Russia attacks NATO member before December 2026

I estimate a 19% probability that the event resolves yes before December 1, 2026.

Base rate: A deliberate Russian conventional attack on NATO territory is historically very rare because it risks a direct war with the Alliance. The base rate for a major attack is therefore very low, likely in the low single digits. However, the question includes small, deniable drone or missile attacks, which are substantially more plausible than an invasion.

Key factors increasing the probability:

• The Lithuanian incident involved an explosive-carrying drone entering NATO airspace from the Belarusian direction. Even though attribution and intent remain unresolved, it demonstrates an operational pathway for a limited attack.
• Poland’s warning that Russia may prepare attacks disguised as accidents is unusually specific and closely matches the forecast scenario. It is meaningful evidence, though not conclusive because the underlying intelligence is unpublished and Polish leaders have incentives to emphasize the threat.
• Russian strikes and military activity have moved increasingly close to NATO borders, increasing the risk of deliberate targeting, accidental escalation, or a deniable probe.
• Belarus provides Russia with a geographically convenient launch or transit platform and additional attribution ambiguity.
• A small attack against a logistics node, border facility, military site, vessel, or transport link could be conducted without the extensive preparation required for a ground invasion.

Key factors reducing the probability:

• Russia would face very high military and political costs if responsibility were established, especially while still engaged in Ukraine.
• NATO’s air-policing, surveillance, and air-defense measures make a deliberate attack more likely to be intercepted and potentially deter Russia from attempting one.
• The most important recent incident may ultimately prove accidental, criminal, Ukrainian, or otherwise unrelated to a Russian decision.
• The resolution standard is demanding: it requires not merely a kinetic incident, but credible evidence of Russian or Russian-directed responsibility, deliberateness, and an intent that includes testing NATO’s response. Many plausible incidents would fail at least one of those criteria.
• The remaining time window is limited, roughly seven weeks as of the latest dated forecast history.

A rough decomposition is: about a 30% chance of a relevant kinetic incident or armed incursion during the remaining period; about a 70% chance that such an incident would be attributable to Russia or a Russian-directed Belarusian proxy; and about a 90% chance that, if attributable, the evidence would support deliberate intent and the stated resolution standard. This yields approximately 19%, with substantial uncertainty around each component.

The most likely qualifying pathway is a limited drone or missile incident near Poland or the Baltic states, potentially routed through Belarus and publicly described by Moscow as accidental. A major tank attack or sustained territorial incursion remains far less likely, probably around 2–4%.

I would not use the 22% estimate in the research document as the central forecast because it appears to rely heavily on the Lithuanian incident and the Polish warning despite unresolved attribution. The recent forecast history, which has settled around 18–20%, is also consistent with a modest downward adjustment from the earlier 22% assessment. The main way this estimate could be too low is if the Lithuanian drone was subsequently proven to be a deliberate Russian or Belarusian operation, or if multiple similar incidents occur. It could be too high if the Lithuanian incident is clearly attributed to a non-Russian actor and NATO deterrence prevents further escalation.

I estimate a 21% probability that the event will occur by November 30, 2026.

Prior: The earlier forecast trajectory rose from 8% on September 1 to 14% by mid-September and then stabilized around 21–22% by late September/early October. That trajectory is a reasonable prior for the remaining period: the risk is materially above baseline, but still substantially less likely than not.

Positive evidence: The armed drone entering Lithuania from the Belarusian direction, carrying an explosive device, is a strong warning indicator. It demonstrates both operational access and the feasibility of a deniable kinetic incident. Poland’s warning that Russia may prepare drone or missile attacks disguised as accidents is particularly relevant to the forecast scenario. Russian strikes near Poland, repeated Baltic confrontations, and increased NATO air-defense activity further raise the opportunity for either deliberate probing or escalation. Collectively, these factors support a meaningful upward likelihood adjustment.

Downward adjustments: The Lithuanian incident has not been established as a deliberate Russian or Belarusian attack and may ultimately prove accidental, Ukrainian, criminal, or otherwise unattributed. Similarly, the Polish warning is important but could reflect a broad intelligence assessment or threat signaling rather than a specific imminent operation. NATO’s enhanced surveillance and air defenses increase the chance that a planned attack is intercepted and deter Russia from crossing the threshold. A clearly attributable attack would also impose major escalation costs on Moscow.

Resolution-definition penalty: The event requires more than a drone incursion, debris impact, or accidental spillover. Responsibility, deliberate targeting, and an intention to test NATO would need to be established. This makes the forecast probability lower than the probability of some kinetic incident occurring near or inside NATO airspace.

Time remaining is also important: as of the latest listed forecast on October 10, roughly seven weeks remain. That is enough time for a limited drone or missile incident, but not enough to justify a major increase absent new evidence. I therefore hold the estimate near the recent 21–22% level rather than extrapolating the earlier upward trend. The most likely qualifying pathway remains a small, deniable Russian or Belarus-linked drone or missile attack against a border, logistics, military, or transport target in Poland or the Baltic states.

I estimate an 18% probability of a qualifying event before December 1, 2026. The risk is meaningfully above the historical baseline because Russian strikes are occurring close to NATO borders, an explosive-carrying drone entered Lithuania from the Belarusian direction, Poland has publicly warned of possible deliberately ambiguous Russian strikes, and the Baltic and eastern-flank operating environment is becoming more crowded and dangerous. A limited drone or missile incident remains operationally plausible within the remaining roughly seven weeks.

However, the resolution criteria are considerably narrower than merely having a dangerous incident. The attack must be attributable to Russia or a Russian-directed Belarusian proxy, be deliberate rather than accidental spillover, and support the interpretation that it was intended at least partly to test NATO’s Article 5 response. The Lithuanian drone has not yet been conclusively attributed or shown to have been deliberately targeted at NATO, while the Polish warning is important but could reflect a broad contingency assessment rather than evidence of an imminent operational plan. Russia also has strong incentives to preserve ambiguity and avoid a clearly attributable attack that could trigger a unified NATO response.

The most likely qualifying pathway is a small, deniable drone or missile attack on a border-area military, logistics, communications, or transport facility, especially in Poland or the Baltic states. A major territorial incursion is highly unlikely and contributes little to the overall estimate. The recent prediction history also suggests that the initial post-Lithuania upward revision has moderated, so I would place the probability somewhat below the research document’s 22% central estimate and near the recent 17–20% range.

Forecaster A (historical base rates): 14%. Deliberate kinetic attacks on NATO territory are rare because Russia faces enormous escalation costs, while prior airspace incursions and near misses have generally remained ambiguous or accidental. Forecaster B (current evidence): 24%. The armed explosive-carrying drone entering Lithuania from the Belarusian direction, Russian activity near Poland, and Poland’s warning about possible disguised Russian strikes materially raise the risk during the remaining period. Forecaster C (incentives and game theory): 20%. Russia could gain information about NATO cohesion from a limited, deniable strike, especially through Belarus, but it would need to believe ambiguity could prevent a unified response. NATO’s enhanced defenses and explicit warnings reduce the attractiveness of such a test. Forecaster D (quantitative reasoning): 19%. The recent estimate history has risen from roughly 12–14% to around 20%, but only about seven weeks remain until the resolution date. A 20% estimate is consistent with elevated but still minority risk, with most plausible incidents failing the strict requirements for deliberate attribution and Article 5 testing. Forecaster E (devil’s advocate): 15%. The Lithuanian incident may ultimately prove accidental, criminal, Ukrainian, or otherwise unattributable; the Polish warning may be precautionary or politically motivated; and Russia may prefer hybrid operations precisely to avoid crossing the kinetic threshold. Aggregating these views gives approximately 18–20%; I use 20% as the final probability. The most likely qualifying event would be a small, deniable drone or missile strike against a border-area facility in Poland or the Baltic states. A major invasion is far less likely, and many plausible drone or missile incidents would not qualify because deliberate Russian direction and intent to test NATO could not be established.

I estimate a 19% probability by November 30, 2026. The risk is materially above baseline because Russia is conducting frequent operations near NATO borders, Belarus provides a plausible deniable launch or transit route, Lithuania has already experienced an explosive-carrying drone incursion, and Polish officials have specifically warned of possible Russian strikes disguised as accidents. A limited drone or missile incident is operationally feasible and could occur without preparations for a major invasion.

However, the resolution criteria are unusually restrictive: the event must be kinetic, attributable to Russia or a clearly Russian-directed Belarusian proxy, more than accidental spillover, and supported by evidence that it was intended at least partly to test NATO. The Lithuanian incident and prior missile or drone incursions show that dangerous near misses are possible, but they also demonstrate how difficult it may be to establish intent and responsibility. Russia faces substantial escalation costs from a clearly attributable attack while already engaged in Ukraine, and NATO’s strengthened air defenses and deterrent messaging reduce the incentive for an overt strike.

The most likely qualifying scenario is a small, deniable drone or missile attack against a border, logistics, military, or communications target in Poland or the Baltic states. I therefore place the probability slightly below the research document’s 22% central estimate, while remaining consistent with the recent upward trend from the historical forecasts.

I estimate an 18% probability that the event, as narrowly defined, occurs before December 1, 2026.

1. Clarification: This is not simply the probability of a Russian weapon entering NATO airspace. The event requires a deliberate kinetic attack by Russia or a Russian-directed Belarusian proxy, with sufficient evidence of intentionality and at least some purpose of testing NATO’s Article 5 response. Accidental spillover, unattributed drone incursions, debris, and hybrid activity do not count.

2. Historical base rate: Since Russia’s full-scale invasion of Ukraine, there have been repeated airspace violations, near misses, border-area strikes, and dangerous military encounters involving NATO states, but no clearly established deliberate Russian kinetic attack on NATO territory. That gives the narrowly defined event a low historical base rate. The frequency of near misses raises the risk above its pre-2022 level, but does not by itself establish a high probability of deliberate escalation.

3. Factors increasing the probability:

• The armed drone incident in Lithuania, apparently entering from the Belarusian direction and carrying an explosive device, demonstrates both operational opportunity and the possibility of deniable attribution.
• Polish warnings about possible Russian drone or missile attacks disguised as accidents directly match the most plausible pathway in the forecast.
• Russian attacks near the Polish border, repeated scrambles, and dangerous Baltic encounters reduce the operational distance between the Ukraine war and NATO territory.
• Belarus offers Russia a geographically convenient and politically ambiguous launch or transit route.
• A small drone or missile attack would be much easier for Moscow to calibrate and deny than a tank incursion.

4. Factors reducing the probability:

• The Lithuanian incident remains unattributed and may ultimately prove accidental, criminal, Ukrainian, or otherwise unrelated to a Russian decision.
• A deliberate attack, even a limited one, could trigger NATO reinforcement, retaliation, sanctions, and a broader war while Russia is still heavily committed in Ukraine.
• NATO’s strengthened air defenses and surveillance make a successful or clearly attributable operation more difficult.
• Russia can achieve many coercive and probing objectives through hybrid measures, intimidation, and operations just below the kinetic threshold, which are excluded from this event.
• The requirement to establish an intention to test Article 5 makes resolution substantially harder than merely observing a hostile incident.

5. Recombination: The highest-probability pathway is a limited, deniable drone or missile incident affecting a military, logistics, border, or transport target in Poland or the Baltic states. I assign roughly a 20–25% chance to a deliberate Russian or Russian-directed kinetic incident of some kind over the remaining period, but reduce that to about 18% after accounting for the stricter attribution and intent requirements.

6. Calibration and uncertainty: This is modestly below the research document’s 22% central estimate because the remaining time window is short, no confirmed qualifying event has occurred, and the strongest evidence consists of warnings and near misses rather than proof of an operational Russian decision. A reasonable uncertainty range is approximately 12–27%.

7. Why this could be wrong: The probability would rise sharply if the Lithuanian drone were conclusively attributed to Russia or Belarus, if another armed drone entered NATO territory, or if Russia conducted a strike against a NATO logistics or military facility. Conversely, a clear non-Russian attribution, a ceasefire in Ukraine, or a sustained reduction in border incidents would push the probability materially lower.

Aggregate estimate: 20%.

Forecaster A — historical base rates: A deliberate kinetic attack on NATO territory by Russia or a proxy remains a rare, high-escalation event. Even during intense Russia-NATO tensions, most incidents remain accidental, ambiguous, or hybrid. The short remaining window through November 30 lowers the probability relative to the broader 2026 risk. Estimate: 14%.

Forecaster B — current evidence: The armed drone entering Lithuania from the Belarusian direction, the explosive payload, Russian attacks near the Polish border, and Poland’s warning about possible disguised Russian strikes all materially increase risk. However, the Lithuanian episode is still unattributed and no incident has clearly met the resolution criteria. Estimate: 24%.

Forecaster C — incentives and game theory: Russia has incentives to probe NATO cohesion through a limited, deniable operation, especially using drones or Belarusian territory. But a clearly deliberate attack could trigger an Article 5 crisis, strengthen NATO unity, and create major military costs for Russia. Those deterrent effects favor continued ambiguity and restraint. Estimate: 21%.

Forecaster D — quantitative reasoning: The latest supplied forecasts rose from roughly 12–13% in mid-September to 21% by October 7, indicating a meaningful deterioration in the assessed environment. But with approximately 54 days remaining and no confirmed qualifying event, a modest discount from the research document’s 22% central estimate is appropriate. Estimate: 19%.

Forecaster E — devil’s advocate: The research may overweight alarming public warnings and near misses. Russia is already heavily committed in Ukraine, NATO defenses have been reinforced, and most plausible drone or missile incidents would fail the difficult attribution-and-intent test or be classified as accidental spillover. Estimate: 13%.

The ensemble average is about 18%, but I adjust slightly upward to 20% because the forecast specifically allows a small, deniable strike through Belarus, a scenario that is operationally feasible and consistent with the reported warnings. The most likely qualifying event would be a limited drone or missile attack on a border-area logistics, military, or communications target, followed by Russian denial or claims of accident. A major invasion remains very unlikely; the principal risk is a small, ambiguous kinetic incident that investigators later attribute to Russia or a Russian-directed Belarusian proxy.

I estimate a 19% probability by November 30, 2026. The risk is meaningfully elevated because there have been repeated Russian military incidents near NATO territory, an explosive-carrying drone entered Lithuania from the Belarusian direction, Poland has publicly warned of possible Russian attacks disguised as accidents, and the most plausible scenario—a limited, deniable drone or missile strike—requires relatively little preparation.

However, the event definition is stringent. A qualifying incident requires not merely an airspace violation, accidental spillover, or debris impact, but evidence of deliberate Russian or Russian-directed action intended at least partly to test NATO. The Lithuanian incident remains unattributed and could ultimately prove accidental or unrelated to Russia. Russia also faces very high costs from a clearly attributable attack on NATO while still fighting in Ukraine, and strengthened NATO air defenses and deterrence reduce the likelihood of a deliberate decision to cross the threshold.

The remaining roughly two months provide enough opportunity for a small incident, but not enough to make it likely. I therefore keep the estimate near the recent 19% level rather than adopting the research document’s higher 22% central estimate. The most likely qualifying pathway is a small armed drone or missile attack on a border-area logistics, military, communications, or transport target in Poland or the Baltic states, possibly launched through or attributed to Belarus and initially portrayed as accidental.

I estimate a 21% probability that a qualifying Russian or Russian-directed kinetic attack on a NATO member occurs by November 30, 2026. Starting from the recent baseline of about 14% (the forecast level before the latest incidents), the remaining time window is short—roughly 7–8 weeks—so the prior probability should not be raised too aggressively. The principal upward update is the Lithuanian armed-drone incident: an explosive-carrying drone entered NATO airspace from the Belarusian direction and was intercepted. This is strong evidence that the operational pathway is feasible, but its likelihood ratio is limited because Russian or Belarusian control and deliberate intent remain unproven. I therefore treat it as a substantial but partial increase, roughly from 14% to the high teens. Poland’s warning that Russia may prepare deniable drone or missile strikes directly matches the forecast scenario and provides another upward update, though the underlying intelligence is unpublished and Polish officials have incentives to emphasize the threat. Russian strikes near the Polish border and heightened Baltic military activity add further support, but these signals are correlated with the same general escalation environment and should not be counted independently. Countervailing evidence keeps the estimate below 25%: Russia faces very high costs from an attributable attack, NATO defenses and surveillance have been strengthened, Russia remains heavily engaged in Ukraine, and no confirmed deliberate strike or clear large-scale attack preparation has been identified. The most likely qualifying event would be a small, deniable drone or missile attack against a border, logistics, military, or communications target, potentially routed through Belarus. A major invasion is much less likely—approximately 2–4%—but the forecast includes limited attacks, which raises the overall probability to about 21%. The unresolved Lithuanian incident could materially change the estimate: confirmed Russian or Belarusian deliberate responsibility would push the probability substantially higher, while attribution to a non-state or accidental cause would reduce it.

