{
  "_meta": {
    "__meta__": "synthetic",
    "disclaimer": "Synthetic demo data inspired by real Baltic geography, MMSI/OUI conventions, and infrastructure. Not real observations.",
    "dataset": "s3-loitering-critical-infra/timeline",
    "version": "1.0",
    "anchor_ts": "2025-03-18T11:30:00Z",
    "window_open_ts": "2025-03-15T00:00:00Z",
    "window_close_ts": "2025-03-21T00:00:00Z",
    "loiter_start_ts": "2025-03-18T11:30:00Z",
    "loiter_end_ts": "2025-03-18T15:45:00Z"
  },
  "events": [
    {"ts_iso": "2025-03-18T08:00:00Z", "t_rel": "T-03:30:00", "actor": "AALLOTAR",            "event": "Departs Helsinki West Harbour; AIS nav_status=0 under way; SOG 11.2 kn, COG 245°",                      "lat": 60.1450, "lon": 24.9100, "signals": ["ais"],                                  "notes": "Routine departure leg."},
    {"ts_iso": "2025-03-18T09:30:00Z", "t_rel": "T-02:00:00", "actor": "AALLOTAR",            "event": "Enters eastbound GoF TSS, SOG 11.6 kn, COG 244°",                                                       "lat": 60.0050, "lon": 24.5200, "signals": ["ais", "plane_radar"],                  "notes": "Normal lane behaviour."},
    {"ts_iso": "2025-03-18T10:45:00Z", "t_rel": "T-00:45:00", "actor": "AALLOTAR",            "event": "Approaches Porkkala headland, SOG 11.4 kn",                                                              "lat": 59.9650, "lon": 24.6100, "signals": ["ais"],                                  "notes": "Within RAD-COAST-PRK-01 20 NM range."},
    {"ts_iso": "2025-03-18T11:02:00Z", "t_rel": "T-00:28:00", "actor": "AALLOTAR",            "event": "Course deviation S off TSS, COG 198°, SOG 8.1 kn",                                                       "lat": 59.9520, "lon": 24.5980, "signals": ["ais", "coastal_radar"],                 "notes": "Deviation start."},
    {"ts_iso": "2025-03-18T11:18:00Z", "t_rel": "T-00:12:00", "actor": "AALLOTAR",            "event": "Crosses N edge of catalog JUNCTION polygon, SOG drops to 2.4 kn",                                       "lat": 59.9210, "lon": 24.5900, "signals": ["ais", "coastal_radar"],                 "notes": "Enters infra polygon."},
    {"ts_iso": "2025-03-18T11:25:00Z", "t_rel": "T-00:05:00", "actor": "RAD-COAST-PRK-01",    "event": "Slow surface contact, track_quality 0.86, SOG 1.1 kn",                                                  "lat": 59.9100, "lon": 24.5800, "signals": ["coastal_radar"],                        "notes": "Independently corroborates AIS."},
    {"ts_iso": "2025-03-18T11:30:00Z", "t_rel": "T+00:00:00", "actor": "AALLOTAR",            "event": "Loiter t0 — SOG ≤ 0.6 kn, slow drift begins over JUNCTION centroid",                                    "lat": 59.8843, "lon": 24.5700, "signals": ["ais"],                                  "notes": "Drift phase 30 min before loop pattern."},
    {"ts_iso": "2025-03-18T11:32:00Z", "t_rel": "T+00:02:00", "actor": "MAC-PRK-COAST-01",    "event": "First cluster MAC observed: 24:0a:c4:11:00:01 (Espressif), RSSI ~-86 dBm",                              "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "Cluster ramp begins."},
    {"ts_iso": "2025-03-18T11:45:00Z", "t_rel": "T+00:15:00", "actor": "MAC-PRK-COAST-01",    "event": "Unique-MAC count in rolling 15-min window ≈ 14 vs baseline median 6 → z ≈ 3.6",                          "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "mac_count_zscore signal activates."},
    {"ts_iso": "2025-03-18T12:00:00Z", "t_rel": "T+00:30:00", "actor": "MAC-PRK-COAST-01",    "event": "Manufacturer mix in cluster window is ~100% Espressif/TI/u-blox; JSD vs baseline ≈ 0.91",              "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "mac_manufacturer_jsd_score peaks."},
    {"ts_iso": "2025-03-18T12:15:00Z", "t_rel": "T+00:45:00", "actor": "AALLOTAR",            "event": "Begins overlapping ~600 m loop pattern, COG cycling, SOG 0.4–1.1 kn (loop 1 of 4)",                     "lat": 59.8852, "lon": 24.5715, "signals": ["ais", "coastal_radar"],                 "notes": "Loop pattern starts."},
    {"ts_iso": "2025-03-18T12:40:00Z", "t_rel": "T+01:10:00", "actor": "VENLA RESEARCH",      "event": "Arrives at survey box ~3.7 NM SE of JUNCTION; lawn-mower lines, SOG 3.2 kn (DECOY)",                    "lat": 59.8250, "lon": 24.6580, "signals": ["ais"],                                  "notes": "Legit research vessel; ais_type 52; consumer-OUI crew only."},
