The situation
An international energy company operated a gas processing site in a remote province, with 140 staff and contractors living on site. After a disputed regional election, protests filled the provincial capital 40 km to the north. Within hours, videos were circulating that claimed the airport had been seized, the highway had been cut and an armed convoy was heading for the site.
The site manager proposed an immediate road evacuation north to the capital. The director of global security had a standing geopolitical risk program with us, with the site and its routes already loaded in Aldervane Atlas. He called the watch floor.
The question
What is actually happening? Which routes are open? And is it safer to move 140 people tonight or to keep them where they are? The decision could not wait for certainty, so it needed the best verified picture that six hours could produce.
What we did
A surge cell formed within minutes: the regional desk lead, three country analysts who were native speakers of the two local languages, a geospatial analyst and the watch floor. A senior analyst from another desk reviewed every assessment before it was sent.
1. Logged every claim separately
Rumor travels as a blur. We broke it into 14 distinct claims and recorded for each one the earliest version we could find, who posted it and what evidence it carried.
2. Applied the same five tests to each
Where did it originate? Where was it filmed? When was it filmed? Do independent sources agree? Is it consistent with everything else we can observe? A claim was reported as verified only when it passed all five. The tests are described in our article, Verified, not viral.
3. Confirmed three claims
The northern highway was blocked at two points. Two videos were geolocated to those junctions from road signage and a fuel station, and a local broadcaster confirmed both. The protest outside the provincial government building was real, large and peaceful. The governor had announced a night curfew for the capital.
4. Removed eleven from the picture
The airport footage had been filmed in another country in 2021, and flight tracking showed scheduled departures continuing. The armed convoy was a military exercise from 2023, 600 km away. A pipeline fire attributed to the site matched an archived video from an unrelated incident. Eight further claims were variations on these three, or had no evidence behind them at all.
5. Checked the routes
The proposed evacuation route ran straight into both confirmed roadblocks, and the convoy would have reached them at dusk. The southern road to a company airfield 22 km away was open. We confirmed it from a live stream at a truck stop, from commercial satellite imagery taken that morning and from normal mobile connectivity along the route.
6. Assessed what would happen next
We judged it likely that unrest would remain confined to the capital for the next 72 hours, and named the three indicators that would change that view: security forces deploying beyond the capital, fuel shortages in the province and mobile network shutdowns.
| Claim | Finding | Basis |
|---|---|---|
| Northern highway cut | Verified | Two geolocated videos, local broadcaster |
| Airport seized | False | Footage from another country, 2021; departures continuing |
| Armed convoy heading for the site | False | Exercise footage from 2023, located 600 km away |
| Fire at the site's pipeline | False | Matched to an archived video of another incident |
What we found
- High confidence: the northern route was blocked at two points and unsafe to use that evening.
- High confidence: there was no verified threat to the site itself.
- High confidence: the southern route to the airfield was open at the time of reporting.
- Likely, moderate confidence: unrest would stay confined to the capital for the next 72 hours.
The first report, at 1 hour 40 minutes, listed three claims as verified, five as false and six as not yet determined. Saying "not yet determined" was the most useful line in it. It stopped unverified footage from being treated as a reason to move.
The outcome
The decision brief set out three options with their trade-offs. The client's security director made the decision.
- The site sheltered in place overnight on reduced operations.
- Thirty-eight non-essential staff left by air the next morning, using the southern route.
- A contractor convoy from another operator that took the northern road that evening was held at a roadblock for nine hours.
- None of the three indicators fired. The capital calmed within four days and the site returned to full operations on day five.
- Nobody on site was harmed.
What made the difference
The loudest reports were the false ones, and they all pointed toward the one road that was actually blocked. Acting on the first version of events would have put 140 people in a convoy heading into a roadblock at nightfall.
Verification did not slow the decision down. It was complete inside the six hours of daylight the client had, because the site was already mapped, the analysts already knew the province and each claim was tested the same way.