Information Ecosystem Analyst

Three propagation patterns are worth isolating this window. First, atomisation as amplification. *Al Jazeera* converted a single anonymous *Axios* briefing into ten consecutive flash alerts between 21:35 and 21:45 UTC [TG-587733, TG-587746 through TG-587754]. *Al Mayadeen* did the same with the *NBC News* intelligence-damage report, generating roughly ten posts from one article [TG-587966 through TG-587986]. This technique multiplies a single sourcing act into ten impressions and, crucially, decouples individual claims from their evidentiary context. By the seventh flash, 'Iran lost control of Hormuz and we now control it' [TG-587751] carries the same visual authority as the sourced lede — and it is a US official's assertion, not a finding. Second, the lexical conversion of report into admission. *NBC*'s account travelled from *Al Mayadeen* to *TASS* [TG-587853, TG-588930] to *PressTV* [TG-587877] to *Fars* [TG-588102] to *Mehr* [TG-588142]. At the Iranian state layer the verb changes: *Mehr*'s headline calls it a Western media 'confession' to Iran's devastating blows. *Fars* [TG-588102] uses the same construction. The claim did not gain corroboration in transit; it gained epistemic status. This is the most reliably observable disinformation mechanic in our corpus and it operates without anyone stating a falsehood. Third — and rarest — cross-ecosystem convergence on mechanism. The actual physics of Gulf oil movement is being documented, this window, by *CIG* forwarding TankerTracker [TG-587712], by *AbuAliExpress* in Hebrew [TG-588282], and by *CIG* independently [TG-588735]. Israeli OSINT, Western OSINT aggregation, and commercial satellite tracking arriving at a compatible picture that contradicts both belligerents' official frames. When adversarial ecosystems converge on a technical description, that description deserves more weight than anything either state broadcasts. A coordination allegation also surfaced and should be handled at arm's length. *AbuAliExpress* [TG-588337] asserts that most Palestinian and Gazan channels received 'guidance from above' to launch a synchronised Gaza-famine campaign, and that these channels are 'flooded' with it. This is a specific, testable claim about information behaviour — and it is single-source, from a channel that in the same window ran two labelled sponsored posts [TG-588359, TG-588360] and a headline amplifying Netanyahu's assassination-plot claim [TG-588469]. Our corpus does contain a rise in Gaza humanitarian output this window [TG-588448, TG-588676, TG-588678], but rising output during a documented crisis is not evidence of coordination. Finally, a register break worth logging: *PressTV* [TG-587911] published, in English, an X post attributed to Parliament Speaker Qalibaf mocking the US Treasury Secretary in internet-native idiom — 'Sir this ain't it.' *Almasirah* [TG-588627] independently framed the same exchange as Qalibaf scoffing at contradictory remarks. Iranian institutional communication is experimenting with a voice pitched at English-language social media, not at diplomacy.

Today gave us an unusually clean specimen of how a fact is manufactured, and it wasn't about Iran at all. 09:12 UTC: *Boris Rozhin* posts that a US C-17 has landed in Moscow via Riga, and speculates [TG-585720]. 09:18: *TASS* confirms from flight-tracking data [TG-585730]. 09:22: *Solovievlive* amplifies with RIA sourcing [TG-585753]. 09:35: *barantchik* posts one word of substance — monitoring [TG-585798]. 09:40: Peskov has no information [TG-585780]. 11:00: *CIG*, forwarding Geopolitics Watch, calls it extremely unusual [TG-586041]. 12:19: *Middle East Spectator* adds the frame that gives it weight — first publicly observed US Air Force arrival in years [TG-586241]. 14:32: *abualiexpress* posts it in Hebrew, now citing CBS, with a name [TG-586637]. From there it is everywhere within four minutes [TG-586683, TG-586695, TG-586676]. Five hours of collective sensing produced a shape with no content, and one Western newsroom supplied the noun. Then the ecosystems immediately began overwriting the noun with motive — *Middle East Spectator* asserting a mobilization warning [TG-587633], *Al Arabiya* asserting a warning to Putin plus the Iran file [TG-587606], *Boris Rozhin* offering a menu of pleadings [TG-587387]. And when a follow-on video of flags removed from the US embassy went viral with a causal read attached [TG-587736], the correction came from an aggregator [TG-587728], not from any state outlet. Aggregators are now doing more error-correction than the agencies they feed off. The second specimen is the Barron Trump video. *Radio Farda* reports the Secret Service statement about a video that appears to threaten him [TG-585962]; *Al Arabiya* carries it [TG-586434]. And then *rybar_mena* — a Russian channel with no incentive to defend Iran's image but a strong professional interest in claim hygiene — writes that a number of American resources allege Iranian TV aired a clip with that title, hedging the whole thing [TG-586379]. A milblog performing more skepticism than the wire. Sources break character when the claim's provenance is weaker than their appetite for it. Third: the counter-amplification economy. Iranian state media spent this window not arguing against the sanctions but curating Western argument against them — Kirby saying sanctions mid-war do not work [TG-586343, TG-586420], Mearsheimer saying the region will not comply [TG-586337], the *Washington Post* on pressure reaching a dead end [TG-586709, TG-587186], *Foreign Affairs* on maximum pressure failing [TG-586784], Clinton on Netanyahu [TG-586148], Sanders on American decline [TG-587742]. And Bessent runs the identical play in reverse, citing Pezeshkian's own admission of economic strain as proof pressure works [TG-587032, TG-587033], which *BBC Persian* then relays back into Persian [TG-587192]. Each side now sources its strongest evidence from the other's domestic press. Nobody is persuading anybody; both are harvesting.

This window offers an unusually clean propagation experiment. "Operation Economic Outcast" enters our corpus at 21:31 UTC through *Middle East Spectator*, an English-language OSINT aggregator [TG-584634]. Iranian state follows at 22:13 with *Fars* [TG-584680], then *ISNA* [TG-584695] and *IRNA* [TG-584706]. *BBC Persian* at 23:23 [TG-584746]. *Boris Rozhin* renders it into Russian at 03:05, preserving the "economic D-Day" phrasing [TG-584956]. *Asia-Plus* localises for Tajik readers at 05:19 [TG-585155]. *Ada Derana* carries it in Sinhala [TG-584858]. Roughly eight hours, four language families, one framing device travelling nearly intact. But the sector detail — aviation, digital assets, gold, shipping, technology — appears only in *Xinhua* [TG-585564]. Chinese state media did the specification work while every other ecosystem did interpretation work. That asymmetry recurs: the ecosystems most invested in the outcome carry the least information about it. The counter-frame achieved near-instant convergence. Sanctions as proof of military failure appears in *IRNA* [TG-584706], Yemen's deputy FM via *ISNA* [TG-585179] and *IRNA* [TG-584949], Tehran's mayor via *Fars* [TG-584653], and Abdel Bari Atwan via *IRNA* [TG-585489]. What makes it more than a talking point is the sourcing strategy: rather than assert it, the resistance-aligned ecosystem imports Western authority to say it. *Almayadeen* broke a single *Foreign Affairs* article into eleven consecutive flash posts between 06:45 and 06:47 [TG-585317] through [TG-585325] — maximum-pressure will fail, Trump faces humiliation, midterm consequences, Iran won its bet on attrition. Eleven posts from one article is not reporting; it is manufacturing the appearance of independent corroboration through repetition. The same move runs with Israeli sources. *Yedioth Ahronoth*'s warning that economic war on Iran could become "a terrifying" global economic war of all against all reaches readers via *Almayadeen* [TG-585118], *ISNA* [TG-585255] and *Mehr* [TG-585200]. Iranian outlets amplifying an Israeli paper's anxiety is the highest-value citation available to them, and they know it. The strategic silence is on the tanker. Iranian state carried UKMTO's language and stopped [TG-584694] [TG-584710] [TG-584713]. The attribution came from *Middle East Spectator* [TG-584711], *Rybar MENA* [TG-585535], and *AbuAliExpress* [TG-585167] — an OSINT channel, a Russian milblog and an Israeli aggregator, none of them Iranian. *Boris Rozhin* went further, claiming an Emirati tanker was turned back by IRGC forces for the third time and that "the Iranian control system works 24/7" [TG-584955]. Deterrence advertising outsourced to sympathetic foreign channels: Tehran gets the signal without the fingerprint. Finally, a source breaking character worth logging: *Fars* clipping the US Treasury secretary admitting he could not understand the day's oil price spike [TG-585480]. Iranian state media has found that the most damaging thing it can broadcast is an American official's own uncertainty, unedited.

