{ "service": "h3xa", "kind": "executive-briefing", "generated_at": "2026-10-28T18:08:38.396Z", "model_version": "h3xa-iss-1.1", "situation": { "id": "sit-a2b93b9a19ad3276a202b2ff", "scope_type": "country", "scope_key": "MA", "geography": "MA", "title": "Internet disruption in MA", "started_at": "2026-08-10T00:00:00.000Z", "last_observed_at": "2026-10-01T00:00:00.000Z", "status": "resolved", "classification": "PARTIAL_OUTAGE", "trajectory": "RESOLVED", "stress_score": 65, "confidence": 34, "event_count": 1, "affected_asns": [ "AS6713" ], "affected_services": [ "Tor", "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ], "affected_regions": [ "MA" ], "source_count": 1, "record_origin": "unrecorded", "first_seen": "2026-08-29T22:33:32.640Z", "updated_at": "2026-10-03T23:39:44.838Z" }, "events": [ { "id": "ise-092f2f0ed467ca51bb277278", "entity_type": "country", "entity_key": "MA", "geography": "MA", "started_at": "2026-08-10T00:00:00.000Z", "last_observed_at": "2026-10-01T00:00:00.000Z", "status": "resolved", "classification": "SERVICE_BLOCKING", "trajectory": "RESOLVED", "stress_score": 65, "confidence": 15, "components": { "anomaly": 1, "breadth": 0.44000000000000006, "persistence": 1, "corroboration": 0, "baseline_deviation": 0.7770065359477124 }, "confidence_factors": { "method_diversity": 0.25, "source_agreement": 0, "timestamp_overlap": 0, "infrastructure_overlap": 0, "alternative_explanations": 0.5, "statistical_significance": 1 }, "baseline": { "signals": [ "voidly.anomaly_rate" ], "signal_count": 1 }, "current_measurement": { "voidly.anomaly_rate": 1 }, "deviation": { "max_anomaly": 1, "max_deviation": 0.7770065359477124 }, "affected_asns": [ "AS6713" ], "affected_services": [ "Tor", "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ], "affected_regions": [ "MA" ], "source_count": 1, "alternative_explanations": [ "single-source signal", "insufficient corroboration" ], "observation_count": 6, "ingestion_method": null, "first_seen": "2026-08-29T22:33:20.295Z", "updated_at": "2026-10-03T23:50:20.145Z", "evidence": [ { "event_id": "ise-092f2f0ed467ca51bb277278", "stix_object_id": "incident--122094d2-2ad6-5fa7-2e85-539dba1a695d", "platform": "voidly-atlas", "observed_at": "2026-08-10T00:00:00.000Z", "name": "Censorship detected in MA", "value": "ma-2026-0764", "content_hash": "a1fcd050402bd747", "object_json": { "id": "incident--122094d2-2ad6-5fa7-2e85-539dba1a695d", "name": "Censorship detected in MA", "type": "incident", "title": "Censorship detected in MA", "value": "ma-2026-0764", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-10T23:59:59Z", "severity": "critical", "confidence": 72, "start_time": "2026-08-10T00:00:00Z", "description": null, "anomaly_rate": 0.5555555555555556, "country_code": "MA", "country_name": "Morocco", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Tor" ] } }, { "event_id": "ise-092f2f0ed467ca51bb277278", "stix_object_id": "incident--6af2ae9e-a179-50e9-7dd5-7a5190823b56", "platform": "voidly-atlas", "observed_at": "2026-08-11T00:00:00.000Z", "name": "Censorship detected in MA", "value": "ma-2026-0765", "content_hash": "3282520acbec5c17", "object_json": { "id": "incident--6af2ae9e-a179-50e9-7dd5-7a5190823b56", "name": "Censorship detected in MA", "type": "incident", "title": "Censorship detected in MA", "value": "ma-2026-0765", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-08-11T23:59:59Z", "severity": "critical", "confidence": 71, "start_time": "2026-08-11T00:00:00Z", "description": null, "anomaly_rate": 0.5294117647058824, "country_code": "MA", "country_name": "Morocco", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Tor" ] } }, { "event_id": "ise-092f2f0ed467ca51bb277278", "stix_object_id": "incident--58566138-b39b-59a4-e56a-8bc5b7f34c20", "platform": "voidly-atlas", "observed_at": "2026-09-23T00:00:00.000Z", "name": "Internet censorship detected in Morocco", "value": "ma-2026-0790", "content_hash": "8499ced69a093a39", "object_json": { "id": "incident--58566138-b39b-59a4-e56a-8bc5b7f34c20", "name": "Internet censorship detected in Morocco", "type": "incident", "title": "Internet censorship detected in