I estimate a 17% probability that the event will occur before December 1, 2026. The risk is materially above the normal base rate because the period has seen an explosive-carrying drone enter Lithuanian airspace from the Belarusian direction, repeated Russian operations near NATO borders, and a public Polish warning about possible Russian strikes disguised as accidents. These developments make a limited drone or missile incident in Poland or the Baltic states a plausible scenario.

However, the resolution criteria are demanding. The incident must be more than accidental spillover or an ambiguous airspace violation, and available evidence must support Russian or Russian-directed responsibility plus an intention to test NATO. The Lithuanian drone incident currently falls short of that standard, and the most likely future incidents near the border may likewise remain unattributable or classified as accidents. Russia also faces very high costs from an unmistakable attack, while NATO’s enhanced air defenses and deterrent messaging reduce the incentive for deliberate escalation.

With roughly two months remaining and no confirmed qualifying incident, I would place the probability somewhat below the research document’s September 20 central estimate of 22% and close to the latest historical forecast of 18%. A major sustained attack is far less likely; nearly all of the probability concerns a small, deniable drone or missile operation.

I estimate a 20% probability that the event, as narrowly defined, occurs by November 30, 2026. This is broadly consistent with the recent forecast history of 19–20% and slightly below the research document’s September 20 central estimate of 22%, because the remaining time window is now shorter and no confirmed qualifying attack has occurred.

The historical base rate for a deliberate Russian kinetic attack on NATO territory is very low. Russia has repeatedly conducted dangerous operations near NATO borders and has caused or risked accidental spillover, but it has generally avoided an unmistakable, attributable attack on a NATO member. The relevant base rate is therefore substantially below the probability of hybrid activity or accidental incursions.

The principal upward factors are: the armed explosive-carrying drone that entered Lithuania from the Belarusian direction; Poland’s warning that Russia could stage drone or missile attacks disguised as accidents; repeated Russian strikes near the Polish border; and the growing density of Russian-NATO military encounters in the Baltic and eastern flank. These developments make a limited, deniable drone or missile incident operationally plausible.

The most likely qualifying pathway is a small strike or attempted strike against a logistics site, border facility, military installation, communications node, or transport infrastructure in Poland or a Baltic state. A Belarus-linked operation is more plausible than a tank incursion because it could be conducted quickly, with less visible preparation and greater ambiguity over responsibility.

Several factors keep the probability well below 50%. A deliberate attack would risk direct confrontation with NATO while Russia remains heavily engaged in Ukraine. NATO’s surveillance, air policing, and counter-drone defenses increase the chance of interception and strengthen deterrence. Russia may also prefer continuing hybrid and ambiguous operations that impose costs without crossing the kinetic threshold. Most importantly, the Lithuanian incident remains unresolved: it may prove Russian or Belarusian, but it could also have been accidental, Ukrainian, criminal, or otherwise unrelated to a deliberate test of Article 5.

A rough factor assessment is: probability of a further serious kinetic incident near or inside NATO territory, about 25–30%; probability that such an incident is deliberate rather than accidental, about 60–70%; probability of sufficiently strong attribution to Russia or a Russian-directed Belarusian proxy, about 60–70%; and probability that the evidence supports the specific interpretation of an Article 5 test under the resolution criteria, about 65–75%. These overlapping conditions produce an overall estimate near 20%, after allowing for dependence among the factors.

The estimate could rise sharply if investigators attribute the Lithuanian drone to Russia or Belarus and establish deliberate targeting, or if another armed drone or missile strikes a NATO facility. It would fall if the Lithuanian incident is clearly attributed to a non-Russian actor, if Russia and Ukraine reach a durable ceasefire, or if the remainder of the period passes without further armed incursions.

The main reason this forecast could be wrong is that the scenario is highly sensitive to a single decision by Russian leadership. Moscow may either avoid the threshold entirely because of escalation risks or conduct a limited probe that is difficult to classify. In addition, the requirement to establish deliberate intent and an Article 5-testing purpose creates substantial resolution uncertainty even if a dangerous kinetic incident occurs. I therefore regard 20% as a moderate but clearly minority probability, not as an indication that an attack is the most likely outcome.

Overall estimate: 21%. This is modestly higher than the recent 20% forecast, reflecting the serious Lithuania/Belarus-linked drone incident and repeated Russian activity near NATO borders, but below the research document’s 22% central estimate because the resolution criteria require more than a kinetic incident: responsibility, deliberate intent, and an apparent effort to test Article 5 must be established.

Forecaster A — historical base rates: Direct Russian kinetic attacks on NATO territory have been extremely rare, despite many years of dangerous incidents, airspace violations, and near misses. Russia has generally avoided an unmistakable attack that could trigger a direct NATO-Russia conflict. This strongly limits the probability. However, the ongoing Ukraine war and increased operational density on NATO’s eastern flank raise the chance of an exceptional, limited incident compared with the pre-2022 baseline.

Forecaster B — current evidence: The strongest upward signals are the explosive-carrying drone entering Lithuania from the Belarusian direction, Poland’s warning that Russia may prepare deniable drone or missile attacks, and Russian strikes and military activity close to Poland and other NATO states. These developments make a small drone or missile incident plausible within the remaining period. Against that, the Lithuania event remains unattributed and may ultimately be accidental, Ukrainian, criminal, or otherwise unrelated to a Russian decision.

Forecaster C — incentives and game theory: Russia has incentives to probe NATO cohesion with a limited, deniable action, especially if it can exploit disagreement over attribution or whether an incident constitutes an armed attack. Belarus provides a useful proxy and launch platform. But the strategic downside is substantial: even a small deliberate attack could produce Article 4 or Article 5 consultations, additional NATO deployments, and direct escalation while Russia remains engaged in Ukraine. These incentives favor ambiguous pressure and hybrid activity more than a qualifying kinetic attack.

Forecaster D — quantitative reasoning: With roughly two months remaining, the event needs a relatively high short-term hazard rate to reach 20% or more. The recent near misses increase that hazard, but most comparable incidents do not satisfy all criteria. A rough decomposition is: approximately 25–30% chance of some dangerous armed incident involving NATO territory or assets, multiplied by roughly 60–70% that it is established as Russian/Belarusian, deliberate, and intended to test NATO, yielding an overall probability near 18–21%. Allowing for additional Baltic, maritime, and border-crossing scenarios supports a point estimate around 21%.

Forecaster E — devil’s advocate: The research may overweight public warnings and ambiguous incidents. Poland has strong incentives to emphasize the Russian threat, and officials’ statements do not prove an operational plan. Russia may deliberately avoid crossing the threshold precisely because NATO defenses and attribution capabilities have improved. Also, if a strike occurs, it may be classified as accidental spillover or an airspace violation rather than an intentional Article 5 test. These considerations argue against moving much above the low twenties.

The most likely qualifying pathway is a small, deniable drone or missile attack on a military, logistics, communications, or border facility in Poland or the Baltic states, potentially routed through Belarus. A major tank attack or sustained incursion is far less likely, probably only a few percent. The principal uncertainty is not whether dangerous incidents will occur, but whether any one of them will be conclusively attributed to Russia or a Russian-directed Belarusian proxy and judged deliberate enough to meet the unusually narrow resolution wording.

I estimate an 18% probability that the event resolves YES before December 1, 2026. This is broadly consistent with the research document’s 18–27% range, but I place the estimate toward its lower end because the remaining time is short and the resolution criteria are unusually demanding: the incident must be kinetic, attributable to Russia or a clearly Russian-directed Belarusian proxy, deliberate rather than accidental, and reasonably interpreted as testing NATO’s Article 5 commitment.

The main factors increasing the probability are the armed explosive-carrying drone that entered Lithuania from the Belarusian direction, Russia’s increasingly frequent operations close to NATO borders, the Polish warning about possible disguised Russian strikes, and the availability of small, deniable drone or missile operations that could be conducted without a large military buildup. The Lithuanian incident also creates some probability of a retrospective YES determination if subsequent forensic or intelligence evidence establishes Russian or Belarusian direction and deliberate targeting.

However, the strongest evidence remains circumstantial. The Lithuanian drone’s origin and intent are unresolved, and similar incidents can plausibly result from spillover, navigation failure, criminal activity, or an actor other than Russia. Russia faces very high costs from a clearly attributable attack on NATO, while NATO’s air defenses and rapid-response posture increase deterrence. A major invasion is extremely unlikely; the forecast largely depends on a narrow, ambiguous drone or missile incident.

Thus, the risk is materially above the normal baseline but still more likely to resolve NO than YES. My estimate assumes no major new escalation beyond the information provided through the latest listed assessment.

I estimate a 19% probability, modestly below the research document’s 22% central estimate because the forecast window is now shorter and the latest prediction history has stabilized around 19%. The risk is meaningfully elevated: Russia is operating close to NATO borders, an explosive-carrying drone entered Lithuania from the Belarusian direction, Poland has publicly warned of possible deliberately ambiguous Russian strikes, and the Baltic and Polish-border environments are operationally crowded. These factors create plausible pathways for a limited drone or missile attack against a NATO logistics, military, transport, or border facility.

However, the event definition is unusually narrow. A qualifying incident requires not merely a kinetic impact or airspace violation, but evidence of Russian or Russian-directed responsibility, deliberate targeting, and intent to test NATO’s Article 5 response. The Lithuanian incident remains unresolved and could ultimately be attributed to an accidental, criminal, Ukrainian, or otherwise non-qualifying cause. Russia also has strong incentives to preserve ambiguity and avoid a clearly attributable attack that could trigger a unified NATO response, while NATO’s enhanced air defenses and rapid reaction capabilities improve deterrence.

A small deniable drone or missile incident is substantially more likely than a major invasion, but even that scenario remains a minority outcome over the roughly two months remaining. I therefore place the probability at 19%, with most of the uncertainty concentrated in whether another border incident occurs and whether investigators can establish deliberate Russian or Belarusian direction.

Central estimate: 21%. I treat the latest listed forecast, 21% on October 4, as the effective baseline, while discounting the research document’s older 22% estimate slightly because no confirmed qualifying attack has occurred and the resolution window is shrinking.

Prior: A deliberate Russian or Russian-directed kinetic attack on NATO territory is intrinsically a low-frequency event because the escalation costs are very high, NATO defenses are stronger, and Russia remains heavily engaged in Ukraine. A reasonable pre-evidence prior for the remaining period would be roughly 10–15%.

Positive updates: The armed explosive-carrying drone that entered Lithuania from Belarus is strong evidence that a small kinetic incident can penetrate NATO territory and that attribution may remain ambiguous. Poland’s warning of possible Russian drone or missile strikes disguised as accidents is particularly relevant to the forecasted mechanism. Russian attacks near the Polish border, repeated Baltic military encounters, and the normalization of dangerous airspace incidents also modestly increase the likelihood. Collectively, these developments raise the odds by roughly 1.5–2 times relative to a low-risk baseline.

Negative updates: The Lithuanian incident remains unattributed and may have been accidental, criminal, Ukrainian, or unrelated to a deliberate Russian decision. No confirmed Russian attack or clear operational preparation has emerged. Russia would face major military and political costs if responsibility were established, while NATO’s enhanced surveillance and air defenses improve deterrence. These factors prevent a large upward revision.

Resolution uncertainty: The event definition is narrower than merely having a drone incursion or missile spillover. The incident must be deliberate, attributable to Russia or a Russian-directed Belarusian proxy, and sufficiently supported as an attempt to test NATO. A future limited drone or missile strike remains plausible, but the probability of a major territorial attack is only a few percent. With approximately two months remaining and no qualifying event yet confirmed, I retain a probability near 21%, with an approximate plausible range of 17–27%.

I interpret the event narrowly: before December 1, 2026, Russia or a clearly Russian-directed Belarusian proxy must conduct a deliberate kinetic attack against NATO territory, personnel, vessels, or military assets, with enough evidence of intent and responsibility to distinguish it from accidental spillover, debris, or an ambiguous airspace violation. Using the latest listed forecast of October 1, approximately two months remain.

Historical base rate: Direct, attributable Russian kinetic attacks on NATO members have been extremely rare because the escalation costs are exceptionally high. However, the ongoing war, repeated near-border incidents, Russian willingness to operate ambiguously, and Belarus’s geographic position raise the conditional risk above its peacetime baseline. The base rate for a major invasion remains only a few percent; the probability is materially higher for a small drone or missile incident.

Factors increasing risk include the armed drone entering Lithuania from the Belarusian direction, the reported explosive payload, Poland’s warning that Russia may prepare deniable strikes presented as accidents, Russian attacks near the Polish border, and increasingly risky Russian-NATO encounters in the Baltic. These developments make a limited probing operation operationally plausible. A small attack could be designed to create attribution disputes and test whether NATO responds with Article 4, Article 5, retaliation, or restraint.

Factors reducing risk include NATO’s heightened air-defense and surveillance posture, the rapid destruction of the Lithuanian drone, the severe military and political costs Russia would incur from a clearly attributable attack, Russia’s continuing commitments in Ukraine, and the fact that the key Lithuanian incident remains unresolved. The same ambiguity that could facilitate a Russian probe also makes it difficult for the event to satisfy the resolution criteria.

I estimate roughly a 16–18% chance of a deliberate limited drone or missile attack, about 2–3% for a more serious incursion, with some overlap between categories. Recombining these while avoiding double counting produces a central estimate of approximately 20%.

The main reason not to move higher is that the strongest evidence is indicative rather than conclusive: the Lithuanian drone may prove accidental, criminal, Ukrainian, or otherwise non-Russian, and public warnings may reflect broad contingency planning rather than an imminent operational decision. The main way this estimate could be wrong is a sudden Russian decision to exploit a crisis, or a Belarus-linked incident whose attribution becomes clear only after the fact. Conversely, a ceasefire, clear non-Russian attribution of the Lithuanian incident, or a prolonged absence of further armed incursions would push the probability downward.

Forecaster A (historical base rates): Russia has repeatedly operated near NATO borders, but deliberate kinetic attacks on NATO territory remain rare because the escalation costs are exceptionally high. The recent forecast history has risen from 8% to roughly 18%, suggesting elevated but still minority risk. A base-rate-oriented estimate is 17%.

Forecaster B (current evidence): The Lithuanian explosive-drone incident, Russian strikes near the Polish border, heightened Baltic military activity, and Poland’s warning about possible disguised Russian attacks all materially increase the risk. However, the Lithuanian incident remains unattributed and non-qualifying, while no confirmed Russian attack has yet occurred. Estimate: 23%.

Forecaster C (incentives and game theory): Russia has incentives to probe NATO cohesion with a small, deniable incident, especially through Belarus, while avoiding a major war. Yet Moscow also understands that even an ambiguous kinetic attack could trigger stronger NATO deployments, retaliation, and greater Western support for Ukraine. The incentives favor calibrated pressure but strongly constrain deliberate escalation. Estimate: 20%.

Forecaster D (quantitative/statistical reasoning): With approximately two months remaining, the relevant hazard is elevated by the concentration of drone incursions and military encounters, but the probability must be discounted for incidents that are accidental, Ukrainian, criminal, or too ambiguous to establish deliberate Russian direction and Article 5-testing intent. A roughly 20% estimate best reflects the combination of elevated event frequency and stringent resolution criteria. Estimate: 20%.

Forecaster E (devil’s advocate): The research may overweight alarming public statements and near misses. Tusk’s warning is not independently verifiable, NATO defenses have strengthened, and Russia remains heavily committed in Ukraine. Most plausible incidents would fail the deliberate-attack, attribution, or intent requirements. Estimate: 16%.

Aggregating these views gives a central probability of approximately 20%. The most likely qualifying pathway is a limited, deniable drone or missile attack involving Belarus or a border-area target in Poland or the Baltic states. A major invasion is far less likely, but the chance of a small deliberate strike is meaningful. The probability remains below the research document’s 22% estimate because the resolution criteria require not merely a kinetic incident, but credible evidence of Russian or Russian-directed responsibility and an intention to test NATO.

