{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:40.075Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-7f5763409ce377d9a283145d",
    "scope_type": "country",
    "scope_key": "ZW",
    "geography": "ZW",
    "title": "Internet disruption in ZW",
    "started_at": "2026-08-10T16:05:00.000Z",
    "last_observed_at": "2026-10-01T13:05:00.000Z",
    "status": "resolved",
    "classification": "SERVICE_BLOCKING",
    "trajectory": "RESOLVED",
    "stress_score": 61,
    "confidence": 34,
    "event_count": 1,
    "affected_asns": [],
    "affected_services": [
      "Tor"
    ],
    "affected_regions": [
      "ZW"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:33.163Z",
    "updated_at": "2026-10-03T23:39:45.212Z"
  },
  "events": [
    {
      "id": "ise-ce7d7574c8cec7fab59eab68",
      "entity_type": "country",
      "entity_key": "ZW",
      "geography": "ZW",
      "started_at": "2026-08-10T16:05:00.000Z",
      "last_observed_at": "2026-10-01T13:05:00.000Z",
      "status": "resolved",
      "classification": "SERVICE_BLOCKING",
      "trajectory": "RESOLVED",
      "stress_score": 61,
      "confidence": 15,
      "components": {
        "anomaly": 1,
        "breadth": 0.08666666666666667,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.9545471875964215
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 1
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.019230769230769232
      },
      "deviation": {
        "max_anomaly": 1,
        "max_deviation": 0.9545471875964215
      },
      "affected_asns": [],
      "affected_services": [
        "Tor"
      ],
      "affected_regions": [
        "ZW"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 13,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:21.367Z",
      "updated_at": "2026-10-03T23:50:21.149Z",
      "evidence": [
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--a2665535-8e4c-5797-d114-0dcb27d61266",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T16:05:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0077",
          "content_hash": "91908652c25772da",
          "object_json": {
            "id": "incident--a2665535-8e4c-5797-d114-0dcb27d61266",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0077",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-10T16:05:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.02127659574468085,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--053cb141-3744-5d73-47fa-b7a90b331574",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-13T16:00:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0078",
          "content_hash": "03be068eb1de9aaa",
          "object_json": {
            "id": "incident--053cb141-3744-5d73-47fa-b7a90b331574",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0078",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-13T16:00:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.02127659574468085,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--fd3985ff-ddd3-509b-70cf-29e5ab50a983",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-26T08:20:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0083",
          "content_hash": "4eca690a2ea69c3e",
          "object_json": {
            "id": "incident--fd3985ff-ddd3-509b-70cf-29e5ab50a983",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0083",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-26T20:00:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-26T08:20:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 3 critical alerts recorded.",
            "anomaly_rate": 0.22626625847988327,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--8a742e09-8908-52c9-5d9b-56750bb26248",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T16:25:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0084",
          "content_hash": "196e2e1816dffd35",
          "object_json": {
            "id": "incident--8a742e09-8908-52c9-5d9b-56750bb26248",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0084",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-27T21:05:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-27T16:25:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.015151515151515152,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 4.6667,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--a0d31590-2e07-522a-a885-d9cfe5ce9936",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T13:40:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0085",
          "content_hash": "2e934ff5d86a6aef",
          "object_json": {
            "id": "incident--a0d31590-2e07-522a-a885-d9cfe5ce9936",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0085",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-28T16:55:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-28T13:40:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 2 critical alerts recorded.",
            "anomaly_rate": 0.019491927825261157,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 3.25,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--c11dda24-dbcd-51fa-6fff-67112900336a",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-30T13:45:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0086",
          "content_hash": "e8e88c15f794861c",
          "object_json": {
