{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:33.695Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-bc8458c34b9cbf53fd030de2",
    "scope_type": "country",
    "scope_key": "BW",
    "geography": "BW",
    "title": "Internet disruption in BW",
    "started_at": "2026-07-29T10:00:00.000Z",
    "last_observed_at": "2026-10-03T00:25:00.000Z",
    "status": "active",
    "classification": "ROUTING_DISRUPTION",
    "trajectory": "STABLE",
    "stress_score": 49,
    "confidence": 63,
    "event_count": 5,
    "affected_asns": [
      "AS37678"
    ],
    "affected_services": [],
    "affected_regions": [
      "549",
      "BW",
      "543"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:31.708Z",
    "updated_at": "2026-10-03T23:39:44.301Z"
  },
  "events": [
    {
      "id": "ise-3d0cdf6ad7443454ec3dc3f6",
      "entity_type": "country",
      "entity_key": "BW",
      "geography": "BW",
      "started_at": "2026-08-13T09:00:00.000Z",
      "last_observed_at": "2026-10-03T00:25:00.000Z",
      "status": "active",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "STABLE",
      "stress_score": 49,
      "confidence": 15,
      "components": {
        "anomaly": 1,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.211202533653808
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 1
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.0661068044788975
      },
      "deviation": {
        "max_anomaly": 1,
        "max_deviation": 0.211202533653808
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "BW"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 4,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.953Z",
      "updated_at": "2026-10-03T23:50:23.951Z",
      "evidence": [
        {
          "event_id": "ise-3d0cdf6ad7443454ec3dc3f6",
          "stix_object_id": "incident--288adf43-b52f-5551-f30d-f3b7944833c0",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-13T09:00:00.000Z",
          "name": "Internet connectivity disruption in BW",
          "value": "bw-2026-0021",
          "content_hash": "e86c73a7c16c0605",
          "object_json": {
            "id": "incident--288adf43-b52f-5551-f30d-f3b7944833c0",
            "name": "Internet connectivity disruption in BW",
            "type": "incident",
            "title": "Internet connectivity disruption in BW",
            "value": "bw-2026-0021",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-13T09:00:00Z",
            "description": "IODA detected significant connectivity drop in BW. 2 critical alerts recorded.",
            "anomaly_rate": 0.011088106740280653,
            "country_code": "BW",
            "country_name": "Botswana",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3d0cdf6ad7443454ec3dc3f6",
          "stix_object_id": "incident--043347e4-d406-5ed3-4e10-c15e44a7eac3",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T07:30:00.000Z",
          "name": "Internet connectivity disruption in BW",
          "value": "bw-2026-0025",
          "content_hash": "ad25d4de91fc0f21",
          "object_json": {
            "id": "incident--043347e4-d406-5ed3-4e10-c15e44a7eac3",
            "name": "Internet connectivity disruption in BW",
            "type": "incident",
            "title": "Internet connectivity disruption in BW",
            "value": "bw-2026-0025",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-23T07:40:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-23T07:30:00Z",
            "description": "IODA detected significant connectivity drop in BW. 2 critical alerts recorded.",
            "anomaly_rate": 0.22229064039408866,
            "country_code": "BW",
            "country_name": "Botswana",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0.1667,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3d0cdf6ad7443454ec3dc3f6",
          "stix_object_id": "incident--9e74061d-5324-56d5-cd8d-41da22683f1e",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T03:30:00.000Z",
          "name": "Internet connectivity disruption in BW",
          "value": "bw-2026-0026",
          "content_hash": "7b5c76eb2a43c033",
          "object_json": {
            "id": "incident--9e74061d-5324-56d5-cd8d-41da22683f1e",
            "name": "Internet connectivity disruption in BW",
            "type": "incident",
            "title": "Internet connectivity disruption in BW",
            "value": "bw-2026-0026",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-27T03:30:00Z",
            "description": "IODA detected significant connectivity drop in BW. 2 critical alerts recorded.",
            "anomaly_rate": 0.011104958779377384,
            "country_code": "BW",
            "country_name": "Botswana",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3d0cdf6ad7443454ec3dc3f6",
          "stix_object_id": "incident--ba61d6d5-1420-500c-5b03-a206cf06f663",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-03T00:25:00.000Z",
          "name": "Internet connectivity disruption in BW",
          "value": "bw-2026-0027",
          "content_hash": "701e86ba8ecbb051",
          "object_json": {
            "id": "incident--ba61d6d5-1420-500c-5b03-a206cf06f663",
            "name": "Internet connectivity disruption in BW",
            "type": "incident",
            "title": "Internet connectivity disruption in BW",
            "value": "bw-2026-0027",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-10-03T00:25:00Z",
            "description": "IODA detected significant connectivity drop in BW. 2 critical alerts recorded.",
            "anomaly_rate": 0.0661068044788975,