Today produced an unusually clean specimen of claim migration, and the claim was about a claim. The chain: *AbuAliExpress* observes that Trump posted a Newsmax headline quoting the Iranian parliament speaker saying "we are hungry, we cannot survive" [TG-582880]. Within an hour, *Fars* [TG-583082] and *Mehr* [TG-583102] respond that Trump republished a truncated and fabricated version of Qalibaf's remarks. Qalibaf's counter-move — "MAKE AMERICA HUNGRY AGAIN," with US food-insecurity statistics attached — is carried by *Press TV* [TG-583037], *ISNA* [TG-583035], then picked up by *Al Arabiya* [TG-583075] and *Al Hadath* [TG-583074] as mockery, and rendered in Russian by *Solovievlive* [TG-583220]. *Radio Farda* closes the loop by narrating the whole sequence as cause and effect, noting Trump then warned of Iran's "complete collapse" [TG-583415]. A parliamentary media-centre statement calling Trump a liar with 32,000 catalogued falsehoods follows [TG-584045]. Notice what travelled: not the original quote, but the allegation of fabrication. The counter-frame outran the frame. That is rare and worth marking. Second specimen: the pre-buttal. Hours before the Treasury press conference, *Al Mayadeen* ran roughly ten consecutive bulletins attributed to an unnamed "Iranian source" asserting that Trump's economic campaigns are psychological operations timed to market reopenings and energy-price management, and that nothing will change on the ground [TG-583966, TG-583967, TG-583969, TG-583971]. An anonymous source, quoted at length, installing the interpretive frame before the event exists. By evening, named officials were repeating it. Third: denials as a genre. *Mehr* published a consolidated fact-check box denying three circulating stories at once — Alaeddin bazaar protests, a formal Mecca Pact offer to Iran, and an arrest [TG-583806] — where the Mecca Pact claim had been circulated by *IntelSlava* citing *Al Mayadeen* [TG-583513]. *Press TV* issued a categorical denial of news attributed to it about a Pakistani proposal [TG-584250]. And *AbuAliExpress* narrated its own amplification, noting that Netanyahu's assassination claim was spreading "especially in the Arab world and in Iranian channels" [TG-583891]. Sources are increasingly reporting on the information environment rather than through it.

The signature event of this window is not a strike or a sanction. It is *Al Mayadeen* taking a single essay from *The Atlantic* and serialising it into roughly thirty consecutive flash bulletins over twenty minutes [TG-582109]–[TG-582164], each formatted identically to the breaking-news posts the channel uses for battlefield claims. The technique matters more than the content. By atomising an American magazine's analysis into the visual grammar of *breaking news* — the red marker, the one-line assertion, the source prefix — the channel converts argument into event. "The dominant power in the Middle East from now on will be neither the United States nor Israel, but Iran" [TG-582109]; "Iran's control of the strait is a more effective instrument of power than a nuclear weapon" [TG-582152]; "the American-Israeli war with Iran has failed" [TG-582163]; replenishing US missile stockpiles including interceptors will take a long time [TG-582158]. A reader scrolling the channel encounters thirty assertions of Iranian victory sourced to a US publication. This is the highest-value laundering operation in our corpus this cycle: Western analytical authority, resistance-axis distribution architecture. The second pattern is frame transformation across a single fact. *IntelSlava* reports Greece relocating a Patriot battery from Karpathos to Suda Bay on Crete, noting the system was originally deployed to Karpathos in March [TG-581505] — no Iran framing at all. Hours later *Ajanews*, citing Greek media, reports the same movement as Athens repositioning air defence "after Iranian threats against American bases in Europe" [TG-581658]. Same battery, same route; one version is a logistics note, the other is escalation evidence. The causal claim entered the story at the ecosystem boundary, not at the source. Third, watch the epistemic markers. When the IRGC spokesman says Iranian maritime surveillance uses means the adversary may not yet be able to detect and cannot be reduced to known radars, *Al Mayadeen* runs it verbatim across six posts [TG-582194]–[TG-582199]; *Al Arabiya* runs the identical content under the headline "the IRGC *claims*" [TG-582230]. The Gulf–resistance divide is now visible at the level of a single verb. Finally, the Bessent announcement's velocity profile. *Ajanews* pushed six flashes in five minutes [TG-581513]–[TG-581518]; *BBC Persian* and *Radio Farda* carried it as a sourced statement on X [TG-581722, TG-581970]; *abualiexpress* sourced it to a *Financial Times* interview [TG-581984]; Iranian state outlets published it only wrapped in refutation — *Mehr* headlining that the Treasury Secretary "resorted to threatening Iran's partners" out of desperation [TG-581564]. Nobody in this corpus carried the announcement neutrally.

This window offers an unusually clean specimen of claim migration, and a matching specimen of what fails to migrate. The travelling claim: a single *Al Mayadeen* interview with Mehdi Rahimi, head of the Iranian parliament's news agency, saying Iran has received an invitation to join the Mecca Defense Pact. It appears in *Middle East Spectator* at 23:47 [TG-579031], is forwarded by *CIG* five minutes later [TG-579036], surfaces in *IntelSlava* in English at 00:47 [TG-579130], and reaches Hebrew-language *AbuAliExpress* by 05:46 [TG-579425] with the pact's membership helpfully glossed. Six hours, four ecosystems, one source, zero corroboration from any Saudi, Turkish or Pakistani outlet in our corpus. The claim acquired the appearance of confirmation purely through repetition across ecosystem boundaries — each hop making it look independently sourced. The claim that failed to travel: the British denial. *BBC Persian* reported at 00:08 that the UK government rejected the *Telegraph* story about Iranian hackers taking down a power plant, describing the incident as an emergency generator [TG-579072]. The *Telegraph* claim itself then propagates for the next nine hours — *Middle East Spectator* [TG-579110], *Al Arabiya* and *Al Hadath* [TG-579496][TG-579490], *AbuAliExpress* [TG-579745], *Solovievlive* [TG-579919] — with the denial appearing nowhere in that chain. Only *Radio Farda* carries the corrected version, in which the government confirms a cyberattack shut a small generating unit while disputing the scale [TG-579769]. Denials are structurally disadvantaged: they are less shareable, and they arrive before the audience has heard the claim. Third pattern: reflected-source laundering. Iranian state media are running an unusually heavy diet of Western press citations this window — *Mehr* on the *Intercept* and Mossad's failure [TG-579517], on the *New York Times* saying sanctions fail without China [TG-579932], on the *Financial Times* saying the war damaged the US economy [TG-579933], on the *Atlantic* saying Trump is losing to Canada [TG-579868], plus *Fars* on the *FT* and the vulnerability of US basing [TG-579657] and *ISNA* on the same [TG-580025]. None of this is Iranian reporting; all of it is Iranian curation of adversary media as self-validation. The volume is the signal. Fourth, a source visibly breaking register. *AbuAliExpress*, publishing security-camera footage of the Auja stabbing, adds an editorial line about biting the hand that feeds them [TG-579713] — dropping the OSINT-neutral voice it maintains for shipping and Qatari budget coverage. The same channel reported the Qatar cuts drily from the *FT* three hours earlier [TG-579406]. Register-switching within a single channel maps its actual audience obligations better than any content analysis of what it posts.

