{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:36.649Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-bd98bb7b09607fb690354d9a",
    "scope_type": "country",
    "scope_key": "ZA",
    "geography": "ZA",
    "title": "Internet disruption in ZA",
    "started_at": "2026-07-28T10:00:00.000Z",
    "last_observed_at": "2026-09-24T03:05:00.000Z",
    "status": "resolved",
    "classification": "ROUTING_DISRUPTION",
    "trajectory": "RESOLVED",
    "stress_score": 46,
    "confidence": 69,
    "event_count": 9,
    "affected_asns": [
      "AS398993",
      "AS37236",
      "AS37634"
    ],
    "affected_services": [],
    "affected_regions": [
      "ZA",
      "4623"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:29.470Z",
    "updated_at": "2026-10-03T23:39:43.051Z"
  },
  "events": [
    {
      "id": "ise-886d116f4b4fdb26febedd81",
      "entity_type": "country",
      "entity_key": "ZA",
      "geography": "ZA",
      "started_at": "2026-08-12T20:20:00.000Z",
      "last_observed_at": "2026-09-24T03:05:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 46,
      "confidence": 15,
      "components": {
        "anomaly": 1,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.03427255406554446
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 1
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.04633204633204633
      },
      "deviation": {
        "max_anomaly": 1,
        "max_deviation": 0.03427255406554446
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "ZA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 4,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:23.816Z",
      "updated_at": "2026-10-03T23:50:23.757Z",
      "evidence": [
        {
          "event_id": "ise-886d116f4b4fdb26febedd81",
          "stix_object_id": "incident--559a3c8f-c71c-5263-62ad-bb2741eb497c",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T20:20:00.000Z",
          "name": "Internet connectivity disruption in South Africa",
          "value": "za-2026-0024",
          "content_hash": "b801c898b33ca600",
          "object_json": {
            "id": "incident--559a3c8f-c71c-5263-62ad-bb2741eb497c",
            "name": "Internet connectivity disruption in South Africa",
            "type": "incident",
            "title": "Internet connectivity disruption in South Africa",
            "value": "za-2026-0024",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-12T20:20:00Z",
            "description": "IODA detected significant connectivity drop in South Africa. 3 critical alerts recorded.",
            "anomaly_rate": 0.03427255406554446,
            "country_code": "ZA",
            "country_name": "South Africa",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-886d116f4b4fdb26febedd81",
          "stix_object_id": "incident--5680086a-89ea-5fda-cd4d-fa17bfc4bbb4",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-22T20:50:00.000Z",
          "name": "Internet connectivity disruption in South Africa",
          "value": "za-2026-0029",
          "content_hash": "b615884ab61af39d",
          "object_json": {
            "id": "incident--5680086a-89ea-5fda-cd4d-fa17bfc4bbb4",
            "name": "Internet connectivity disruption in South Africa",
            "type": "incident",
            "title": "Internet connectivity disruption in South Africa",
            "value": "za-2026-0029",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-22T20:50:00Z",
            "description": "IODA detected significant connectivity drop in South Africa. 3 critical alerts recorded.",
            "anomaly_rate": 0.0342518869241267,
            "country_code": "ZA",
            "country_name": "South Africa",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-886d116f4b4fdb26febedd81",
          "stix_object_id": "incident--7deb3f92-afb1-5d92-0683-8f4b95f6104f",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T18:55:00.000Z",
          "name": "Internet connectivity disruption in South Africa",
          "value": "za-2026-0030",
          "content_hash": "69a31e2382889e9f",
          "object_json": {
            "id": "incident--7deb3f92-afb1-5d92-0683-8f4b95f6104f",
            "name": "Internet connectivity disruption in South Africa",
            "type": "incident",
            "title": "Internet connectivity disruption in South Africa",
