UNCLASSIFIED // OSINT-DERIVED // FOUO
CRISISBRIEF
OSINT BRIEFING TERMINAL

← All briefings

Monthly intelligence briefing · November 1, 2026 · TLP:CLEAR

Hormuz traffic remains about 70% below the reported pre-conflict level as US-Iran strike risk stays near even

BOTTOM LINE

The broader US-Iran confrontation is very likely to remain active through 30 January 2027, with high confidence, but a renewed US or joint US-Israeli strike by 1 December remains a roughly even chance, with moderate confidence. Hormuz is likely to remain severely constrained through 30 January, although the prior seven-day commodity-vessel threshold cannot be formally retested because current reporting counts total vessel movements rather than the same vessel class.

// TEARLINE // TLP:CLEAR // RELEASABLE SUMMARY

The broader US-Iran confrontation is very likely to remain active through 30 January 2027, but a renewed US or joint US-Israeli strike by 1 December remains a roughly even chance. Strait of Hormuz traffic was reported at about 70% below the pre-conflict level, and two commercial-vessel incidents were reported on 29-30 October, but the attacker and the full extent of the disruption remain unresolved. Russia is very likely to continue attacks on Ukrainian infrastructure, Houthi/Ansar Allah is likely to keep Red Sea shipping exposed, Sudan's humanitarian deterioration is very likely to continue, and China Coast Guard pressure on Philippine vessels is likely to recur without establishing an imminent armed clash.

Bottom Line

The broader US-Iran confrontation is very likely to remain active through 30 January 2027, 80-95%, with high confidence. A renewed US or joint US-Israeli strike by 1 December is a roughly even chance, 40-50%, with moderate confidence. The two judgments describe different events: the first includes military signalling, maritime restrictions, hostile incidents and coercive diplomacy; the second requires a new strike campaign.

Hormuz is likely to remain severely constrained through 30 January, 55-75%, with moderate confidence. UK Maritime Trade Operations reported 277 total vessel movements in the seven days ending 28 October, about 70% below the reported pre-conflict level. This does not replicate the prior briefing's metric of fewer than 14 visible commodity-vessel transits averaged over seven days. The same prior restriction condition therefore remains unconfirmed rather than formally met. The wider evidence still supports severe constraint because traffic is well below the reported baseline and commercial-vessel incidents occurred on 29 and 30 October.

Russia is very likely to continue attacks on Ukrainian infrastructure, Houthi/Ansar Allah is likely to keep Bab el-Mandab and Saudi-linked shipping exposed, Sudan's humanitarian conditions are very likely to worsen, and China Coast Guard pressure around Philippine outposts is likely to recur. These are separate theatre assessments. The reporting does not demonstrate a common coordinating driver.

Key Developments

  • UKMTO reported 155 inbound and 122 outbound vessel movements through Hormuz in the seven days ending 28 October. The total of 277 movements is about 70% below the reported pre-conflict level, but the count includes all reported vessel movements rather than visible commodity vessels only.
  • UKMTO reported the Louise 1 incident near Khasab on 29 October. Maritime security reporting described two explosive devices attached by a small craft, while UKMTO's initial account referred to an unidentified projectile. The incident is very likely to have occurred, with high confidence in occurrence and low confidence in attribution.
  • The Omani Navy reported evacuating 25 crew from the Riti on 30 October after the tanker was targeted and caught fire. The report is credible official information, but the precise mechanism and attacker remain unresolved.
  • Mojtaba Khamenei reportedly ordered an updated target list and an immediate response without geographic limits on 31 October. This is a leadership signal and a possible intent indicator. It does not establish an attack order.
  • Qatar- and Oman-mediated contacts with Tehran continued while reported Iranian conditions for a two-day Hormuz reopening remained unacceptable or unaccepted by Washington. No written agreement or verifiable reopening timetable is reported.
  • The Ukrainian General Staff reported 189 combat engagements on 28 October. A Russian drone strike killed at least 14 people at Dnipro railway station on 29 October. Ukrainian claims of gains near Kupiansk and Lyman remain disputed and unverified independently.
  • JMIC reported 58 commercial transits through Bab el-Mandab between 22 and 24 October against a historical baseline of about 61 per day. Alphaliner reported 24 of 46 direct Asia-Europe services using the Red Sea. The figures are not directly comparable, but both establish continuing commercial passage.
  • Reporting described attacks on Sudanese power and fuel infrastructure across Sennar, Gedaref, Gezira, White Nile, Khartoum, Red Sea, River Nile and North Kordofan states. Nyala Teaching Hospital received 36 bodies and treated more than 150 injured people after the 26 October market strike. Attribution and the final toll remain disputed.
  • The PLA announced a GJ-21 launch and recovery from the Type 076 amphibious assault ship Sichuan. The announcement is not independently verified by the available satellite imagery. The PLA Southern Theater Command and China Coast Guard separately reported patrol activity around Scarborough Shoal.

