{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:41.284Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-3db8589a536226020b25ffb7",
    "scope_type": "country",
    "scope_key": "NZ",
    "geography": "NZ",
    "title": "Internet disruption in NZ",
    "started_at": "2026-07-26T11:45:00.000Z",
    "last_observed_at": "2026-09-28T06:15:00.000Z",
    "status": "resolved",
    "classification": "UNKNOWN_DISRUPTION",
    "trajectory": "RESOLVED",
    "stress_score": 31,
    "confidence": 46,
    "event_count": 7,
    "affected_asns": [
      "AS38022",
      "AS55853"
    ],
    "affected_services": [],
    "affected_regions": [
      "3061",
      "NZ",
      "3049"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:29.048Z",
    "updated_at": "2026-10-03T23:39:42.113Z"
  },
  "events": [
    {
      "id": "ise-da6c2799a6000cc6c502af7f",
      "entity_type": "asn",
      "entity_key": "AS38022",
      "geography": "3061",
      "started_at": "2026-07-27T10:00:00.000Z",
      "last_observed_at": "2026-07-27T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.801041020994456
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS38022"
      ],
      "affected_services": [],
      "affected_regions": [
        "3061"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:14.474Z",
      "updated_at": "2026-10-03T23:50:15.240Z",
      "evidence": [
        {
          "event_id": "ise-da6c2799a6000cc6c502af7f",
          "stix_object_id": "incident--d12f9590-02fc-5980-281b-793bb370489e",
          "platform": "ioda",
          "observed_at": "2026-07-27T10:00:00.000Z",
          "name": "REANNZ-NZ-AP -- Wellington",
          "value": "geoasn/38022-3061",
          "content_hash": "7acc6b450e414b51",
          "object_json": {
            "id": "incident--d12f9590-02fc-5980-281b-793bb370489e",
            "name": "REANNZ-NZ-AP -- Wellington",
            "type": "incident",
            "score": 632470.5882352941,
            "title": "REANNZ-NZ-AP -- Wellington",
            "value": "geoasn/38022-3061",
            "method": "median",
            "location": "geoasn/38022-3061",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-c442b110ebbd5e1787d56c1d",
      "entity_type": "asn",
      "entity_key": "AS38022",
      "geography": "NZ",
      "started_at": "2026-07-27T10:00:00.000Z",
      "last_observed_at": "2026-07-27T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.651278983404388
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS38022"
      ],
      "affected_services": [],
      "affected_regions": [
        "NZ"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:14.458Z",
      "updated_at": "2026-10-03T23:50:15.231Z",
      "evidence": [
        {
          "event_id": "ise-c442b110ebbd5e1787d56c1d",
          "stix_object_id": "incident--01334a7f-d4e5-5db2-56d8-ee47ec5aad54",
          "platform": "ioda",
          "observed_at": "2026-07-27T10:00:00.000Z",
          "name": "REANNZ-NZ-AP -- New Zealand",
          "value": "geoasn/38022-nz",
          "content_hash": "502253d00c19face",
          "object_json": {
            "id": "incident--01334a7f-d4e5-5db2-56d8-ee47ec5aad54",
            "name": "REANNZ-NZ-AP -- New Zealand",
            "type": "incident",
            "score": 448000,
            "title": "REANNZ-NZ-AP -- New Zealand",
            "value": "geoasn/38022-nz",
            "method": "median",
            "location": "geoasn/38022-NZ",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-228108963f9910a4eac1ceb5",
      "entity_type": "asn",
      "entity_key": "AS55853",
      "geography": "NZ",
      "started_at": "2026-08-13T22:50:00.000Z",
      "last_observed_at": "2026-08-13T22:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.64337349726508
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS55853"
      ],
      "affected_services": [],
      "affected_regions": [
        "NZ"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:24.313Z",
      "updated_at": "2026-10-03T23:50:24.463Z",
      "evidence": [
        {
          "event_id": "ise-228108963f9910a4eac1ceb5",
          "stix_object_id": "incident--b6d5f129-d760-5933-9fb5-400399378021",
          "platform": "ioda",
          "observed_at": "2026-08-13T22:50:00.000Z",
          "name": "MEGATEL-AS-AP -- New Zealand",
          "value": "geoasn/55853-nz",
          "content_hash": "8f5e2383e721a393",
          "object_json": {
            "id": "incident--b6d5f129-d760-5933-9fb5-400399378021",
            "name": "MEGATEL-AS-AP -- New Zealand",
            "type": "incident",
            "score": 439918.7878787879,
            "title": "MEGATEL-AS-AP -- New Zealand",
            "value": "geoasn/55853-nz",
            "method": "median",
            "location": "geoasn/55853-NZ",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1451732
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-1bc2f545588c6f8b5538555a",
      "entity_type": "asn",
      "entity_key": "AS55853",
      "geography": "3049",
      "started_at": "2026-08-13T22:50:00.000Z",
      "last_observed_at": "2026-08-13T22:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.64337349726508
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS55853"
      ],
      "affected_services": [],
      "affected_regions": [
        "3049"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:24.297Z",
      "updated_at": "2026-10-03T23:50:24.495Z",
      "evidence": [
        {
          "event_id": "ise-1bc2f545588c6f8b5538555a",
          "stix_object_id": "incident--d1a969a1-1ff7-5340-3a79-c5a7b9013095",
          "platform": "ioda",
          "observed_at": "2026-08-13T22:50:00.000Z",
          "name": "MEGATEL-AS-AP -- Auckland",
          "value": "geoasn/55853-3049",
          "content_hash": "8d39a177d9135c61",
          "object_json": {
            "id": "incident--d1a969a1-1ff7-5340-3a79-c5a7b9013095",
            "name": "MEGATEL-AS-AP -- Auckland",
            "type": "incident",
            "score": 439918.7878787879,