            "value": "za-2026-0030",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T18:55:00Z",
            "description": "IODA detected significant connectivity drop in South Africa. 1 critical alerts recorded.",
            "anomaly_rate": 0.04633204633204633,
            "country_code": "ZA",
            "country_name": "South Africa",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-886d116f4b4fdb26febedd81",
          "stix_object_id": "incident--03b1fd69-2705-51b0-b563-9a89fc2de7ee",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T03:05:00.000Z",
          "name": "Internet connectivity disruption in South Africa",
          "value": "za-2026-0031",
          "content_hash": "9fcde11cce64426d",
          "object_json": {
            "id": "incident--03b1fd69-2705-51b0-b563-9a89fc2de7ee",
            "name": "Internet connectivity disruption in South Africa",
            "type": "incident",
            "title": "Internet connectivity disruption in South Africa",
            "value": "za-2026-0031",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-24T03:05:00Z",
            "description": "IODA detected significant connectivity drop in South Africa. 1 critical alerts recorded.",
            "anomaly_rate": 0.04633204633204633,
            "country_code": "ZA",
            "country_name": "South Africa",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-4220ce4d02b0ec4e18a75862",
      "entity_type": "asn",
      "entity_key": "AS37634",
      "geography": "4623",
      "started_at": "2026-09-11T08:35:00.000Z",
      "last_observed_at": "2026-09-11T08:35:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.75102029390408
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37634"
      ],
      "affected_services": [],
      "affected_regions": [
        "4623"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-26T12:40:28.449Z",
      "updated_at": "2026-10-03T23:50:32.103Z",
      "evidence": [
        {
          "event_id": "ise-4220ce4d02b0ec4e18a75862",
          "stix_object_id": "incident--1badda42-4ebd-5363-9639-efba5a1f4093",
          "platform": "ioda",
          "observed_at": "2026-09-11T08:35:00.000Z",
          "name": "ITEC-COMMS -- Gauteng",
          "value": "geoasn/37634-4623",
          "content_hash": "3bf16760d7d0b8fd",
          "object_json": {
            "id": "incident--1badda42-4ebd-5363-9639-efba5a1f4093",
            "name": "ITEC-COMMS -- Gauteng",
            "type": "incident",
            "score": 563662.9943502825,
            "title": "ITEC-COMMS -- Gauteng",
            "value": "geoasn/37634-4623",
            "method": "median",
            "location": "geoasn/37634-4623",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1813970
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-519f7d1f0606dfbf1ebd63bc",
      "entity_type": "asn",
      "entity_key": "AS37236",
      "geography": "ZA",
      "started_at": "2026-08-21T10:00:00.000Z",
      "last_observed_at": "2026-08-21T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 4.982454520053934
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37236"
      ],
      "affected_services": [],
      "affected_regions": [
        "ZA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-30T12:07:38.433Z",
      "updated_at": "2026-10-03T23:50:27.281Z",
      "evidence": [
        {
          "event_id": "ise-519f7d1f0606dfbf1ebd63bc",
          "stix_object_id": "incident--49b0b890-9f37-5e1f-5241-5a83da2acdb5",
          "platform": "ioda",
          "observed_at": "2026-08-21T10:00:00.000Z",
          "name": "Reflex-Solutions -- South Africa",
          "value": "geoasn/37236-za",
          "content_hash": "78f415d7b6e246e1",
          "object_json": {
            "id": "incident--49b0b890-9f37-5e1f-5241-5a83da2acdb5",
            "name": "Reflex-Solutions -- South Africa",
            "type": "incident",
            "score": 96039.5238095238,
            "title": "Reflex-Solutions -- South Africa",
            "value": "geoasn/37236-za",
            "method": "median",
            "location": "geoasn/37236-ZA",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 806732
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-76fe49ad1a21b440d437aa32",
      "entity_type": "asn",
      "entity_key": "AS398993",
      "geography": "ZA",
      "started_at": "2026-07-28T10:00:00.000Z",
      "last_observed_at": "2026-07-28T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 6.37913914233494
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS398993"
      ],
      "affected_services": [],
      "affected_regions": [
        "ZA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:14.936Z",
      "updated_at": "2026-10-03T23:50:15.493Z",
      "evidence": [
        {
          "event_id": "ise-76fe49ad1a21b440d437aa32",
          "stix_object_id": "incident--bbf6772e-0654-5f29-d1ab-7511731093b9",
          "platform": "ioda",
          "observed_at": "2026-07-28T10:00:00.000Z",
          "name": "PEG-TY -- South Africa",
          "value": "geoasn/398993-za",
          "content_hash": "dbd2e48983dd1086",
          "object_json": {
            "id": "incident--bbf6772e-0654-5f29-d1ab-7511731093b9",
            "name": "PEG-TY -- South Africa",
            "type": "incident",
            "score": 2394081.6666666665,
            "title": "PEG-TY -- South Africa",
            "value": "geoasn/398993-za",
            "method": "median",
            "location": "geoasn/398993-ZA",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1436449
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-c5339a2e0ce01fddc935a2c9",
      "entity_type": "asn",
      "entity_key": "AS37236",
      "geography": "4623",
      "started_at": "2026-08-21T10:00:00.000Z",
      "last_observed_at": "2026-08-21T10:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.174338431292695
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37236"
      ],
      "affected_services": [],
      "affected_regions": [
        "4623"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-30T09:05:43.901Z",
      "updated_at": "2026-10-03T23:50:27.370Z",
      "evidence": [
        {
          "event_id": "ise-c5339a2e0ce01fddc935a2c9",
          "stix_object_id": "incident--44e73f64-c42b-5ac6-cc12-b4f7748da9d8",
          "platform": "ioda",
          "observed_at": "2026-08-21T10:00:00.000Z",
          "name": "Reflex-Solutions -- Gauteng",
          "value": "geoasn/37236-4623",
          "content_hash": "ec163b15ea859e3a",
          "object_json": {
            "id": "incident--44e73f64-c42b-5ac6-cc12-b4f7748da9d8",
            "name": "Reflex-Solutions -- Gauteng",
            "type": "incident",
            "score": 149394.8148148148,
            "title": "Reflex-Solutions -- Gauteng",
            "value": "geoasn/37236-4623",
            "method": "median",
            "location": "geoasn/37236-4623",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 806732
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-0e46f3316e1703795275d838",
      "entity_type": "asn",
      "entity_key": "AS37634",
      "geography": "ZA",
      "started_at": "2026-09-11T08:35:00.000Z",
      "last_observed_at": "2026-09-11T08:35:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.781509563815727
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37634"
      ],
      "affected_services": [],
      "affected_regions": [
        "ZA"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-26T12:40:28.438Z",
      "updated_at": "2026-10-03T23:50:32.111Z",
      "evidence": [
        {
          "event_id": "ise-0e46f3316e1703795275d838",
          "stix_object_id": "incident--eaec138b-4080-53fa-af97-305e947b4d9a",
          "platform": "ioda",
          "observed_at": "2026-09-11T08:35:00.000Z",
          "name": "ITEC-COMMS -- South Africa",
          "value": "geoasn/37634-za",
          "content_hash": "66269b33b3e7f180",
          "object_json": {
            "id": "incident--eaec138b-4080-53fa-af97-305e947b4d9a",
            "name": "ITEC-COMMS -- South Africa",
            "type": "incident",
            "score": 604656.6666666666,
            "title": "ITEC-COMMS -- South Africa",
            "value": "geoasn/37634-za",
            "method": "median",
            "location": "geoasn/37634-ZA",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1813970
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-255e31156f87b7a7c47c3ae0",
      "entity_type": "asn",
      "entity_key": "AS37634",
      "geography": null,
      "started_at": "2026-09-11T08:35:00.000Z",
      "last_observed_at": "2026-09-11T08:35:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.781509563815727
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37634"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-26T12:40:28.457Z",
      "updated_at": "2026-10-03T23:50:32.128Z",
      "evidence": [
        {
          "event_id": "ise-255e31156f87b7a7c47c3ae0",
          "stix_object_id": "incident--4f1de77e-f414-5440-e9c8-9b6523e92cbb",
          "platform": "ioda",
          "observed_at": "2026-09-11T08:35:00.000Z",
          "name": "AS37634 (ITEC-COMMS)",
          "value": "asn/37634",
          "content_hash": "653af64492da95ed",
          "object_json": {
            "id": "incident--4f1de77e-f414-5440-e9c8-9b6523e92cbb",
            "name": "AS37634 (ITEC-COMMS)",
            "type": "incident",
            "score": 604656.6666666666,
            "title": "AS37634 (ITEC-COMMS)",
            "value": "asn/37634",
            "method": "median",
            "location": "asn/37634",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1813970
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-8f7e9cf7b440b9a13a9f4017",
      "entity_type": "asn",
      "entity_key": "AS398993",
      "geography": null,
      "started_at": "2026-08-09T23:00:00.000Z",
      "last_observed_at": "2026-08-09T23:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 4.388932565434977
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS398993"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.068Z",
      "updated_at": "2026-10-03T23:50:19.570Z",
      "evidence": [
        {
          "event_id": "ise-8f7e9cf7b440b9a13a9f4017",
          "stix_object_id": "incident--b91dbf3a-0eb8-550c-a095-4922d0539b58",
          "platform": "ioda",
          "observed_at": "2026-08-09T23:00:00.000Z",
          "name": "AS398993 (PEGTECHINC-AP-03)",
          "value": "asn/398993",
          "content_hash": "058019ab46637e24",
          "object_json": {
            "id": "incident--b91dbf3a-0eb8-550c-a095-4922d0539b58",
            "name": "AS398993 (PEGTECHINC-AP-03)",
            "type": "incident",
            "score": 24485.82995951417,
            "title": "AS398993 (PEGTECHINC-AP-03)",
            "value": "asn/398993",
            "method": "median",
            "location": "asn/398993",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1209600
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-83a8a45668eb23e27cb258d9",
      "entity_type": "asn",
      "entity_key": "AS37236",
      "geography": null,
      "started_at": "2026-08-21T00:00:00.000Z",
      "last_observed_at": "2026-08-21T00:00:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.001414527933533
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS37236"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:26.705Z",
      "updated_at": "2026-10-03T23:50:26.880Z",
      "evidence": [
        {
          "event_id": "ise-83a8a45668eb23e27cb258d9",
          "stix_object_id": "incident--adfde038-18b3-5dfe-372a-2818474deca9",
          "platform": "ioda",
          "observed_at": "2026-08-21T00:00:00.000Z",
          "name": "AS37236 (Reflex-Solutions)",
          "value": "asn/37236",
          "content_hash": "849af4f72ae66125",
          "object_json": {
            "id": "incident--adfde038-18b3-5dfe-372a-2818474deca9",
            "name": "AS37236 (Reflex-Solutions)",
            "type": "incident",
            "score": 100325.23809523809,
            "title": "AS37236 (Reflex-Solutions)",
            "value": "asn/37236",
            "method": "median",
            "location": "asn/37236",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 842732
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--559a3c8f-c71c-5263-62ad-bb2741eb497c",
      "incident--5680086a-89ea-5fda-cd4d-fa17bfc4bbb4",
      "incident--7deb3f92-afb1-5d92-0683-8f4b95f6104f",
      "incident--03b1fd69-2705-51b0-b563-9a89fc2de7ee",
      "incident--1badda42-4ebd-5363-9639-efba5a1f4093",
      "incident--49b0b890-9f37-5e1f-5241-5a83da2acdb5",
      "incident--bbf6772e-0654-5f29-d1ab-7511731093b9",
      "incident--44e73f64-c42b-5ac6-cc12-b4f7748da9d8",
      "incident--eaec138b-4080-53fa-af97-305e947b4d9a",
      "incident--4f1de77e-f414-5440-e9c8-9b6523e92cbb",
      "incident--b91dbf3a-0eb8-550c-a095-4922d0539b58",
      "incident--adfde038-18b3-5dfe-372a-2818474deca9"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}