{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:41.836Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-adc82625e87c8070aa5a861c",
    "scope_type": "country",
    "scope_key": "AF",
    "geography": "AF",
    "title": "Internet disruption in AF",
    "started_at": "2026-08-09T20:35:00.000Z",
    "last_observed_at": "2026-10-03T10:25:00.000Z",
    "status": "active",
    "classification": "UNKNOWN_DISRUPTION",
    "trajectory": "STABLE",
    "stress_score": 44,
    "confidence": 32,
    "event_count": 1,
    "affected_asns": [],
    "affected_services": [],
    "affected_regions": [
      "AF"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:32.576Z",
    "updated_at": "2026-10-03T23:39:44.764Z"
  },
  "events": [
    {
      "id": "ise-9b1106b0b31c2a5fd9dc2570",
      "entity_type": "country",
      "entity_key": "AF",
      "geography": "AF",
      "started_at": "2026-08-09T20:35:00.000Z",
      "last_observed_at": "2026-10-03T10:25:00.000Z",
      "status": "active",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "STABLE",
      "stress_score": 44,
      "confidence": 13,
      "components": {
        "anomaly": 0.901826213332008,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.11538461538461539
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 0.901826213332008
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.02857142857142857
      },
      "deviation": {
        "max_anomaly": 0.901826213332008,
        "max_deviation": 0.11538461538461539
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "AF"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 9,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.043Z",
      "updated_at": "2026-10-03T23:50:19.542Z",
      "evidence": [
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--07fa55ef-d097-5bb2-9229-53b38f3e2dab",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-09T20:35:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0074",
          "content_hash": "27a65b7bed9d0e3a",
          "object_json": {
            "id": "incident--07fa55ef-d097-5bb2-9229-53b38f3e2dab",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0074",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-09T20:35:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 1 critical alerts recorded.",
            "anomaly_rate": 0.11538461538461539,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--c0df1c55-cf25-5445-c275-9bd9c680860a",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T23:35:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0075",
          "content_hash": "af2ed12ba34076ad",
          "object_json": {
            "id": "incident--c0df1c55-cf25-5445-c275-9bd9c680860a",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0075",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-10T23:35:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 1 critical alerts recorded.",
            "anomaly_rate": 0.038461538461538464,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--51a745d4-9000-52d3-1b5c-351a9b5d0b57",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T07:00:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0076",
          "content_hash": "2576cea29b5eef86",
          "object_json": {
            "id": "incident--51a745d4-9000-52d3-1b5c-351a9b5d0b57",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0076",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-12T21:10:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-12T07:00:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 3 critical alerts recorded.",
            "anomaly_rate": 0.026380086027388932,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--b644fd32-302a-52d0-a8e3-9c864a25e8ba",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T08:20:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0102",
          "content_hash": "ce7c91ce46245c8c",
          "object_json": {
            "id": "incident--b644fd32-302a-52d0-a8e3-9c864a25e8ba",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0102",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T08:20:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 1 critical alerts recorded.",
            "anomaly_rate": 0.017857142857142856,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--79a9bf87-4552-59ff-cec7-a502bf78dfee",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T01:30:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0103",
          "content_hash": "898839f8741e9cf2",
          "object_json": {
            "id": "incident--79a9bf87-4552-59ff-cec7-a502bf78dfee",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0103",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-24T01:30:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 1 critical alerts recorded.",
            "anomaly_rate": 0.017857142857142856,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--9159d7ac-1cdf-5dd1-df7d-03a13762d6eb",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T04:15:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0104",
          "content_hash": "b3ab7884b92d47db",
          "object_json": {
            "id": "incident--9159d7ac-1cdf-5dd1-df7d-03a13762d6eb",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0104",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-26T11:20:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-26T04:15:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 2 critical alerts recorded.",
            "anomaly_rate": 0.07732629323538415,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 7.0833,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--67c34623-598f-55d8-475f-cc5d7d985d6d",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T05:25:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0105",
          "content_hash": "8f77294b49939abc",
          "object_json": {
            "id": "incident--67c34623-598f-55d8-475f-cc5d7d985d6d",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0105",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-27T05:25:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 4 critical alerts recorded.",
            "anomaly_rate": 0.1492547225501771,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--6cc3afd0-f9fb-5bb4-f9ae-e3f6f24f8f7a",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T07:20:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0106",
          "content_hash": "f9b64976f4786df4",
          "object_json": {
            "id": "incident--6cc3afd0-f9fb-5bb4-f9ae-e3f6f24f8f7a",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0106",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-10-01T10:10:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-10-01T07:20:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 2 critical alerts recorded.",
            "anomaly_rate": 0.017857142857142856,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-9b1106b0b31c2a5fd9dc2570",
          "stix_object_id": "incident--7339a39c-1839-59fa-3fd2-a6338c29d736",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-03T10:25:00.000Z",
          "name": "Internet connectivity disruption in Afghanistan",
          "value": "af-2026-0107",
          "content_hash": "6b7ee659eeeae534",
          "object_json": {
            "id": "incident--7339a39c-1839-59fa-3fd2-a6338c29d736",
            "name": "Internet connectivity disruption in Afghanistan",
            "type": "incident",
            "title": "Internet connectivity disruption in Afghanistan",
            "value": "af-2026-0107",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-03T10:25:00Z",
            "description": "IODA detected significant connectivity drop in Afghanistan. 1 critical alerts recorded.",
            "anomaly_rate": 0.02857142857142857,
            "country_code": "AF",
            "country_name": "Afghanistan",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--07fa55ef-d097-5bb2-9229-53b38f3e2dab",
      "incident--c0df1c55-cf25-5445-c275-9bd9c680860a",
      "incident--51a745d4-9000-52d3-1b5c-351a9b5d0b57",
      "incident--b644fd32-302a-52d0-a8e3-9c864a25e8ba",
      "incident--79a9bf87-4552-59ff-cec7-a502bf78dfee",
      "incident--9159d7ac-1cdf-5dd1-df7d-03a13762d6eb",
      "incident--67c34623-598f-55d8-475f-cc5d7d985d6d",
      "incident--6cc3afd0-f9fb-5bb4-f9ae-e3f6f24f8f7a",
      "incident--7339a39c-1839-59fa-3fd2-a6338c29d736"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}