Analysis

Definitions and method

For this briefing, an active US-Iran confrontation means continuing hostile military signalling, maritime restriction, attacks or attempted attacks involving US, Iranian or associated forces, or active coercive diplomacy linked to those activities. A renewed strike means a new US or Israeli kinetic attack on Iranian territory or Iranian military assets after the 1 November baseline. A sustained strike-retaliation cycle means repeated reciprocal attacks by US or Israeli forces and Iranian forces within a 30-day period.

Severe Hormuz constraint retains the prior operational concept where possible: fewer than 14 visible commodity-vessel transits averaged over seven days, or continued avoidance by a named major carrier. Current reporting does not provide the same seven-day commodity-vessel series or a named major carrier's Hormuz avoidance. Total vessel movements, tanker loading, carrier services and deployed capacity are supplementary measures and are not substituted for the prior threshold. A commercial closure would require verified cessation of commercial passage, not an official claim of closure or reduced traffic alone. A selective reopening means a verifiable increase in named commercial traffic under an agreed or monitored arrangement without a wider US-Iran settlement.

Source quality and independence

The strongest evidence for Hormuz traffic comes from UKMTO's maritime reporting and vessel-related information. Several media and trade outlets repeat UKMTO's account, but those repetitions represent one primary reporting stream rather than independent confirmation. The Omani Navy provides a separate official account of the Riti evacuation, although it is a party to the regional security environment. Iranian statements about mine strikes and US Central Command statements about route clearance are official claims from opposing parties and should not be treated as independent corroboration.

JMIC and Alphaliner provide useful commercial traffic observations, but their periods, geographic boundaries and counting methods differ. The JMIC count of 58 transits over three days cannot be compared directly with UKMTO's 277 total vessel movements over seven days or the prior commodity-vessel threshold. The PLA's GJ-21 report is official Chinese military reporting supported only by indirect satellite evidence that Sichuan left its berth. Confidence in the ship movement is higher than confidence in the flight itself.

For Ukraine, the Ukrainian General Staff and Russian Ministry of Defence provide useful indicators of operational tempo but are belligerent reporting. The Dnipro casualty report has stronger support from Ukrainian authorities and major media, while village-level territorial claims remain contested. In Sudan, MSF's hospital count provides a credible minimum for the Nyala strike, but responsibility is disputed and several outlets repeat party claims. The supplied Sahel, Ethiopia-Eritrea and Nepal material relies heavily on undated or low-reliability social-media reporting. Those reports do not support high-confidence judgments.

