{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-29T05:10:40.398Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-ea646a4e76971d192848c478",
    "scope_type": "country",
    "scope_key": "MW",
    "geography": "MW",
    "title": "Internet disruption in MW",
    "started_at": "2026-08-27T07:45:00.000Z",
    "last_observed_at": "2026-10-03T12:20:00.000Z",
    "status": "active",
    "classification": "UNKNOWN_DISRUPTION",
    "trajectory": "STABLE",
    "stress_score": 28,
    "confidence": 22,
    "event_count": 1,
    "affected_asns": [],
    "affected_services": [],
    "affected_regions": [
      "MW"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:35.299Z",
    "updated_at": "2026-10-03T23:39:46.980Z"
  },
  "events": [
    {
      "id": "ise-3837006caa8c7c2ff4065e34",
      "entity_type": "country",
      "entity_key": "MW",
      "geography": "MW",
      "started_at": "2026-08-27T07:45:00.000Z",
      "last_observed_at": "2026-10-03T12:20:00.000Z",
      "status": "active",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "STABLE",
      "stress_score": 28,
      "confidence": 3,
      "components": {
        "anomaly": 0.4,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.03639240506329114
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.5,
        "statistical_significance": 0.4
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.012658227848101266
      },
      "deviation": {
        "max_anomaly": 0.4,
        "max_deviation": 0.03639240506329114
      },
      "affected_asns": [],
      "affected_services": [],
      "affected_regions": [
        "MW"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "insufficient corroboration"
      ],
      "observation_count": 14,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:27.200Z",
      "updated_at": "2026-10-03T23:50:27.622Z",
      "evidence": [
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--b17cd8a4-c579-5bf8-9f6c-7f622af80c82",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T07:45:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0057",
          "content_hash": "c2fa93095f127fa2",
          "object_json": {
            "id": "incident--b17cd8a4-c579-5bf8-9f6c-7f622af80c82",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0057",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-27T07:45:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--b9671637-825e-5e07-7896-5e49634507fa",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T14:45:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0058",
          "content_hash": "4e6ac29507f2912e",
          "object_json": {
            "id": "incident--b9671637-825e-5e07-7896-5e49634507fa",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0058",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-28T14:45:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--12244892-5f3b-5906-b592-bfa5355573ec",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T05:05:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0059",
          "content_hash": "4f788fc9de94d4c2",
          "object_json": {
            "id": "incident--12244892-5f3b-5906-b592-bfa5355573ec",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0059",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-29T05:05:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--78d7599f-2814-50f2-d2ed-8407cf8e8f92",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-22T13:30:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0076",
          "content_hash": "88cee06d15d7c409",
          "object_json": {
            "id": "incident--78d7599f-2814-50f2-d2ed-8407cf8e8f92",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0076",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-22T13:30:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--e5701b85-f1b9-56c5-37f0-e5d15e16db43",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T14:35:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0077",
          "content_hash": "0c407d9d311d5909",
          "object_json": {
            "id": "incident--e5701b85-f1b9-56c5-37f0-e5d15e16db43",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0077",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T14:35:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--b30c55b0-9460-5660-3b0d-28b215d91512",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T14:30:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0078",
          "content_hash": "89700eea982fc8c9",
          "object_json": {
            "id": "incident--b30c55b0-9460-5660-3b0d-28b215d91512",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0078",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-24T16:20:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-24T14:30:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 3 critical alerts recorded.",
            "anomaly_rate": 0.02531645569620253,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 1.8333,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--d2e8ff20-7148-5e3b-3895-c6ce7018cb4c",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T03:30:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0079",
          "content_hash": "a5e8b0afd14c356d",
          "object_json": {