            "title": "MEGATEL-AS-AP -- Auckland",
            "value": "geoasn/55853-3049",
            "method": "median",
            "location": "geoasn/55853-3049",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1451732
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-73dae70a4d138147183bc13f",
      "entity_type": "asn",
      "entity_key": "AS38022",
      "geography": null,
      "started_at": "2026-07-26T11:45:00.000Z",
      "last_observed_at": "2026-07-26T11:45:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.651278983404388
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS38022"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:14.182Z",
      "updated_at": "2026-10-03T23:50:15.016Z",
      "evidence": [
        {
          "event_id": "ise-73dae70a4d138147183bc13f",
          "stix_object_id": "incident--b8e1104d-2068-568b-f334-de0e3121c020",
          "platform": "ioda",
          "observed_at": "2026-07-26T11:45:00.000Z",
          "name": "AS38022 (REANNZ-NZ-AP)",
          "value": "asn/38022",
          "content_hash": "9cfa9de177fae463",
          "object_json": {
            "id": "incident--b8e1104d-2068-568b-f334-de0e3121c020",
            "name": "AS38022 (REANNZ-NZ-AP)",
            "type": "incident",
            "score": 448000,
            "title": "AS38022 (REANNZ-NZ-AP)",
            "value": "asn/38022",
            "method": "median",
            "location": "asn/38022",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-2f8be154090fc3a1001141ca",
      "entity_type": "asn",
      "entity_key": "AS55853",
      "geography": null,
      "started_at": "2026-08-13T22:50:00.000Z",
      "last_observed_at": "2026-08-13T22:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.64337349726508
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS55853"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:24.305Z",
      "updated_at": "2026-10-03T23:50:24.417Z",
      "evidence": [
        {
          "event_id": "ise-2f8be154090fc3a1001141ca",
          "stix_object_id": "incident--67c702fb-f36f-51ed-bf1d-775d28df8dad",
          "platform": "ioda",
          "observed_at": "2026-08-13T22:50:00.000Z",
          "name": "AS55853 (MEGATEL-AS-AP)",
          "value": "asn/55853",
          "content_hash": "539279d877f81704",
          "object_json": {
            "id": "incident--67c702fb-f36f-51ed-bf1d-775d28df8dad",
            "name": "AS55853 (MEGATEL-AS-AP)",
            "type": "incident",
            "score": 439918.7878787879,
            "title": "AS55853 (MEGATEL-AS-AP)",
            "value": "asn/55853",
            "method": "median",
            "location": "asn/55853",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1451732
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-bb727cc15b089318953c8130",
      "entity_type": "country",
      "entity_key": "NZ",
      "geography": "NZ",
      "started_at": "2026-08-11T23:05:00.000Z",
      "last_observed_at": "2026-09-28T06:15:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 16,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.035764768924110305
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.055372612061365206
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 0.035764768924110305
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "NZ"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration"
      ],
      "observation_count": 2,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:22.987Z",
      "updated_at": "2026-10-03T23:50:22.602Z",
      "evidence": [
        {
          "event_id": "ise-bb727cc15b089318953c8130",
          "stix_object_id": "incident--5e82df2c-5058-5763-b2a1-7158e805a288",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T23:05:00.000Z",
          "name": "Internet connectivity disruption in New Zealand",
          "value": "nz-2026-0018",
          "content_hash": "a178f50ef465f31c",
          "object_json": {
            "id": "incident--5e82df2c-5058-5763-b2a1-7158e805a288",
            "name": "Internet connectivity disruption in New Zealand",
            "type": "incident",
            "title": "Internet connectivity disruption in New Zealand",
            "value": "nz-2026-0018",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-11T23:05:00Z",
            "description": "IODA detected significant connectivity drop in New Zealand. 1 critical alerts recorded.",
            "anomaly_rate": 0.0196078431372549,
            "country_code": "NZ",
            "country_name": "New Zealand",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-bb727cc15b089318953c8130",
          "stix_object_id": "incident--46213a69-0cab-55f8-489d-e9e8b1cf2e3d",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T06:15:00.000Z",
          "name": "Internet connectivity disruption in New Zealand",
          "value": "nz-2026-0025",
          "content_hash": "56d8e983f6cda924",
          "object_json": {
            "id": "incident--46213a69-0cab-55f8-489d-e9e8b1cf2e3d",
            "name": "Internet connectivity disruption in New Zealand",
            "type": "incident",
            "title": "Internet connectivity disruption in New Zealand",
            "value": "nz-2026-0025",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-28T06:15:00Z",
            "description": "IODA detected significant connectivity drop in New Zealand. 2 critical alerts recorded.",
            "anomaly_rate": 0.055372612061365206,
            "country_code": "NZ",
            "country_name": "New Zealand",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--d12f9590-02fc-5980-281b-793bb370489e",
      "incident--01334a7f-d4e5-5db2-56d8-ee47ec5aad54",
      "incident--b6d5f129-d760-5933-9fb5-400399378021",
      "incident--d1a969a1-1ff7-5340-3a79-c5a7b9013095",
      "incident--b8e1104d-2068-568b-f334-de0e3121c020",
      "incident--67c702fb-f36f-51ed-bf1d-775d28df8dad",
      "incident--5e82df2c-5058-5763-b2a1-7158e805a288",
      "incident--46213a69-0cab-55f8-489d-e9e8b1cf2e3d"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}