Continuity with the 1 October briefing

Prior judgmentCurrent assessmentChangeEvidenceConfidence
US-Iran confrontation would remain active through 31 DecemberThe confrontation is very likely to remain active through 30 January 2027Extended by one month; direction unchangedMojtaba Khamenei's 31 October directive, continued maritime incidents and active mediationHigh
Hormuz would remain operationally restricted, defined by fewer than 14 visible commodity vessels on a seven-day average or continued major-carrier avoidanceSevere constraint remains likely, but the prior threshold is not formally testable from current dataMetric continuity unresolved, not invalidatedUKMTO reported 277 total movements in seven days, about 70% below the reported pre-conflict level; no matching commodity-vessel series or named carrier-avoidance record is suppliedModerate
Russian long-range attacks would continueRussian long-range attacks and ground combat are very likely to continue through 30 JanuaryConsistentDnipro railway-station strike, Ukrainian General Staff engagement reports and continuing infrastructure targetingHigh for persistence, moderate for individual claims
JNIM would retain the ability to attack the Kayes-Bamako corridorJNIM is likely to retain that ability, but a new corridor-wide offensive is not establishedConsistent, with lower confidence in recent activityNo independently verified new attack in the latest window; previous reporting supports capabilityLow to moderate
Houthi attacks would keep Bab el-Mandab and Saudi-linked shipping exposedHouthi/Ansar Allah is likely to retain that capability and exposure is likely to continueConsistentJMIC threat assessment, continued commercial passage and Houthi missile and drone claimsHigh for capability, moderate for tempo
Sudanese combat and humanitarian deterioration would continueFurther infrastructure disruption and humanitarian deterioration are very likelyConsistent, with more evidence of service disruptionPower-station attacks, Nyala hospital count, El Fasher displacement and food insecurity reportingHigh for humanitarian direction, moderate for attribution
China Coast Guard pressure would recur around Philippine outpostsRecurrence is likely; an armed clash remains very unlikelyMore evidence of enforcement training and Scarborough patrols, but no change to the attack estimatePLA Southern Theater Command and China Coast Guard statements, CCTV-based drill accountModerate for recurrence, low for intent

Strategic assessment

The immediate US-Iran problem is a bargaining contest in which maritime pressure and military preparation are reinforcing one another. UKMTO reporting establishes reduced traffic and the Louise 1 incident. Iran and US Central Command provide conflicting explanations for mine activity. The analytic inference is that commercial risk is elevated, not that Iran has been proven responsible for every incident.

US and Israeli military planning is a stronger indicator of capability and preparation than of intent. Additional aircraft, carrier movements or tanker support would show that an operation is logistically feasible. A presidential order, confirmed sortie generation or a published diplomatic evacuation advisory would provide stronger evidence of intent. The distinction matters because the supplied reporting contains planning claims but no authenticated launch decision.

Iran's 31 October directive is similarly an intent signal with an execution limit. It indicates that the Iranian leadership wants commanders prepared to respond across a wide geography. It does not show that an attack has been ordered. The leading alternative is deterrent signalling designed to improve Tehran's bargaining position while mediators remain active.

The market effect is visible but uneven. Trade reporting placed recent Middle East-to-China tanker earnings at about US$1.35 million per day, compared with about US$218,000 before the conflict. Those figures are commercial estimates and are not a complete market index. Reports placed Brent above US$115 on 30 October, while other supplied figures use different instruments and observation times. A prolonged disruption would likely increase competition for tanker capacity, alternative routes, crude cargoes, LNG cargoes and fertiliser supply. Saudi Aramco, QatarEnergy, Asian refiners, European energy buyers and shipping companies have different exposures because Gulf exports, tanker routes and cargo classes do not all use the same maritime corridors.

The Red Sea situation differs from Hormuz. JMIC reported continuing passage through Bab el-Mandab, and Alphaliner reported substantial Red Sea use by Asia-Europe services. Those observations weaken claims of a commercial closure. They do not demonstrate safety. Houthi/Ansar Allah's reported missile and drone capability and JMIC's substantial threat rating support a forecast of continued exposure. The leading alternative is commercial normalisation through selective routing while the military threat remains unresolved.

The Ukraine assessment remains attritional rather than decisive. The Russian Armed Forces are very likely to continue long-range attacks on electricity, rail, gas and civilian infrastructure. Ukrainian forces are likely to continue local counterattacks and strikes against Russian refineries, airfields and logistics. The reporting on Kupiansk and Lyman supports localised activity but not a broad change in territorial control. A local Kherson humanitarian pause is not evidence of a front-wide ceasefire.