            "id": "incident--d2e8ff20-7148-5e3b-3895-c6ce7018cb4c",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0079",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-25T08:40:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-25T03:30:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 5.1667,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--fe5d776c-ced7-5c13-39e6-08351d7eb8d6",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T06:05:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0080",
          "content_hash": "298c1143324a1ee9",
          "object_json": {
            "id": "incident--fe5d776c-ced7-5c13-39e6-08351d7eb8d6",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0080",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-26T19:20:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-26T06:05:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 13.25,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--3fdefcc9-b5c0-5bd0-addf-d4a9e2242657",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T05:25:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0081",
          "content_hash": "1d8897548258bd2b",
          "object_json": {
            "id": "incident--3fdefcc9-b5c0-5bd0-addf-d4a9e2242657",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0081",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-27T16:20:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-27T05:25:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.05063291139240506,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--8aa8c5dd-0e15-5a37-c9c4-4f6d0c26ea96",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T08:55:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0082",
          "content_hash": "5f10e4f42657d3c4",
          "object_json": {
            "id": "incident--8aa8c5dd-0e15-5a37-c9c4-4f6d0c26ea96",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0082",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-28T11:30:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-28T08:55:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 2 critical alerts recorded.",
            "anomaly_rate": 0.03164556962025317,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--6122f020-65c4-5ad0-ae53-83362c586c61",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:35:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0083",
          "content_hash": "50d5be96731c2353",
          "object_json": {
            "id": "incident--6122f020-65c4-5ad0-ae53-83362c586c61",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0083",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-29T17:20:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-29T00:35:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--571193a6-479b-5191-eb71-dc9022c3d3e6",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:45:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0084",
          "content_hash": "03b7e6f91f5f0b65",
          "object_json": {
            "id": "incident--571193a6-479b-5191-eb71-dc9022c3d3e6",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0084",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-30T11:10:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T00:45:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.05499438832772166,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--733a1cf4-dcf6-58a1-0543-42d7df7272fd",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T07:45:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0085",
          "content_hash": "fb765471b8435da8",
          "object_json": {
            "id": "incident--733a1cf4-dcf6-58a1-0543-42d7df7272fd",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0085",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-10-02T10:00:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-10-02T07:45:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 2 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-3837006caa8c7c2ff4065e34",
          "stix_object_id": "incident--01e5e722-9698-5dfb-2af3-7b0b5446845e",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-03T12:20:00.000Z",
          "name": "Internet connectivity disruption in Malawi",
          "value": "mw-2026-0086",
          "content_hash": "d81f77ba59fcedcf",
          "object_json": {
            "id": "incident--01e5e722-9698-5dfb-2af3-7b0b5446845e",
            "name": "Internet connectivity disruption in Malawi",
            "type": "incident",
            "title": "Internet connectivity disruption in Malawi",
            "value": "mw-2026-0086",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-03T12:20:00Z",
            "description": "IODA detected significant connectivity drop in Malawi. 1 critical alerts recorded.",
            "anomaly_rate": 0.012658227848101266,
            "country_code": "MW",
            "country_name": "Malawi",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--b17cd8a4-c579-5bf8-9f6c-7f622af80c82",
      "incident--b9671637-825e-5e07-7896-5e49634507fa",
      "incident--12244892-5f3b-5906-b592-bfa5355573ec",
      "incident--78d7599f-2814-50f2-d2ed-8407cf8e8f92",
      "incident--e5701b85-f1b9-56c5-37f0-e5d15e16db43",
      "incident--b30c55b0-9460-5660-3b0d-28b215d91512",
      "incident--d2e8ff20-7148-5e3b-3895-c6ce7018cb4c",
      "incident--fe5d776c-ced7-5c13-39e6-08351d7eb8d6",
      "incident--3fdefcc9-b5c0-5bd0-addf-d4a9e2242657",
      "incident--8aa8c5dd-0e15-5a37-c9c4-4f6d0c26ea96",
      "incident--6122f020-65c4-5ad0-ae53-83362c586c61",
      "incident--571193a6-479b-5191-eb71-dc9022c3d3e6",
      "incident--733a1cf4-dcf6-58a1-0543-42d7df7272fd",
      "incident--01e5e722-9698-5dfb-2af3-7b0b5446845e"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}