{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:58.259Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-f157b1618029f40946d43ed4",
    "scope_type": "country",
    "scope_key": "KH",
    "geography": "KH",
    "title": "Internet disruption in KH",
    "started_at": "2026-08-10T00:00:00.000Z",
    "last_observed_at": "2026-10-02T18:10:00.000Z",
    "status": "resolved",
    "classification": "APPLICATION_RESTRICTION",
    "trajectory": "RESOLVED",
    "stress_score": 37,
    "confidence": 48,
    "event_count": 4,
    "affected_asns": [
      "AS147011",
      "AS139628"
    ],
    "affected_services": [
      "Facebook Messenger",
      "Signal",
      "Tor",
      "WhatsApp",
      "Telegram"
    ],
    "affected_regions": [
      "KH",
      "2118"
    ],
    "source_count": 2,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:32.648Z",
    "updated_at": "2026-10-03T23:39:44.823Z"
  },
  "events": [
    {
      "id": "ise-33865ce8ed4565997c1faaa5",
      "entity_type": "country",
      "entity_key": "KH",
      "geography": "KH",
      "started_at": "2026-08-10T00:00:00.000Z",
      "last_observed_at": "2026-10-02T18:10:00.000Z",
      "status": "resolved",
      "classification": "APPLICATION_RESTRICTION",
      "trajectory": "RESOLVED",
      "stress_score": 37,
      "confidence": 0,
      "components": {
        "anomaly": 0.2466615965815374,
        "breadth": 0.3733333333333334,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 0.5
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0.2466615965815374
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 0.047619047619047616
      },
      "deviation": {
        "max_anomaly": 0.2466615965815374,
        "max_deviation": 0.5
      },
      "affected_asns": [
        "AS147011"
      ],
      "affected_services": [
        "Facebook Messenger",
        "Signal",
        "Tor",
        "WhatsApp",
        "Telegram"
      ],
      "affected_regions": [
        "KH"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration"
      ],
      "observation_count": 12,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.305Z",
      "updated_at": "2026-10-03T23:50:20.041Z",
      "evidence": [
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--3d6c9f8d-90b4-5ffe-c5d8-6e56a455aa0f",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0147",
          "content_hash": "e14d5fa2379392ca",
          "object_json": {
            "id": "incident--3d6c9f8d-90b4-5ffe-c5d8-6e56a455aa0f",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0147",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-10T23:59:59Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-08-10T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.5,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--08dfd2d2-81c9-507d-0aed-11942c3dc002",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0171",
          "content_hash": "750616c0b98de1a5",
          "object_json": {
            "id": "incident--08dfd2d2-81c9-507d-0aed-11942c3dc002",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0171",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--41a59ab2-48c9-5679-abf9-49218eb08515",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0172",
          "content_hash": "ce5055174580b825",
          "object_json": {
            "id": "incident--41a59ab2-48c9-5679-abf9-49218eb08515",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0172",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Telegram",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--c880da4a-2228-5361-1494-54ee1b4253c6",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Internet censorship detected in Cambodia",
          "value": "kh-2026-0201",
          "content_hash": "d58682fe40d9353a",
          "object_json": {
            "id": "incident--c880da4a-2228-5361-1494-54ee1b4253c6",
            "name": "Internet censorship detected in Cambodia",
            "type": "incident",
            "title": "Internet censorship detected in Cambodia",
            "value": "kh-2026-0201",
            "status": "suspected",
            "sources": [
              "censoredplanet"
            ],
            "end_time": null,
            "severity": "warning",
            "confidence": 65,
            "start_time": "2026-09-23T00:00:00Z",
            "description": "CenAlert detected interference. Impact: 0.6. Reported by: HTTPS blocking (tcp-reset): 12/21 probes blocked (57.1%) for signal.org.",
            "anomaly_rate": 0.005714285714285714,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS147011"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "signal.org",
              "telegram.org",
              "whatsapp.com"
            ],
            "affected_services": [
              "Signal",
              "Telegram",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--0137ffff-2c54-5725-1aa0-5b30a22c5864",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0202",
          "content_hash": "7e7c69c1193b4548",
          "object_json": {
            "id": "incident--0137ffff-2c54-5725-1aa0-5b30a22c5864",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0202",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-26T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-26T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--b56b4ee5-803a-5c32-c4a3-3ca18ac26d24",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0203",
          "content_hash": "4a03685febf50c61",
          "object_json": {