Sudan's reported RSF defections are consistent with pressure on command cohesion, but several announced defections do not establish systemic degradation. The alternative is localised opportunism by commanders seeking protection, resources or improved bargaining positions. Evidence that would distinguish the hypotheses includes intact units changing sides with vehicles and weapons, repeated defections across separate fronts and corresponding RSF losses of territory or logistics. Humanitarian deterioration is a higher-confidence judgment than battlefield attribution.

China's GJ-21 report and coastguard activity should be separated. The GJ-21 announcement concerns shipboard aviation development and does not establish an operational Taiwan mission. The Scarborough patrol announcement and reported drills near Second Thomas and Sabina Shoals concern maritime enforcement. The leading alternative is routine enforcement activity amplified by public messaging rather than a decision to initiate an armed confrontation. Repeated obstruction, ramming, boarding or detention would discriminate in favour of increased coercion.

Secondary cases remain lower-priority watch items. Venezuela's transition has no reported election date and remains institutionally unsettled. Bolivia has an elevated official warning for renewed blockades, but current nationwide mobilisation is unverified. European protests are nationally organised rather than a verified continental general strike. Ethiopia-Eritrea war claims, Nepal's reported protest casualties and reports involving Gaza, Lebanon and Jordan require continued monitoring, but the supplied material does not establish a shared driver or a comparable escalation trajectory.

Stakeholder implications

  • US Central Command and the White House face a distinction between Iranian capability signalling and an authorised strike. The decision-relevant indicators are a presidential order, confirmed sortie generation and attacks on US personnel or named commercial vessels. Carrier movements alone would not establish authorisation.
  • Saudi Aramco, QatarEnergy, Gulf exporters and Asian refiners face exposure to delayed or rerouted tanker movements. The most relevant measures are the seven-day Hormuz commodity-vessel average, named carrier route decisions, crude-loading volumes at terminals on both sides of Hormuz and tanker freight rates.
  • MSC, Zim and other carriers face a route-risk problem rather than a verified closure. Continued Red Sea passage demonstrates commercial access, not normal operating conditions. A named vessel hit, a seven-day decline in transits or a major-carrier Cape diversion would materially change the exposure assessment.
  • The World Food Programme, medical organisations and hospitals in Taiz face a concrete warning if fuel deliveries remain interrupted, the reported 12 hospitals lose generation capacity or the number of inaccessible beneficiaries rises above the reported 600,000 in Taiz. The access figures remain humanitarian reporting and have not been independently reconciled with Houthi denials.
  • US and European military planners face separate warning problems in Ukraine, Sudan and the western Pacific. For Ukraine, consecutive nights of attacks on named energy and rail nodes would indicate continued infrastructure pressure. For Sudan, intact RSF formations changing sides would be more informative than individual commander defections. For the Philippines and US Indo-Pacific Command, detention, ramming or repeated water-cannon use would indicate a sharper China Coast Guard posture.
  • Fertiliser importers and energy analysts face exposure to Gulf route disruption. The Persian Gulf region's reported share of global urea exports and internationally traded fertilisers means that prolonged tanker disruption would likely affect cargo timing and freight costs, although the supplied reporting does not quantify a current supply shortfall.

