{
  "service": "h3xa",
  "kind": "executive-briefing",
  "generated_at": "2026-10-28T18:08:56.764Z",
  "model_version": "h3xa-iss-1.1",
  "situation": {
    "id": "sit-f4b035395486bcf8b1cfac48",
    "scope_type": "country",
    "scope_key": "EG",
    "geography": "EG",
    "title": "Internet disruption in EG",
    "started_at": "2026-08-10T00:00:00.000Z",
    "last_observed_at": "2026-10-03T01:30:00.000Z",
    "status": "active",
    "classification": "APPLICATION_RESTRICTION",
    "trajectory": "STABLE",
    "stress_score": 42,
    "confidence": 17,
    "event_count": 1,
    "affected_asns": [
      "AS8452"
    ],
    "affected_services": [
      "Tor",
      "ChatGPT",
      "Claude",
      "Facebook",
      "Gemini",
      "Instagram",
      "ProtonVPN",
      "Signal",
      "Telegram",
      "TikTok",
      "WhatsApp",
      "X",
      "YouTube"
    ],
    "affected_regions": [
      "EG"
    ],
    "source_count": 1,
    "record_origin": "unrecorded",
    "first_seen": "2026-08-29T22:33:32.657Z",
    "updated_at": "2026-10-03T23:39:44.818Z"
  },
  "events": [
    {
      "id": "ise-0e2457e856d5de8f526c96ee",
      "entity_type": "country",
      "entity_key": "EG",
      "geography": "EG",
      "started_at": "2026-08-10T00:00:00.000Z",
      "last_observed_at": "2026-10-03T01:30:00.000Z",
      "status": "active",
      "classification": "APPLICATION_RESTRICTION",
      "trajectory": "STABLE",
      "stress_score": 42,
      "confidence": 0,
      "components": {
        "anomaly": 0.11241512657943253,
        "breadth": 0.44000000000000006,
        "persistence": 1,
        "corroboration": 0,
        "baseline_deviation": 1
      },
      "confidence_factors": {
        "method_diversity": 0.25,
        "source_agreement": 0,
        "timestamp_overlap": 0,
        "infrastructure_overlap": 0,
        "alternative_explanations": 0.6,
        "statistical_significance": 0.11241512657943253
      },
      "baseline": {
        "signals": [
          "voidly.anomaly_rate"
        ],
        "signal_count": 1
      },
      "current_measurement": {
        "voidly.anomaly_rate": 1
      },
      "deviation": {
        "max_anomaly": 0.11241512657943253,
        "max_deviation": 1
      },
      "affected_asns": [
        "AS8452"
      ],
      "affected_services": [
        "Tor",
        "ChatGPT",
        "Claude",
        "Facebook",
        "Gemini",
        "Instagram",
        "ProtonVPN",
        "Signal",
        "Telegram",
        "TikTok",
        "WhatsApp",
        "X",
        "YouTube"
      ],
      "affected_regions": [
        "EG"
      ],
      "source_count": 1,
      "alternative_explanations": [
        "single-source signal",
        "low statistical significance",
        "insufficient corroboration"
      ],
      "observation_count": 25,
      "ingestion_method": null,
      "first_seen": "2026-08-29T22:33:20.350Z",
      "updated_at": "2026-10-03T23:50:19.928Z",
      "evidence": [
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--f00a3863-80fc-5384-c9c2-ca0be83857da",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1639",
          "content_hash": "bf8ce22fc7167c4f",
          "object_json": {
            "id": "incident--f00a3863-80fc-5384-c9c2-ca0be83857da",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1639",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-10T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-10T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--1ebf8db6-dadf-5d7b-2cde-1f1b1ffd9683",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-10T09:30:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1638",
          "content_hash": "023d1aa0467d2373",
          "object_json": {
            "id": "incident--1ebf8db6-dadf-5d7b-2cde-1f1b1ffd9683",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1638",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-10T09:30:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 0.012743912344988177,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--4acbfe53-c330-5859-fb11-b567255e155d",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1641",
          "content_hash": "d39c312071f8f2ce",
          "object_json": {
            "id": "incident--4acbfe53-c330-5859-fb11-b567255e155d",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1641",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-11T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-11T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--bc18cfb5-6af7-5450-d7d8-712953fed0dc",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-11T23:10:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1640",
          "content_hash": "3a1bf81079781f4a",
          "object_json": {
            "id": "incident--bc18cfb5-6af7-5450-d7d8-712953fed0dc",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1640",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-11T23:10:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 0.34831460674157305,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--216db8ff-fd32-5e8a-45a6-a6c5f23b470f",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-12T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1642",
          "content_hash": "8b49f6c501066567",
          "object_json": {
            "id": "incident--216db8ff-fd32-5e8a-45a6-a6c5f23b470f",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1642",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-08-12T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-12T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--6953fe4f-f19c-5b7d-c7c5-24fcd123d8f5",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1668",
