{"country":{"country_code":"VN","incidents_365d":5,"leads":[{"corr":0.5084,"country":"MM","lag_days":17,"p_adj":0.0},{"corr":0.4871,"country":"MA","lag_days":6,"p_adj":0.0},{"corr":0.4328,"country":"AE","lag_days":18,"p_adj":0.0}],"led_by":[{"corr":0.5521,"country":"EG","lag_days":25,"p_adj":0.0},{"corr":0.5205,"country":"RU","lag_days":27,"p_adj":0.0},{"corr":0.5118,"country":"IQ","lag_days":26,"p_adj":0.0},{"corr":0.5066,"country":"IR","lag_days":26,"p_adj":0.0},{"corr":0.4633,"country":"TH","lag_days":4,"p_adj":0.0}]},"generated_at":"2026-05-21T12:55:40.096762+00:00","honest_caveat":"Cross-correlation does NOT imply causation. Significant lead/lag pairs may reflect (a) one country influencing another, (b) shared regional or geopolitical drivers (elections, sanctions, fiber routes), or (c) downstream measurement effects from overlapping ISP infrastructure. lag=0 (simultaneous) is intentionally excluded -- see /atlas/correlation-matrix for that case. With 50 countries and 31 lags evaluated per pair, the raw p-values overstate significance; we apply Benjamini-Hochberg FDR control at alpha=0.05 and require |r| >= 0.4. Counts come from the citable-censorship subset (incident_type IN censorship/mixed) -- IODA disruption rows are excluded since they include fiber cuts / weather / DDoS.","method":"pearson-cross-correlation-bh-fdr","version":"v1"}