{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:40.261Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-d82cb31ed5e9347209f69c5c",
    "scope_type": "country",
    "scope_key": "PY",
    "geography": "PY",
    "title": "Internet disruption in PY",
    "started_at": "2026-08-29T04:40:00.000Z",
    "last_observed_at": "2026-09-30T00:50:00.000Z",
    "status": "resolved",
    "classification": "ROUTING_DISRUPTION",
    "trajectory": "RESOLVED",
    "stress_score": 37,
    "confidence": 57,
    "event_count": 3,
    "affected_asns": [
      "AS27768"
    ],
    "affected_services": [],
    "affected_regions": [
      "PY"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:35.388Z",
    "updated_at": "2026-10-03T23:39:47.052Z"
  },
  "events": [
    {
      "id": "ise-501e1760b32e373ff1109ace",
      "entity_type": "country",
      "entity_key": "PY",
      "geography": "PY",
      "started_at": "2026-08-29T04:40:00.000Z",
      "last_observed_at": "2026-09-30T00:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 37,
      "confidence": 9,
      "components": {
        "anomaly": 0.698940989980292,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.02066070499364619
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 0.698940989980292
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.039645685286227486
      },
      "deviation": {
        "max_anomaly": 0.698940989980292,
        "max_deviation": 0.02066070499364619
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "PY"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 5,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:27.386Z",
      "updated_at": "2026-10-03T23:50:27.862Z",
      "evidence": [
        {
          "event_id": "ise-501e1760b32e373ff1109ace",
          "stix_object_id": "incident--4a15fa07-865e-5c95-199a-a5d0e1f0a3d6",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T04:40:00.000Z",
          "name": "Internet connectivity disruption in Paraguay",
          "value": "py-2026-0043",
          "content_hash": "d026c52355984a1f",
          "object_json": {
            "id": "incident--4a15fa07-865e-5c95-199a-a5d0e1f0a3d6",
            "name": "Internet connectivity disruption in Paraguay",
            "type": "incident",
            "title": "Internet connectivity disruption in Paraguay",
            "value": "py-2026-0043",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-08-29T04:40:00Z",
            "description": "IODA detected significant connectivity drop in Paraguay. 2 critical alerts recorded.",
            "anomaly_rate": 0.010639501980758349,
            "country_code": "PY",
            "country_name": "Paraguay",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-501e1760b32e373ff1109ace",
          "stix_object_id": "incident--667c1d36-edb7-545c-8bf3-ed16e2a46831",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T20:55:00.000Z",
          "name": "Internet connectivity disruption in Paraguay",
          "value": "py-2026-0051",
          "content_hash": "250383fc500f9a8e",
          "object_json": {
            "id": "incident--667c1d36-edb7-545c-8bf3-ed16e2a46831",
            "name": "Internet connectivity disruption in Paraguay",
            "type": "incident",
            "title": "Internet connectivity disruption in Paraguay",
            "value": "py-2026-0051",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-25T22:20:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-25T20:55:00Z",
            "description": "IODA detected significant connectivity drop in Paraguay. 2 critical alerts recorded.",
            "anomaly_rate": 0.017699115044247787,
            "country_code": "PY",
            "country_name": "Paraguay",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 1.4167,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-501e1760b32e373ff1109ace",
          "stix_object_id": "incident--8e2cb923-da2a-5f34-3350-cdd48d98583e",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T10:25:00.000Z",
          "name": "Internet connectivity disruption in Paraguay",
          "value": "py-2026-0052",
          "content_hash": "c24b9802f58cff7b",
          "object_json": {
            "id": "incident--8e2cb923-da2a-5f34-3350-cdd48d98583e",
            "name": "Internet connectivity disruption in Paraguay",
            "type": "incident",
            "title": "Internet connectivity disruption in Paraguay",
            "value": "py-2026-0052",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-28T10:25:00Z",
            "description": "IODA detected significant connectivity drop in Paraguay. 1 critical alerts recorded.",
            "anomaly_rate": 0.017699115044247787,
            "country_code": "PY",
            "country_name": "Paraguay",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-501e1760b32e373ff1109ace",
          "stix_object_id": "incident--212d483f-ba63-5616-31ea-3fe98d849564",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T19:55:00.000Z",