          "content_hash": "98d066a994f6bd6b",
          "object_json": {
            "id": "incident--6953fe4f-f19c-5b7d-c7c5-24fcd123d8f5",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1668",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--82adeb9c-fbba-59b7-500a-5ee8c406e211",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-27T05:20:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1667",
          "content_hash": "2a960017d4a74d2c",
          "object_json": {
            "id": "incident--82adeb9c-fbba-59b7-500a-5ee8c406e211",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1667",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-27T05:20:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 0.27906976744186046,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--ad6aa747-cfd6-5671-2bb3-a314598a1fee",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1670",
          "content_hash": "53300ec2d10c680c",
          "object_json": {
            "id": "incident--ad6aa747-cfd6-5671-2bb3-a314598a1fee",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1670",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--d27499c2-b7a5-5e06-2b3c-275cbfc5e871",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-28T03:30:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1669",
          "content_hash": "75e72670b7eaaa3e",
          "object_json": {
            "id": "incident--d27499c2-b7a5-5e06-2b3c-275cbfc5e871",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1669",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-08-28T03:30:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 0.22093023255813954,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--5ed0bf8c-c0e1-529a-3610-a837310de139",
          "platform": "voidly-atlas",
          "observed_at": "2026-08-29T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1671",
          "content_hash": "28772aa2f08ec86b",
          "object_json": {
            "id": "incident--5ed0bf8c-c0e1-529a-3610-a837310de139",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1671",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-08-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-08-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--95cc63d4-3654-5032-b92b-15c3c589edb7",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1711",
          "content_hash": "e7cc4c738efefcec",
          "object_json": {
            "id": "incident--95cc63d4-3654-5032-b92b-15c3c589edb7",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1711",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-23T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-23T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [
              "AS8452"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "chat.openai.com",
              "chatgpt.com",
              "claude.ai",
              "facebook.com",
              "gemini.google.com",
              "getlantern.org",
              "google.com",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "reddit.com",
              "signal.org",
              "substack.com",
              "telegram.org",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com",
              "twitter.com",
              "whatsapp.com",
              "youtube.com"
            ],
            "affected_services": [
              "ChatGPT",
              "Claude",
              "Facebook",
              "Gemini",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "Telegram",
              "TikTok",
              "Tor",
              "WhatsApp",
              "X",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--5fa3516c-7e92-52ee-dd14-bcab7994a7ec",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-23T10:21:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1710",
          "content_hash": "e66e4a1457382502",
          "object_json": {
            "id": "incident--5fa3516c-7e92-52ee-dd14-bcab7994a7ec",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1710",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-23T11:01:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-23T10:21:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 0.9444444444444444,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0.6667,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--1da74c60-f3c4-5625-39ea-4773bb3cbae7",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1714",
          "content_hash": "7f389e7a5b662661",
          "object_json": {
            "id": "incident--1da74c60-f3c4-5625-39ea-4773bb3cbae7",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1714",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-24T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-24T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--1265e785-cda6-5f10-5081-b5d7944b9b09",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-24T15:23:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1713",
          "content_hash": "13faab20ae7ef7d3",
          "object_json": {
            "id": "incident--1265e785-cda6-5f10-5081-b5d7944b9b09",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1713",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": null,
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-24T15:23:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--e8eae31e-e2c6-5422-b12d-6130d3f7675e",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-25T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1715",
          "content_hash": "fb3008c7ca1bd8db",
          "object_json": {