            "id": "incident--c11dda24-dbcd-51fa-6fff-67112900336a",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0086",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-30T13:45:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 2 critical alerts recorded.",
            "anomaly_rate": 0.02459768873528459,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--b85b1d13-f84f-59a6-0784-9ab6acea0489",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T19:20:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0094",
          "content_hash": "89bf340043a49482",
          "object_json": {
            "id": "incident--b85b1d13-f84f-59a6-0784-9ab6acea0489",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0094",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-25T19:20:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.02127659574468085,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--eec82865-60e3-57d1-82fd-0e50f7f53cf5",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T11:25:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0095",
          "content_hash": "1a9842a9b62615fd",
          "object_json": {
            "id": "incident--eec82865-60e3-57d1-82fd-0e50f7f53cf5",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0095",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-26T11:25:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.02127659574468085,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--63c08da0-5ea9-5855-6ab6-4af0021ac7ac",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T05:45:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0096",
          "content_hash": "3b3f36c4524dd6fc",
          "object_json": {
            "id": "incident--63c08da0-5ea9-5855-6ab6-4af0021ac7ac",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0096",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-27T05:45:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.038461538461538464,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--02f2f369-ef69-5ef4-ab5b-514cb234b49c",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in ZW",
          "value": "zw-2026-0098",
          "content_hash": "b1fa158b9d2acc93",
          "object_json": {
            "id": "incident--02f2f369-ef69-5ef4-ab5b-514cb234b49c",
            "name": "Censorship detected in ZW",
            "type": "incident",
            "title": "Censorship detected in ZW",
            "value": "zw-2026-0098",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--80a868d6-cedd-5b94-f095-57545af01f3a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T04:55:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0097",
          "content_hash": "707056f29207d285",
          "object_json": {
            "id": "incident--80a868d6-cedd-5b94-f095-57545af01f3a",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0097",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-28T14:40:00Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-09-28T04:55:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 5 critical alerts recorded.",
            "anomaly_rate": 0.030818565329519904,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--d5a89477-1983-5ba1-96a1-e0fd19985068",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T08:55:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0099",
          "content_hash": "92f1207927c147d6",
          "object_json": {
            "id": "incident--d5a89477-1983-5ba1-96a1-e0fd19985068",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0099",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-30T19:00:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T08:55:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.019753086419753086,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-ce7d7574c8cec7fab59eab68",
          "stix_object_id": "incident--0f7a2144-1e7c-5f65-06bf-669bd5d42e1e",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T13:05:00.000Z",
          "name": "Internet connectivity disruption in Zimbabwe",
          "value": "zw-2026-0100",
          "content_hash": "4cb9542158f1b296",
          "object_json": {
            "id": "incident--0f7a2144-1e7c-5f65-06bf-669bd5d42e1e",
            "name": "Internet connectivity disruption in Zimbabwe",
            "type": "incident",
            "title": "Internet connectivity disruption in Zimbabwe",
            "value": "zw-2026-0100",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-01T13:05:00Z",
            "description": "IODA detected significant connectivity drop in Zimbabwe. 1 critical alerts recorded.",
            "anomaly_rate": 0.019230769230769232,
            "country_code": "ZW",
            "country_name": "Zimbabwe",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--a2665535-8e4c-5797-d114-0dcb27d61266",
      "incident--053cb141-3744-5d73-47fa-b7a90b331574",
      "incident--fd3985ff-ddd3-509b-70cf-29e5ab50a983",
      "incident--8a742e09-8908-52c9-5d9b-56750bb26248",
      "incident--a0d31590-2e07-522a-a885-d9cfe5ce9936",
      "incident--c11dda24-dbcd-51fa-6fff-67112900336a",
      "incident--b85b1d13-f84f-59a6-0784-9ab6acea0489",
      "incident--eec82865-60e3-57d1-82fd-0e50f7f53cf5",
      "incident--63c08da0-5ea9-5855-6ab6-4af0021ac7ac",
      "incident--02f2f369-ef69-5ef4-ab5b-514cb234b49c",
      "incident--80a868d6-cedd-5b94-f095-57545af01f3a",
      "incident--d5a89477-1983-5ba1-96a1-e0fd19985068",
      "incident--0f7a2144-1e7c-5f65-06bf-669bd5d42e1e"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}