I estimate a 20% probability, close to the research document’s 22% central estimate but slightly lower because the resolution criteria are unusually narrow: the event must be a deliberate kinetic attack by Russia or a clearly Russian-directed Belarusian proxy, with evidence that it was intended at least partly to test NATO’s response. The Lithuanian armed-drone incident is a substantial warning sign, but it is not yet clearly attributable or intentional. Likewise, the Polish intelligence warning is important but may describe a broad contingency rather than an imminent operational plan.

The main factors supporting a relatively elevated risk are the short geographic distance between Russian operations and NATO territory, Belarus’s role as a potential launch or transit platform, repeated near-border incidents, and Russia’s incentive to use a small, deniable strike rather than a major invasion. A limited drone or missile incident against a logistics, border, communications, or military facility is more plausible than a tank incursion and could be designed to create attributional ambiguity.

Against this, a deliberate attack would carry major escalation risks for Russia while providing uncertain benefits. NATO’s strengthened air defenses and surveillance increase the chance that an incident would be intercepted, exposed, and politically costly. Russia is also heavily committed in Ukraine. Accidental spillover, unauthorized proxy activity, or ambiguous airspace violations are more likely than a clearly intentional Article 5 test, but those outcomes do not satisfy the stated definition.

Thus, the probability is materially above the pre-September baseline but remains well below even odds. A major sustained attack would be far less likely, probably around 2–4%; most of the 20% estimate concerns a small, deniable drone or missile operation.

Central estimate: 21%. Prior: For roughly the remaining two months before November 30, a deliberate Russian or Russian-directed kinetic attack on NATO territory is a low-base-rate event, perhaps around 7–10%, because Russia faces very high escalation costs and NATO’s defenses are strengthened. The probability of a major invasion is far lower, but the forecast includes small, deniable drone or missile attacks.

Update upward: The armed explosive-carrying drone that entered Lithuania from the Belarusian direction is strong evidence that a plausible attack pathway exists. NATO aircraft had to destroy it, and the payload makes it more concerning than an ordinary airspace violation. This materially raises the risk, though the incident does not yet qualify because Russian or Belarusian responsibility and deliberate intent remain unproven. I would treat this as roughly a 2x–3x likelihood multiplier for a future qualifying incident.

Update upward: Poland’s public warning, reportedly based on allied intelligence, that Russia may prepare drone or missile attacks disguised as accidents is highly relevant to the specific resolution criteria. It supports the hypothesis of a limited, deniable test of NATO cohesion. Because the underlying intelligence is unpublished and Polish leaders have incentives to emphasize the threat, I assign it a moderate rather than decisive weight—roughly a 1.3x–1.5x multiplier.

Update upward: Russian strikes near the Poland-Ukraine border, repeated air-defense scrambles, and dangerous Baltic encounters show increasing operational proximity and more opportunities for miscalculation or deliberate probing. These developments raise the chance of a small kinetic incident, but they are not themselves attacks on NATO territory and therefore provide only modest additional evidence.

Update downward: No incident has yet established all required elements—Russian or proxy responsibility, deliberate kinetic targeting of NATO, and intent to test Article 5. The Lithuanian event could still prove accidental, Ukrainian, criminal, or otherwise unattributable. Russia also has strong incentives to preserve ambiguity or avoid crossing the NATO threshold, and enhanced surveillance and air defenses reduce the probability that an attempted strike succeeds or can be clearly interpreted as deliberate.

Overall, the supplied history shows a reasonable progression from 8% to about 21–22% as the evidence accumulated. I would not raise the estimate further without forensic attribution of the Lithuanian drone, a new deliberate strike or attempted strike, or corroborated evidence of Russian operational planning. The most likely qualifying scenario remains a small, deniable drone or missile attack routed through Belarus or occurring near a NATO logistics, border, or military facility. A major sustained attack remains only a few percent likely, but the broader event is about 21% likely before the deadline.

I estimate a 19% probability by November 30, 2026. The risk is materially elevated because Russia is conducting frequent operations near NATO borders, Belarus provides a plausible deniable launch or transit route, and the Lithuanian explosive-drone incident shows that an armed object can enter NATO territory. The Polish warning about possible strikes disguised as accidents is also directly relevant to the forecast scenario.

However, the resolution criteria are demanding: the event must be kinetic, attributable to Russia or a Russian-directed Belarusian proxy, deliberate rather than accidental spillover, and supported by evidence that it was intended at least partly to test NATO. The Lithuanian incident does not yet meet that standard, and a future incident could similarly remain ambiguous. Russia also faces substantial escalation costs, while stronger NATO air defenses and rapid interception increase deterrence.

The most plausible qualifying event is a small, deniable drone or missile strike against a border, logistics, military, or communications facility in Poland or the Baltic states. A major invasion is extremely unlikely, but a limited probe is feasible. With roughly two months remaining, I place the chance somewhat below the research document’s 22% central estimate, reflecting the narrow definition and the absence so far of a confirmed qualifying attack.

My estimate is 21% that a qualifying Russian or Russian-directed kinetic attack on NATO territory, personnel, vessels, or military assets occurs before December 1, 2026.

Prior: The initial 8% estimate on September 1 was reasonable for a short remaining window because Russia has strong incentives to avoid an unmistakable war with NATO, and deliberate attacks on the Alliance remain rare. The event definition is also demanding: an incident must be kinetic, deliberate, attributable to Russia or a Belarusian proxy, and sufficiently intentional to support the interpretation that NATO cohesion was being tested.

Positive evidence: The armed, explosive-carrying drone entering Lithuania from the Belarusian direction is a major warning indicator. It demonstrates operational feasibility and raises the likelihood of a future deliberate incident. Poland’s intelligence-based warning that Russia may prepare drone or missile strikes disguised as accidents is especially relevant to the forecast scenario. Russian strikes near the Polish border, repeated Baltic military confrontations, and Belarus’s geographic and military integration with Russia provide additional supporting evidence. Collectively, these developments justify roughly a 2.5- to 3-fold increase in odds relative to the initial estimate, consistent with the historical revision toward 22%.

Negative evidence: The Lithuanian incident remains unattributed and may ultimately prove accidental, criminal, Ukrainian, or otherwise unrelated to a Russian decision. The July Polish missile incident and earlier drone incursions likewise have not clearly established deliberate Russian targeting. NATO’s strengthened air defenses and rapid responses increase deterrence, while Russia remains heavily committed in Ukraine and would face severe military and political costs from a clearly attributable attack.

Time adjustment: With approximately two months remaining, there is still meaningful exposure to a small drone or missile incident, but not enough time for the probability to rise dramatically absent new escalation. The most likely qualifying event would be a limited, deniable strike or attempted strike against a border-area logistics, military, communications, or transportation target, potentially routed through Belarus. A major ground invasion remains very unlikely, probably around 2–4%.

I therefore place the event at 21%, slightly below the research document’s 22% central estimate because the strongest new evidence remains unresolved and the definition requires proving deliberate intent rather than merely observing a dangerous incursion.

Clarification: I interpret the event narrowly. It requires a deliberate kinetic attack by Russia, Belarus acting under clear Russian direction, or a Russian-controlled proxy against NATO territory, personnel, vessels, or military assets before December 1, 2026. Accidental spillover, unattributed airspace violations, debris, and hybrid activity do not count. The attack must also plausibly be intended, at least partly, to test NATO’s response. The remaining window is roughly two months based on the supplied chronology.

Historical base rate: The base rate for an overt Russian kinetic attack on NATO territory is extremely low; Russia has strong incentives to avoid triggering a direct NATO-Russia conflict. However, the relevant conditional base rate is higher because the Russia-Ukraine war has produced repeated near misses, airspace violations, and military encounters close to NATO borders. Small, deniable incidents are materially more plausible than a conventional invasion.

Factors increasing the probability:

• The Lithuanian explosive-carrying drone incident shows that an armed object can enter NATO territory through or near Belarus, while attribution remains contestable.
• Poland’s warning about possible Russian attacks disguised as accidents directly matches the most plausible qualifying scenario.
• Russian strikes and military activity are increasingly close to Poland and the Baltic region, raising the chance of deliberate escalation or miscalculation.
• Belarus provides Russia with a geographically useful and deniable launch or transit platform.
• A limited drone or missile incident would offer Moscow a way to probe NATO cohesion at lower cost than a major attack.

Factors decreasing the probability:

• A clearly attributable attack would carry severe military and political costs for Russia and could lead to NATO retaliation and stronger support for Ukraine.
• NATO air policing, surveillance, and eastern-flank defenses make deliberate operations more difficult and increase the chance of interception before impact.
• Russia remains heavily committed in Ukraine and has reason to avoid opening a direct conflict with the Alliance.
• The strongest recent evidence remains ambiguous. The Lithuanian incident may ultimately prove accidental, criminal, Ukrainian, or otherwise unrelated to a Russian decision to test Article 5.
• The requirement to establish deliberate intent to test NATO is stricter than merely showing Russian responsibility for an armed incursion.

Recombining the factors, I estimate roughly a 16–20% chance of a qualifying limited incident during the remaining period, with a central estimate of 19%. The probability of a major or sustained attack is much lower, likely around 2–4%; most of the overall risk is concentrated in a small drone or missile strike, a deliberate maritime incident, or a Belarus-linked operation.

I am slightly below the document’s 22% estimate because the forecast definition requires both attribution and a demonstrated purpose to test NATO, while the principal recent incident remains unresolved. The main ways this estimate could be wrong are: investigators may soon establish that the Lithuanian drone was a deliberate Russian or Belarusian operation, which would sharply increase the probability or potentially resolve the event; alternatively, the Polish warning may reflect a broad contingency assessment rather than an imminent operational plan, and stronger NATO deterrence may prevent Russia from crossing the threshold.

I estimate a 20% probability that the event will occur before December 1, 2026. This is close to, but slightly below, the research document’s 22% central estimate and the recent 19% historical forecasts.

The main factors supporting an elevated probability are the explosive-carrying drone that entered Lithuania from the Belarusian direction, repeated Russian operations near NATO borders, Poland’s warning about possible deliberately ambiguous Russian strikes, and the availability of low-cost deniable options such as drones or limited missile attacks. A small strike on a logistics, border, military, or communications target is considerably more plausible than a tank incursion or sustained territorial attack.

However, the forecast definition is demanding. It requires not merely a kinetic incident, but evidence that Russia or a Russian-directed Belarusian proxy deliberately attacked NATO territory or assets and that the action was intended at least partly to test Article 5. The Lithuanian incident does not currently satisfy those conditions, and accidental spillover, debris, navigation errors, criminal activity, or unattributed drone incidents are substantially more likely than a confirmed deliberate attack. Even if Russia wanted to probe NATO cohesion, it has strong incentives to preserve ambiguity and avoid an incident that clearly triggers a unified response.

The remaining period is roughly two months, which limits the opportunity for an event. NATO’s strengthened air defenses and rapid-response posture also provide deterrence, although the dense military environment near the eastern flank creates some risk of escalation or miscalculation. I therefore assign about 20%, with most of that probability concentrated in a limited drone or missile incident and only a small fraction associated with a major attack.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO territory are rare, largely because the escalation risks are extreme. Near misses and airspace violations are considerably more common than clearly intentional attacks. This supports a low-to-moderate probability, around 12–16%.

Forecaster B (current evidence): The armed drone entering Lithuania from the Belarusian direction, the explosive payload, Russian activity near Poland, and Poland’s warning about possible disguised strikes materially raise the risk. However, the Lithuanian incident remains unattributed and may not qualify. Current evidence supports roughly 20–23%.

Forecaster C (incentives and game theory): Russia could gain intelligence about NATO cohesion from a limited, deniable strike, especially via Belarus. But Moscow can obtain much of the same information through hybrid activity and probes without triggering a direct Article 5 crisis. NATO’s strengthened defenses and the potentially severe response reduce the incentive for an unmistakable kinetic attack. Estimate: 16–19%.

Forecaster D (quantitative reasoning): With roughly two months remaining, the relevant hazard is elevated by the concentration of military activity around Ukraine’s western border and the Baltic region. Still, the probability of a qualifying event is much lower than the probability of an accidental spillover or ambiguous incursion, since the resolution requires deliberate state direction and an intent to test NATO. Estimate: 17–20%.

Forecaster E (devil’s advocate): The evidence may be overinterpreted. Polish officials have incentives to publicize threats, and the Lithuanian drone could prove Ukrainian, criminal, or accidental. Russia has repeatedly approached NATO’s threshold without crossing it. Also, a small strike might not be judged to have been intended to test Article 5. This argues for 12–16%.

Aggregating these assessments, I estimate an 18% probability by November 30, 2026. This is somewhat below the research document’s 22% central estimate because the resolution criteria are unusually demanding: the attack must be kinetic, attributable to Russia or a Russian-directed Belarusian proxy, deliberate rather than accidental, and plausibly intended to test NATO. A limited drone or missile incident remains the most likely pathway, while a major invasion is highly unlikely.

I estimate a 19% probability by November 30, 2026. The risk is meaningfully above the pre-escalation baseline because Russia is operating near NATO borders, an explosive-carrying drone entered Lithuania from the Belarusian direction, and Poland has publicly warned of possible deniable Russian strikes. The most plausible pathway is a limited drone or missile incident affecting a border-area military, logistics, or transport target in Poland or the Baltic states.

However, the resolution criteria are substantially narrower than merely having a dangerous incident. The attack must be attributable to Russia or a Russian-directed Belarusian proxy, be deliberate rather than accidental spillover, and have evidence supporting an intent to test NATO. The Lithuanian incident could eventually qualify, but its origin and purpose remain unresolved; it may also be attributed to another actor or judged accidental. Similar ambiguity would likely surround any future event.

Russia faces major escalation costs from a clearly attributable attack, while NATO’s enhanced air defenses and rapid responses provide deterrence. A large-scale attack is highly unlikely, but a small deniable strike is plausible over the roughly two months remaining. I therefore place the estimate slightly above the latest 18% forecast, but below the research document’s 22% central estimate because attribution and intent requirements make resolution difficult.

I estimate an 18% probability by November 30, 2026. The risk is materially elevated because of the explosive-carrying drone entering Lithuania from the Belarusian direction, Russian strikes near the Polish border, increased Baltic military encounters, and Poland’s warning that Russia may be preparing deniable strikes presented as accidents. A limited drone or missile incident is the most plausible pathway.

However, the forecast definition is narrower than simply “Russian weapon reaches NATO territory.” The event must be shown to be deliberate, attributable to Russia or a Russian-directed Belarusian proxy, and intended at least partly to test NATO’s response. The Lithuanian incident may ultimately meet those criteria, but it could also be attributed to Ukraine, criminal actors, electronic interference, or accidental navigation. Russia also faces very high costs from an unambiguous attack on NATO while still fighting in Ukraine, and strengthened NATO air defenses increase deterrence and interception.

Thus, I place the probability above the recent 16% historical forecast and well above the pre-incident baseline, but below the research document’s 22% central estimate because the attribution and intent hurdles substantially reduce the chance of a qualifying resolution. A major territorial attack remains much less likely than this estimate; most of the probability concerns a small, deniable drone or missile operation.

I estimate a 19% probability that the event resolves Yes by November 30, 2026. I interpret the event narrowly: a deliberate Russian attack, or a Belarusian-proxy attack clearly directed by Russia, involving a conventional kinetic weapon against NATO territory, personnel, vessels, or military assets, with evidence that it was more than an accident and was intended in part to test NATO’s response.

Historical base rate: Since NATO’s creation, deliberate Russian conventional attacks on NATO members have been extraordinarily rare—effectively zero in the post-Cold War period. The Russia-Ukraine war has increased the frequency of near misses, airspace violations, and attacks close to NATO borders, but there is still no established pattern of Moscow deliberately crossing the threshold into an unambiguous attack on Alliance territory. This strongly limits the probability.

Factors increasing risk include the armed explosive drone that entered Lithuania from the Belarusian direction, Russia’s attacks near the Polish border, heightened Russian-Belarusian military integration, dangerous Baltic encounters, and the reported Polish intelligence warning that Russia could stage strikes while portraying them as accidents. These developments make a small, deniable drone or missile incident operationally plausible. NATO’s dense air-policing and military activity also create more opportunities for miscalculation or probing.

