{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:56.830Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-7565bc8b61bc64b390c13224",
    "scope_type": "country",
    "scope_key": "AM",
    "geography": "AM",
    "title": "Internet disruption in AM",
    "started_at": "2026-08-12T05:45:00.000Z",
    "last_observed_at": "2026-10-01T02:00:00.000Z",
    "status": "resolved",
    "classification": "ROUTING_DISRUPTION",
    "trajectory": "RESOLVED",
    "stress_score": 31,
    "confidence": 51,
    "event_count": 4,
    "affected_asns": [
      "AS42109"
    ],
    "affected_services": [],
    "affected_regions": [
      "AM",
      "145"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:33.827Z",
    "updated_at": "2026-10-03T23:39:45.850Z"
  },
  "events": [
    {
      "id": "ise-4c7b361a52eb195620d79682",
      "entity_type": "asn",
      "entity_key": "AS42109",
      "geography": "AM",
      "started_at": "2026-08-12T17:30:00.000Z",
      "last_observed_at": "2026-08-12T17:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.405796960239851
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS42109"
      ],
      "affected_services": [],
      "affected_regions": [
        "AM"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.711Z",
      "updated_at": "2026-10-03T23:50:23.663Z",
      "evidence": [
        {
          "event_id": "ise-4c7b361a52eb195620d79682",
          "stix_object_id": "incident--01dfaca2-97a5-508f-e45b-028230a3eca6",
          "platform": "ioda",
          "observed_at": "2026-08-12T17:30:00.000Z",
          "name": "ADC-AS -- Armenia",
          "value": "geoasn/42109-am",
          "content_hash": "c8d897af746ee385",
          "object_json": {
            "id": "incident--01dfaca2-97a5-508f-e45b-028230a3eca6",
            "name": "ADC-AS -- Armenia",
            "type": "incident",
            "score": 2545638.846153846,
            "title": "ADC-AS -- Armenia",
            "value": "geoasn/42109-am",
            "method": "median",
            "location": "geoasn/42109-AM",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1557332
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-f238619491e905366101157b",
      "entity_type": "asn",
      "entity_key": "AS42109",
      "geography": "145",
      "started_at": "2026-08-12T17:30:00.000Z",
      "last_observed_at": "2026-08-12T17:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.405796960239851
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS42109"
      ],
      "affected_services": [],
      "affected_regions": [
        "145"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.724Z",
      "updated_at": "2026-10-03T23:50:23.681Z",
      "evidence": [
        {
          "event_id": "ise-f238619491e905366101157b",
          "stix_object_id": "incident--3969f032-e452-5152-b5e2-59e235beefb0",
          "platform": "ioda",
          "observed_at": "2026-08-12T17:30:00.000Z",
          "name": "ADC-AS -- Erevan",
          "value": "geoasn/42109-145",
          "content_hash": "f34ae81c10da3769",
          "object_json": {
            "id": "incident--3969f032-e452-5152-b5e2-59e235beefb0",
            "name": "ADC-AS -- Erevan",
            "type": "incident",
            "score": 2545638.846153846,
            "title": "ADC-AS -- Erevan",
            "value": "geoasn/42109-145",
            "method": "median",
            "location": "geoasn/42109-145",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1557332
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-ccdb3edd4f26bc3c1893ce93",
      "entity_type": "asn",
      "entity_key": "AS42109",
      "geography": null,
      "started_at": "2026-08-12T17:30:00.000Z",
      "last_observed_at": "2026-08-12T17:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.405796960239851
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS42109"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.733Z",
      "updated_at": "2026-10-03T23:50:23.653Z",
      "evidence": [
        {
          "event_id": "ise-ccdb3edd4f26bc3c1893ce93",
          "stix_object_id": "incident--7bf4d2db-6f25-556c-67c1-219df917d866",
          "platform": "ioda",
          "observed_at": "2026-08-12T17:30:00.000Z",
          "name": "AS42109 (ADC-AS)",
          "value": "asn/42109",
          "content_hash": "0954238ea50b3811",
          "object_json": {
            "id": "incident--7bf4d2db-6f25-556c-67c1-219df917d866",
            "name": "AS42109 (ADC-AS)",
            "type": "incident",
            "score": 2545638.846153846,
            "title": "AS42109 (ADC-AS)",
            "value": "asn/42109",
            "method": "median",
            "location": "asn/42109",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1557332
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-ff63ca6921fdb55bac9bce29",
      "entity_type": "country",
      "entity_key": "AM",
      "geography": "AM",
      "started_at": "2026-08-12T05:45:00.000Z",
      "last_observed_at": "2026-10-01T02:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 28,
      "confidence": 3,
      "components": {
        "anomaly": 0.4,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.02
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 0.4
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.03333333333333333
      },
      "deviation": {
        "max_anomaly": 0.4,
        "max_deviation": 0.02
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "AM"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 6,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.300Z",
      "updated_at": "2026-10-03T23:50:23.072Z",
      "evidence": [
        {
          "event_id": "ise-ff63ca6921fdb55bac9bce29",
          "stix_object_id": "incident--06cfe1fe-4d88-540e-915b-17ea49c66146",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T05:45:00.000Z",
          "name": "Internet connectivity disruption in Armenia",
          "value": "am-2026-0039",
          "content_hash": "55834db6430c00e5",
          "object_json": {
            "id": "incident--06cfe1fe-4d88-540e-915b-17ea49c66146",