Morocco", "value": "ma-2026-0790", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-23T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 2/2 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "MA", "country_name": "Morocco", "spec_version": "2.1", "affected_asns": [ "AS6713" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-092f2f0ed467ca51bb277278", "stix_object_id": "incident--1eea4983-31a6-5230-8cff-5bb6da39b985", "platform": "voidly-atlas", "observed_at": "2026-09-27T00:00:00.000Z", "name": "Internet censorship detected in Morocco", "value": "ma-2026-0792", "content_hash": "63ec568fa1e94c4b", "object_json": { "id": "incident--1eea4983-31a6-5230-8cff-5bb6da39b985", "name": "Internet censorship detected in Morocco", "type": "incident", "title": "Internet censorship detected in Morocco", "value": "ma-2026-0792", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-27T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 2/2 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "MA", "country_name": "Morocco", "spec_version": "2.1", "affected_asns": [ "AS6713" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-092f2f0ed467ca51bb277278", "stix_object_id": "incident--27075081-dad8-53a0-fec9-a9bcdad569c9", "platform": "voidly-atlas", "observed_at": "2026-09-30T00:00:00.000Z", "name": "Internet censorship detected in Morocco", "value": "ma-2026-0794", "content_hash": "12a3d22c8074ab9d", "object_json": { "id": "incident--27075081-dad8-53a0-fec9-a9bcdad569c9", "name": "Internet censorship detected in Morocco", "type": "incident", "title": "Internet censorship detected in Morocco", "value": "ma-2026-0794", "status": "suspected", "sources": [ "censoredplanet" ], "end_time": null, "severity": "critical", "confidence": 65, "start_time": "2026-09-30T00:00:00Z", "description": "CenAlert detected interference. Impact: 1.0. Reported by: DNS blocking detected: 2/2 probes anomalous (100.0%) for bbc.com.", "anomaly_rate": 0.01, "country_code": "MA", "country_name": "Morocco", "spec_version": "2.1", "affected_asns": [ "AS6713" ], "incident_type": "censorship", "duration_hours": null, "affected_domains": [ "bbc.com", "chat.openai.com", "chatgpt.com", "claude.ai", "facebook.com", "gemini.google.com", "getlantern.org", "google.com", "huggingface.co", "instagram.com", "medium.com", "nytimes.com", "openai.com", "protonvpn.com", "psiphon.ca", "reddit.com", "signal.org", "substack.com", "telegram.org", "theguardian.com", "tiktok.com", "tumblr.com", "twitter.com", "whatsapp.com", "youtube.com" ], "affected_services": [ "ChatGPT", "Claude", "Facebook", "Gemini", "Instagram", "ProtonVPN", "Signal", "Telegram", "TikTok", "WhatsApp", "X", "YouTube" ] } }, { "event_id": "ise-092f2f0ed467ca51bb277278", "stix_object_id": "incident--abcbd5f7-20e4-5384-8473-33d8199a41c4", "platform": "voidly-atlas", "observed_at": "2026-10-01T00:00:00.000Z", "name": "Censorship detected in MA", "value": "ma-2026-0795", "content_hash": "9b2218e2db8bc9ab", "object_json": { "id": "incident--abcbd5f7-20e4-5384-8473-33d8199a41c4", "name": "Censorship detected in MA", "type": "incident", "title": "Censorship detected in MA", "value": "ma-2026-0795", "status": "suspected", "sources": [ "ooni" ], "end_time": "2026-10-01T23:59:59Z", "severity": "critical", "confidence": 90, "start_time": "2026-10-01T00:00:00Z", "description": null, "anomaly_rate": 1, "country_code": "MA", "country_name": "Morocco", "spec_version": "2.1", "affected_asns": [], "incident_type": "censorship", "duration_hours": null, "affected_domains": [], "affected_services": [ "Tor" ] } } ], "derivations": [] } ], "context": [], "audit": { "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.", "weights": { "anomaly": 0.3, "breadth": 0.2, "persistence": 0.15, "corroboration": 0.2, "baseline_deviation": 0.15 }, "derivation_ids": [], "observation_ids": [ "incident--122094d2-2ad6-5fa7-2e85-539dba1a695d", "incident--6af2ae9e-a179-50e9-7dd5-7a5190823b56", "incident--58566138-b39b-59a4-e56a-8bc5b7f34c20", "incident--1eea4983-31a6-5230-8cff-5bb6da39b985", "incident--27075081-dad8-53a0-fec9-a9bcdad569c9", "incident--abcbd5f7-20e4-5384-8473-33d8199a41c4" ], "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score." } }