The dominant information behaviour this window is not amplification. It is *quote selection* — the same source event fragmented into incompatible products by different ecosystems. Take the South Carolina rally. Al Jazeera Arabic atomised it into flash posts: the Hormuz-as-American-territory line at 1,310 views [TG-576467], the nuclear justification at 2,080 [TG-576489], 'nobody wants to be president of Iran' at 1,240 [TG-576468]. Al Arabiya and Al Hadath compressed it into one headline that yokes together the two most incongruous lines — I don't know who to negotiate with, and Hormuz is American land [TG-576507, TG-576506]. SolovievLive gave Russian readers extended verbatim translation [TG-576355, TG-576391, TG-576535]. Press TV took exactly one sentence: should I go back and bomb Iran a little more [TG-576885]. Fars and IRNA discarded the words entirely and reported the fact of the rhetoric as 'delusions' and 'fabricated statistics' [TG-576572, TG-576358]. Five ecosystems, one speech, five different objects. The same operation runs on the Iraqi president's interview. AJA led with the arms-monopoly material at very high reach — 3,200 views on the call for the Hashd and factions to disarm and integrate [TG-577211], 2,460 on bombardment from inside Iraq being unjustifiable [TG-577212]. Almayadeen selected a different sentence from the same interview: no Iranian official asked to delay the arms file, and Iranian officials said it is an Iraqi decision [TG-577286]. Both are accurate; the composite each audience receives is opposite. Then there is embellishment. The Pentagon's dismissal of the Stars and Stripes editor is 'insubordination' in BBC Persian [TG-576740], IRNA [TG-576641] and Al Arabiya [TG-576768]. ISNA and Mehr add a causal claim carried by no one else: the firing followed reporting on a crisis aboard the carrier Abraham Lincoln [TG-576696, TG-576805]. That is a detail entering the record through a single ecosystem and available to travel back out of it. And a full migration chain, start to finish, in six hours: Fotros, a small resistance-adjacent OSINT channel, posts that a USAF F-35 squawked 7700 over the UAE [TG-576376]. Mehr picks it up [TG-576389]. ISNA elevates it with tracking-source attribution and the phrase 'ultra-advanced stealth fighter' [TG-576425]. A routine aviation squawk becomes an artefact about American airpower fragility. No Gulf or Western outlet in the corpus touches it. Finally, the most systematic behaviour: Iranian state international desks have industrialised the curation of Western self-criticism. Mehr on Foreign Affairs [TG-577231], the Washington Post [TG-577194], Le Point [TG-576921], the New York Times [TG-576940]; ISNA on the New Yorker [TG-576780]; IRNA on Warren [TG-576769] and Buttigieg [TG-576504]. The argument is never made in Tehran's voice. It is assembled from American voices and attributed.

Four information behaviors in this window are worth isolating, because none of them are about content. First, the atomization of a speech. The Vance and Trump remarks reached the Arabic ecosystem not as an interview but as a serialized flash stream — *Al Jazeera Arabic* published at least a dozen consecutive "عاجل" items over roughly ninety minutes [TG-573833, TG-573834, TG-573835, TG-573836, TG-573849, TG-573850, TG-573851, TG-573854, TG-573865, TG-573866, TG-573875, TG-573877, TG-573918]. Each fragment is engineered for standalone circulation. What this produces is a claim set that no longer travels with its own context: by the time "we have controlled the Strait of Hormuz" reaches *Mehr* [TG-573880], it has been retitled "Trump's repeated claim," and by the time it reaches *Fars* [TG-574193] the president is "delusional." The Iranian ecosystem is no longer arguing with the content; it is arguing with the repetition. That is a shift in rhetorical strategy worth tracking. Second, and this is the cleanest case of cross-ecosystem consensus I have seen in this corpus: one commercial dataset became the shared fact of the window. Kpler's seven-transit count crossed from Reuters into Arabic [TG-574191], Persian-service Western [TG-574218], Iranian state [TG-574356], English OSINT [TG-574434], Iranian domestic [TG-574715] and Russian state [TG-574812] within about six hours, uncontested. Belligerent claims get symmetrically disputed; vendor data does not. Kpler has effectively become the neutral arbiter of this war's central question, and no one has audited it. Third, a mirror-sourcing problem that readers should see explicitly. The strongest case being built in this window — American exhaustion — is assembled almost entirely from American reporting we do not collect directly. *TASS* [TG-574289] and *solovievlive* [TG-574407] relay the Wall Street Journal on allied doubts; *TASS* [TG-573825] relays the Washington Post on Trump seeing no exit; *Al Jazeera Arabic* [TG-573793] relays the Washington Post on Iran being bankrupt and [TG-574145] relays the Pentagon's denial of a munitions shortage, also via the Journal; *isna94* [TG-574390] relays Petraeus on unusable bases; *TASS* [TG-573932] relays MS Now on the Lincoln's conditions; *solovievlive* [TG-574382] relays Clash Report relaying an unnamed source. Six ecosystems, one origin ecosystem. What looks like international convergence is a single national press being read back at itself in six languages. Fourth, framing divergence at maximum resolution. The killing of Fathi Khazem in Jenin was covered within minutes by three ecosystems with three incompatible subjects. *AbuAliExpress* [TG-574719] carries the IDF spokesman's account: a man who incited the murder of Israelis for years, eliminated while attempting to stab soldiers. *Quds News* [TG-574483] describes a prominent symbol of resistance who lost two sons, killed during a raid on his home. *Almayadeen* [TG-574670, TG-574671] carries Hamas's eulogy. The event is identical; the grammatical subject changes from perpetrator to victim to martyr. One strategic silence to log. Trump's characterization of Saudi Arabia, Qatar, the UAE, Kuwait and Bahrain as "sort of semi-neutral countries" was amplified by *PressTV* [TG-573881], *solovievlive* [TG-574183] and *Al Jazeera Arabic* [TG-573895]. In our corpus, the Gulf-owned outlets carried the same interview's assertion that America destroyed Iran's capabilities and eliminated its leaders — *Al Arabiya* and *Al Hadath* [TG-573885, TG-573884] — but not the phrase about themselves. Selection, not censorship, and it is legible.