    {"ts_iso": "2025-03-18T12:45:00Z", "t_rel": "T+01:15:00", "actor": "MAC-INK-COAST-01",    "event": "Faint hits, 2 cluster MACs at RSSI ~ -100 dBm (long-range over-water propagation)",                     "lat": 59.9400, "lon": 24.0050, "signals": ["mac"],                                  "notes": "Secondary corroboration from west."},
    {"ts_iso": "2025-03-18T13:30:00Z", "t_rel": "T+02:00:00", "actor": "MAC-PRK-COAST-01",    "event": "Peak unique-MAC count ≈ 23 in rolling 15-min window; RSSI band tightens",                                 "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "Co-located surface + just-sub-surface devices."},
    {"ts_iso": "2025-03-18T13:45:00Z", "t_rel": "T+02:15:00", "actor": "AALLOTAR",            "event": "Loop 3 of 4; cumulative dwell inside JUNCTION = 147 min",                                                "lat": 59.8838, "lon": 24.5687, "signals": ["ais", "coastal_radar"],                 "notes": "temporal_dwell_score ≈ 0.98."},
    {"ts_iso": "2025-03-18T14:30:00Z", "t_rel": "T+03:00:00", "actor": "MAC-PRV-COAST-01",    "event": "1 cluster MAC briefly at RSSI ~-103 dBm (rare ducted propagation)",                                      "lat": 60.2050, "lon": 25.6300, "signals": ["mac"],                                  "notes": "Tertiary corroboration."},
    {"ts_iso": "2025-03-18T15:30:00Z", "t_rel": "T+04:00:00", "actor": "AALLOTAR",            "event": "Loop 4 completes; SOG climbs to 4.2 kn, COG 175° — begins exit",                                        "lat": 59.8800, "lon": 24.5705, "signals": ["ais", "coastal_radar"],                 "notes": "Loiter end."},
    {"ts_iso": "2025-03-18T15:45:00Z", "t_rel": "T+04:15:00", "actor": "AALLOTAR",            "event": "Exits JUNCTION polygon S edge, SOG 8.8 kn, COG 178° (toward Tallinn)",                                  "lat": 59.8470, "lon": 24.5750, "signals": ["ais"],                                  "notes": "Loiter total ≈ 4 h 15 min."},
    {"ts_iso": "2025-03-18T15:50:00Z", "t_rel": "T+04:20:00", "actor": "MAC-PRK-COAST-01",    "event": "35 of 38 cluster MACs disappear; 3 u-blox anchors remain at RSSI ~-92 dBm",                              "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "Anchors detected — deposited-hardware hypothesis."},
    {"ts_iso": "2025-03-18T16:15:00Z", "t_rel": "T+04:45:00", "actor": "RAD-PLN-01",          "event": "Dornier 228 patrol pass logs background air-radar contacts (no alert)",                                  "lat": 59.9400, "lon": 24.5500, "signals": ["plane_radar"],                          "notes": "Context only — already departed."},
    {"ts_iso": "2025-03-18T17:30:00Z", "t_rel": "T+06:00:00", "actor": "AALLOTAR",            "event": "Tallinn approach, SOG 11.0 kn",                                                                          "lat": 59.5500, "lon": 24.7500, "signals": ["ais"],                                  "notes": "Track terminates."},
    {"ts_iso": "2025-03-18T18:00:00Z", "t_rel": "T+06:30:00", "actor": "VENLA RESEARCH",      "event": "Concludes seabed survey, departs NE; consumer-OUI MAC mix unchanged → decoy clear",                      "lat": 59.8400, "lon": 24.7000, "signals": ["ais"],                                  "notes": "Composite score stays well below 0.70."},
    {"ts_iso": "2025-03-18T22:00:00Z", "t_rel": "T+10:30:00", "actor": "MAC-PRK-COAST-01",    "event": "Anchor MACs still pinging every 60–90 s, RSSI ~-93 dBm",                                                "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "Persistence hour 6."},
    {"ts_iso": "2025-03-19T08:00:00Z", "t_rel": "T+20:30:00", "actor": "MAC-PRK-COAST-01",    "event": "Anchors persistent, hour 16",                                                                            "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "Composite score remains elevated."},
    {"ts_iso": "2025-03-20T04:00:00Z", "t_rel": "T+40:30:00", "actor": "MAC-PRK-COAST-01",    "event": "Anchors persistent, hour 36 — deposited hardware confirmed",                                              "lat": 59.9800, "lon": 24.3800, "signals": ["mac"],                                  "notes": "Persistence threshold satisfied."},
    {"ts_iso": "2025-03-20T06:30:00Z", "t_rel": "T+43:00:00", "actor": "Fusion engine",       "event": "Emits incident_score = 0.93 ≥ 0.70; opens incident INC-S3-2025-03-18-001",                                "lat": null,    "lon": null,    "signals": ["composite"],                            "notes": "part_of scenario 03-loitering-critical-infra."}
  ]
}