            "name": "Internet connectivity disruption in Armenia",
            "type": "incident",
            "title": "Internet connectivity disruption in Armenia",
            "value": "am-2026-0039",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-12T17:30:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-12T05:45:00Z",
            "description": "IODA detected significant connectivity drop in Armenia. 2 critical alerts recorded.",
            "anomaly_rate": 0.02,
            "country_code": "AM",
            "country_name": "Armenia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ff63ca6921fdb55bac9bce29",
          "stix_object_id": "incident--59ddb372-1318-5226-1ed1-4d4a5bdb3e16",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T18:55:00.000Z",
          "name": "Internet connectivity disruption in Armenia",
          "value": "am-2026-0041",
          "content_hash": "c9141e9905e834bb",
          "object_json": {
            "id": "incident--59ddb372-1318-5226-1ed1-4d4a5bdb3e16",
            "name": "Internet connectivity disruption in Armenia",
            "type": "incident",
            "title": "Internet connectivity disruption in Armenia",
            "value": "am-2026-0041",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-27T18:55:00Z",
            "description": "IODA detected significant connectivity drop in Armenia. 1 critical alerts recorded.",
            "anomaly_rate": 0.02,
            "country_code": "AM",
            "country_name": "Armenia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ff63ca6921fdb55bac9bce29",
          "stix_object_id": "incident--5b481582-4852-5e4e-3a57-625891e5c806",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T18:45:00.000Z",
          "name": "Internet connectivity disruption in Armenia",
          "value": "am-2026-0048",
          "content_hash": "0ce67d1d6ceadf0a",
          "object_json": {
            "id": "incident--5b481582-4852-5e4e-3a57-625891e5c806",
            "name": "Internet connectivity disruption in Armenia",
            "type": "incident",
            "title": "Internet connectivity disruption in Armenia",
            "value": "am-2026-0048",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-25T18:45:00Z",
            "description": "IODA detected significant connectivity drop in Armenia. 3 critical alerts recorded.",
            "anomaly_rate": 0.028194444444444442,
            "country_code": "AM",
            "country_name": "Armenia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ff63ca6921fdb55bac9bce29",
          "stix_object_id": "incident--428b651c-f022-5292-b4c9-2b9f2d22bf99",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T12:50:00.000Z",
          "name": "Internet connectivity disruption in Armenia",
          "value": "am-2026-0049",
          "content_hash": "7016e2156ab78b6f",
          "object_json": {
            "id": "incident--428b651c-f022-5292-b4c9-2b9f2d22bf99",
            "name": "Internet connectivity disruption in Armenia",
            "type": "incident",
            "title": "Internet connectivity disruption in Armenia",
            "value": "am-2026-0049",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-26T12:50:00Z",
            "description": "IODA detected significant connectivity drop in Armenia. 3 critical alerts recorded.",
            "anomaly_rate": 0.02819444444444445,
            "country_code": "AM",
            "country_name": "Armenia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ff63ca6921fdb55bac9bce29",
          "stix_object_id": "incident--87f52eef-9676-5ec0-7d1d-6e00c85205d8",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T03:35:00.000Z",
          "name": "Internet connectivity disruption in Armenia",
          "value": "am-2026-0050",
          "content_hash": "e60b04f19e36a333",
          "object_json": {
            "id": "incident--87f52eef-9676-5ec0-7d1d-6e00c85205d8",
            "name": "Internet connectivity disruption in Armenia",
            "type": "incident",
            "title": "Internet connectivity disruption in Armenia",
            "value": "am-2026-0050",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-28T17:25:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-28T03:35:00Z",
            "description": "IODA detected significant connectivity drop in Armenia. 3 critical alerts recorded.",
            "anomaly_rate": 0.028194444444444442,
            "country_code": "AM",
            "country_name": "Armenia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ff63ca6921fdb55bac9bce29",
          "stix_object_id": "incident--d550d82d-f918-5955-eb22-d4303581b4c5",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T02:00:00.000Z",
          "name": "Internet connectivity disruption in Armenia",
          "value": "am-2026-0051",
          "content_hash": "75e82b55857469b4",
          "object_json": {
            "id": "incident--d550d82d-f918-5955-eb22-d4303581b4c5",
            "name": "Internet connectivity disruption in Armenia",
            "type": "incident",
            "title": "Internet connectivity disruption in Armenia",
            "value": "am-2026-0051",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-01T02:00:00Z",
            "description": "IODA detected significant connectivity drop in Armenia. 1 critical alerts recorded.",
            "anomaly_rate": 0.03333333333333333,
            "country_code": "AM",
            "country_name": "Armenia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--01dfaca2-97a5-508f-e45b-028230a3eca6",
      "incident--3969f032-e452-5152-b5e2-59e235beefb0",
      "incident--7bf4d2db-6f25-556c-67c1-219df917d866",
      "incident--06cfe1fe-4d88-540e-915b-17ea49c66146",
      "incident--59ddb372-1318-5226-1ed1-4d4a5bdb3e16",
      "incident--5b481582-4852-5e4e-3a57-625891e5c806",
      "incident--428b651c-f022-5292-b4c9-2b9f2d22bf99",
      "incident--87f52eef-9676-5ec0-7d1d-6e00c85205d8",
      "incident--d550d82d-f918-5955-eb22-d4303581b4c5"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}