Factors reducing risk are more important than the research document’s 22% central estimate suggests. A deliberate attack would risk direct confrontation with NATO while Russia remains engaged in Ukraine. Russia can obtain many of the same coercive benefits through hybrid activity, intimidation, airspace violations, and attacks in Ukraine without crossing the kinetic threshold. NATO’s increased surveillance and defenses raise the chance of interception and attribution, while the Lithuanian incident remains unresolved and may ultimately prove accidental, criminal, Ukrainian, or otherwise unrelated to a Russian decision. The requirement to establish an Article 5-testing purpose is particularly restrictive and creates substantial resolution uncertainty.

A rough recombination is: approximately 25–30% for some serious kinetic spillover or ambiguous armed incident affecting NATO territory or assets; around 55–65% that such an incident, if it occurs, would be deliberate and attributable to Russia or a Russian-directed Belarusian proxy; and around 55–65% that available evidence would support the required interpretation that it was intended to test NATO. Multiplying these dependent, approximate factors gives a result in the mid-to-high teens, which I round upward to 19% because of the unusually elevated short-term warning environment.

The most likely qualifying scenario is a limited drone or missile incident against a border-area logistics, military, communications, or transport target in Poland or the Baltic states, followed by Russian denial or an accidental-spillover narrative. A major invasion or sustained territorial incursion is far less likely, probably only a few percent.

I would avoid a probability above roughly 25% because the strongest evidence is indirect: the Lithuanian drone has not been conclusively attributed, the Polish warning is not publicly verifiable, and repeated near misses may strengthen deterrence rather than encourage escalation. I could be wrong if the Lithuanian investigation confirms Russian direction, if intelligence warnings reflect a concrete operational plan, or if Russia judges that a small deniable strike can divide NATO while keeping escalation manageable. Conversely, a ceasefire, clearer attribution to a non-Russian actor, or a prolonged absence of further incidents would reduce the probability materially.

My estimate is 22% that a qualifying Russian or Russian-directed kinetic attack against a NATO member occurs before December 1, 2026.

Prior: For a roughly two-month period, the base rate of a deliberate Russian kinetic attack on NATO territory is low, perhaps around 8–10%. Russia has strong incentives to avoid an unmistakable attack that could trigger a broader NATO response, and major military action against NATO remains especially unlikely.

Update 1 — armed explosive drone in Lithuania: This is the strongest upward signal. The drone entered NATO airspace from the Belarusian direction, carried an explosive device, and was destroyed by NATO aircraft. If it is ultimately attributed to Russia or Belarus and shown to have been deliberately routed into Lithuania, it could itself qualify. However, attribution and intent remain unresolved. I treat this as a substantial but incomplete update, roughly a 1.5–1.7 likelihood multiplier.

Update 2 — Polish warning of possible disguised Russian strikes: Prime Minister Tusk’s warning closely matches the forecasted scenario of a limited attack presented as an accident. The warning reportedly draws on allied and intelligence assessments, though the underlying intelligence is not public and Polish authorities have incentives to emphasize the threat. This adds meaningful evidence, roughly a 1.2–1.4 multiplier.

Update 3 — increasing proximity of Russian operations: Russian strikes near the Poland-Ukraine border, Polish aircraft scrambles, and dangerous Baltic encounters show that Russian military activity is operating close to NATO territory. This increases opportunity for either deliberate probing or escalation through miscalculation, adding a modest upward multiplier of about 1.1–1.2.

Update 4 — deterrence and ambiguity discounts: NATO has strengthened air policing and air defenses, and the Lithuanian incident was intercepted without casualties. Russia also remains occupied in Ukraine and would face substantial costs from a clearly attributable attack. These factors reduce the probability, roughly offsetting part of the upward evidence, with an effective multiplier of about 0.75–0.85.

Combining these updates produces a posterior in the low-20% range. The estimate is higher than the earlier 8–14% forecasts because the risk environment has materially worsened, but remains well below 50% because the most important incident is still potentially accidental, criminal, Ukrainian, or otherwise unattributed. The most likely qualifying event is a small, deniable drone or missile strike against a border, logistics, military, or communications target in Poland or the Baltic states. A major invasion or sustained territorial attack remains much less likely, probably around 2–4%.

I estimate a 19% probability by November 30, 2026. The risk is materially above the normal base rate because the remaining period includes roughly two months of unusually tense Russia-NATO interaction, including an armed drone entering Lithuanian airspace from the Belarusian direction, Russian attacks near Poland, heightened Baltic military activity, and a public Polish warning about possible deliberately ambiguous Russian strikes. These developments make a small drone or missile incident against a NATO logistics, military, or border facility plausible.

However, the forecast’s resolution criteria are considerably narrower than simply having a dangerous incident. The Lithuanian drone remains unattributed and may ultimately be judged accidental, criminal, Ukrainian, or otherwise unrelated to a Russian-directed operation. A future weapon could also enter NATO territory through spillover without evidence of deliberate targeting. Even if Russia is responsible, demonstrating that the purpose was to test Article 5 would be difficult. This attribution-and-intent requirement substantially lowers the probability relative to the chance of any kinetic incident or airspace violation.

Russia also faces very high costs from a clearly attributable attack on NATO, while NATO’s strengthened air defenses and rapid-response posture provide deterrence. A major ground invasion is extremely unlikely; the realistic qualifying pathway is a limited, deniable drone or missile strike, possibly involving Belarus. Balancing the elevated operational risk against Russia’s incentives to avoid an unmistakable war with NATO, I place the probability modestly below the research document’s 22% central estimate and close to the latest historical forecast of 19%.

My estimate is 17%, somewhat below the research document’s 22% central estimate. The main upward factors are the armed explosive-carrying drone that entered Lithuania from the Belarusian direction, Poland’s warning about possible Russian strikes disguised as accidents, repeated Russian activity near NATO borders, and the remaining roughly two months before the November 30 deadline. These developments make a limited drone or missile incident plausible, particularly in Poland or the Baltic states.

However, the resolution criteria are unusually demanding: the event must be more than accidental spillover, must be attributable to Russia or a clearly Russian-directed Belarusian proxy, and must be shown to have been deliberate and intended at least partly to test Article 5. The Lithuanian incident is important evidence of capability and risk but is not yet clearly attributable or intentional. Russia also has strong incentives to preserve ambiguity and avoid a direct NATO confrontation, while NATO air defenses and heightened readiness may deter or intercept a prospective attack.

Independent estimates would be approximately: historical base-rate view 10%, current-evidence view 22%, incentives/game-theory view 15%, quantitative time-window view 14%, and devil’s-advocate view 8%. Averaging these while giving somewhat greater weight to the current evidence produces a calibrated estimate near 17%. A major sustained attack remains far less likely, probably around 2–4%; the principal risk is a small, deniable kinetic strike or a later forensic reclassification of the Lithuanian drone incident.

Forecaster A (historical base rates): 14%. Russia has repeatedly operated near NATO territory, but deliberate kinetic attacks on NATO members remain rare because the escalation costs are exceptionally high. The short remaining window also limits the opportunity for a major operation.

Forecaster B (current evidence): 24%. The armed explosive-carrying drone entering Lithuania from the Belarusian direction, Poland's warning about possible disguised Russian strikes, and repeated Russian activity near NATO borders are meaningful upward indicators. If the Lithuanian incident is later attributed to Russia or Belarus and judged intentional, the event could resolve yes without a new attack.

Forecaster C (incentives and game theory): 18%. Russia may have incentives to test NATO cohesion through a deniable, limited strike, especially against a logistics or border target. However, even a small attack risks triggering a much larger NATO response and could undermine Russia's strategic position, making deliberate escalation unattractive.

Forecaster D (quantitative/statistical reasoning): 17%. The event requires several conditions simultaneously: kinetic action, NATO territory or assets, Russian or proxy responsibility, deliberate intent, and an Article 5-testing purpose. Nearby incidents raise the chance of a qualifying event, but most plausible incidents will instead be accidental spillover, ambiguous airspace violations, or hybrid operations. With roughly two months remaining, the cumulative probability is elevated but still below one in five.

Forecaster E (devil's advocate): 15%. The research may overinterpret public warnings and ambiguous incidents. Poland and other frontline states have strong incentives to publicize threats, while Russia has generally avoided an unmistakable attack on NATO despite many opportunities. The Lithuanian drone may ultimately be attributed to a non-Russian actor, an accident, or an operation without demonstrable Article 5-testing intent.

Aggregating these estimates gives a value around 18%. The main reason not to use the document's 22% central estimate is the strict resolution standard: a future incident must be shown to be deliberate, Russian-directed or Belarusian-proxy, and intended at least partly to test NATO. The Lithuanian incident is a significant near miss and could itself later qualify, but its attribution and intent remain unresolved. A small deniable drone or missile strike is considerably more likely than a tank incursion or sustained attack, while a major Russian assault remains very unlikely.

I estimate a 21% probability that the event resolves yes before December 1, 2026. This is modestly above the latest historical estimate of 17% on September 22, but below the research document’s 22% central estimate because the resolution criteria require more than an armed incursion: Russian or clearly Russian-directed responsibility, deliberate kinetic action, and evidence that it was intended at least partly to test NATO.

Prior: The forecast history rose from 8% on September 1 to 14% by September 7. That trajectory implies a baseline risk in the low-to-mid teens before the latest evidence, reflecting Russia’s ongoing war with Ukraine, repeated incidents near NATO borders, and Russia’s established use of deniable coercion.

Update 1 — Armed drone in Lithuania: The explosive-carrying drone entering Lithuanian airspace from the Belarusian direction is strong evidence that a qualifying attack is operationally feasible. It raises the probability substantially, but less than proportionally because attribution and intent remain unresolved. I treat this as an upward likelihood ratio of roughly 1.5–1.7.

Update 2 — Polish warning of possible disguised strikes: The warning that Russia may prepare drone or missile attacks and portray them as accidents directly matches the forecast scenario. Because the underlying intelligence is unpublished and Poland has incentives to emphasize the threat, I assign it a moderate rather than decisive upward effect, roughly 1.2–1.3.

Update 3 — Russian activity near NATO borders: The strike near the Poland-Ukraine border, repeated air-defense scrambles, and dangerous Baltic encounters increase opportunity and escalation risk. These developments support a further modest increase, roughly 1.1–1.2, but do not demonstrate a decision to attack NATO territory.

Downward adjustments: The Lithuanian incident may prove accidental, Ukrainian, criminal, or otherwise unrelated to a Russian decision. NATO defenses and rapid responses increase deterrence, while a clearly attributable attack would impose severe military and political costs on Russia. The remaining time window is also limited, with roughly two months left. These factors together reduce the estimate from what would otherwise be around 28–32% after the positive evidence.

The most likely qualifying pathway is a limited, deniable Russian or Belarusian-proxy drone or missile strike against a military, logistics, communications, border, or transport target in Poland or the Baltic states. A major invasion or tank incursion remains far less likely, probably around 2–4%. The main uncertainty is whether future evidence will establish deliberate Russian direction rather than merely confirm another dangerous but ambiguous spillover incident.

I estimate a 20% probability that the event, under its relatively strict resolution criteria, occurs before December 1, 2026.

The base rate for a deliberate Russian kinetic attack on NATO territory is low. Since the start of the Ukraine war, Russia has repeatedly conducted dangerous operations near NATO borders, but it has generally avoided an unmistakable, attributable attack on Alliance territory. A major invasion or sustained incursion remains very unlikely, probably around 2–4%.

The probability is nevertheless materially higher than the historical baseline because roughly two months remain and several developments point toward a plausible limited-strike pathway: an explosive-carrying drone entered Lithuania from the Belarusian direction; Russian attacks have occurred close to Poland; Polish leadership has publicly warned of possible Russian strikes disguised as accidents; and military activity in the Baltic and along NATO’s eastern flank is dense. These factors make a small drone or missile incident operationally feasible.

My factor assessment is approximately:

• Opportunity for a limited kinetic incident: 35–45%. Russian operations near NATO borders, dense air activity, and Belarusian access create meaningful opportunity.
• Russian or Belarusian willingness to conduct a deliberate probe: 25–35%. Moscow has incentives to test allied cohesion, but the escalation risks remain substantial.
• Successful execution or penetration of NATO territory: 35–50%. A drone or missile could be intercepted, but even an intercepted weapon might qualify if deliberate targeting is subsequently established.
• Clear attribution and evidence of deliberate intent to test NATO: 45–60% conditional on an incident. This is the largest constraint. The Lithuanian case demonstrates that even an armed incursion may remain ambiguous, accidental, Ukrainian, criminal, or otherwise difficult to attribute.

Combining these factors gives a lower probability than the research document’s central estimate of 22%, but still within its stated range. I reduce the estimate modestly because the document may double-count related indicators: the Lithuanian incident, Polish warning, nearby strikes, and NATO activity all reflect the same underlying deterioration. I also assign substantial weight to the strict requirement that the event be more than accidental spillover and be plausibly intended, at least in part, to test Article 5.

The most likely qualifying scenario is a small, deniable drone or missile attack against a border-area logistics, military, communications, or transport target in Poland or the Baltic states, potentially involving Belarus. A tank attack or major territorial incursion is much less likely.

The main reasons I could be wrong are that the Lithuanian drone may later be conclusively attributed to Russia or Belarus, effectively resolving the event; intelligence behind Poland’s warning may reflect a concrete operational plan rather than a general assessment; or Russia may calculate that a deniable strike carries manageable escalation costs. Conversely, a ceasefire, stronger NATO deterrence, clear attribution of the Lithuanian incident to a non-Russian actor, or Russia’s continued fear of direct confrontation could keep the probability closer to 10–15%.

I estimate a 19% probability by November 30, 2026. The risk is clearly elevated: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction, Russia has conducted strikes close to Poland, and Poland has publicly warned of possible Russian attacks disguised as accidents. These developments make a limited drone or missile incident against a NATO member plausible within the roughly two-month window.

However, the resolution criteria are unusually narrow. The event must be more than accidental spillover or an airspace violation, and available evidence must support deliberate Russian or Russian-directed action intended at least partly to test NATO. The Lithuanian incident may eventually qualify, but its origin and intent remain unresolved; it could still prove accidental, Ukrainian, criminal, or otherwise unattributable. A future incident would face the same attribution problem.

Russia has strong incentives to probe NATO but also substantial incentives to avoid a clearly attributable kinetic attack that could trigger a military response. NATO's strengthened air defenses and the visibility of the eastern flank further reduce the chance of a successful deliberate strike, while a major ground attack remains far below 5%.

Relative to the document's 22% estimate, I apply a modest downward adjustment because the remaining time is short and because the requirement to establish deliberate intent to test Article 5 will exclude many plausible border incidents. The probability is therefore best viewed as moderate but clearly below even odds, with most of the risk concentrated in a small, deniable drone or missile operation involving Poland or the Baltic states.

I estimate a 16% probability by November 30, 2026. The risk is clearly elevated: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction, Russian attacks have occurred near Poland, and Poland has publicly warned of possible Russian strikes disguised as accidents. These developments make a limited drone or missile incident the most plausible pathway.

However, the resolution criteria are unusually demanding. The event must be more than accidental spillover or an ambiguous airspace violation, and available evidence must support Russian or Russian-directed responsibility plus deliberate intent to test NATO. The Lithuanian incident currently fails that attribution and intent test, and similar future incidents may also remain unresolved. Russia has strong incentives to avoid an unmistakable attack that could trigger a broader NATO response, while NATO air policing and regional defenses make a successful strike more difficult.

The remaining roughly ten weeks are sufficient for a small deniable incident, but not long enough to make one likely absent a major escalation. I therefore place the probability above the earlier baseline and recent 9–14% estimates, but below the research document's 22% central estimate, which appears to give substantial weight to near-qualifying incidents and publicly reported warnings without fully discounting the stringent resolution standard.

I estimate a 19% probability that the event will occur by November 30, 2026. This is somewhat below the research document’s 22% central estimate because the resolution criteria are unusually demanding: the incident must be kinetic, attributable to Russia or a Russian-directed Belarusian proxy, deliberate rather than accidental, and plausibly intended in part to test NATO’s Article 5 commitment.