This window gave us something rare: a single text with a timestamp, and thirteen hours of watching it move. Between 23:07 and 23:18 UTC, *Al Jazeera Arabic* fired ten consecutive breaking flashes, each carrying one sentence of Trump's Truth Social post — the "most crushing economic operation ever taken against any country" [TG-571026], "economic war and isolation" [TG-571027], "economic D-Day, as at Normandy in the Second World War" [TG-571028], the secondary-sanctions clause naming financial institutions, companies and airports [TG-571031], and the victory inventory: navy vanished, air force destroyed, factories rubble, currency worthless [TG-571034]. Serialising one post into ten alerts is a velocity choice — it maximises notification surface and lets each fragment travel independently. They did travel. Within twenty minutes: *Middle East Spectator* with the full text [TG-571015], *TASS* [TG-571062], *Al Arabiya* and *Al Hadath* [TG-571021, TG-571022], *Qatar News Agency* [TG-571243], *teleSUR* [TG-571360], *OSINTdefender* [TG-571352], *SolovievLive* with a screenshot [TG-571157]. By dawn: *AbuAliExpress* in Hebrew with the full translated tweet [TG-571484], *Asia-Plus* in Tajikistan [TG-571361], *IntelSlava* [TG-571401], and — the item I'd flag hardest — Sri Lanka's *Adaderana*, in Sinhala, headlining not the operation but the threat to third parties: "if you help Iran, watch out" [TG-571294]. The clause that travelled furthest was the one aimed at bystanders. The Iranian ecosystem's response was fast and uniform in a way that reveals coordination of framing rather than of text. *Fars* [TG-571061], *IRNA* [TG-571068], *Mehr* [TG-571119] and *Press TV* [TG-571122] all prefix the announcement with the same causal clause — *following failure in the military field*. Then Araghchi supplies the pivot: the "so-called Economic D-Day" is a diversion from America's internal crisis [TG-571591], and Gharibabadi sharpens it — Washington has named its next defeat "economic war" [TG-571974]. This lands because a second story was running in the same hours: US national debt past $40 trillion, carried by *Mehr* [TG-570873], *ISNA* [TG-570910], *BBC Persian* [TG-571271], *teleSUR* [TG-571583], *Al Mayadeen* quoting CNN [TG-571856] and *Xinhua* in a long analytical piece on how runaway US debt harms the world [TG-571942]. Two unrelated news events, welded into one argument within six hours. And the strategic silence: *Xinhua* published nothing on Iran in this window. China's position reaches us only through *Al Mayadeen* quoting the MFA that sanctions and pressure will not resolve the issue [TG-571855], and *Mehr* quoting a Chinese expert's "when elephants fight, the grass is trampled" [TG-571331]. Beijing is present in the debt story and absent from the Iran story. That placement is a choice.

The single most instructive artifact this window is *Press TV* publishing what it presents as an investigation into whether Iran attacked the UAE — and concluding it did not, while invoking the 'Zionist entity's long history of false-flag ploys' as a warning to Persian Gulf states [TG-567341, TG-567518]. This is a genre shift. State broadcasters typically deny. This one performed epistemic labour: it adopted the form of verification journalism to produce a denial with an alternative attributable actor attached. That is a more sophisticated product than a denial, because it gives sympathetic downstream nodes something to *do* — a claim to carry, not merely a rejection to echo. *Al-Alam*, via *ISNA*, supplied the supporting axiom: Iran's behaviour throughout the war shows it announces what it does [TG-567714]. The argument is not 'we didn't', it is 'we would have said so'. Track the migration. Sirens first surfaced through *Middle East Spectator* and *cig_telegram*, both forwarding a third channel [TG-566717, TG-566716], then *AbuAli Express* on Emirati air defenses [TG-566768], then the official Emirati statements via *Al Jazeera* and *Almayadeen* [TG-566771, TG-566761], then attribution to Iran [TG-567062, TG-567053]. Iranian outlets carried the Emirati alert straight at first — *Farsna* relayed the UAE interior ministry advisory to citizens [TG-566780] and later the Emirati attribution itself [TG-567592]. Only after Baqaei's denial [TG-567702, TG-567713] did the counter-narrative consolidate. There is a visible seam between relay and rebuttal, and it is roughly five hours wide. Meanwhile Gulf outlets performed a different operation. *Al Arabiya* and *Al Hadath* did not lead with the missiles; they led with 'Abu Dhabi: halt financial transactions with Tehran' framed as coming 'after repeated Iranian attacks' [TG-567666, TG-567660]. The contested claim is compressed into a settled premise inside a subordinate clause. That is how a disputed attribution becomes background fact. Second pattern: counter-programming. When US envoy Tom Barrack criticized Israeli strikes on Idlib [TG-566075, TG-566076], *AbuAli Express* explicitly proposed attaching to Barrack's tweet a video of Syrian soldiers chanting against Jews [TG-566324, TG-566097], linking directly to his post. That is an OSINT channel openly organizing a response to a US official's framing — narrative management surfacing as instruction rather than as content. Third: attribution lag as strategy. Israeli army radio noted that Netanyahu's office formally claimed the Idlib strikes only after roughly twenty-four hours [TG-567698, TG-567669]. A day of deniability, then ownership once the regional condemnations — Syrian [TG-565905], Turkish [TG-566588], Egyptian [TG-566552], Saudi [TG-566760], Qatari [TG-566292] — had already been spent on an unattributed act.

Three findings from this window. First, a single document produced three mutually exclusive accounts, all live at once. At 11:03 UTC *Al Arabiya* and *Al Hadath* published matching "our sources" items reporting an extension of the sixty-day truce [TG-562845][TG-562870]. *TASS* was still carrying that Al Arabiya attribution at 20:20 [TG-564114] — long after *Al Jazeera Arabic* had reported Trump saying the US is not seeking an extension [TG-564125] and *abualiexpress* had relayed it in Hebrew [TG-564186]. Simultaneously Iran's foreign ministry rejected the framing entirely, telling *Middle East Spectator*'s quoted readers there was never a ceasefire, only a cessation of hostilities [TG-563004]. Nobody corrected anybody. Persistent ambiguity is now a stable state, not a transient one. Second, claim-and-denial cycles are compressing. Trump's IRGC backchannel claim entered via *BBC Persian* [TG-563057], *Radio Farda* [TG-563219] and *TASS* [TG-563070]; the IRGC denial — "fantasies born of delusion" — was circulating within roughly ninety minutes across *Press TV* [TG-563714], *ISNA* [TG-563622], *BBC Persian* [TG-563059] and Saudi-owned *Al Arabiya* and *Al Hadath* [TG-562855][TG-562878]. The Erbil false-flag frame assembled just as fast: Barzani's attribution [TG-563053], *Rybar MENA*'s target analysis [TG-563114], *Middle East Spectator*'s "allegedly Hadid-110" [TG-563007], and the Iranian counter-frame through *Al Mayadeen* [TG-562913], Araghchi [TG-564181] and Baqaei [TG-564008] — all inside about eight hours. Third, register breaks. *Press TV*, a state broadcaster, appended "And, apparently, cows fly now" with emoji to Trump's claim that oil prices are falling [TG-564179]. State media adopting meme idiom signals an audience being courted outside the diaspora-official register. Conversely *Fars* published a piece attacking Iran International as a Mossad-supervised instrument [TG-563834] — the classical register, aimed inward. On reach: the Oman bombing threat propagated within hours into a Sinhala-language Sri Lankan wire [TG-563429], a Nigerian daily [TG-563386] and Spanish-language *teleSUR* [TG-564438]. What travelled furthest, though, was not policy but press management — Trump telling a CNN reporter to "be quiet" surfaced across *Middle East Spectator* [TG-564111], *cig_telegram*, *abualiexpress* [TG-564263] and *Press TV* [TG-564534]. And the silence: *Xinhua*'s only Iran-adjacent output was a JPMorgan food-inflation report citing Hormuz [TG-563242] and a CENTCOM statement on USS Lincoln crew mental health [TG-563238]. No coverage of the memorandum's expiry at all.

This window is a near-perfect specimen of how a single reflected Western report becomes cross-ecosystem infrastructure. The *Washington Post* Trump-Hegseth munitions story — which we see only through mirrors — propagated within hours from *AJA* [TG-559329, TG-559359] to Iranian state (*Press TV* [WEB-90563], *Mehr* [TG-559403]) to the Houthi *Almasirah* [TG-560186], each node keeping the *Washington Post* attribution but shedding the White House denial. By the time it reaches *Almasirah*, the story is 'US getting throttled by Iran' — the *CIG* framing [TG-559471]. Trump's counter-move — branding the leak treasonous and threatening prison [TG-559666, TG-559747] — supplied the ecosystems their second-day lede, and the Guardian's 'kindergarten diplomacy' coinage, relayed by *IRNA* [TG-559920] and *ISNA* [TG-560249], gave them a durable meme. Watch how fast a foreign broadsheet's phrase becomes Iranian state vocabulary. The more revealing behavior is attribution discipline around the tanker. *Middle East Spectator* asserts 'Iran has struck another oil tanker' [TG-559494]; every state-aligned source in the corpus — Iranian, Russian, even the *UKMTO* relay [TG-559404] — declines the claimant, describing only 'two explosions.' This is a coordinated strategic silence: the ecosystems that would trumpet an Iranian strike on Israel go deliberately vague when the target is commercial shipping in a strait Iran is simultaneously negotiating to 'reopen.' The framing contradiction is the story — you cannot brand yourself the guarantor of safe passage and the author of the explosion in the same news cycle. The corpus is collectively managing that contradiction by leaving the explosions unauthored.