            "id": "incident--e8eae31e-e2c6-5422-b12d-6130d3f7675e",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1715",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-25T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-25T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": 23.9997,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--859e1870-a7f9-5421-9a05-4a59f94915da",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1717",
          "content_hash": "7ea35e41a5d9e40a",
          "object_json": {
            "id": "incident--859e1870-a7f9-5421-9a05-4a59f94915da",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1717",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-26T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-26T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--f09aff77-fffc-58cb-193e-e88f4c41815e",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-26T11:51:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1716",
          "content_hash": "8106b7ff73255a3f",
          "object_json": {
            "id": "incident--f09aff77-fffc-58cb-193e-e88f4c41815e",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1716",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-26T11:58:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-09-26T11:51:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 2 critical alerts recorded.",
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": 0.1167,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--5328b7f1-5eee-5e8d-fc43-9ae6f65ed87c",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-27T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1718",
          "content_hash": "d5ba4eb79b4e6e49",
          "object_json": {
            "id": "incident--5328b7f1-5eee-5e8d-fc43-9ae6f65ed87c",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1718",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-27T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-27T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [
              "AS8452"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "chat.openai.com",
              "chatgpt.com",
              "claude.ai",
              "facebook.com",
              "gemini.google.com",
              "getlantern.org",
              "google.com",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "reddit.com",
              "signal.org",
              "substack.com",
              "telegram.org",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com",
              "twitter.com",
              "whatsapp.com",
              "youtube.com"
            ],
            "affected_services": [
              "ChatGPT",
              "Claude",
              "Facebook",
              "Gemini",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "Telegram",
              "TikTok",
              "Tor",
              "WhatsApp",
              "X",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--0f5cea32-2b99-5918-bee3-7e865a4c3758",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-28T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1720",
          "content_hash": "ff01ac5c3221b19f",
          "object_json": {
            "id": "incident--0f5cea32-2b99-5918-bee3-7e865a4c3758",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1720",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-28T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-28T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--7b746771-f83e-575e-1a5c-2cd3db2ee9e5",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-29T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1721",
          "content_hash": "cf636a149154ab30",
          "object_json": {
            "id": "incident--7b746771-f83e-575e-1a5c-2cd3db2ee9e5",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1721",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-09-29T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-29T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--f9561edc-bc54-5a7a-3021-c11a8e55279f",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1723",
          "content_hash": "d28486686275f1da",
          "object_json": {
            "id": "incident--f9561edc-bc54-5a7a-3021-c11a8e55279f",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1723",
            "status": "suspected",
            "sources": [
              "ooni",
              "censoredplanet"
            ],
            "end_time": "2026-09-30T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-09-30T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [
              "AS8452"
            ],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [
              "bbc.com",
              "chat.openai.com",
              "chatgpt.com",
              "claude.ai",
              "facebook.com",
              "gemini.google.com",
              "getlantern.org",
              "google.com",
              "huggingface.co",
              "instagram.com",
              "medium.com",
              "nytimes.com",
              "openai.com",
              "protonvpn.com",
              "psiphon.ca",
              "reddit.com",
              "signal.org",
              "substack.com",
              "telegram.org",
              "theguardian.com",
              "tiktok.com",
              "tumblr.com",
              "twitter.com",
              "whatsapp.com",
              "youtube.com"
            ],
            "affected_services": [
              "ChatGPT",
              "Claude",
              "Facebook",
              "Gemini",
              "Instagram",
              "ProtonVPN",
              "Signal",
              "Telegram",
              "TikTok",
              "Tor",
              "WhatsApp",
              "X",