The historical base rate for Russia deliberately attacking NATO territory or assets is very low. Since the start of the Ukraine war, Russia has repeatedly operated near NATO borders and has caused several dangerous spillover incidents, but it has generally avoided an unmistakable attack on a NATO member. This reflects the high costs of direct confrontation with the Alliance, Russia’s ongoing resource commitments in Ukraine, and NATO’s strengthened air-defense and surveillance posture.

The risk is nevertheless materially above the normal baseline. The armed drone entering Lithuania from the Belarusian direction, the explosive payload, Russia’s strikes near the Polish border, repeated Baltic military encounters, and the Polish warning about possible deniable Russian attacks all support a meaningful probability of a limited kinetic probe. A small drone or missile incident is much more plausible than a tank incursion or sustained territorial attack.

A rough decomposition is: approximately 25% for any deliberate Russian or Russian-directed kinetic incident affecting NATO territory, personnel, vessels, or military assets during the remaining period; multiplied by roughly 75% that such an incident would ultimately be judged sufficiently deliberate, attributable, and connected to testing NATO rather than being accidental, criminal, Ukrainian, or merely ambiguous. This produces an estimate near 19%.

The main upward factor is the possibility that the Lithuanian incident is later attributed to Russia or Belarus and judged intentional. The main downward factors are the short remaining time window, the lack of confirmed attribution, Russia’s strong incentive to preserve deniability and avoid a direct NATO confrontation, and the possibility that NATO’s visible response already provides deterrence. I assign only about 2–4% to a major or sustained Russian attack; nearly all of the estimated probability concerns a limited drone, missile, maritime, or proxy incident.

I could be wrong chiefly if the Lithuanian drone investigation reveals clear Russian or Belarusian direction, or if Polish intelligence reflects a concrete operational plan rather than a broad warning. Conversely, the probability would be overstated if the Lithuanian incident proves non-Russian or accidental, if improved NATO defenses prevent further incursions, or if Russia prioritizes avoiding escalation while continuing to rely on hybrid operations, which are excluded from this forecast.

My estimate is 17%, somewhat below the research document’s 22% central estimate because the resolution criteria require not merely a kinetic incident, but evidence of deliberate Russian or Russian-directed responsibility and an intent to test NATO’s response.

Prior: The latest historical forecast was 14%. I use that as the starting prior, reflecting the short remaining window—about 71 days—as well as the historically low frequency of deliberate Russian attacks on NATO territory.

Update 1—Lithuanian armed drone incident: This is strong evidence of increased operational risk. An explosive-carrying drone entered NATO airspace from the Belarusian direction and was intercepted. If later attributed to Russia or Belarus and shown to have been deliberately routed, it could itself qualify. However, origin and intent remain unresolved, so I apply only a moderate upward update, roughly equivalent to a likelihood ratio of 1.4.

Update 2—Polish intelligence warning: The warning that Russia may prepare drone or missile attacks disguised as accidents directly matches the forecast scenario. Because the underlying intelligence is unpublished and Poland has incentives to emphasize the threat, I treat it as meaningful but not decisive: likelihood ratio about 1.2.

Update 3—Russian activity near NATO borders: The strike near the Poland-Ukraine border, repeated air-defense scrambles, and Baltic military incidents show greater opportunity for spillover or deliberate probing. These raise the chance of an incident, but they do not by themselves establish a Russian decision to attack NATO: likelihood ratio about 1.15.

Downward update—deterrence and attribution barriers: NATO’s strengthened air defenses, rapid responses, and the very high escalation costs for Moscow reduce the likelihood of a deliberate attack. In addition, even if an armed drone or missile enters NATO territory, proving that it was a deliberate Russian or Belarusian proxy operation intended to test Article 5 may be difficult. I apply a downward factor of roughly 0.8.

Downward update—limited time and strict resolution standard: With only about ten weeks remaining, the event requires both occurrence and subsequent attribution of intent. Accidental spillover, debris, navigation errors, criminal activity, or ambiguous incursions are more likely than a clearly qualifying attack. This lowers the estimate relative to a broader question about any Russian kinetic incident in NATO territory.

Overall, the probability has risen materially from the earlier 8–14% range, but I do not adopt the full 22% estimate. The most likely qualifying pathway remains a small, deniable drone or missile incident involving Poland or a Baltic state, potentially using Belarus as a launch or transit point. A major ground invasion remains very unlikely, well below 5%.

I estimate a 17% probability. The strongest evidence for an eventual YES is the convergence of several warning signs: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction; Russian strikes have approached Poland and other NATO borders; Polish officials report intelligence suggesting Russia may contemplate deniable strikes; and the Baltic region has seen increasingly risky military encounters. These developments make a small, ambiguous drone or missile incident more plausible than a major invasion.

However, the forecast definition is narrow. It requires not merely a kinetic incident, but evidence that Russia, Belarus under Russian direction, or a controlled proxy deliberately attacked NATO territory or assets, with the action intended at least partly to test Article 5. The Lithuanian incident currently falls short because origin, command responsibility, targeting, and intent remain unresolved. Accidental spillover, debris, navigation errors, criminal activity, or an unattributed drone event are materially more likely than a clearly attributable Russian attack.

Russia also has strong incentives to avoid an unmistakable attack on NATO, especially while engaged in Ukraine. NATO's strengthened air defenses and rapid responses increase deterrence, while a limited attack could still produce unpredictable escalation and sanctions. The short remaining window—roughly ten weeks—also limits the opportunity for a deliberate operation.

The prior 10% estimate appears somewhat too low given the recent armed-drone incident and intelligence warning, but the research document's 22% estimate likely gives substantial weight to evidence that has not yet established deliberate Russian intent. I therefore place the probability above the historical estimates but below the document's central estimate. A major sustained attack is far less likely, probably only around 2–4%; most of the 17% reflects the possibility of a small, deniable drone or missile strike that is later attributed to Russia or a Belarusian proxy.

My aggregate estimate is 16%, somewhat below the research document's 22% central estimate. The risk is clearly elevated: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction, Russian attacks have occurred near NATO borders, and Poland has publicly warned of possible deliberately ambiguous Russian strikes. These developments make a limited drone or missile incident the most plausible pathway, particularly against Poland or the Baltic states.

However, the event definition is demanding. It requires not merely a kinetic incident or airspace violation, but evidence that Russia or a Russian-directed Belarusian proxy acted deliberately and that the action was intended in part to test NATO's Article 5 response. The Lithuanian incident remains unattributed and could ultimately be accidental, Ukrainian, criminal, or otherwise unrelated to a Russian decision. The July Polish missile incident and other spillovers likewise do not qualify absent evidence of deliberate targeting.

Forecaster A, historical base rates, would place the probability around 10-12%: Russia has strong incentives to avoid an unmistakable attack on NATO, while prior near misses have generally stopped short of deliberate kinetic attacks. Forecaster B, emphasizing current evidence, would estimate 20-22% because of the Lithuanian drone, Polish intelligence warning, and increasing border proximity. Forecaster C, focusing on incentives, would assign about 14-16%: a deniable probe could serve Russian objectives, but the escalation risks remain severe and NATO defenses are improving. Forecaster D, using the short 71-day horizon and conditional event rates, would estimate roughly 15-17%; there may be opportunities for incidents, but the probability of clear attribution and qualifying intent is much lower. Forecaster E, as devil's advocate, would give 10-12%, stressing that public warnings may reflect deterrence messaging and that the evidence may be suffering from recency bias.

Combining these views yields approximately 16%. A major or sustained Russian attack is far less likely, probably around 2-4%; most of the 16% risk is concentrated in a small, deniable drone or missile strike whose deliberate nature is established only after investigation.

I estimate a 14% probability by November 30, 2026. The risk is materially elevated because Russia is operating close to NATO territory, an explosive-carrying drone entered Lithuania from the Belarusian direction, and Polish authorities have publicly warned of possible deniable Russian strikes. A limited drone or missile incident is operationally feasible and would be more plausible than a tank incursion or sustained attack.

However, the resolution criteria are unusually demanding: the event must be a deliberate kinetic attack, attributable to Russia or a Russian-directed Belarusian proxy, and supported by evidence that it was more than accidental spillover and intended at least partly to test NATO. The Lithuanian incident currently lacks sufficient attribution and intent evidence, and it may ultimately be classified as accidental, criminal, Ukrainian, or otherwise unresolved. The same ambiguity would likely surround any future small incident, reducing the chance that it qualifies.

Russia also faces substantial escalation costs from a clear attack on NATO, while NATO’s strengthened air defenses and rapid-response posture increase deterrence. With roughly ten weeks remaining, I assign about 4% probability that the Lithuanian case is retrospectively reclassified as qualifying and about 10% probability of a new qualifying incident. A major or sustained attack remains far below 1-2%; the main risk is a small, deniable drone or missile strike near the eastern NATO flank.

I estimate a 12% probability that the event, as narrowly defined, occurs before December 1, 2026. This is slightly below the research document’s 14% central estimate because the latest prediction history extends through September 16, while the remaining time window is now shorter.

Base rate: Since the start of the Ukraine war, Russia has repeatedly conducted dangerous operations near NATO territory, but it has not deliberately launched a clearly attributable conventional attack on a NATO member. The historical base rate for an intentional Russia-NATO kinetic attack is therefore very low. The current war raises the risk above the normal peacetime level, but not to a high-probability event.

Key factors:

1. Opportunity and exposure — upward pressure. Russian missile and drone operations against Ukraine, reconnaissance flights, Belarusian military integration, and dense activity around the Baltic and eastern flank create multiple opportunities for a limited strike, spillover event, or deniable probe. This supports a probability meaningfully above 5%.

2. Russian intent — moderate upward pressure. Moscow has shown willingness to conduct coercive and hybrid operations inside NATO countries and to test Western responses. A small, ambiguous drone or missile attack is more plausible than a major invasion. However, there is no clear evidence of a current decision to initiate a NATO confrontation.

3. Deterrence and escalation costs — strong downward pressure. A deliberate attack would risk NATO military retaliation, further Western military support for Ukraine, and loss of diplomatic leverage. NATO’s strengthened eastern-flank posture also makes surprise and deniability more difficult.

4. Current military indicators — downward to neutral. There is no reported large Russian buildup against the Baltic states, no clear offensive preparation, and no newly identified qualifying incident. Exercises and reconnaissance activity are concerning but are not, by themselves, evidence of imminent attack.

5. Diplomacy — modest downward pressure. Continuing U.S.-Russia diplomatic engagement creates an incentive for Moscow to avoid an unmistakable attack, although the lack of a durable ceasefire means this effect is limited.

6. Time remaining — downward pressure. With roughly ten to eleven weeks left, there is still enough time for a small drone or missile incident, particularly during a renewed Russian air campaign, but insufficient time for a large planned offensive to develop without warning.

Scenario weighting: I assign roughly 8–10% to a deliberate limited drone or missile attack that could plausibly be interpreted as a test of NATO, about 1–2% to a more overt or sustained attack, and a small additional probability to a Belarus-linked or proxy action that meets the attribution and intent threshold. These categories are not fully independent, so I do not simply add their maximum values; the combined estimate is approximately 12%.

The principal reason not to forecast higher is that Russia can pursue most of its coercive aims through hybrid activity, airspace pressure, reconnaissance, and deniable operations without crossing the kinetic threshold. The principal reason not to forecast lower is that repeated spillover incidents and ambiguous drone activity create a realistic pathway to a deliberately limited strike disguised as an accident.

I could be wrong if intelligence has not detected preparations for a deniable operation, if diplomatic talks collapse abruptly, or if Russia concludes that NATO would respond weakly to a small incident. Conversely, the event may not occur even after a serious border incident because attribution or intent remains ambiguous, which is especially important given the forecast’s strict resolution criteria.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO members have been rare, while near misses, airspace violations, and hybrid operations are considerably more common. The short remaining window through November 30 further limits the chance of a planned attack. Estimate: 10%.

Forecaster B (current evidence): The environment is unusually tense: Russia continues intensive drone and missile operations, reconnaissance activity near NATO borders persists, Belarus provides a possible launch or transit route, and ambiguous spillover incidents have occurred. However, there is no clear offensive buildup, no recent qualifying incident, and diplomacy remains active. Estimate: 13%.

Forecaster C (incentives and game theory): Moscow has incentives to probe NATO cohesion, particularly with a small deniable drone or missile incident, but the costs of a clearly attributable attack are very high. Russia can achieve much of its coercive objective through hybrid activity and airspace pressure without crossing the kinetic threshold. Estimate: 12%.

Forecaster D (quantitative reasoning): Starting from a low annual base rate for deliberate Russia-NATO attacks, the elevated operational tempo and roughly 75-day remaining period justify a meaningful increase, but the strict requirement for deliberate intent and attribution substantially reduces the probability relative to the likelihood of accidental spillover. Estimate: 11%.

Forecaster E (devil’s advocate): The forecast may understate escalation risk because repeated ambiguous incidents can normalize Russian probing, and a small attack could be designed specifically to exploit attribution uncertainty. A failed diplomatic process or renewed major Russian air campaign could sharply increase risk. Nevertheless, absent such a trigger, 14% is probably somewhat high. Estimate: 9%.

Aggregating these views produces a central estimate of approximately 11–12%. I use 12% as the final probability. The most plausible qualifying scenario is a limited, deliberate drone or missile strike against eastern NATO territory or a military asset, potentially involving Belarus and followed by Russian denials. A major invasion remains far less likely, while accidental spillover is more probable than the event as strictly defined but does not qualify on its own.

I estimate an 8% probability through November 30, 2026. The main risk is a small, deniable drone or missile incident involving Poland or a Baltic state, potentially launched via Belarus. Russia has demonstrated willingness to conduct risky operations near and inside NATO countries, and the high volume of attacks on Ukraine creates opportunities for deliberate probing or escalation disguised as an accident. However, the resolution standard is demanding: the incident must be a deliberate kinetic attack, Russian or clearly Russian-directed, and intended at least partly to test Article 5. Existing spillovers, airspace violations, debris, and the July Polish missile impact do not clearly meet that standard. Russia remains heavily engaged in Ukraine, NATO defenses and surveillance have strengthened, there is no reported major offensive buildup against NATO territory, and a clearly attributable attack would carry substantial and difficult-to-control escalation costs. The remaining time window is also relatively short, while recent diplomatic engagement provides some additional restraint. Hybrid operations raise concern but are excluded and do not by themselves imply that Moscow will cross the kinetic threshold. The declining prior estimates are directionally justified, though I would keep the probability somewhat above the recent 9% forecast because the eastern-flank operating environment remains unusually dense and ambiguous.

Central estimate: 14%. Prior: The recent forecast history has stabilized at 14% since September 7, after rising from 8% on September 1 as evidence of drone activity, Russian reconnaissance, and spillover risk accumulated. I therefore use 14% as the current prior for the remaining period.

Downward updates: No confirmed qualifying Russian or Belarusian-proxy kinetic attack has occurred, and recent NATO-Russia activity has remained below the attack threshold. Temporary U.S.-Russian-Ukrainian diplomacy, NATO’s strengthened eastern-flank defenses, and the absence of evidence for a major Russian buildup reduce the incentive and opportunity for a deliberate attack. These factors have a modestly negative likelihood ratio for an attack, roughly reducing the implied risk by 10–15%.

Upward updates: Russia continues intensive drone and missile operations against Ukraine, creating ongoing opportunities for spillover, miscalculation, or a deliberately ambiguous strike. Russian reconnaissance near NATO borders, Belarus’s military integration with Russia, prior missile impact in Poland, and Russian-attributed hybrid operations inside NATO increase the plausibility of a limited deniable kinetic test. These factors provide a modest positive likelihood ratio, roughly offsetting the downward evidence.

Resolution-specific adjustment: The event requires more than an accidental impact or airspace violation; Russian or proxy responsibility and deliberate intent to test Article 5 must be sufficiently established. This substantially lowers the probability relative to the chance of any weapon or debris incident in NATO territory. A small drone or missile strike remains the most plausible qualifying pathway, while a tank attack or major invasion is very unlikely.

The remaining time window is shorter than in the earlier assessments, which modestly lowers the probability of a planned major operation but still leaves meaningful opportunity for a limited strike during renewed Russian air activity or a diplomatic breakdown. Overall, the evidence supports holding the estimate near the established 14% level, with an approximate plausible range of 11–17%.