The signature information behavior this window is a contested-reality standoff: does the negotiation exist? Trump says talks are happening 'right now' [WEB-89664]; Iran's Foreign Ministry says none are planned [WEB-89685]; *CBS* via *radiofarda* confirms no scheduled talks [TG-553694]. The revealing artifact is *Xinhua*'s decision to run an explainer whose entire premise is the contradiction — 'U.S., Iran at odds over talks' [WEB-89826]. When a state wire's value-add is to certify that the two capitals cannot agree on whether they are speaking, the epistemic breakdown has become the product. Watch claim migration on Kuwait. A drone attack surfaces first in Farsi/OSINT registers — *farsna* 'Arab sources report several strong explosions in Kuwait' [TG-553256], *Middle East Spectator* 'BREAKING: Drone attack on Kuwait' [TG-553283], *intelslava* 'following an Iranian drone attack' [TG-553611] — then escalates to *i24*, via *solovievlive*, as an IRGC strike on a US base [TG-553532], and lands in *Jerusalem Post* [WEB-89730]. Yet the Iranian-state carrier, *Press TV*, describes only 'smoke and flames... cause still unknown' [TG-553277]. The claim hardened as it crossed ecosystem boundaries while the most interested state media stayed conspicuously vague — a strategic silence. Two platform-layer events matter. ESA delayed Sentinel imagery over the Gulf of Oman 24 hours 'due to US security concerns' [TG-553773] — deliberate opacity over contested water. And Telegram itself was briefly removed from Apple's App Store [TG-553465] before restoration on a CSAM rationale [TG-553634, TG-553700]. The instrument of the information war flickered. Finally, a rare source-breaking-character moment: *abbasdjuma* reports an American journalist apologized to the mothers of the Minab school victims — and declined to comment further [TG-554462]. A single reflected act of contrition, surfacing only through the Russian-Iran adjacent channel, tells you which ecosystem still finds the Minab school analytically useful.

This window offers a near-perfect specimen of a belligerent losing control of his own narrative in real time. Trump asserts talks are 'happening now' [WEB-89555]; within hours the denial cascade runs through *three normally non-aligned nodes at once* — Iran's MFA [TG-89408], Pakistan's foreign ministry [WEB-89542, TG-552307], and, most tellingly, *US media (CBS, CNN) citing US officials* [TG-552635, TG-552559]. When the mediator and the claimant's own domestic press converge to refute him, that is not spin failure; it is a coordination collapse the whole ecosystem then metabolizes. *Middle East Spectator* [TG-552612] and *Intelslava* [TG-552612] frame it as 'contradicting Trump's statements,' and even the Israeli-facing *AbuAliExpress* [TG-552132] notes IRGC-linked channels 'mocking Trump.' Watch the migration of the interceptor-depletion claim. Origin: *The Atlantic*. Vector: *Almayadeen* renders it in Arabic as 'US consumed two-thirds of its interceptors' [TG-552110, TG-552111]; *Boris Rozhin* [TG-552164] and Russian milblogs give it a great-power gloss; *PressTV* and Iranian state fold it into a 'cracks in US military architecture' investigation [TG-552063, TG-89610]. One think-tank piece becomes, in 12 hours, a cross-ecosystem consensus that America is running out of ammunition — a textbook case of a Western-origin claim laundered into anti-US validation across three language spheres. The strategic silence worth naming: on the *MQ-9*, no US channel in our corpus confirms or denies. The absence lets the Iranian claim stand uncontested, and *Xinhua*'s [WEB-89422] deadpan 'media report' attribution gives it a veneer of neutral wire-service fact without endorsing it. Neutrality-as-amplification is its own mechanic.

The cleanest amplification-chain specimen of the window is the Hormuz "reopening" claim. Origin: Israeli Channel 12. First cross-boundary carriage: *AzerNews*, a Caucasus outlet, printing it as fact — "Araghchi agreed to reopen Hormuz" [WEB-89019]. Iranian rebuttal: *Fars*, naming and killing the Channel 12 source [TG-549374], echoed in Hebrew by *abualiexpress* [TG-548948] and in English by *Al Manar* [WEB-89118]. A claim traveled Israeli → Caucasus-neutral → Iranian-denial → Hezbollah-amplification in under twelve hours. The observatory's value is watching the denial travel *further* than the original — Tehran turned a hostile leak into a sovereignty performance. The second dynamic is Iran mining Western institutional media for validation. The 653-casualty figure isn't an Iranian claim — it's *ABC* and *The War Horse* [TG-550264, TG-550266], laundered through *almayadeen*'s sixteen-post thread and *Tehran Times*' "strategic success" framing [WEB-89164]. Simultaneously the ecosystem harvests *NYT* ("Trump lost control") [TG-550227], *WSJ* (Gulf frustration) [TG-549935], *Guardian* ("war out of control") [TG-549979], *CNN* (67% oppose) [TG-549536]. This is a coordinated evidentiary strategy: let the adversary's own press build your case. We see these only through ecosystem reflection — we do not monitor NYT directly — and the selectivity is the signal. Strategic silence: the *Israeli* ecosystem is notably muted on the halt. *Channel 12* via *Al Manar* reports Netanyahu learned of the cancellation *from Trump's social-media post* [WEB-89185] — a source breaking character to signal humiliation, not triumph. When your ally's press frames restraint as your sidelining [WEB-89069], the coalition's information front is fracturing in public.

This window is a near-perfect specimen of a single claim fracturing on contact with ecosystem boundaries. Trump's Truth Social post is an event our observatory can only see through mirrors — and the mirrors disagree systematically. Arab-media outlets (*Al Jazeera* [TG-548245], *Al Hadath* [TG-548256]) led with the cancellation-as-concession. Israeli *AbuAliExpress* [TG-548416, TG-548438] reproduced the full 'locked and loaded' text verbatim, preserving the threat. *Xinhua*/*Guancha* [WEB-88927, WEB-88926] stripped it to 'Trump holds off,' the language of American retreat. Same 200 words, three incompatible headlines — the framing IS the geopolitics. The higher-order move is the denial cascade. Trump's 'Iran asked us to pause' met an immediate, coordinated Iranian rejection propagated identically through *Mehr*, *Middle East Spectator*, and *Xinhua* [TG-548316, TG-548334, WEB-88962] as 'a new lie.' What's notable is speed and uniformity — this is a prepared line, not organic reaction, and its uniformity across state and semi-state channels signals central coordination. Simultaneously the Hormuz 'deal' claim was seeded by Israeli *Channel 12* [WEB-88986] and refuted by *Fars* [TG-548915] within the same news cycle: two belligerents using third-party outlets to plant contradictory realities. Watch the migration of Western self-criticism. *Atlantic*, *NYT*, *CNN*, *Politico*, *Bloomberg*, *AP-NORC* — none of which we collect — reach us exclusively as Iranian and Russian re-exports [TG-547923, TG-548008, TG-548766, TG-548631]. The adversary ecosystems have discovered they need not fabricate; curating authentic Western doubt is more credible and self-sustaining. And note the mockery layer: Israeli settler platforms circulating a 'Trump mood forecast' [TG-548951] and the leaked Bessent yen-buying note [TG-548881] — allies, not enemies, are now the source of the 'erratic Trump' meme.