            "id": "incident--b56b4ee5-803a-5c32-c4a3-3ca18ac26d24",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0203",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-27T23:59:59Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-09-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.5,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS147011"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "signal.org",
              "telegram.org",
              "whatsapp.com"
            ],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Telegram",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--abba48ba-dbb2-5cfa-d62b-a7deee06490c",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0205",
          "content_hash": "9b27978848a38440",
          "object_json": {
            "id": "incident--abba48ba-dbb2-5cfa-d62b-a7deee06490c",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0205",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 77,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.6666666666666666,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--8eb1a6a0-3efb-5ece-05dc-e68004c1f11a",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0206",
          "content_hash": "7d207bbb66ee2abd",
          "object_json": {
            "id": "incident--8eb1a6a0-3efb-5ece-05dc-e68004c1f11a",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0206",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 70,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.5,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--83bcdfc2-ca52-5349-b2f8-645d0ecdeeea",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T04:45:00.000Z",
          "name": "Internet connectivity disruption in Cambodia",
          "value": "kh-2026-0207",
          "content_hash": "1558bf238761c39f",
          "object_json": {
            "id": "incident--83bcdfc2-ca52-5349-b2f8-645d0ecdeeea",
            "name": "Internet connectivity disruption in Cambodia",
            "type": "incident",
            "title": "Internet connectivity disruption in Cambodia",
            "value": "kh-2026-0207",
            "status": "active",
            "sources": [
              "ioda",
              "censoredplanet"
            ],
            "end_time": "2026-09-30T16:15:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T04:45:00Z",
            "description": "IODA detected significant connectivity drop in Cambodia. 1 critical alerts recorded. CenAlert confirms censorship activity.",
            "anomaly_rate": 0.034782608695652174,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [
              "AS147011"
            ],
            "incident_type": "mixed",
            "duration_hours": null,
            "affected_domains": [
              "signal.org",
              "telegram.org",
              "whatsapp.com"
            ],
            "affected_services": [
              "Signal",
              "Telegram",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--9013f304-fe91-5bfe-2faf-b57e90d5d7a5",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0210",
          "content_hash": "c7590e9f7293b54a",
          "object_json": {
            "id": "incident--9013f304-fe91-5bfe-2faf-b57e90d5d7a5",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0210",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-01T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-01T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--6aa7c7cf-cb3d-5ac9-54c0-6a863a924bcd",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T00:00:00.000Z",
          "name": "Censorship detected in KH",
          "value": "kh-2026-0211",
          "content_hash": "4df3dbc3f2215ad4",
          "object_json": {
            "id": "incident--6aa7c7cf-cb3d-5ac9-54c0-6a863a924bcd",
            "name": "Censorship detected in KH",
            "type": "incident",
            "title": "Censorship detected in KH",
            "value": "kh-2026-0211",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-02T23:59:59Z",
            "severity": "critical",
            "confidence": 77,
            "start_time": "2026-10-02T00:00:00Z",
            "description": null,
            "anomaly_rate": 0.6666666666666666,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Facebook Messenger",
              "Signal",
              "Tor",
              "WhatsApp"
            ]
          }
        },
        {
          "event_id": "ise-33865ce8ed4565997c1faaa5",
          "stix_object_id": "incident--bbb43784-ac8b-5439-8c04-af1e84031d13",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T18:10:00.000Z",
          "name": "Internet connectivity disruption in Cambodia",
          "value": "kh-2026-0209",
          "content_hash": "9b665253fe651b56",
          "object_json": {
            "id": "incident--bbb43784-ac8b-5439-8c04-af1e84031d13",
            "name": "Internet connectivity disruption in Cambodia",
            "type": "incident",
            "title": "Internet connectivity disruption in Cambodia",
            "value": "kh-2026-0209",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-10-02T18:10:00Z",
            "description": "IODA detected significant connectivity drop in Cambodia. 1 critical alerts recorded.",
            "anomaly_rate": 0.047619047619047616,
            "country_code": "KH",
            "country_name": "Cambodia",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-9fd2cb1fb2489ddeb69ba3c3",
      "entity_type": "asn",
      "entity_key": "AS139628",
      "geography": "KH",
      "started_at": "2026-09-12T06:50:00.000Z",
      "last_observed_at": "2026-09-12T06:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.350094585516762
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS139628"
      ],