I estimate a 10% probability that a qualifying event occurs before December 1, 2026. The risk is elevated relative to the normal Russia-NATO baseline because Russian drone and missile operations remain intense, spillover incidents have already reached NATO territory, Belarus provides a potential launch or transit route, and Russian reconnaissance and hybrid activity indicate willingness to probe NATO defenses. The remaining period is also long enough for a limited drone or missile incident.

However, the resolution criteria are substantially narrower than merely having a Russian weapon enter NATO airspace. The event must be a deliberate kinetic attack, attributable to Russia or a Russian-directed Belarusian proxy, and sufficiently intentional to support the interpretation that it was testing Article 5. The July missile impact in Poland and recent Baltic drone incidents appear more consistent with spillover, malfunction, or ambiguous attribution and therefore do not strongly establish that Russia has decided to attack NATO.

The strongest factors against a qualifying attack are the high expected costs of provoking NATO, Russia's continuing military focus on Ukraine, strengthened NATO air defenses, the lack of evidence of an offensive buildup against the Baltic states, and ongoing diplomatic engagement. A major or sustained attack remains very unlikely, probably around 13%; most of the 10% estimate is concentrated in a small, deniable drone or missile strike. The recent downward prediction trend from 14% to 10% is reasonable given the absence of a new direct NATO-Russia incident and the shrinking time window, though the residual risk remains meaningful because a limited ambiguous attack could occur with little warning.

Forecaster A (historical base rates): A deliberate Russian kinetic attack on NATO territory has a very low base rate because the escalation risks are extreme and Russia has generally remained below the Article 5 threshold despite repeated opportunities. The remaining time is short, and there is no evidence of preparations for a major attack. However, limited deniable drone or missile incidents are more plausible than a major invasion, supporting a low-teens estimate rather than a near-zero probability.

Forecaster B (current evidence): The evidence shows elevated operational danger but no confirmed qualifying incident. Russian missile and drone attacks on Ukraine, repeated reconnaissance near NATO borders, ambiguous drone spillover, Belarusian military integration, and Russian-attributed hybrid activity all increase risk. Offsetting factors include active diplomacy, NATO defensive preparations, the absence of a major Russian buildup, and the fact that recent incidents remain ambiguous or accidental. Current evidence supports roughly 12–15%.

Forecaster C (incentives and game theory): Moscow may have incentives to test NATO cohesion with a small, deniable strike, especially against a military or logistics target and possibly via Belarus. Yet the likely consequences—stronger NATO unity, expanded military support for Ukraine, and possible direct conflict with the Alliance—make an intentional attack unattractive unless Russia believes attribution or allied response would remain uncertain. Russia can obtain many coercive benefits through hybrid operations and airspace probing without crossing the kinetic threshold. This keeps the probability in the low teens.

Forecaster D (quantitative reasoning): With approximately 2.5 months remaining, the relevant hazard is concentrated in rare limited incidents rather than a sustained invasion. A rough annualized risk for a deliberate qualifying incident in this environment, discounted for the short window and the strict attribution/intent criteria, yields a probability around 10–15%. The chance of some accidental spillover is higher, but accidental or unresolved incidents do not count. A point estimate of about 13% is reasonable.

Forecaster E (devil’s advocate): The 13–14% estimate may understate tail risk because Russia has already accepted increasing risks around NATO airspace, and ambiguity could make a small strike politically attractive. A failed or deteriorating diplomatic process, a renewed Russian air campaign, or a Belarus-linked operation could produce rapid escalation. Nevertheless, this argument raises the estimate only modestly because such an attack would still be a major strategic gamble and the forecast excludes many likely spillover and hybrid events.

Aggregating the five views, the probability is approximately 13%. This is slightly below the research document’s 14% central estimate because the resolution criteria require not merely a kinetic incident, but credible evidence of deliberate Russian or Russian-directed action and an intent to test Article 5. The most likely qualifying pathway is a small, ambiguous drone or missile attack before December 1, 2026; a tank incursion or major sustained attack remains highly unlikely.

Clarifying the event: this requires more than a Russian or Belarusian weapon entering NATO airspace or causing accidental spillover. It requires a deliberate, attributable kinetic attack before December 1, 2026, with evidence that it was intended at least partly to test NATO’s Article 5 response. A small drone or missile strike would be the most plausible form; a tank incursion or sustained attack is much less likely.

Historical base rate: Russia has repeatedly conducted dangerous military and hybrid activity near or inside NATO territory, but since NATO’s creation there has been no clearly deliberate conventional Russian attack on a NATO member. The base rate for an intentional attack is therefore very low. The current Russia-Ukraine war raises the risk of miscalculation and limited probing, but the strict intent and attribution requirements materially reduce the probability of resolution.

Key upward factors include Russia’s continuing high-volume missile and drone campaign against Ukraine, repeated airspace incidents and reconnaissance flights near the Baltic states and Poland, Belarus’s military integration with Russia, Russian-attributed hybrid operations inside NATO, and the possibility that Moscow would prefer a small, ambiguous test rather than a major invasion. These factors make a limited deniable drone or missile incident plausible.

Key downward factors are the severe escalation costs of a clearly attributable attack, Russia’s continuing military commitment in Ukraine, strengthened NATO air defenses and surveillance, the absence of evidence of a major Russian buildup against the Baltic states, and ongoing diplomatic engagement. NATO’s demonstrated tendency to distinguish spillover incidents from deliberate attacks also reduces the likelihood that an ambiguous event will satisfy the resolution criteria.

The recent forecast history moved from 8% to 13%, then stabilized around 11–12%. The research document’s 14% central estimate appears somewhat aggressive because it gives substantial weight to ambiguous incidents and hybrid activity that are explicitly excluded. I therefore place the probability modestly above the latest 11% estimates but below 14%, at 12%.

I could be wrong if diplomacy collapses, Russia launches an unusually large autumn air campaign, or Moscow exploits a drone incident near Belarus or the Baltic region to test allied political cohesion. Conversely, an apparently serious incident may remain unresolved as to attribution or intent and therefore fail to qualify. The probability of a major sustained Russian attack is far lower, probably around 1–3%; most of the 12% estimate is concentrated in a small, deniable drone or missile strike.

I estimate a 9% probability by November 30, 2026. The main reason for keeping the estimate below the document’s 14% central estimate is the forecast’s stringent resolution standard: an incident must be a deliberate Russian or Russian-directed kinetic attack, not merely a spillover, airspace violation, debris impact, malfunction, or ambiguous proxy operation. Those excluded incidents are considerably more likely than an intentional Article 5 test.

The probability is nevertheless material because roughly 11 weeks remain, Russian missile and drone operations against Ukraine continue at high volume, Belarus provides a plausible launch or transit route, and repeated reconnaissance and counter-drone activity increase the risk of miscalculation or a deliberately deniable strike. A small drone or missile incident against a military or logistics site is the most plausible pathway.

Factors limiting the probability include Russia’s substantial military commitment in Ukraine, the very high strategic cost of a clearly attributable attack, strengthened NATO surveillance and air defenses, the absence of evidence of a major offensive buildup, and the possibility that Moscow prefers hybrid or ambiguous activity that remains below the kinetic threshold. Active U.S.-Russian diplomacy also modestly reduces near-term incentives for an overt attack, although the lack of a durable settlement means this effect is limited.

The recent history of estimates clustering around 10%, together with no reported new qualifying incident or major deterioration, supports a roughly 9–10% assessment rather than a sharp upward revision. A major territorial invasion is far less likely; most of the estimated risk comes from a limited, deniable drone or missile strike whose attribution and intent would initially be contested.

I estimate a 10% probability by November 30, 2026. This is slightly below the research document’s 11–17% range and consistent with the recent downward history from 14% to 11%.

The main factors supporting the event are Russia’s continuing high-volume missile and drone campaign against Ukraine, repeated activity near NATO airspace, Russian reconnaissance around Poland and the Baltic region, Belarus’s military integration with Russia, and Moscow’s demonstrated willingness to conduct risky operations below the threshold of open war. A small, deniable drone or missile strike remains plausible, especially if Russia believes NATO would debate attribution or respond cautiously.

The strongest factors against it are the very high cost of a clearly attributable attack, NATO’s strengthened eastern-flank defenses, Russia’s ongoing military commitment in Ukraine, the lack of evidence of preparations for a deliberate offensive, and the possibility that current diplomatic engagement temporarily restrains escalation. Russia can pursue many of its coercive aims through hybrid activity, reconnaissance, airspace violations, and ambiguous incidents without crossing the kinetic threshold.

Crucially, the resolution criteria are stricter than merely having a Russian-origin drone or missile enter NATO airspace. Accidental spillover, debris, navigation errors, or an ambiguous airspace violation would not qualify unless evidence supported deliberate targeting and an intent to test NATO. That substantially lowers the probability. I assess the chance of a major or sustained attack as only around 1–2%; most of the 10% estimate is concentrated in a small, limited, deniable drone or missile incident during a renewed regional escalation.

I estimate a 14% probability, broadly consistent with the research document and the recent forecast history. Prior: for a deliberate, attributable Russian or Belarusian-proxy kinetic attack on NATO within the remaining roughly 11 weeks, the baseline probability is low, around 8–10%, because Russia faces very high costs from directly testing Article 5 while already engaged in Ukraine. Upward update: the continuing high-volume Russian drone and missile campaign, repeated drone activity near or inside Baltic airspace, Russian reconnaissance flights, Belarus’s geographic and military integration with Russia, and recent Russia-attributed hybrid operations all increase the chance of a limited, deniable strike or miscalculation. These factors raise the estimate by several percentage points. The July missile impact in Poland and other spillover incidents are particularly relevant as evidence that the operational environment can produce NATO-border incidents, although they do not themselves establish deliberate intent. Downward update: no confirmed qualifying attack has occurred, recent NATO-Russia interactions have remained below the attack threshold, diplomatic engagement is ongoing, NATO defenses and surveillance have strengthened, and there is no evidence of a major Russian offensive buildup against NATO. These factors reduce the likelihood of an intentional attack and make a major incursion especially unlikely. The remaining risk is concentrated in a small drone or missile strike, potentially routed through Belarus, against territory or a military asset and followed by Russian denials or claims of accident. The stringent requirement for clear deliberate intent excludes many plausible spillover events, so the probability is materially below the chance of any Russian-linked weapon or debris incident affecting NATO. A reasonable uncertainty range is approximately 11–17%; a major sustained attack remains much less likely, around 1–3%.

Central estimate: 14%. I use a low prior because Russia has strong incentives to avoid a clearly attributable attack on NATO, and the historical base rate of direct Russia-NATO kinetic conflict is very low. For the remaining roughly 80 days, a reasonable pre-evidence prior for a deliberate qualifying attack is about 5%.

Evidence increasing the probability: Russia’s continuing high-volume drone and missile campaign against Ukraine creates more opportunities for deliberate probing, miscalculation, or a deniable strike. Repeated drone activity near or inside Baltic NATO airspace, Russian reconnaissance flights near Poland, Belarus’s military integration with Russia, and Russia-attributed hybrid operations inside NATO indicate a willingness to accept escalation risk. These factors together imply an approximate likelihood ratio of 2.5–3.0 relative to the baseline, raising the estimate into the 12–15% range.

Evidence reducing the probability: the recent Polish missile impact and Baltic drone incidents have not been clearly attributed as deliberate Russian attacks; the latest period was comparatively calm; U.S.-Russian diplomatic engagement remains active; NATO’s eastern-flank defenses have been strengthened; and there is no evidence of a major Russian force buildup for an overt attack. These factors prevent a higher estimate and also make a major invasion highly unlikely.

The strict resolution criteria further constrain the forecast: an accidental spillover, debris impact, ambiguous airspace violation, or hybrid operation would not qualify. The most plausible qualifying event is therefore a small, deliberately targeted drone or missile strike against NATO territory or a military asset, potentially routed through Belarus and then denied by Moscow. Given the balance of evidence, I retain 14%, essentially unchanged from the recent 14% forecasts. A major sustained attack is far less likely, approximately 1–3%.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO territory are rare because the escalation costs are exceptionally high, and Russia has generally preferred coercion, probing, and hybrid activity below the Article 5 threshold. The recent Poland missile incident and other drone incursions did not meet the required intent standard. This supports a low probability, roughly 8–12%, though the ongoing war creates elevated exposure.

Forecaster B (current evidence): The risk is higher than normal because Russian missile and drone operations remain intense, Baltic airspace incidents and reconnaissance flights are recurring, Belarus provides a plausible launch vector, and Russian-attributed hybrid operations show willingness to operate inside NATO. Against this, there is no clear offensive buildup, no recent qualifying incident, and active U.S.-Russia diplomacy. This points to roughly 12–15%.

Forecaster C (incentives and game theory): Moscow could gain information or political leverage from a small, ambiguous strike, especially against a military or logistics asset. However, deliberately testing Article 5 risks NATO cohesion, stronger military involvement, and loss of diplomatic leverage. Russia can obtain many benefits through sabotage, intimidation, and airspace probing without crossing the kinetic threshold. Incentives therefore favor restraint, with a limited deniable strike as the main residual risk.

Forecaster D (quantitative reasoning): About 82 days remain, so even a low daily hazard accumulates to a meaningful probability. The most plausible event is a small drone or missile incident, but the forecast requires not merely impact or airspace violation—it requires credible evidence of deliberate Russian or Russian-directed intent. Applying that substantial resolution filter to the elevated regional activity yields approximately 12–14%.

Forecaster E (devil’s advocate): The 14% central estimate may understate tail risk. A failed diplomatic effort, renewed Russian air campaign, Belarusian involvement, or a casualty-producing incident could rapidly create pressure for a deliberate probe. Ambiguity could also let Moscow test NATO while attempting to avoid uncontrollable escalation. Nonetheless, the absence of current mobilization or explicit crisis indicators makes a near-term attack more likely to remain below the threshold than to cross it.

Aggregating these estimates, I assign a 13% probability. This is close to the recent forecast history and slightly below the research document’s 14% central estimate because the event definition requires deliberate intent and excludes accidental spillover, debris, and unresolved attribution. The most likely qualifying scenario remains a small, deniable drone or missile attack, potentially involving Belarus, rather than a tank incursion or sustained invasion.

The event is narrowly defined: it requires a deliberate, attributable Russian or Russian-directed kinetic attack against NATO territory, personnel, vessels, or military assets before December 1, 2026, with evidence that it was intended at least partly to test Article 5. Accidental spillover, debris, ambiguous airspace violations, and hybrid operations do not qualify.

The historical base rate for an intentional Russian kinetic attack on NATO territory is very low. Russia has repeatedly operated near NATO airspace and conducted hybrid activities inside NATO countries, but it has generally avoided a clearly attributable conventional attack that could trigger a direct NATO response. This strongly limits the prior probability.

The main upward factors are the continuing high-volume Russian air campaign against Ukraine, increased drone activity near Baltic airspace, Russian reconnaissance flights, Belarus’s military integration with Russia, and the possibility of a small deniable strike against a military or logistics target. A limited drone or missile attack would be more plausible than a tank incursion or major territorial operation. Existing spillover incidents also create opportunities for Moscow to disguise a deliberate action as an accident.

The main downward factors are the severe escalation costs for Russia, NATO’s strengthened eastern-flank defenses, the lack of evidence of a major offensive buildup, Russia’s continued military focus on Ukraine, and ongoing U.S.-Russia diplomatic engagement. A deliberate attack would risk unifying NATO and producing consequences that Moscow might not be able to control. The strict requirement to establish both Russian responsibility and deliberate intent further reduces the probability compared with the chance of an accidental or ambiguous incident.

Recombining these factors, I estimate roughly an 11% probability. This is slightly below the research document’s 14% central estimate and consistent with the latest historical forecast of 11%, because the remaining time window is short and there is no reported new qualifying incident or clear preparation for one. I would assign roughly 1–3% to a major or sustained attack, with most of the 11% concentrated in a small drone or missile incident involving Poland, the Baltic states, Romania, Bulgaria, Finland, or a Belarus-linked launch vector.

The estimate could be too high if diplomatic contacts develop into a durable ceasefire or if Russian leaders remain deterred by NATO’s response posture. It could be too low if negotiations collapse, Russia intensifies attacks near NATO borders, Belarus hosts new Russian strike assets, or a future incident causes casualties or major damage and is rapidly attributed to Russian forces.