Indicators & Warnings

  • Hormuz commodity-vessel traffic, consequence and de-escalation indicator: AIS and maritime reporting should produce the same seven-day average used in the prior briefing. Fewer than 14 visible commodity-vessel transits per day, or continued avoidance by a named major carrier, would meet the prior operational-restriction definition. A seven-day average at or above 14 combined with renewed passage by a named major carrier would support easing. Time horizon: 7-21 days.
  • Hormuz attack execution, execution indicator: UKMTO reports, vessel logs, satellite imagery and insurer notices should be checked for a second independently corroborated commercial-vessel attack within 14 days, confirmed mine-laying or a fire with an established cause. This would confirm maritime coercion is being executed, but would not alone establish Iranian responsibility. No new incident for 14 days alongside rising commodity-vessel traffic would weaken the severe-constraint estimate. Time horizon: 1-14 days.
  • US and Israeli strike preparation, capability and intent indicator: Additional aircraft at Ovda, Nevatim, Al Udeid, Al Dhafra or named carrier decks would indicate logistical preparation, not authorisation. A public presidential order, authenticated Pentagon or White House statement, confirmed sortie generation or a published diplomatic evacuation advisory would provide stronger evidence of intent. A formally scheduled Qatar-mediated meeting with agreed terms would weaken the strike estimate. Time horizon: 1-30 days.
  • Iranian retaliation, execution indicator: US Central Command, Israeli authorities, commercial operators and independent imagery should be checked for a verified IRGC missile or drone launch against a US base, Israeli territory, Gulf infrastructure or a named commercial vessel. Such an event would confirm execution of the retaliation threat, but not necessarily a sustained campaign. Continued rhetoric without launches through 30 November would support the bounded-confrontation scenario. Time horizon: 1-30 days.
  • Bab el-Mandab access, consequence indicator: JMIC, AIS and carrier schedules should be used to track a seven-day commercial-vessel average and named carrier decisions. A verified hit on a named commercial vessel, a sustained decline from the late-October count or a major-carrier diversion around the Cape of Good Hope would indicate worsening disruption. Passage by more than 20 commercial vessels per day would weaken claims of an effective blockade, although that threshold is a monitoring benchmark rather than a historical baseline. Time horizon: 7-30 days.
  • Russian strike pressure, execution and consequence indicator: Ukrainian authorities, commercial satellite imagery and independent casualty reporting should be checked for three or more consecutive nights with attacks on named substations, thermal plants, gas facilities or rail nodes. This would confirm persistence of infrastructure pressure, not prove that every reported target was hit. Verified delivery of Patriot interceptors from existing stockpiles would weaken the assessment of an acute near-term interceptor constraint. Time horizon: 14-60 days.
  • Sudan RSF cohesion, intent and capability indicator: Independent reporting should establish whether further RSF defections involve intact formations, vehicles and weapons rather than individual commanders. RSF entry into El Obeid, repeated attacks on power or fuel infrastructure and a sequence of defections across separate fronts would support broadening degradation. Isolated defections without unit movement would support the localised-opportunism alternative. Time horizon: 14-60 days.
  • China Coast Guard enforcement, execution indicator: Philippine Coast Guard logs, ship video, AIS and satellite imagery should be checked for repeated water-cannon use, ramming, boarding, detention of Philippine personnel or an exclusion zone lasting at least seven days around Second Thomas or Sabina Shoals. These events would indicate increased coercive execution, not necessarily PLA intent to initiate war. Three consecutive unobstructed Philippine resupply missions would support the routine-enforcement alternative. Time horizon: 14-90 days.
  • Sichuan and GJ-21 integration, capability indicator: Satellite imagery, deck activity and PLA announcements should be checked for at least three additional launch-and-recovery events from Sichuan, sustained deck cycles or deployment with an amphibious task group. Repeated sorties would support a developing shipboard capability. A single announcement without imagery would not establish operational readiness or a Taiwan-directed mission. Time horizon: 30-90 days.
  • JNIM pressure on the Kayes-Bamako corridor, execution and consequence indicator: Malian security reporting, tanker schedules and independent local reporting should be checked for a named JNIM attack on escorted tankers or FAMa and Africa Corps units, convoy delays exceeding seven days or a measurable fall in fuel deliveries into Bamako. Continued escorted tanker arrivals without an independently verified attack would support intermittent harassment rather than sustained interdiction. Time horizon: 30-90 days.

