{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:31.201Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-52ef97241fe4dc2f35cd9d6f",
    "scope_type": "country",
    "scope_key": "BA",
    "geography": "BA",
    "title": "Internet disruption in BA",
    "started_at": "2026-08-13T08:50:00.000Z",
    "last_observed_at": "2026-09-29T00:00:00.000Z",
    "status": "resolved",
    "classification": "SERVICE_BLOCKING",
    "trajectory": "RESOLVED",
    "stress_score": 61,
    "confidence": 34,
    "event_count": 1,
    "affected_asns": [],
    "affected_services": [
      "Facebook Messenger"
    ],
    "affected_regions": [
      "BA"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:33.953Z",
    "updated_at": "2026-10-03T23:39:45.972Z"
  },
  "events": [
    {
      "id": "ise-f36ecc015913d51cf4fec35c",
      "entity_type": "country",
      "entity_key": "BA",
      "geography": "BA",
      "started_at": "2026-08-13T08:50:00.000Z",
      "last_observed_at": "2026-09-29T00:00:00.000Z",
      "status": "resolved",
      "classification": "SERVICE_BLOCKING",
      "trajectory": "RESOLVED",
      "stress_score": 61,
      "confidence": 15,
      "components": {
        "anomaly": 1,
        "breadth": 0.08666666666666667,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.9804878048780488
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 1
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 1
      },
      "deviation": {
        "max_anomaly": 1,
        "max_deviation": 0.9804878048780488
      },
      "affected_asns": [],
      "affected_services": [
        "Facebook Messenger"
      ],
      "affected_regions": [
        "BA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 7,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.929Z",
      "updated_at": "2026-10-03T23:50:23.911Z",
      "evidence": [
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--df093d64-54fb-50bf-5b56-b89dea0eec20",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-13T08:50:00.000Z",
          "name": "Internet connectivity disruption in Bosnia and Herzegovina",
          "value": "ba-2026-0057",
          "content_hash": "ccd18739e57e4f77",
          "object_json": {
            "id": "incident--df093d64-54fb-50bf-5b56-b89dea0eec20",
            "name": "Internet connectivity disruption in Bosnia and Herzegovina",
            "type": "incident",
            "title": "Internet connectivity disruption in Bosnia and Herzegovina",
            "value": "ba-2026-0057",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-13T08:50:00Z",
            "description": "IODA detected significant connectivity drop in Bosnia and Herzegovina. 1 critical alerts recorded.",
            "anomaly_rate": 0.01951219512195122,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--4c5c9a0a-d656-5f4e-0fe6-73526b319ba3",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in BA",
          "value": "ba-2026-0066",
          "content_hash": "338b769f69d4886f",
          "object_json": {
            "id": "incident--4c5c9a0a-d656-5f4e-0fe6-73526b319ba3",
            "name": "Censorship detected in BA",
            "type": "incident",
            "title": "Censorship detected in BA",
            "value": "ba-2026-0066",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--3cc3581e-3314-53bf-3ba7-fa4d4cb99d48",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in BA",
          "value": "ba-2026-0068",
          "content_hash": "757f061675be2472",
          "object_json": {
            "id": "incident--3cc3581e-3314-53bf-3ba7-fa4d4cb99d48",
            "name": "Censorship detected in BA",
            "type": "incident",
            "title": "Censorship detected in BA",
            "value": "ba-2026-0068",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--1199606a-f6e6-5f64-bcb8-59340b0d92e2",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T16:55:00.000Z",
          "name": "Internet connectivity disruption in Bosnia and Herzegovina",
          "value": "ba-2026-0067",
          "content_hash": "5407041b9805bc25",
          "object_json": {
            "id": "incident--1199606a-f6e6-5f64-bcb8-59340b0d92e2",
            "name": "Internet connectivity disruption in Bosnia and Herzegovina",
            "type": "incident",
            "title": "Internet connectivity disruption in Bosnia and Herzegovina",
            "value": "ba-2026-0067",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-29T16:55:00Z",
            "description": "IODA detected significant connectivity drop in Bosnia and Herzegovina. 1 critical alerts recorded.",
            "anomaly_rate": 0.14414414414414414,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--e08826af-b988-55b7-6a1e-be29fa53265f",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T09:30:00.000Z",
          "name": "Internet connectivity disruption in Bosnia and Herzegovina",
          "value": "ba-2026-0084",
          "content_hash": "0142690d75bc1c5f",
          "object_json": {
            "id": "incident--e08826af-b988-55b7-6a1e-be29fa53265f",
            "name": "Internet connectivity disruption in Bosnia and Herzegovina",
            "type": "incident",
            "title": "Internet connectivity disruption in Bosnia and Herzegovina",
            "value": "ba-2026-0084",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T09:30:00Z",
            "description": "IODA detected significant connectivity drop in Bosnia and Herzegovina. 1 critical alerts recorded.",
            "anomaly_rate": 0.029411764705882353,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--02de84e3-86aa-5bd6-9348-1f0e48d796d7",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T03:40:00.000Z",
          "name": "Internet connectivity disruption in Bosnia and Herzegovina",
          "value": "ba-2026-0085",
          "content_hash": "aa29f729e06bfb3c",
          "object_json": {
            "id": "incident--02de84e3-86aa-5bd6-9348-1f0e48d796d7",
            "name": "Internet connectivity disruption in Bosnia and Herzegovina",
            "type": "incident",
            "title": "Internet connectivity disruption in Bosnia and Herzegovina",
            "value": "ba-2026-0085",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-24T08:05:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-24T03:40:00Z",
            "description": "IODA detected significant connectivity drop in Bosnia and Herzegovina. 1 critical alerts recorded.",
            "anomaly_rate": 0.029411764705882353,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 4.4167,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-f36ecc015913d51cf4fec35c",
          "stix_object_id": "incident--b2a79ec8-8c95-5d3c-d0ea-f4a82835ebec",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in BA",
          "value": "ba-2026-0086",
          "content_hash": "9b0d6fa049079f2e",
          "object_json": {
            "id": "incident--b2a79ec8-8c95-5d3c-d0ea-f4a82835ebec",
            "name": "Censorship detected in BA",
            "type": "incident",
            "title": "Censorship detected in BA",
            "value": "ba-2026-0086",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BA",
            "country_name": "Bosnia and Herzegovina",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger"
            ]
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--df093d64-54fb-50bf-5b56-b89dea0eec20",
      "incident--4c5c9a0a-d656-5f4e-0fe6-73526b319ba3",
      "incident--3cc3581e-3314-53bf-3ba7-fa4d4cb99d48",
      "incident--1199606a-f6e6-5f64-bcb8-59340b0d92e2",
      "incident--e08826af-b988-55b7-6a1e-be29fa53265f",
      "incident--02de84e3-86aa-5bd6-9348-1f0e48d796d7",
      "incident--b2a79ec8-8c95-5d3c-d0ea-f4a82835ebec"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}