            "country_code": "BW",
            "country_name": "Botswana",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-63d4a65dccc47bd81d5cbb0d",
      "entity_type": "asn",
      "entity_key": "AS37678",
      "geography": "543",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.158365508018679
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37678"
      ],
      "affected_services": [],
      "affected_regions": [
        "543"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:17.666Z",
      "updated_at": "2026-10-03T23:50:17.111Z",
      "evidence": [
        {
          "event_id": "ise-63d4a65dccc47bd81d5cbb0d",
          "stix_object_id": "incident--e6641704-6021-5cea-9d41-c57d8675036e",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "BOFINET -- Central",
          "value": "geoasn/37678-543",
          "content_hash": "69ba3511a32e141f",
          "object_json": {
            "id": "incident--e6641704-6021-5cea-9d41-c57d8675036e",
            "name": "BOFINET -- Central",
            "type": "incident",
            "score": 144000,
            "title": "BOFINET -- Central",
            "value": "geoasn/37678-543",
            "method": "median",
            "location": "geoasn/37678-543",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-72cfe7ebc3531098b13ddd0f",
      "entity_type": "asn",
      "entity_key": "AS37678",
      "geography": "549",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.158378556672717
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37678"
      ],
      "affected_services": [],
      "affected_regions": [
        "549"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:16.852Z",
      "updated_at": "2026-10-03T23:50:18.010Z",
      "evidence": [
        {
          "event_id": "ise-72cfe7ebc3531098b13ddd0f",
          "stix_object_id": "incident--7d261c75-897a-5c37-91aa-d471a97b56e6",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "BOFINET -- Gaborone",
          "value": "geoasn/37678-549",
          "content_hash": "f24decd16713adfd",
          "object_json": {
            "id": "incident--7d261c75-897a-5c37-91aa-d471a97b56e6",
            "name": "BOFINET -- Gaborone",
            "type": "incident",
            "score": 1440052.2666666666,
            "title": "BOFINET -- Gaborone",
            "value": "geoasn/37678-549",
            "method": "median",
            "location": "geoasn/37678-549",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1350049
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-b08e27d892bece9b6b08a413",
      "entity_type": "asn",
      "entity_key": "AS37678",
      "geography": "BW",
      "started_at": "2026-07-29T10:00:00.000Z",
      "last_observed_at": "2026-07-29T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.589533535563123
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37678"
      ],
      "affected_services": [],
      "affected_regions": [
        "BW"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:17.649Z",
      "updated_at": "2026-10-03T23:50:17.103Z",
      "evidence": [
        {
          "event_id": "ise-b08e27d892bece9b6b08a413",
          "stix_object_id": "incident--55dc6630-7765-543f-8999-e6de8cdcb920",
          "platform": "ioda",
          "observed_at": "2026-07-29T10:00:00.000Z",
          "name": "BOFINET -- Botswana",
          "value": "geoasn/37678-bw",
          "content_hash": "70e771d2577fc9cc",
          "object_json": {
            "id": "incident--55dc6630-7765-543f-8999-e6de8cdcb920",
            "name": "BOFINET -- Botswana",
            "type": "incident",
            "score": 388626.5060240964,
            "title": "BOFINET -- Botswana",
            "value": "geoasn/37678-bw",
            "method": "median",
            "location": "geoasn/37678-BW",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-efa6673350273f7f0f48cb63",
      "entity_type": "asn",
      "entity_key": "AS37678",
      "geography": null,
      "started_at": "2026-08-18T07:45:00.000Z",
      "last_observed_at": "2026-08-18T07:45:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 4.414033620061757
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37678"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:25.250Z",
      "updated_at": "2026-10-03T23:50:25.820Z",
      "evidence": [
        {
          "event_id": "ise-efa6673350273f7f0f48cb63",
          "stix_object_id": "incident--36e73f62-1839-53d3-1db4-2715500f81d3",
          "platform": "ioda",
          "observed_at": "2026-08-18T07:45:00.000Z",
          "name": "AS37678 (BOFINET)",
          "value": "asn/37678",
          "content_hash": "6b4c7f7a4232d89f",
          "object_json": {
            "id": "incident--36e73f62-1839-53d3-1db4-2715500f81d3",
            "name": "AS37678 (BOFINET)",
            "type": "incident",
            "score": 25942.80193236715,
            "title": "AS37678 (BOFINET)",
            "value": "asn/37678",
            "method": "median",
            "location": "asn/37678",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1074032
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--288adf43-b52f-5551-f30d-f3b7944833c0",
      "incident--043347e4-d406-5ed3-4e10-c15e44a7eac3",
      "incident--9e74061d-5324-56d5-cd8d-41da22683f1e",
      "incident--ba61d6d5-1420-500c-5b03-a206cf06f663",
      "incident--e6641704-6021-5cea-9d41-c57d8675036e",
      "incident--7d261c75-897a-5c37-91aa-d471a97b56e6",
      "incident--55dc6630-7765-543f-8999-e6de8cdcb920",
      "incident--36e73f62-1839-53d3-1db4-2715500f81d3"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}