Alternatives

US-Iran outcome distribution

The following scenarios are mutually exclusive and collectively exhaustive for the period from 1 November 2026 to 30 January 2027:

  1. No renewed US or joint US-Israeli strike and no selective Hormuz reopening, 40%. Mediation continues, Hormuz remains severely constrained and selected commercial passage persists. This is the largest single outcome because no authenticated strike order or written reopening agreement is reported. Confidence: moderate.
  2. Short-lived US or joint US-Israeli strike between 2 and 30 November without a sustained strike-retaliation cycle by 30 January, 30%. A brief strike is followed by limited Iranian response or no repeated reciprocal attacks. Reported planning and Iranian preparation support this path, while active mediation and the absence of an authenticated order limit its probability. Confidence: moderate.
  3. Sustained US-Iran strike-retaliation cycle by 30 January, 15%. Repeated US or Israeli strikes and repeated Iranian attacks occur against military assets, Gulf infrastructure or shipping. This requires execution indicators not present in the current reporting. Confidence: low to moderate.
  4. Selective, verifiable reopening of Hormuz before 30 January without a renewed US or joint US-Israeli strike, 15%. Tehran and Washington accept a monitored sequence covering maritime access, sanctions or asset relief, nuclear commitments and verification. Araghchi's reported proposal and continued mediation support the possibility, but conflicting terms and no public agreement keep the probability low. Confidence: low to moderate.

Theatre alternative hypotheses

  • Hormuz: The leading alternative to continuing severe constraint is selective commercial normalisation without a political settlement. Rising seven-day commodity-vessel traffic and passage by a named major carrier would support this hypothesis. Continued attacks or carrier avoidance would discredit it.
  • Red Sea: The leading alternative to worsening disruption is commercial normalisation through selective carrier routing while the Houthi military threat persists. Stable or rising JMIC traffic would support it; a named vessel hit followed by a major-carrier Cape diversion would discredit it.
  • Sudan: The leading alternative to broad RSF degradation is localised commander opportunism. Intact formations changing sides across more than one front would discredit that hypothesis; isolated individual defections without territorial loss would support it.
  • South China Sea: The leading alternative to increased coercion is routine China Coast Guard enforcement amplified by public messaging. Three unobstructed Philippine resupply missions would support it; detention, ramming or a sustained exclusion zone would discredit it.
  • Ukraine: The leading alternative to a continuing attritional cycle is a temporary local humanitarian pause around Oleshky expanding into a wider operational pause. Sustained front-wide reductions in engagements and strikes would support it; continued attacks outside Kherson would discredit it.

Outlook

From 1 to 15 November, the US-Iran confrontation is very likely to remain active, 80-95%, with high confidence. Hormuz is likely to remain severely constrained, 55-75%, with moderate confidence. A renewed US or joint US-Israeli strike is a roughly even chance by 1 December, 40-50%, with moderate confidence. The key discriminators are not general military presence, but an authenticated strike order, confirmed sortie generation, a published evacuation advisory, an Iranian launch or a verifiable maritime attack.

From 1 November to 30 January, Russian long-range attacks on Ukrainian infrastructure are very likely, 80-95%, with high confidence. Houthi/Ansar Allah is likely to retain the ability to threaten Bab el-Mandab and Saudi-linked shipping, 70-90%, with high confidence in capability. Further Sudanese service disruption and humanitarian deterioration are very likely, 80-95%, with high confidence in the humanitarian direction. JNIM is likely to retain the ability to attack the Kayes-Bamako corridor, 55-75%, with low to moderate confidence. China Coast Guard pressure near Philippine outposts is likely to recur, 55-70%, with moderate confidence, while a deliberate armed clash remains very unlikely, below 10%, with low confidence.

A selective, verifiable Hormuz reopening without a renewed US or joint US-Israeli strike has a 15% probability by 30 January, with low to moderate confidence. A normal return of crude and LNG traffic is very unlikely before that date, below 10%, with moderate confidence. The practical implications are specific: Gulf exporters face uncertain tanker access, Asian refiners face cargo-timing and freight exposure, European buyers face competition for replacement energy, humanitarian agencies face fuel and access risks in Taiz and Sudan, and Manila and US Indo-Pacific Command face warning time compression if coastguard enforcement becomes physical contact.

UNCLASSIFIED // OSINT-DERIVED // FOUO