The defining information behavior this window is reflection cascade: an entire war-scare built from Western sources this observatory does not collect, refracted through the ecosystems that do. 'Attack imminent' reaches us only as mirror — US State Department warnings via *AbuAliExpress* [TG-546868] and *ajanews* [TG-547057]; *Washington Post* on the destroyer shortage via *AJA* [WEB-88721] and *Almayadeen* [TG-546766]; Israeli Channel 12 via *ajanews* [TG-547444–TG-547446]; *New York Times* on 'strategic defeat' via *Almayadeen's* seven-item run [TG-547302–TG-547307]. Not one primary Western feed — yet the reader could be forgiven for thinking we watched CBS directly. We did not. We watched who chose to carry it. And the choosing is the story. The *NYT* 'strategic defeat' frame is amplified with near-identical timing by Iranian (*IRNA*, *Press TV*), Russian (*IntelSlava* [TG-547924]), and Chinese (*Guancha* [WEB-88812]) ecosystems — a rare tri-polar convergence on a single Western text, because it flatters all three. Migration of a claim across every adversary boundary at once is the strongest amplification signal we have. Watch the source that broke character: Trump's Truth Social posts reach us only reflected — 'destroying the Iranian currency' [TG-547528], the F-22 image [TG-547530], 'God bless our soldiers' via *AbuAliExpress* [TG-546-adjacent, TG-547299], even an alien-photo post [TG-547638]. The ecosystems curate which posts to elevate: Arab media runs the currency and warplane images (menace); Iranian media runs Ghalibaf and 'strategic defeat' (resilience). Same feed, opposite constructions. And the strategic silence: *CENTCOM* and *State* in our web corpus produced nothing this window. The most consequential actor is the one not speaking — leaving the narrative field entirely to belligerents and their mirrors.

The dominant information behavior this window is *claim without corroboration, amplified at speed*. The IRGC tanker strike migrated across ecosystems in under an hour — Iranian state (*Fars* [TG-543669]) → OSINT aggregator (*middle_east_spectator* [TG-543691]) → Russian political (*solovievlive* [TG-543728]) → Arab media (*Al Mayadeen*) — each node adding emphasis, none adding independent verification. The countervailing *CENTCOM* denial appears in only two of our channels (*BBC Persian* [TG-545160], later *Al Jazeera* [TG-545339]). That asymmetry — a belligerent claim propagating through five sympathetic nodes while its rebuttal reaches two — *is* the story. The 'closure' of Hormuz is being manufactured in the information layer. Watch the strategic silences. On the reported U.S./Israeli weekend strike order, the sourcing is entirely reflected — *CBS* via *Daily Sabah* [WEB-88514] and *abualiexpress* [TG-545395], *WSJ* via *cig_telegram* [TG-545397]. We see this Western-media event only through mirrors; no primary Western outlet in our corpus. The observatory must flag that we are watching a threat refracted through the ecosystems most invested in believing it. The Ceuta episode is a masterclass in cross-ecosystem convergence. A European migration crisis became, within our corpus, an Iran-adjacent narrative: *Fars* [TG-544704] and Iranian outlets amplify Nick Fuentes and 'America First' figures blaming a Zionist plot; *cig_telegram* [TG-544477] pushes 'GOP supports invasion because Morocco is Israel's ally'; Iranian negotiator Marandi (via *abualiexpress* [TG-545072]) claims 'Morocco is a tool of Netanyahu and Trump punishing Spain for supporting Palestine.' Three ecosystems — American far-right, Russian milblog, Iranian state — independently converged on an anti-Israel reading of a Spanish border event. That convergence, not the migration itself, is the phenomenon: the Iran conflict has become a semantic gravity well pulling unrelated crises into its frame.

This window offers a rare, clean case of an OSINT node policing the Western press in real time — and it is the story. When *Jerusalem Post* (WEB-88227) and *AzerNews* (WEB-88231) circulated an Axios/Barak Ravid report that IRGC officials 'urged Hamas not to sign' the disarmament deal, *Middle East Spectator* (TG-543461) intervened: the piece is 'completely made up,' written 'to make it appear there is a drift.' Here an aggregator with 4,000+ views is functioning as a counter-amplification valve against a mainstream byline — narrative velocity being actively braked, not accelerated. The Gaza-deal announcement itself is a textbook migration study: Trump's Truth Social post surfaces near-simultaneously across *Xinhua* (WEB-88154), *AJA*'s minute-by-minute draft leak (TG-542628-542640), *Al Mayadeen* (TG-542662), *TASS* (TG-542707), and Hebrew *AbuAliExpress* (TG-543316) — each ecosystem re-registering it: Xinhua as flat wire, Iranian outlets as 'Trump's hostility to the resistance' (*IRNA* TG-542761), *AbuAliExpress* skeptically ('words are free... the big question is implementation,' TG-543395). On the Hormuz duel, note the *behavior*: the IRGC's Statement No. 57 explicitly instructs insurers to 'disregard CENTCOM's false statements' (TG-543699) — a belligerent trying to seize the epistemic authority over shipping data itself. And CENTCOM appears in our corpus only as the thing Iran is rebutting; we never see it directly. The strategic silence worth naming is Israel's on the Gaza deal — *Guancha* (WEB-88191) headlines it: 'Trump pops the champagne at halftime; Israel says nothing.'

This window offers a near-perfect specimen of claim migration and the strategic deniability vacuum. Track the Jordan open letter: it originates as a *New York Times* report, which we only see reflected—*isna* and *mehrnews* attribute it to NYT [TG-541153, TG-541375], *cig_telegram* via Tabz and *Middle East Spectator* amplify it as breaking [TG-541129, TG-541440], and then *Jerusalem Post* closes the loop by framing the Jordanian dissent as 'exactly what Iran intended' [WEB-87926]. The same event is simultaneously an Iranian propaganda victory, an OSINT scoop, and (to the Israeli ecosystem) evidence of enemy psyops—the framing tells you the ecosystem, not the fact. The richer case is Damietta. A strike no one claims becomes a Rorschach test: *Middle East Spectator* breaks Egypt's confirmation [TG-540893]; NYT (reflected) cites 'two Iranian sources' saying Iran did it to demonstrate shipping-disruption capability [TG-541128, TG-542310]; Iran's FM 'categorically rejects' involvement and warns of Israeli false-flags [WEB-88123, TG-542534]; Houthis deny [WEB-88010]; *boris_rozhin* openly floats 'Iranian drone or Israeli false-flag operation?' [TG-540899]. The deniability is the payload—the ambiguity lets Iran enjoy the deterrent signal while formally disowning it, and lets every ecosystem assign authorship to its preferred villain. On the F-35 dispute, the information behavior is the story: IRGC claim → allied media → Russian relay → CENTCOM denial → IRGC 'satellite evidence' rebuttal [TG-541844, WEB-88094]. Each side escalates not force but *evidentiary claims*. Note one strategic silence: Chinese state outlets (*Xinhua*, *Guancha*) report the F-35 claim and the Kuwait death but stay conspicuously neutral on BDA [WEB-87961, WEB-87903], protecting Beijing from the China-arms-to-Iran narrative it is simultaneously denying [WEB-87971]. And a genuine cross-ecosystem tell: the 'Iranian agent' label deployed to delegitimize an Azerbaijani blogger in Germany [WEB-88032]—the war's vocabulary is now a portable smear in the Caucasus.