          "name": "Internet connectivity disruption in Paraguay",
          "value": "py-2026-0053",
          "content_hash": "81b1eb014c17cd95",
          "object_json": {
            "id": "incident--212d483f-ba63-5616-31ea-3fe98d849564",
            "name": "Internet connectivity disruption in Paraguay",
            "type": "incident",
            "title": "Internet connectivity disruption in Paraguay",
            "value": "py-2026-0053",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-29T23:15:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-29T19:55:00Z",
            "description": "IODA detected significant connectivity drop in Paraguay. 2 critical alerts recorded.",
            "anomaly_rate": 0.02990218910107126,
            "country_code": "PY",
            "country_name": "Paraguay",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-501e1760b32e373ff1109ace",
          "stix_object_id": "incident--365ea0d5-2a20-5d0d-ad89-d6ed8f290031",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:50:00.000Z",
          "name": "Internet connectivity disruption in Paraguay",
          "value": "py-2026-0054",
          "content_hash": "4e48aa1b045c9e87",
          "object_json": {
            "id": "incident--365ea0d5-2a20-5d0d-ad89-d6ed8f290031",
            "name": "Internet connectivity disruption in Paraguay",
            "type": "incident",
            "title": "Internet connectivity disruption in Paraguay",
            "value": "py-2026-0054",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-30T10:10:00Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-09-30T00:50:00Z",
            "description": "IODA detected significant connectivity drop in Paraguay. 5 critical alerts recorded.",
            "anomaly_rate": 0.039645685286227486,
            "country_code": "PY",
            "country_name": "Paraguay",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-c640ef8dc8e62a256c476ec4",
      "entity_type": "asn",
      "entity_key": "AS27768",
      "geography": "PY",
      "started_at": "2026-09-15T18:30:00.000Z",
      "last_observed_at": "2026-09-15T18:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.553044127877786
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS27768"
      ],
      "affected_services": [],
      "affected_regions": [
        "PY"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:24.529Z",
      "updated_at": "2026-10-03T23:50:33.665Z",
      "evidence": [
        {
          "event_id": "ise-c640ef8dc8e62a256c476ec4",
          "stix_object_id": "incident--da6eda61-de98-5795-6aea-382b8f1c0ecd",
          "platform": "ioda",
          "observed_at": "2026-09-15T18:30:00.000Z",
          "name": "AS27768 -- Paraguay",
          "value": "geoasn/27768-py",
          "content_hash": "8a5d1c1f9b88497a",
          "object_json": {
            "id": "incident--da6eda61-de98-5795-6aea-382b8f1c0ecd",
            "name": "AS27768 -- Paraguay",
            "type": "incident",
            "score": 357308.1418439716,
            "title": "AS27768 -- Paraguay",
            "value": "geoasn/27768-py",
            "method": "median",
            "location": "geoasn/27768-PY",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1574389
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-c88205c20da1ef5442cdbc1d",
      "entity_type": "asn",
      "entity_key": "AS27768",
      "geography": null,
      "started_at": "2026-09-15T18:30:00.000Z",
      "last_observed_at": "2026-09-15T18:30:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.553044127877786
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS27768"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-30T03:05:24.538Z",
      "updated_at": "2026-10-03T23:50:33.675Z",
      "evidence": [
        {
          "event_id": "ise-c88205c20da1ef5442cdbc1d",
          "stix_object_id": "incident--5c824135-d138-5795-f379-deda5da945a4",
          "platform": "ioda",
          "observed_at": "2026-09-15T18:30:00.000Z",
          "name": "AS27768 ()",
          "value": "asn/27768",
          "content_hash": "569bf5ba3af44539",
          "object_json": {
            "id": "incident--5c824135-d138-5795-f379-deda5da945a4",
            "name": "AS27768 ()",
            "type": "incident",
            "score": 357308.1418439716,
            "title": "AS27768 ()",
            "value": "asn/27768",
            "method": "median",
            "location": "asn/27768",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1574389
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--4a15fa07-865e-5c95-199a-a5d0e1f0a3d6",
      "incident--667c1d36-edb7-545c-8bf3-ed16e2a46831",
      "incident--8e2cb923-da2a-5f34-3350-cdd48d98583e",
      "incident--212d483f-ba63-5616-31ea-3fe98d849564",
      "incident--365ea0d5-2a20-5d0d-ad89-d6ed8f290031",
      "incident--da6eda61-de98-5795-6aea-382b8f1c0ecd",
      "incident--5c824135-d138-5795-f379-deda5da945a4"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}