I estimate a 10% probability, modestly below the document’s 14% central estimate. The remaining window is short—roughly 80 days—and there is no clear evidence of Russian force preparation for a deliberate attack on NATO. Russia remains heavily committed in Ukraine, while NATO’s strengthened eastern-flank posture raises the likely cost of any overt strike and improves detection and attribution. Active U.S.-Russia diplomacy, though fragile, provides an additional short-term disincentive.

The risk is nevertheless material. Russian missile and drone operations against Ukraine are creating repeated opportunities for spillover, miscalculation, or deliberate deniable action. Russian reconnaissance activity, Belarus’s military integration with Moscow, hybrid operations inside NATO, and the accumulation of ambiguous drone incidents all increase the chance of a small kinetic probe. The most plausible qualifying event would be a limited drone or missile strike against NATO territory or a military asset, followed by Russian claims of accident or proxy responsibility.

However, the resolution criteria require more than an airspace violation, debris impact, or accidental spillover: deliberate intent and sufficiently clear Russian or Belarusian attribution must be established, with an apparent purpose of testing NATO’s response. That high evidentiary threshold substantially lowers the probability relative to the chance of some unintentional incident. A major ground attack is extremely unlikely; the principal risk is a small, ambiguous strike. Overall, 10% is consistent with the recent decline from 12% to 10% and with the lack of a new qualifying incident.

I estimate an approximately 11% probability by November 30, 2026. The risk is elevated compared with normal peacetime conditions because Russia is conducting intense drone and missile operations near NATO borders, Belarus provides a potential launch or transit route, and repeated reconnaissance and spillover incidents create opportunities for miscalculation or a deliberately ambiguous limited strike. A small drone or missile attack on a military, logistics, or air-defense site is the most plausible qualifying scenario.

However, the resolution criteria are demanding: the event must be more than accidental spillover or an airspace violation, and available evidence must support deliberate Russian or Russian-directed intent to test NATO. Russia faces very high costs from a clearly attributable attack, while it can pursue many objectives through hybrid activity, intimidation, and deniable operations below the kinetic threshold. NATO’s strengthened eastern-flank defenses also raise the likelihood of detection and attribution, increasing deterrence. There is no reported large Russian buildup for a conventional attack, and ongoing diplomacy provides some additional short-term restraint.

The remaining time window is relatively short, which reduces the chance of a planned major operation but still permits a limited drone or missile incident. I therefore place the probability slightly below the research document’s 14% central estimate and near the recent prediction history’s 12% level. A major sustained attack would be far less likely, probably around 1–3%; most of the 11% estimate is concentrated in a small, ambiguous, limited strike.

I estimate an 11% probability that the event, as narrowly defined, occurs before November 30, 2026. This is slightly below the research document’s 14% central estimate and broadly consistent with the recent prediction history of 8%, 13%, and 12%.

1. Clarifying the event: This is not simply a drone crossing, debris impact, airspace violation, sabotage operation, or accidental spillover. It requires a deliberate kinetic attack by Russia, Belarus acting under clear Russian direction, or a Russian-controlled proxy, with sufficient evidence that the operation was at least partly intended to test NATO’s Article 5 response. That attribution-and-intent requirement materially lowers the probability.

2. Historical base rate: Since the creation of NATO, deliberate conventional Russian attacks on NATO territory have been extremely rare to nonexistent. Russia has repeatedly used coercion, reconnaissance, airspace violations, cyber operations, sabotage, and proxy activity without crossing into an unmistakable armed attack. The base rate for a deliberate attack is therefore very low, although the war in Ukraine and Russia’s increasing risk tolerance raise it above normal peacetime levels.

3. Deliberate Russian decision: The probability that Moscow chooses to conduct a limited test is meaningfully above zero, perhaps around 15–20% over the remaining period. Russia may see value in probing NATO cohesion, especially with ambiguous drones or attacks routed through Belarus. However, a deliberate strike would risk military retaliation, stronger NATO deployments, and loss of diplomatic leverage. Russia can pursue most of its pressure objectives through hybrid means, which remain less costly and are currently preferred.

4. Operational opportunity: The probability of an incident opportunity is elevated, perhaps around 25–35%. Russia is conducting intensive drone and missile operations against Ukraine, while reconnaissance flights, exercises, counter-drone activity, and military deployments are increasing around NATO’s eastern flank. This creates opportunities for miscalculation, spillover, or a deniable operation. The July missile impact in Poland and Baltic drone activity demonstrate the mechanism, but neither established deliberate Russian intent.

5. Attribution and resolution: The probability that a future incident would be credibly attributed to Russia or a Russian-directed Belarusian proxy, and judged deliberate rather than accidental or Ukrainian-origin, is only moderate. Moscow could exploit ambiguity, but ambiguity also makes it difficult for the event to satisfy the forecast’s resolution criteria. This is a major reason not to equate the probability of any kinetic incident with the probability of this specific event.

6. Time window and deterrence: Approximately twelve weeks remain in the supplied assessment framework. That is sufficient for a small drone or missile incident but too short for a major planned invasion absent obvious preparations. NATO’s Eastern Sentry measures, increased air defense, allied exercises, and multinational forces raise the cost of an attack and improve detection. Active U.S.-Russia diplomacy also provides a temporary incentive for restraint, though its effect is limited because no durable settlement has emerged.

The most likely qualifying scenario is a small, ambiguous drone or missile strike against eastern NATO territory, a military or logistics facility, or a vessel, potentially involving Belarus. A major territorial incursion remains much less likely, approximately 1–3%.

I would increase the estimate sharply if there were a confirmed Russian launch from Belarus, a strike on a NATO military installation, multiple coordinated incursions, explicit Russian threats against a member state, or emergency NATO consultations followed by force dispersal. I would reduce it if diplomacy produced a durable ceasefire, Russia reduced military activity near NATO borders, or Moscow and NATO adopted effective incident-management measures.

The main ways this forecast could be wrong are: an apparently accidental incident could later be shown to have been a deliberate probe; Russia could exploit a diplomatic breakdown to escalate rapidly; Belarus could enable an operation without clear public command evidence; or repeated spillover incidents could culminate in a misidentified and rapidly escalating exchange. Conversely, the estimate could be too high if Russia remains focused on Ukraine and continues to prefer deniable hybrid pressure over an action that risks direct war with NATO.

I estimate a 14% probability that a qualifying deliberate Russian or Russian-directed kinetic attack occurs before December 1, 2026. This is a forecast for the remaining roughly 84 days, not for a major invasion.

Prior: For a deliberate Russian attack designed to test NATO while avoiding uncontrolled escalation, I would use a baseline probability of approximately 8–10% over a three-month period. A major sustained attack would have a much lower prior, around 1–3%.

Upward update: Russia’s continuing high-volume drone and missile campaign against Ukraine, repeated drone activity near Baltic airspace, reconnaissance flights near Poland, Belarus’s military integration with Russia, and Russia-attributed hybrid activity inside NATO all increase the opportunity and apparent willingness to conduct a limited, deniable operation. The July missile impact in Poland and recent Baltic drone incidents also show that the operational environment is capable of producing NATO-Russia kinetic contact. Taken together, these factors imply a likelihood ratio of roughly 1.7–2.0 relative to the baseline.

Downward update: The recent incidents have not established deliberate Russian targeting; some may involve Ukrainian systems or accidental spillover. There is no reported major Russian force buildup against the Baltic states, NATO defenses have been strengthened, Russia remains heavily engaged in Ukraine, and ongoing U.S.-Russian diplomatic contact creates a temporary incentive to avoid an unmistakable attack. These considerations reduce the upward update, with an approximate likelihood ratio of 0.8–0.9.

Posterior: Applying these updates to the baseline produces a probability in the low-to-mid teens. I therefore retain a central estimate of 14%, consistent with the recent progression from 8% on September 1 to 13% on September 4 and 14% on September 7.

The most likely qualifying pathway is a small, ambiguous drone or missile strike against NATO territory or a military/logistics asset, potentially involving Belarus, followed by Russian denials or claims of accident. The main reason the estimate is not higher is that the forecast requires evidence of deliberate intent and Russian or Russian-directed responsibility; accidental impacts, debris, airspace violations, and hybrid operations alone do not qualify.

Forecaster A (historical base rates): 10%. Russia has repeatedly used coercion, airspace probing, and hybrid operations against NATO countries while avoiding an overt kinetic attack. The absence of a deliberate Article 5 test over a long period is meaningful, though the war in Ukraine creates more opportunities for escalation.

Forecaster B (current evidence): 14%. The most relevant evidence is the continuing high-volume Russian missile and drone campaign, repeated activity near Baltic airspace, Russian reconnaissance flights, Belarusian military integration, and recent Russian-attributed hybrid operations in NATO states. However, the July Polish missile incident remains unattributed as deliberate, and no new qualifying incident or major offensive buildup has appeared.

Forecaster C (incentives and game theory): 11%. A deliberate strike would risk NATO military retaliation, greater Western unity, and loss of diplomatic leverage. Russia can achieve many of its objectives through sabotage, intimidation, cyber operations, and ambiguous airspace violations without crossing the kinetic threshold. A small deniable attack is possible, but the strategic incentives generally favor staying below that threshold.

Forecaster D (quantitative/statistical reasoning): 13%. With roughly 84 days remaining, the risk is concentrated in a limited number of plausible pathways: a deliberate drone or missile strike, a Belarus-linked incident, or escalation during a renewed Russian air campaign. The daily probability is low, but the elevated operational tempo and growing number of near misses make the cumulative probability material. The stringent requirement to establish both deliberate Russian responsibility and an intent to test NATO reduces the chance relative to the probability of any spillover incident.

Forecaster E (devil’s advocate): 17%. Russia may view a small, ambiguous attack as a way to test NATO’s political cohesion, especially if it believes Washington or European governments would respond cautiously. The density of military activity, ambiguous drone incidents, and Russian willingness to conduct operations inside NATO countries could provide cover for such an action. The main counterargument is that a kinetic strike could produce consequences Moscow cannot control.

Aggregating these estimates gives a central probability of approximately 13%. The probability of any drone or missile incident in NATO territory is higher, but the event requires credible evidence of a deliberate attack by Russia or a Russian-directed Belarusian proxy, rather than accidental spillover, debris, or an unattributed violation. A major ground invasion remains far less likely, probably only around 1–3%. The strongest upward triggers would be a confirmed deliberate strike, weapons launched from Belarus, a collapse of current diplomacy followed by intensified Russian operations, or unusual Russian-Belarusian force movements near the Suwalki corridor. The strongest downward triggers would be a durable ceasefire, explicit U.S. response commitments, or sustained Russian de-escalation.

I estimate a 12% probability, slightly below the research document’s 14% central estimate. The remaining window is only about 12 weeks, and a deliberate kinetic attack on NATO territory or assets remains a high-cost decision for Russia because it could trigger stronger military involvement, sanctions, and alliance cohesion rather than division. Russia is also still focused on Ukraine, while NATO’s enhanced surveillance, air defense, and eastern-flank deployments raise the expected cost of a deliberate operation.

The probability is nevertheless meaningfully above the normal baseline. Russian drone and missile activity around Ukraine creates repeated opportunities for escalation, Belarus provides a plausible launch or transit route, Russian reconnaissance continues near NATO borders, and Moscow has shown willingness to conduct provocative or deniable operations inside NATO countries. A small, ambiguous drone or missile strike is more plausible than a tank incursion or sustained attack.

However, the resolution criteria are strict: accidental spillover, debris, an unresolved airspace violation, or a hybrid operation would not count. The recent Polish missile impact and Baltic drone incidents therefore provide warning evidence but not strong direct evidence of a qualifying attack. The absence of a major Russian buildup, the lack of a recent confirmed NATO-Russia kinetic clash, and ongoing diplomatic engagement also weigh against an imminent deliberate test. Overall, I place the event near 12%, with most of the risk concentrated in a limited and deniable strike rather than a major attack.

I estimate a 10% probability. The remaining window is relatively short—about 12 weeks—and there is no evidence of a Russian force buildup or an imminent planned operation against NATO. Russia is also heavily committed in Ukraine, while a clearly attributable strike would risk a much broader conflict and undermine Moscow’s diplomatic objectives. NATO’s reinforced eastern-flank posture further raises the expected cost of deliberate escalation.

Risk is nevertheless meaningful because Russian drone and missile operations near NATO airspace are frequent, Belarus provides a plausible launch or transit route, and recent reconnaissance, spillover, and hybrid activity show Moscow’s willingness to operate close to or inside NATO states. A small, deniable drone or missile incident is more plausible than a major incursion.

I place the estimate slightly below the research document’s 14% central estimate because the resolution criteria are unusually strict: an incident must be not merely kinetic and attributable to Russia or a Belarusian proxy, but also sufficiently deliberate and plausibly intended to test Article 5. The July Polish impact and recent Baltic drone activity currently look more like spillover or ambiguity than qualifying attacks. Diplomatic engagement and the absence of a new direct incident also modestly reduce near-term risk. Accidental impacts or airspace violations are more likely than a deliberate attack, but would not resolve the event yes.

Clarification: I interpret the event narrowly. It requires a deliberate Russian, Belarusian, or clearly Russian-directed conventional kinetic attack against a NATO member before December 1, 2026, with enough evidence to distinguish it from accidental spillover, debris, an airspace violation, or a hybrid operation. The attack need not be large, but intent to test or probe NATO’s response must be reasonably supported.

Historical base rate: Since Russia’s full-scale invasion of Ukraine, there have been repeated dangerous incursions, missile spillovers, reconnaissance encounters, and ambiguous drone incidents near or inside NATO territory, but no clearly deliberate Russian kinetic attack on NATO. The base rate for a major attack is therefore very low; the base rate for a small, deniable incident is higher but still limited.

Factor estimates:

• Opportunity and operational exposure: moderately high. Russia’s continuing drone and missile campaign, activity near NATO airspace, Belarusian military integration, and dense Baltic exercises create many opportunities for an incident during the roughly 84-day window.
• Russian intent: low to moderate. Moscow has incentives to probe NATO cohesion and already conducts aggressive activity below the overt-war threshold, but a deliberate kinetic attack would carry substantial escalation costs and could strengthen NATO unity.
• Capability: high. Russia and Belarus possess the relevant missiles, drones, surveillance, and launch infrastructure. Capability is not the main constraint.
• Deterrence and defensive posture: strongly downward. Eastern Sentry, allied deployments, air defenses, surveillance, and the prospect of a unified response make a purposeful attack risky.
• Attribution and resolution: downward. Even if a weapon enters NATO territory, proving that it was deliberately targeted by Russia or a Russian-directed proxy—and that it was intended to test Article 5—may be difficult. Many plausible incidents would resolve as accidental spillover or remain ambiguous.
• Diplomacy and Russia’s Ukraine commitments: modestly downward. Current U.S.-Russian engagement and Russia’s continued focus on Ukraine reduce incentives for an unmistakable attack, although failed talks could reverse this effect.

Recombining these factors, I estimate roughly a 15% chance of some Russian-related kinetic spillover or ambiguous incident affecting NATO territory or assets during the remaining period, but only about a 12% chance that such an event will meet the stricter deliberate-attack and intent criteria in the resolution.

This is slightly below the research document’s 14% central estimate. The main reason is that the event’s intent and attribution requirements are unusually demanding: a missile impact or drone crossing alone should not count. A major, sustained attack remains far less likely, probably around 1–3%.

I could be wrong if diplomacy collapses, Russia launches a major new air campaign near NATO borders, Belarus becomes an active launch platform, or Moscow believes Washington would respond cautiously to a small ambiguous strike. Conversely, the estimate would fall materially if a credible ceasefire emerges or if NATO and the United States issue especially clear, coordinated deterrence commitments.

Forecaster A (historical base rates): Deliberate Russian attacks on NATO territory have been rare because the escalation costs are exceptionally high, while Russia has generally preferred deniable hybrid activity and operations below the Article 5 threshold. A limited incident is more plausible than a major invasion, but the stringent requirement for deliberate intent makes the base rate relatively low: 10%.

Forecaster B (current evidence): The risk is elevated by sustained Russian drone and missile operations against Ukraine, repeated activity near Baltic airspace, Russian reconnaissance flights, Belarusian military integration, and recent Russian-attributed hybrid operations in NATO countries. However, the July Polish missile incident remains unattributed as deliberate, there is no major offensive buildup, and diplomatic engagement is ongoing. Estimate: 14%.

