2026-08-28T00:00:00.000Z", "name": "Censorship detected in KW", "value": "kw-2026-0950", "content_hash": "f82020f12c962b73", "object_json": { "id": "incident--df12365f-3ecc-5ebc-f74c-c0c92ccd6050", "name": "Censorship detected in KW", "type": "incident", "title": "Censorship detected in KW", "value": "kw-2026-0950", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-28T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-08-28T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": 23.9997, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--eb468341-2fa5-5325-54ee-127ae54177ed", "platform": "voidly-atlas", "observed_at": "2026-08-28T13:45:00.000Z", "name": "Internet connectivity disruption in Kuwait", "value": "kw-2026-0949", "content_hash": "22d6cc43f207f549", "object_json": { "id": "incident--eb468341-2fa5-5325-54ee-127ae54177ed", "name": "Internet connectivity disruption in Kuwait", "type": "incident", "title": "Internet connectivity disruption in Kuwait", "value": "kw-2026-0949", "status": "active", "sources": [ "ioda" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-08-28T13:45:00Z", "description": "IODA detected significant connectivity drop in Kuwait. 1 critical alerts recorded.", "anomaly_rate": 0.02354145342886387, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": 0, "affected_domains": [], "affected_services": [] } }, { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--0343f923-3364-54e0-2df9-2cf74b8e85c0", "platform": "voidly-atlas", "observed_at": "2026-09-23T00:00:00.000Z", "name": "Internet censorship detected in Kuwait", "value": "kw-2026-0970", "content_hash": "8e4688c87ff11d54", "object_json": { "id": "incident--0343f923-3364-54e0-2df9-2cf74b8e85c0", "name": "Internet censorship detected in Kuwait", "type": "incident", "title": "Internet censorship detected in Kuwait", "value": "kw-2026-0970", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-23T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 2/2 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [ "AS25242" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--3277bec7-fb52-5469-50b0-934f7cddbb69", "platform": "voidly-atlas", "observed_at": "2026-09-27T00:00:00.000Z", "name": "Internet censorship detected in Kuwait", "value": "kw-2026-0972", "content_hash": "ba6437b903ba30b8", "object_json": { "id": "incident--3277bec7-fb52-5469-50b0-934f7cddbb69", "name": "Internet censorship detected in Kuwait", "type": "incident", "title": "Internet censorship detected in Kuwait", "value": "kw-2026-0972", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-27T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 3/3 probes anomalous (100.0%) for getlantern.org.", "anomaly_rate": 0.01, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [ "AS21050" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "getlantern.org", "protonvpn.com", "psiphon.ca", "tiktok.com" ], "affected_services": [ "ProtonVPN", "TikTok" ] } }, { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--8962bd44-17ad-5ba6-bae1-fd06608ae0b8", "platform": "voidly-atlas", "observed_at": "2026-09-30T00:00:00.000Z", "name": "Internet censorship detected in Kuwait", "value": "kw-2026-0974", "content_hash": "f10cc0e8e852c379", "object_json": { "id": "incident--8962bd44-17ad-5ba6-bae1-fd06608ae0b8", "name": "Internet censorship detected in Kuwait", "type": "incident", "title": "Internet censorship detected in Kuwait", "value": "kw-2026-0974", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-30T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 3/3 probes anomalous (100.0%) for getlantern.org.", "anomaly_rate": 0.01, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [ "AS21050" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "getlantern.org", "protonvpn.com", "psiphon.ca", "tiktok.com" ], "affected_services": [ "ProtonVPN", "TikTok" ] } }, { "event_id": "ise-e0a25f7c02743bf12a9c3cc4", "stix_object_id": "incident--8e744e51-df52-57bb-185e-9087641c8683", "platform": "voidly-atlas", "observed_at": "2026-10-03T08:45:00.000Z", "name": "Internet connectivity disruption in Kuwait", "value": "kw-2026-0975", "content_hash": "f2d221312f96cf6c", "object_json": { "id": "incident--8e744e51-df52-57bb-185e-9087641c8683", "name": "Internet connectivity disruption in Kuwait", "type": "incident", "title": "Internet connectivity disruption in Kuwait", "value": "kw-2026-0975", "status": "active", "sources": [ "ioda" ], "end_time": "2026-10-03T08:50:00Z", "severity": "critical", "confidence": 70, "start_time": "2026-10-03T08:45:00Z", "description": "IODA detected significant connectivity drop in Kuwait. 5 critical alerts recorded.", "anomaly_rate": 0.03203342098248864, "country_code": "KW", "country_name": "Kuwait", "spec_version": "2.1", "affected_asns": [], "incident_type": "disruption", "duration_hours": null, "affected_domains": [], "affected_services": [] } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--a1cece44-e476-5931-9627-acbf9cc07035", "incident--df12365f-3ecc-5ebc-f74c-c0c92ccd6050", "incident--eb468341-2fa5-5325-54ee-127ae54177ed", "incident--0343f923-3364-54e0-2df9-2cf74b8e85c0", "incident--3277bec7-fb52-5469-50b0-934f7cddbb69", "incident--8962bd44-17ad-5ba6-bae1-fd06608ae0b8", "incident--8e744e51-df52-57bb-185e-9087641c8683" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }