{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:37.158Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-cea32d0b09a3e5c002c58d91",
    "scope_type": "country",
    "scope_key": "BY",
    "geography": "BY",
    "title": "Internet disruption in BY",
    "started_at": "2026-08-10T00:00:00.000Z",
    "last_observed_at": "2026-10-02T00:00:00.000Z",
    "status": "resolved",
    "classification": "APPLICATION_RESTRICTION",
    "trajectory": "RESOLVED",
    "stress_score": 41,
    "confidence": 17,
    "event_count": 1,
    "affected_asns": [
      "AS38980",
      "AS6697"
    ],
    "affected_services": [
      "Tor",
      "BBC",
      "Psiphon",
      "Facebook",
      "YouTube"
    ],
    "affected_regions": [
      "BY"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:32.670Z",
    "updated_at": "2026-10-03T23:39:44.812Z"
  },
  "events": [
    {
      "id": "ise-7128068cc8fb0055b71742fb",
      "entity_type": "country",
      "entity_key": "BY",
      "geography": "BY",
      "started_at": "2026-08-10T00:00:00.000Z",
      "last_observed_at": "2026-10-02T00:00:00.000Z",
      "status": "resolved",
      "classification": "APPLICATION_RESTRICTION",
      "trajectory": "RESOLVED",
      "stress_score": 41,
      "confidence": 0,
      "components": {
        "anomaly": 0.11241512657943253,
        "breadth": 0.3933333333333334,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0.11241512657943253
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 1
      },
      "deviation": {
        "max_anomaly": 0.11241512657943253,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS38980",
        "AS6697"
      ],
      "affected_services": [
        "Tor",
        "BBC",
        "Psiphon",
        "Facebook",
        "YouTube"
      ],
      "affected_regions": [
        "BY"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration"
      ],
      "observation_count": 19,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.406Z",
      "updated_at": "2026-10-03T23:50:19.802Z",
      "evidence": [
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--7e44909b-c753-5ad6-e8b9-243f4c1a96c5",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1490",
          "content_hash": "2d7ed228614d7187",
          "object_json": {
            "id": "incident--7e44909b-c753-5ad6-e8b9-243f4c1a96c5",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1490",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-10T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-10T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--638edd75-5643-5aff-618b-b5bd6c409ac4",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1491",
          "content_hash": "4b0f9b13de97e7e3",
          "object_json": {
            "id": "incident--638edd75-5643-5aff-618b-b5bd6c409ac4",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1491",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-11T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-11T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--1b00cc1d-e9c7-55ff-0d20-c2dd45849f24",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1492",
          "content_hash": "f8f03bf8ba2782b2",
          "object_json": {
            "id": "incident--1b00cc1d-e9c7-55ff-0d20-c2dd45849f24",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1492",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-12T23:59:59Z",
            "severity": "critical",
            "confidence": 88,
            "start_time": "2026-08-12T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.96,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--bf90b06a-84eb-5517-2527-cf8cb208514f",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-26T21:30:00.000Z",
          "name": "Internet connectivity disruption in Belarus",
          "value": "by-2026-1509",
          "content_hash": "20bd72f32b3852c6",
          "object_json": {
            "id": "incident--bf90b06a-84eb-5517-2527-cf8cb208514f",
            "name": "Internet connectivity disruption in Belarus",
            "type": "incident",
            "title": "Internet connectivity disruption in Belarus",
            "value": "by-2026-1509",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-26T21:30:00Z",
            "description": "IODA detected significant connectivity drop in Belarus. 1 critical alerts recorded.",
            "anomaly_rate": 0.20178041543026706,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--b846e4c0-f106-55ac-d042-58e53f7ad8f1",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1513",
          "content_hash": "f00799f926317721",
          "object_json": {
            "id": "incident--b846e4c0-f106-55ac-d042-58e53f7ad8f1",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1513",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--738e8311-41d4-589b-58fb-473ce8e5268b",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T04:00:00.000Z",
          "name": "Internet connectivity disruption in Belarus",
          "value": "by-2026-1511",
          "content_hash": "6c1076ea01ba6731",
          "object_json": {
            "id": "incident--738e8311-41d4-589b-58fb-473ce8e5268b",
            "name": "Internet connectivity disruption in Belarus",
            "type": "incident",
            "title": "Internet connectivity disruption in Belarus",
            "value": "by-2026-1511",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-08-27T21:20:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-27T04:00:00Z",
            "description": "IODA detected significant connectivity drop in Belarus. 1 critical alerts recorded.",
            "anomaly_rate": 0.01125703564727955,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 17.3333,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--1a41edb3-6134-5c1c-5381-6c5a7c753b42",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1514",
          "content_hash": "02f82003f60d0a15",
          "object_json": {
            "id": "incident--1a41edb3-6134-5c1c-5381-6c5a7c753b42",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1514",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--7f309b4e-6bd3-54ff-56d8-2575491f464d",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1515",
          "content_hash": "f767b9cf02b8ea42",
          "object_json": {
            "id": "incident--7f309b4e-6bd3-54ff-56d8-2575491f464d",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1515",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--cfe547f0-1430-547c-5eb1-b76d71b36ff0",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-22T21:40:00.000Z",
          "name": "Internet connectivity disruption in Belarus",
          "value": "by-2026-1551",
          "content_hash": "b1bc3bf82467d415",
          "object_json": {
            "id": "incident--cfe547f0-1430-547c-5eb1-b76d71b36ff0",
            "name": "Internet connectivity disruption in Belarus",
            "type": "incident",
            "title": "Internet connectivity disruption in Belarus",
            "value": "by-2026-1551",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-22T21:40:00Z",
            "description": "IODA detected significant connectivity drop in Belarus. 1 critical alerts recorded.",
            "anomaly_rate": 0.20155038759689922,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--52e3f35a-b7ed-5777-0f37-34057cbf0d0f",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1553",
          "content_hash": "da4b7dff5e6fb137",
          "object_json": {
            "id": "incident--52e3f35a-b7ed-5777-0f37-34057cbf0d0f",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1553",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-23T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-23T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [
              "AS38980"
            ],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [
              "bbc.com",
              "psiphon.ca"
            ],
            "affected_services": [
              "BBC",
              "Psiphon",
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--be3936dc-2dfc-5ef6-2424-8c810d0b317a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1555",
          "content_hash": "3da15eda18b2c8fd",
          "object_json": {
            "id": "incident--be3936dc-2dfc-5ef6-2424-8c810d0b317a",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1555",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-24T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-24T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--cf5259f7-8705-5a10-c623-d4ccb8820621",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1556",
          "content_hash": "30035c6a0244985d",
          "object_json": {
            "id": "incident--cf5259f7-8705-5a10-c623-d4ccb8820621",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1556",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-25T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-25T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--62dc2716-b968-592e-8445-4c695bf312cf",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1557",
          "content_hash": "00c88a84561c8be3",
          "object_json": {
            "id": "incident--62dc2716-b968-592e-8445-4c695bf312cf",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1557",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-26T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-26T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--e91ee2ad-8cfb-5a63-2ef2-30ec2febd854",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1558",
          "content_hash": "88b1e161c79ab6ee",
          "object_json": {
            "id": "incident--e91ee2ad-8cfb-5a63-2ef2-30ec2febd854",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1558",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [
              "AS38980"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "psiphon.ca"
            ],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--c476ea7a-8890-5295-b690-2e5c71d8721a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1560",
          "content_hash": "40843022ea839c8f",
          "object_json": {
            "id": "incident--c476ea7a-8890-5295-b690-2e5c71d8721a",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1560",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--73cb5a06-875b-57e8-6268-050844580fa2",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1561",
          "content_hash": "01f7cbf404b1245c",
          "object_json": {
            "id": "incident--73cb5a06-875b-57e8-6268-050844580fa2",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1561",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--fd30d342-ddba-5054-5d6b-1f11844a41d6",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1562",
          "content_hash": "f12147f65607b97a",
          "object_json": {
            "id": "incident--fd30d342-ddba-5054-5d6b-1f11844a41d6",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1562",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-30T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-30T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [
              "AS38980",
              "AS6697"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "facebook.com",
              "psiphon.ca",
              "substack.com",
              "youtube.com"
            ],
            "affected_services": [
              "Facebook",
              "Tor",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--9930728d-fe6e-5713-703d-f6221b3a35af",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1565",
          "content_hash": "892a68694b89c182",
          "object_json": {
            "id": "incident--9930728d-fe6e-5713-703d-f6221b3a35af",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1565",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-01T23:59:59Z",
            "severity": "critical",
            "confidence": 89,
            "start_time": "2026-10-01T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.9629629629629629,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-7128068cc8fb0055b71742fb",
          "stix_object_id": "incident--a01f498e-d83f-598b-b212-f6e79f8c6615",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T00:00:00.000Z",
          "name": "Censorship detected in BY",
          "value": "by-2026-1566",
          "content_hash": "516b171bda56507b",
          "object_json": {
            "id": "incident--a01f498e-d83f-598b-b212-f6e79f8c6615",
            "name": "Censorship detected in BY",
            "type": "incident",
            "title": "Censorship detected in BY",
            "value": "by-2026-1566",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-02T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-02T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "BY",
            "country_name": "Belarus",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--7e44909b-c753-5ad6-e8b9-243f4c1a96c5",
      "incident--638edd75-5643-5aff-618b-b5bd6c409ac4",
      "incident--1b00cc1d-e9c7-55ff-0d20-c2dd45849f24",
      "incident--bf90b06a-84eb-5517-2527-cf8cb208514f",
      "incident--b846e4c0-f106-55ac-d042-58e53f7ad8f1",
      "incident--738e8311-41d4-589b-58fb-473ce8e5268b",
      "incident--1a41edb3-6134-5c1c-5381-6c5a7c753b42",
      "incident--7f309b4e-6bd3-54ff-56d8-2575491f464d",
      "incident--cfe547f0-1430-547c-5eb1-b76d71b36ff0",
      "incident--52e3f35a-b7ed-5777-0f37-34057cbf0d0f",
      "incident--be3936dc-2dfc-5ef6-2424-8c810d0b317a",
      "incident--cf5259f7-8705-5a10-c623-d4ccb8820621",
      "incident--62dc2716-b968-592e-8445-4c695bf312cf",
      "incident--e91ee2ad-8cfb-5a63-2ef2-30ec2febd854",
      "incident--c476ea7a-8890-5295-b690-2e5c71d8721a",
      "incident--73cb5a06-875b-57e8-6268-050844580fa2",
      "incident--fd30d342-ddba-5054-5d6b-1f11844a41d6",
      "incident--9930728d-fe6e-5713-703d-f6221b3a35af",
      "incident--a01f498e-d83f-598b-b212-f6e79f8c6615"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}