      "affected_services": [],
      "affected_regions": [
        "KH"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-27T23:33:20.149Z",
      "updated_at": "2026-10-03T23:50:32.366Z",
      "evidence": [
        {
          "event_id": "ise-9fd2cb1fb2489ddeb69ba3c3",
          "stix_object_id": "incident--5afc7724-09ea-5cb7-d217-8421350dacde",
          "platform": "ioda",
          "observed_at": "2026-09-12T06:50:00.000Z",
          "name": "MEGATRUENET-AS-AP -- Cambodia",
          "value": "geoasn/139628-kh",
          "content_hash": "5db6f3531c26b2a5",
          "object_json": {
            "id": "incident--5afc7724-09ea-5cb7-d217-8421350dacde",
            "name": "MEGATRUENET-AS-AP -- Cambodia",
            "type": "incident",
            "score": 223919.87654320986,
            "title": "MEGATRUENET-AS-AP -- Cambodia",
            "value": "geoasn/139628-kh",
            "method": "median",
            "location": "geoasn/139628-KH",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1813751
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-ccd8179cde77c0e0ff4503fb",
      "entity_type": "asn",
      "entity_key": "AS139628",
      "geography": "2118",
      "started_at": "2026-09-12T06:50:00.000Z",
      "last_observed_at": "2026-09-12T06:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 31,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.04000000000000001,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.285452062073337
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS139628"
      ],
      "affected_services": [],
      "affected_regions": [
        "2118"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-27T23:33:20.139Z",
      "updated_at": "2026-10-03T23:50:32.377Z",
      "evidence": [
        {
          "event_id": "ise-ccd8179cde77c0e0ff4503fb",
          "stix_object_id": "incident--e14bca5c-810c-52f9-155a-5d753d11aa4d",
          "platform": "ioda",
          "observed_at": "2026-09-12T06:50:00.000Z",
          "name": "MEGATRUENET-AS-AP -- Phnom Penh",
          "value": "geoasn/139628-2118",
          "content_hash": "a2f0c706feeccb00",
          "object_json": {
            "id": "incident--e14bca5c-810c-52f9-155a-5d753d11aa4d",
            "name": "MEGATRUENET-AS-AP -- Phnom Penh",
            "type": "incident",
            "score": 192952.2340425532,
            "title": "MEGATRUENET-AS-AP -- Phnom Penh",
            "value": "geoasn/139628-2118",
            "method": "median",
            "location": "geoasn/139628-2118",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1813751
          }
        }
      ],
      "derivations": []
    },
    {
      "id": "ise-53104b94f4b1fb18500957bd",
      "entity_type": "asn",
      "entity_key": "AS139628",
      "geography": null,
      "started_at": "2026-09-12T06:50:00.000Z",
      "last_observed_at": "2026-09-12T06:50:00.000Z",
      "status": "resolved",
      "classification": "UNKNOWN_DISRUPTION",
      "trajectory": "RESOLVED",
      "stress_score": 30,
      "confidence": 0,
      "components": {
        "anomaly": 0,
        "breadth": 0.020000000000000004,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0
      },
      "baseline": {
        "signals": [
          "ioda.bgp.score"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "ioda.bgp.score": 5.290096943174675
      },
      "deviation": {
        "max_anomaly": 0,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS139628"
      ],
      "affected_services": [],
      "affected_regions": [],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration",
        "ambiguous geography",
        "isolated observation"
      ],
      "observation_count": 1,
      "ingestion_method": null,
      "first_seen": "2026-09-27T23:33:20.158Z",
      "updated_at": "2026-10-03T23:50:32.387Z",
      "evidence": [
        {
          "event_id": "ise-53104b94f4b1fb18500957bd",
          "stix_object_id": "incident--24dc6c1c-5e4a-5c35-ea14-dac177253d02",
          "platform": "ioda",
          "observed_at": "2026-09-12T06:50:00.000Z",
          "name": "AS139628 (MEGATRUENET-AS-AP)",
          "value": "asn/139628",
          "content_hash": "85030b09fb37a460",
          "object_json": {
            "id": "incident--24dc6c1c-5e4a-5c35-ea14-dac177253d02",
            "name": "AS139628 (MEGATRUENET-AS-AP)",
            "type": "incident",
            "score": 195026.9892473118,
            "title": "AS139628 (MEGATRUENET-AS-AP)",
            "value": "asn/139628",
            "method": "median",
            "location": "asn/139628",
            "datasource": "bgp",
            "outage_type": "connectivity-drop",
            "spec_version": "2.1",
            "duration_seconds": 1813751
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--3d6c9f8d-90b4-5ffe-c5d8-6e56a455aa0f",
      "incident--08dfd2d2-81c9-507d-0aed-11942c3dc002",
      "incident--41a59ab2-48c9-5679-abf9-49218eb08515",
      "incident--c880da4a-2228-5361-1494-54ee1b4253c6",
      "incident--0137ffff-2c54-5725-1aa0-5b30a22c5864",
      "incident--b56b4ee5-803a-5c32-c4a3-3ca18ac26d24",
      "incident--abba48ba-dbb2-5cfa-d62b-a7deee06490c",
      "incident--8eb1a6a0-3efb-5ece-05dc-e68004c1f11a",
      "incident--83bcdfc2-ca52-5349-b2f8-645d0ecdeeea",
      "incident--9013f304-fe91-5bfe-2faf-b57e90d5d7a5",
      "incident--6aa7c7cf-cb3d-5ac9-54c0-6a863a924bcd",
      "incident--bbb43784-ac8b-5439-8c04-af1e84031d13",
      "incident--5afc7724-09ea-5cb7-d217-8421350dacde",
      "incident--e14bca5c-810c-52f9-155a-5d753d11aa4d",
      "incident--24dc6c1c-5e4a-5c35-ea14-dac177253d02"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}