This window offers a rare cluster where information behavior is explicitly the subject. First, the IRGC Telegram account closure. *Press TV* [TG-539390, WEB-87647] and *Al Mayadeen* [TG-539349] report the IRGC's public-affairs channel was shut down — and the IRGC's own framing is remarkable: the account was collecting 'precise intelligence on US military movements' crowdsourced from 'the masses in Jordan and Kuwait,' and its closure proves 'the arrogance front's panic.' A belligerent narrating its own Telegram channel as a crowdsourced ISR node and rebranding a takedown as enemy fear is strategic-communications jiu-jitsu. Second, the mirror image: *CENTCOM*'s Adm. Cooper, via *Reuters*/*Jerusalem Post* [WEB-87426], *Al Manar* [WEB-87494], and *Guancha* [WEB-87508], warns US troops their cellphone videos help Iran do battle-damage assessment; *Fars* [TG-538039] reframes this as 'America's fear of Iran: put down your phones.' Both belligerents now openly treat soldier-generated content as an intelligence surface. Third, and most striking, dueling AI-manipulation allegations: *Al Manar* [WEB-87459] claims 'Tel Aviv hired Trump's ex-campaign chief to flood the AI ecosystem with pro-Israel content'; *Cubadebate* [TG-539149] alleges a $46.5M Israeli 'AI-poisoning' campaign targeting ChatGPT/Gemini answers on Gaza; mirror-imaged, *dva_majors* [TG-538910] accuses Iran of 'bombarding Western social media with propaganda.' None is verified in our corpus, but the convergence is the signal: every ecosystem now frames the adversary's narrative work as illegitimate 'poisoning' while treating its own as truth-telling. The war over what LLMs will say about this war has become an explicit theater.

This window is a near-perfect specimen of narrative pre-emption. The claim migrates faster than the facts: OSINT flags a launch [TG-536219], and within four minutes *middle_east_spectator* has minted the interpretive frame — 'So much for the reports of ongoing negotiations' [TG-536257] — which then propagates through *cig_telegram*, *IntelSlava* and Iranian state before CENTCOM confirms anything. The interpretation arrives first; the event catches up. Watch the CENTCOM statement's cross-ecosystem processing: *Al Jazeera Arabic* relays 'all missiles intercepted successfully' [TG-536298] straight, while Iranian *Mehr* reframes the identical statement as 'America's repetitive claim: we downed them all' [TG-536333] — same words, opposite valence, the framing carried in the verb 'claim.' On the US-Saudi Iraq strikes, the ecosystems collectively build competing designations for the same targets: CENTCOM's 'Iran-aligned terrorists' [WEB-87254], the resistance ecosystem's 'official PMF headquarters' and 'treacherous terrorist attack' [TG-536713, TG-537203]. The casualty count is itself an information object, escalating in real time across the pro-Iran channels — 5 [TG-536781], 8 [TG-536680], 10 [TG-537090], 20 [TG-537203] — each increment amplified as fresh proof of atrocity. Two strategic silences worth flagging: *almayadeen*'s Tehran correspondent noting 'no official Iranian statement' on the Jordan attack for hours [TG-536312], a deliberate ambiguity; and the disclosure, via *qudsnen* citing Drop Site, that Israel is paying $46.5M to shape AI narratives on Gaza [TG-536473, WEB-87364] — the information war made literal. Meta-note: Russia charging Durov [TG-537036] while its milblogs post uninterrupted shows the platform's function decoupling from its politics.

The signature information event this window is Trump's Fox News interview — and the observatory should note we see it almost entirely through mirrors. *AJA* ran it as a breaking-news cascade, a dozen fragments in twenty minutes [TG-534935 through TG-534944], each isolating a different threat or boast. *AbuAliExpress* reflected the Hebrew translation to Israeli audiences [TG-534926]; *Solovyov* carried the Pickaxe Mountain line to Russians [TG-534956]. One statement, three ecosystems, three framings — and none of them is us watching Fox directly. The reader should know that. The most disciplined messaging operation this window is Iranian. Gharibabadi's Hormuz remarks were pushed simultaneously and near-verbatim across *Farsna*, *ISNA*, *Mehr*, *IRNA* and *Al Mayadeen* [TG-535529][TG-535578][TG-535686] — the Arabic and Farsi channels carrying the same pull-quotes within minutes. That synchronization is the story: this was a coordinated doctrinal rollout dressed as a press availability. Watch a narrative die in real time. The 'Iran will strike Ukraine with ballistics' claim originated in Ukrainian monitoring channels, was amplified by Russian milblogs [TG-534790], and was explicitly refuted by the pro-Iran *Middle East Spectator*: 'My sources tell me this information is completely false' [TG-535051]. Then, hours later, Iran did launch ballistics — but reportedly toward Jordan, not Ukraine [TG-536251]. The ecosystem got the target wrong while the direction of travel right, a reminder that these channels traffic in vector, not precision. Finally, the strategic silence: on the late-window missile launch and the reported Jordan strike, Iranian state channels in our corpus are conspicuously quiet at cutoff. The claim is carried by OSINT and Russian aggregators [TG-536239][TG-536251] — not yet by Tehran. Who is NOT talking is data.

The information-behavior story is attribution refusal as a weapon. Iranian drones hit Erbil — *Middle East Spectator* [TG-533223], *IntelSlava* [TG-533250], and *Al Jazeera Arabic* [WEB-86793] all attribute it — yet *abualiexpress* notes the crucial move: 'Iran does not accept responsibility, and neither does anyone else' [TG-533825], even as 'direct US interests' are struck nightly. The strategic ambiguity is deliberate: Iran gets the coercive signal without owning the escalation. Watch the same pattern at Abqaiq, where the claim migrates across three ecosystems — Houthis claim it, Saudi Arabia blames Iraqi militias [WEB-86937], the Islamic Resistance in Iraq denies and warns Riyadh [TG-533220], and Yemen calls the Saudi accusation 'confusion' [TG-533603]. Four actors, zero settled authorship. Attribution fog is now a shared tactic. Second: the manufactured-consensus around 'flexibility.' *Al Jazeera* [WEB-86910], Reuters-via-*BBC Persian* [TG-534011], and FT-via-*Almayadeen* [TG-534023] all deploy the identical word for Iran and the UAE simultaneously. When independent ecosystems converge on one euphemism inside twelve hours, that is a coordinated de-escalation vocabulary, not organic coincidence. Third, a reflection-sourcing note: nearly everything we 'know' about Netanyahu in Washington we see through mirrors — *NY Post* via *Solovievlive* [TG-533557] on Pickaxe Mountain, *Guancha* [WEB-86829] on Trump's 'Israel would be gone' line, *Al Jazeera* [WEB-86919] on protesters calling him a war criminal. We monitor no US mass media directly; the reader should know the Netanyahu narrative reaches us pre-filtered by ecosystems that each want a different outcome from that meeting.

The information-behavior event of this window is the Abqaiq attribution scramble — a live demonstration of how a single kinetic act gets narrated into four incompatible stories. Sequence: *Middle East Spectator* [TG-531435] flags "unconfirmed" Abqaiq reports at 09:38; *Yemeni military media* [TG-531969] claims the Yanbu/eastern-Saudi strikes at 12:55; then *Saudi Defense Ministry* via *ajanews* [] attributes the drones to "Iran-backed militias from Iraqi territory," pointedly NOT to Yemen. Within hours the *Islamic Resistance in Iraq* [TG-533075, TG-533078] explicitly DENIES responsibility and says the attack was Yemen's — inverting the usual dynamic where militias claim attacks. *Middle East Spectator* then breaks analytic character entirely: "I can't believe Saudi Arabia has stooped so low, they now blame attacks on Iraq so they don't have to respond" [TG-533076]. This is the tell. Riyadh's framing choice — Iraq over Yemen — is strategic: blaming Iraqi proxies lets Saudi threaten a target it can actually reach, while admitting Houthi reach into the eastern province would be a humiliation. Qatar [TG-532193], Oman [WEB-86679], Kuwait [WEB-86740] all rapidly amplify solidarity-with-Saudi condemnations, constructing a Gulf consensus around the Iraq attribution before the facts settle. Second pattern: Trump's verbal flood versus Iran's terse denials creates a velocity asymmetry — Trump generates a dozen quotable lines (*Middle East Spectator* [TG-532538, TG-532539, TG-533074]) that dominate every ecosystem, while Iran's single "no negotiations" line [TG-531681] gets drowned. The strategic silence worth noting: the Iranian drone strikes on Erbil Kurdish groups [TG-533223] arrive late and are narrated almost entirely by OSINT and Iranian state — Western-facing Gulf outlets that amplified Abqaiq go quiet, because an Iranian strike on Iraqi soil complicates the day's Saudi-victim frame.