              "YouTube"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--577aa971-afcc-5a77-cb92-af750b34cdff",
          "platform": "voidly-atlas",
          "observed_at": "2026-09-30T00:05:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1722",
          "content_hash": "dfa6c05b643f789b",
          "object_json": {
            "id": "incident--577aa971-afcc-5a77-cb92-af750b34cdff",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1722",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-09-30T23:58:00Z",
            "severity": "critical",
            "confidence": 65,
            "start_time": "2026-09-30T00:05:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 1 critical alerts recorded.",
            "anomaly_rate": 0.012587412587412588,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--68438a5f-b900-5706-1284-0e38f2b11174",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-01T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1725",
          "content_hash": "1e658cfc6f3485df",
          "object_json": {
            "id": "incident--68438a5f-b900-5706-1284-0e38f2b11174",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1725",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-01T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-01T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--317d5ff7-4f0f-54ce-83a2-8ef9caab8ba6",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-02T00:00:00.000Z",
          "name": "Censorship detected in EG",
          "value": "eg-2026-1726",
          "content_hash": "df886f96163155b7",
          "object_json": {
            "id": "incident--317d5ff7-4f0f-54ce-83a2-8ef9caab8ba6",
            "name": "Censorship detected in EG",
            "type": "incident",
            "title": "Censorship detected in EG",
            "value": "eg-2026-1726",
            "status": "suspected",
            "sources": [
              "ooni"
            ],
            "end_time": "2026-10-02T23:59:59Z",
            "severity": "critical",
            "confidence": 90,
            "start_time": "2026-10-02T00:00:00Z",
            "description": null,
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "censorship",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": [
              "Tor"
            ]
          }
        },
        {
          "event_id": "ise-0e2457e856d5de8f526c96ee",
          "stix_object_id": "incident--ada37f80-6969-54fd-f78f-ceb023c42aeb",
          "platform": "voidly-atlas",
          "observed_at": "2026-10-03T01:30:00.000Z",
          "name": "Internet connectivity disruption in Egypt",
          "value": "eg-2026-1727",
          "content_hash": "5ce8f239cfb737cb",
          "object_json": {
            "id": "incident--ada37f80-6969-54fd-f78f-ceb023c42aeb",
            "name": "Internet connectivity disruption in Egypt",
            "type": "incident",
            "title": "Internet connectivity disruption in Egypt",
            "value": "eg-2026-1727",
            "status": "active",
            "sources": [
              "ioda"
            ],
            "end_time": "2026-10-03T01:37:00Z",
            "severity": "critical",
            "confidence": 67,
            "start_time": "2026-10-03T01:30:00Z",
            "description": "IODA detected significant connectivity drop in Egypt. 2 critical alerts recorded.",
            "anomaly_rate": 1,
            "country_code": "EG",
            "country_name": "Egypt",
            "spec_version": "2.1",
            "affected_asns": [],
            "incident_type": "disruption",
            "duration_hours": null,
            "affected_domains": [],
            "affected_services": []
          }
        }
      ],
      "derivations": []
    }
  ],
  "context": [],
  "audit": {
    "principle": "Source observations stay attributed to their feed. Stress scores, classifications, and this pack are H3XA-derived and cite the inputs that produced them.",
    "weights": {
      "anomaly": 0.3,
      "breadth": 0.2,
      "persistence": 0.15,
      "corroboration": 0.2,
      "baseline_deviation": 0.15
    },
    "derivation_ids": [],
    "observation_ids": [
      "incident--f00a3863-80fc-5384-c9c2-ca0be83857da",
      "incident--1ebf8db6-dadf-5d7b-2cde-1f1b1ffd9683",
      "incident--4acbfe53-c330-5859-fb11-b567255e155d",
      "incident--bc18cfb5-6af7-5450-d7d8-712953fed0dc",
      "incident--216db8ff-fd32-5e8a-45a6-a6c5f23b470f",
      "incident--6953fe4f-f19c-5b7d-c7c5-24fcd123d8f5",
      "incident--82adeb9c-fbba-59b7-500a-5ee8c406e211",
      "incident--ad6aa747-cfd6-5671-2bb3-a314598a1fee",
      "incident--d27499c2-b7a5-5e06-2b3c-275cbfc5e871",
      "incident--5ed0bf8c-c0e1-529a-3610-a837310de139",
      "incident--95cc63d4-3654-5032-b92b-15c3c589edb7",
      "incident--5fa3516c-7e92-52ee-dd14-bcab7994a7ec",
      "incident--1da74c60-f3c4-5625-39ea-4773bb3cbae7",
      "incident--1265e785-cda6-5f10-5081-b5d7944b9b09",
      "incident--e8eae31e-e2c6-5422-b12d-6130d3f7675e",
      "incident--859e1870-a7f9-5421-9a05-4a59f94915da",
      "incident--f09aff77-fffc-58cb-193e-e88f4c41815e",
      "incident--5328b7f1-5eee-5e8d-fc43-9ae6f65ed87c",
      "incident--0f5cea32-2b99-5918-bee3-7e865a4c3758",
      "incident--7b746771-f83e-575e-1a5c-2cd3db2ee9e5",
      "incident--f9561edc-bc54-5a7a-3021-c11a8e55279f",
      "incident--577aa971-afcc-5a77-cb92-af750b34cdff",
      "incident--68438a5f-b900-5706-1284-0e38f2b11174",
      "incident--317d5ff7-4f0f-54ce-83a2-8ef9caab8ba6",
      "incident--ada37f80-6969-54fd-f78f-ceb023c42aeb"
    ],
    "cross_domain": "Attached air, maritime, reference-CTI, and proprietary nodes are co-occurrence notes. They are not inputs to the stress score."
  }
}