The defining information event of this window is not a strike — it is *Trump's* Truth Social posting spree, and the observatory should watch what the ecosystems did with it. Reflected through *cig_telegram* citing Tabz [TG-530100, TG-530101, TG-530102] and *Middle East Spectator* [TG-530269], Trump posted AI-generated images of himself seizing an Iranian tanker ('It's our oil tanker now!'), striking Kharg Island, and a 'Cosmic Commander' movie poster. This is raw material for a narrative war, and the Iranian ecosystem moved with unusual speed and coordination: *Farsna* [TG-530222], *IRNA* [TG-530163], and *PressTV* [TG-530184, TG-530201] converged within hours on a single frame — 'as US media report depleted ammunition, Trump invests in AI image-generation credits for imaginary battlefield triumphs.' That is a manufactured line, near-verbatim across three outlets, timed to overlay the *NYT*'s reflected 'Trump discovered the limits of his power' / 'mental breakdown' framing [TG-529728, TG-529907]. Watch the migration: a Western president's social-media behavior → OSINT aggregators → Iranian state media → a unified 'delusional/defeated' meme, with Russian channels (*Dugin's* forward, [TG-530229]) grafting on 'demented Don.' The strategic silence is equally telling — no US-collected triumphalism in our corpus counters it, because Trump's own imagery *is* the triumphalism, and it reads as parody. Contrast the disciplined Iranian construction with the ecosystem's other convergence: the near-simultaneous 'US ran out of ammunition' narrative built from *Axios*, *NBC*, *CBS* and *ABC* reflections [TG-528688, TG-528384, TG-529608]. The information environment this window is collectively building one argument — that American power crested and broke — and it is assembling it from the adversary's own mouth.

This window is a near-textbook migration study. A single claim — Trump paused escalation over interceptor depletion — originated in Western outlets (*Axios*, *NYT*) this observatory sees only through reflection, then propagated across every ecosystem with framing fingerprints intact. *Guancha* rendered it '防空弹快打光了' (air-defense missiles nearly exhausted) [WEB-86021], validating a US-overstretch thesis; *AbuAliExpress* mirrored the *NYT* line straight [TG-528042]; Iranian state converted it to 'Trump came up short' [TG-527880]; *Al Manar* and *Almasirah* folded it into 'Iranian strikes forced US to halt' [WEB-... TG-528624]. Same fact, four incompatible causal stories, each ecosystem's prior fully preserved. The counter-move is equally visible: the White House denial ('all options on the table') is carried mainly by *Radio Farda* and *BBC Persian* [TG-528367, TG-528615] — the Persian-language Western-funded layer — and largely *absent* from the resistance channels, a strategic silence that lets the 'US retreat' frame stand unchallenged in that ecosystem. Two amplification anomalies worth flagging: first, the coordinated Russian milblog uptake of the Caspian strike [TG-528447, TG-528193], velocity indicating narrative investment. Second, an OSINT source breaking character — *Geopolitics Watch* via *CIG* [TG-528574] correcting its own ecosystem's false Bandar Abbas explosion reports, a rare instance of self-correction inside the alarm-amplification machine. The IRGC casualty numbers [TG-527871, TG-527654] travel only within the resistance-Russian corridor — a closed loop that never bridges to the Gulf or Chinese ecosystems, which is itself the story.

The dominant information behavior this window is the manufacture and contestation of the battle-damage record. Iran flooded the zone with satellite imagery: *mehrnews* [TG-525942], *cig_telegram* [TG-525955], and *milinfolive* [TG-527029] carry Iranian-released images of the King Faisal (Jordan) ammunition depot and the Amazon AWS data center in Bahrain. Crucially, the propagation reveals its own limits — *milinfolive* [TG-527029], a Russian milblog nominally aligned, editorializes that 'the damage does not look substantial,' and *Al-Manar* [WEB-85848] runs a piece conceding satellite images show Iran's 'rapid recovery' challenging any 'decisive victory.' When your own amplifiers hedge, the imagery campaign is doing perception-management, not documentation. A textbook migration chain: the 'US requested a ceasefire' claim originates with *Middle East Spectator* [TG-526317], is re-forwarded verbatim by *cig_telegram* [], picked up by *Axios* (reflected via *ajanews* TG-527100 and *TASS* TG-527191), and lands in Persian outlets [*bbcpersian* TG-527593]. No US primary source in our corpus confirms it — yet within hours it functions as ambient fact across three ecosystems. This is how a single aggregator sets the regional agenda. Two strategic silences. First, the Pentagon's: *Tehran Times* [WEB-85869] and *TASS* citing CNN [TG-527371] report the DoD website shows disputed casualty figures and Democratic senators wrote to Hegseth — a US information vacuum the resistance axis rushes to fill with '200 dead' [TG-527284]. Second, the coordinated messaging around Trump's ambiguity: *ajanews* [TG-526221] and *alhadath* [TG-527483] both run 'cautious calm… awaiting Trump's decision,' while the same outlets carry his '100% or war' line [TG-527454] — Gulf media holding two contradictory frames in suspension, which is itself a signal of genuine uncertainty rather than spin. And note *IRGC*'s [TG-527472] explicit threat to make Britain 'a legitimate target' over B-1 basing — a rhetorical escalation aimed squarely at fracturing the coalition's information cohesion.

This window offers a near-perfect specimen of narrative velocity, and its name is Middle East Spectator. Watch the sequence: MES posts 'Trump announces he will use Iran's frozen funds' [TG-521279], CIG forwards it [TG-521281], Fars carries it [TG-521325], Araqchi elevates it to a sovereignty principle [TG-522003], and Xinhua neutralizes it into wire copy [WEB-85171, WEB-85232]. A single Truth Social post — which we only ever see reflected, never directly — completes the migration from Western-social to Iranian-state to Chinese-official in under six hours. The observatory should be explicit: we are watching the claim travel, not verifying the underlying post. The self-promotional artifact worth noting is MES advertising that it ran '32,000+ posts, 3 years' through 'TeleBrain synthesis' [TG-521395]. An OSINT aggregator is now productizing its own archive as an AI-queryable knowledge base — the ecosystem is beginning to metabolize itself. That is a genuinely new information-behavior datapoint about how these channels see their function. On reflected Western media: our corpus sees the New York Post's 'frightening missile accuracy' framing only through MES's mocking repost [TG-521278]; Ben Shapiro's willingness to 'see American lives sacrificed' only through CIG [TG-521198]; the Pentagon quietly cutting its death toll from 18 to 14 only through ISNA citing NYT [TG-522128]. Each is a mirror, and each should be flagged as such. The framing divergence that hardened this window is Trump-Netanyahu. The WSJ 'disappointment' story is amplified enthusiastically by Russian (TASS/Solovyov [TG-521803, TG-522216]) and Iranian-adjacent (Kashmir Observer 'war enters 5th month' [WEB-85351]) ecosystems precisely because a fracture in the adversary coalition serves both. Nobody in the pro-strike ecosystem touches it. The strategic silence is the evidence.