Forecaster C (incentives and game theory): Russia has some incentive to test NATO cohesion with a small, ambiguous strike, especially if it perceives Western political divisions. But a clearly attributable attack could trigger military retaliation and unify NATO, making the strategic payoff uncertain and the downside large. Moscow therefore has stronger incentives to remain below the kinetic threshold than to openly test Article 5. Estimate: 11%.

Forecaster D (quantitative/statistical reasoning): Roughly 84 days remain, giving meaningful opportunity for a drone or missile incident but limited time for a major planned operation. The most likely qualifying pathway is a small strike or deliberately directed drone attack. Increasing operational density raises the incident rate, but the requirement to establish deliberate Russian or proxy intent substantially lowers the probability relative to the chance of any spillover event. Estimate: 13%.

Forecaster E (devil's advocate): The apparent calm and diplomacy could be misleading. Russia may exploit ambiguity, Belarusian territory, or a renewed air campaign to conduct a deniable probe, and repeated near misses could normalize escalation. Hybrid activity demonstrates willingness to accept risk inside NATO. These considerations justify a somewhat higher estimate, though not one approaching even odds because an attack would still carry severe and unpredictable consequences. Estimate: 17%.

Aggregating the five views produces a central estimate of approximately 13%. The probability is higher than the chance of a major invasion, but lower than the probability of an accidental spillover or hybrid operation, both of which are excluded. The principal downward factors are deterrence, NATO readiness, Russia's ongoing commitment in Ukraine, and the lack of evidence of offensive preparations. The principal upward factors are the short but nontrivial remaining time window, frequent drone and missile activity near NATO borders, Belarus's role, reconnaissance and counter-drone operations, and the possibility of a small deniable strike intended to probe allied resolve.

I estimate an approximately 11% chance by November 30, 2026. The probability is elevated relative to a normal Russia-NATO baseline because Russian drone and missile operations remain intense, military activity near NATO borders is dense, Belarus provides a plausible launch or transit route, and repeated airspace incidents create opportunities for either deliberate probing or escalation through ambiguity. A small strike against a military, logistics, or air-defense asset is the most plausible qualifying scenario.

However, the event definition is narrow: an accidental spillover, debris impact, ordinary airspace violation, or ambiguous incident would not qualify unless evidence supported deliberate Russian or Russian-directed intent to test Article 5. That substantially lowers the probability compared with the chance of any kinetic incident affecting NATO territory. Russia also faces very high costs from an attributable attack, while NATO’s strengthened eastern-flank defenses make surprise less likely. There is no reported major Russian buildup for a Baltic offensive, and current diplomatic engagement provides some short-term restraint.

The remaining time window is about twelve weeks, which is sufficient for a limited drone or missile operation but too short for a major invasion absent strong warning indicators. I therefore place the estimate slightly below the research document’s 14% central estimate: higher than the 7% forecast on September 1 because of the accumulating incidents and military density, but below the level implied by treating ambiguous spillover as deliberate aggression.

I estimate a 13% probability by November 30, 2026. The main upward pressure comes from the short-range risk environment: Russia is conducting frequent drone and missile attacks against Ukraine, Russian and Belarusian forces operate close to NATO borders, reconnaissance and counter-drone activity are increasing, and recent spillover incidents show that weapons can reach NATO territory. A small, deniable drone or missile strike is substantially more plausible than a tank incursion or major territorial attack.

However, the resolution criteria are demanding. The event must be more than accidental spillover or debris, must be attributable to Russia or a Russian-directed Belarusian proxy, and must be judged deliberate and intended at least partly to test NATO's response. Russia faces very high costs from a clearly attributable attack, while NATO's enhanced air defenses and surveillance reduce the likelihood of a successful deliberate strike. The lack of a visible Russian offensive buildup, the absence of a new qualifying incident in the latest period, and ongoing diplomatic engagement also weigh against an imminent attack.

The probability is therefore modestly below the research document's 14% central estimate, mainly because the remaining time window is only about 12 weeks and deliberate intent would be difficult to establish. A major or sustained attack is far less likely, roughly 1–3%; most of the 13% estimate is concentrated in a limited, ambiguous drone or missile incident involving Poland, the Baltic states, Romania, Bulgaria, or a Belarus-linked launch.

Central estimate: 14% by November 30, 2026. I treat the previous September 4 forecast of 13% as the immediate prior. In odds terms, 13% corresponds to odds of about 0.15:1. The new evidence produces a slightly positive net likelihood update, raising the estimate to roughly 14%.

Downward evidence: the September 5–6 period passed without a new NATO-Russia kinetic incident; U.S.-Russian diplomatic engagement is ongoing; NATO defenses and surveillance have strengthened; and there is no clear evidence of a Russian force buildup for a major Baltic offensive. These factors reduce the likelihood of a deliberate attack in the remaining 84 days, particularly a large or overt one.

Upward evidence: Russia continues intensive missile and drone operations against Ukraine, increasing the chance of a deliberate or plausibly deniable strike near NATO territory. Recent drone spillover, the July missile impact in Poland, Russian reconnaissance activity, Belarusian military integration, and Russian-attributed hybrid operations indicate a dense and increasingly risk-tolerant operating environment. These factors raise the probability of a small drone or missile attack more than they raise the probability of a major invasion.

The main Bayesian distinction is between the probability of any kinetic spillover and the narrower event here. Accidental impacts or ambiguous airspace violations are more likely than 14%, but they should not qualify unless deliberate Russian or Russian-directed intent can be established. Conversely, a limited deniable strike is the most plausible qualifying pathway, especially against an eastern NATO member or military asset. Overall, the positive and negative updates largely offset, leaving the forecast only modestly above the previous 13% estimate and within the document's 11–17% range.

I estimate a 13% probability, modestly above the prior 8% forecast but below the upper end of the research document’s 12–18% range.

1. Clarifying the event: The event requires more than a Russian airspace violation, accidental spillover, debris impact, sabotage, or cyber operation. It requires a deliberate kinetic attack by Russia, Belarus under clear Russian direction, or a Russian-controlled proxy against NATO territory, personnel, vessels, or military assets before December 1, 2026. Because the attack must be interpreted as at least partly intended to test NATO’s response, ambiguous incidents may not qualify.

2. Historical base rate: Since NATO’s expansion and the end of the Cold War, Russia has repeatedly conducted coercive and hybrid operations against NATO members but has avoided an unambiguous deliberate conventional attack. The base rate for a direct attack is therefore very low. Recent Russian behavior raises the near-term risk, but does not overturn that historical pattern.

3. Factors increasing the probability: Russia is conducting intensive missile and drone operations near NATO borders; there have been repeated airspace incursions and a missile landing in Poland; Russian-linked sabotage inside NATO countries indicates willingness to operate there; Belarus provides a plausible route for deniable action; and Moscow could view a small drone or missile strike as a way to probe NATO political cohesion without launching a major war. The remaining period also includes enough time for a limited incident to occur during a Ukrainian strike campaign or regional military exercise.

4. Factors reducing the probability: A clearly attributable attack could trigger Article 4 consultations, military retaliation, further NATO deployments, and much stronger Western support for Ukraine. Russia is already heavily committed in Ukraine and can pursue many of its coercive objectives through sabotage, cyber operations, disinformation, and airspace violations without crossing the kinetic threshold. NATO’s strengthened eastern-flank defenses also increase the chance of rapid detection and attribution. A tank attack is especially unlikely because it would require conspicuous preparations and carry high escalation risks.

5. Recombination: I assess roughly a 15–18% chance of some deliberate Russian or Russian-directed kinetic incident against NATO territory in the remaining period, but reduce that estimate because the resolution criteria require sufficiently clear intent and attribution. This produces a central estimate of about 13% for the specific event.

6. Overconfidence check: The estimate should not be treated as precise. A small drone or missile incident could be classified differently depending on evidence about targeting, command responsibility, and intent. The probability is also highly sensitive to one sudden crisis, such as a serious border incident, a Belarus-related military move, or a major escalation in Ukraine.

7. Why this could be wrong: I could be underestimating Putin’s willingness to accept escalation, the possibility of an unauthorized or proxy action, or the chance that Russia deliberately exploits an ongoing Ukrainian strike to conceal a test of NATO. Conversely, I could be overestimating the significance of recent incidents: they may reflect reckless but still bounded behavior, while the strong costs of an overt attack continue to deter Moscow. A major sustained attack remains far less likely, probably around 1–3%, but a limited ambiguous drone or missile strike is the principal pathway to a 'yes' resolution.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO territory are rare because the escalation costs are exceptionally high, while Russia has repeatedly preferred sabotage, cyberattacks, airspace violations, and other below-threshold actions. This supports a low single-digit baseline, modestly increased by the ongoing war and repeated near misses.

Forecaster B (current evidence): The recent missile landing in Poland, repeated drone incursions, intensified Russian strikes near NATO borders, and Russian-linked activity in Germany indicate a more dangerous environment than when the prior estimate was 8%. However, none clearly constitutes a deliberate qualifying attack, and NATO has strengthened eastern-flank defenses. The evidence supports an upward revision, but not a dramatic one.

Forecaster C (incentives and game theory): Russia has incentives to probe NATO cohesion, especially through a small, ambiguous drone or missile incident. But a clearly attributable attack could trigger military retaliation and undermine Russia’s broader strategic position. Moscow can often obtain similar coercive benefits through hybrid operations, making a deliberate kinetic test less attractive. Belarus could provide ambiguity, but would not eliminate escalation risks.

Forecaster D (quantitative/statistical reasoning): With roughly three months remaining, the opportunity window is limited but nontrivial. The relevant hazard is elevated by the density of Russian attacks around Ukraine and the number of airspace incidents, yet the event definition excludes accidents, debris, and ambiguous violations. A reasonable estimate is in the low-to-mid teens, with major sustained conflict far below that.

Forecaster E (devil’s advocate): The probability could be higher if Russia interprets Western political signals as weak, if a Belarus-linked operation is used to create ambiguity, or if an accidental spillover is deliberately reframed as a probe. Conversely, the stringent requirement for clear deliberate intent makes many plausible incidents non-qualifying. The strongest counterargument to a higher estimate is that Russia has already found effective ways to pressure NATO without crossing this threshold.

Aggregating these views, I estimate a 14% probability before December 1, 2026. This is above the previous 8% forecast because of the deteriorating environment and repeated kinetic near misses, but below the research document’s upper range because the remaining time is short and the resolution criteria require deliberate, attributable kinetic action rather than accidental spillover or hybrid activity.

Starting from the previous forecast of 8%, the prior odds were about 0.087. The evidence since then modestly raises the risk: repeated Russian airspace violations, the July missile impact in Poland, intensified attacks near NATO borders, and the Leipzig/Halle operation indicate a more reckless and escalatory environment. These factors support a likelihood ratio above 1, roughly 1.7, because they increase opportunities for either deliberate probing or dangerous escalation.

However, the update is limited. No confirmed qualifying kinetic attack has occurred, the Leipzig incident is hybrid and excluded, the Polish missile incident was not shown to be deliberate, and Russia can continue pursuing many objectives below the Article 5 threshold. NATO's strengthened defenses and the severe consequences of an overt attack also reduce the likelihood of a deliberate test. The remaining window is only about three months, further limiting the probability.

Applying the net evidence to the 8% prior gives a posterior of approximately 13%. This is near the lower end of the research document's 12–18% range. The most likely qualifying scenario would be a small, ambiguous drone or missile strike linked to Russia or Belarus; a major sustained attack remains much less likely.

I estimate a 12% probability. The risk is meaningfully above the previous 7% forecast because Russia has intensified operations near NATO airspace, there have been repeated incursions and a missile landing in Poland, Belarus remains a plausible launch or transit vector, and Russia-linked activity inside NATO countries suggests a worsening escalation ladder. The remaining three months also include continued high-tempo Russian attacks on Ukraine, creating opportunities for deliberate ambiguity or a limited probe.

However, the resolution criteria are stringent: the incident must be a clearly attributable, deliberate kinetic attack rather than debris, accidental spillover, an airspace violation, sabotage, or another hybrid operation. Russia can pursue many coercive objectives below that threshold, and a direct strike would risk a substantially broader NATO response while Russia remains engaged in Ukraine. NATO's strengthened eastern defenses and the difficulty of concealing a meaningful attack further reduce the likelihood. A small, ambiguous drone or missile strike is plausible, but a major attack is very unlikely; therefore I place the overall probability modestly above the research document's lower bound, rather than near its 18% upper bound.

I estimate a 14% probability. The probability is elevated from the prior 8% forecast because the remaining period features increased Russian drone and missile activity near NATO borders, repeated airspace incursions, the Poland missile incident, Russian-linked operations inside NATO countries, and intensified Russia-Belarus cooperation. These developments create more opportunities for either deliberate probing or an incident that Moscow could exploit as a limited test of NATO cohesion.

However, the event definition is stringent: the attack must be a deliberate kinetic strike by Russia or a clearly Russian-directed Belarusian proxy, not merely hybrid activity, accidental spillover, debris, or an ambiguous airspace violation. The Leipzig operation is excluded, and the July Poland incident lacks evidence of deliberate targeting. Russia also has strong incentives to avoid an unmistakable attack that could trigger a unified NATO response, while it can pursue many objectives through sabotage, cyberattacks, coercion, and deniable activity below the kinetic threshold. NATO’s strengthened eastern defenses further reduce the likelihood of a successful or politically useful surprise attack.

With roughly three months remaining, a small drone or missile strike is the most plausible pathway, particularly during a period of heavy attacks on Ukraine or heightened Belarusian activity. A major or sustained attack is very unlikely, but the chance of a limited, ambiguous kinetic test is meaningful. The estimate is therefore above the previous 8% but below the upper end of the research document’s 12–18% range because proving deliberate intent to test Article 5 will be difficult.

Clarification: The event is a deliberate, attributable Russian or Belarusian-proxy kinetic attack on the territory of a NATO member before November 30, 2026, using drones, missiles, or ground forces. Hybrid activity, accidental spillover, isolated airspace violations, and ambiguous incidents that do not clearly constitute an attack are excluded.

Historical base rate: The historical base rate is very low. Russia has repeatedly used cyber operations, sabotage, disinformation, airspace incursions, and other gray-zone tactics against NATO countries, but it has avoided an overt kinetic attack on NATO territory. NATO deterrence, the risk of a much larger war, and Russia’s need to prioritize Ukraine all weigh against such a decision.

Key factors:

1. Russian incentives to test NATO: Moderate upward pressure. Moscow may see value in probing alliance cohesion, especially if it perceives U.S. disengagement, political division, or weak willingness to respond. A small drone or missile strike could theoretically be intended to create ambiguity and test the threshold for collective action.
2. Military availability and strategic priorities: Downward pressure. Russia remains heavily committed to the war in Ukraine. A deliberate attack on NATO would expose Russian forces and infrastructure to potentially overwhelming allied retaliation, making it a costly way to achieve political objectives.
3. NATO deterrence and alliance response: Strong downward pressure. Even if Article 5 consultation is not automatic, an unambiguous armed attack would likely trigger a substantial allied response. Russia has strong reasons to believe that a kinetic attack would be difficult to contain.
4. Gray-zone escalation: Moderate upward pressure. Continued drone incursions, sabotage, and other provocations increase the chance of miscalculation or gradual escalation. However, the event definition requires a clear kinetic attack, not merely a continuation of these activities.
5. Belarusian involvement: Slight upward pressure but limited. Belarus could provide geographic access or deniability, particularly near Poland or the Baltic states. Nevertheless, proxy use would not reliably prevent NATO from attributing responsibility to Russia, so it offers only limited protection against retaliation.
6. Time window and warning: The remaining period through November 2026 provides opportunities for escalation, but a deliberate operation would probably generate substantial intelligence warning through force movements, logistics, exercises, and political preparation. This reduces the likelihood of a surprise attack.

Recombination: The supplied reference estimates roughly 9% for a limited kinetic action on the Baltic flank and about 17% for a broader Russia-NATO military clash. This event is narrower than the broader clash estimate but somewhat broader than a major Baltic operation because it includes a small drone or missile attack and a Belarusian proxy. After accounting for the low historical base rate, Russia’s current constraints, and the strong deterrent effect of NATO, I estimate an 8% probability.

Why this could be wrong: The probability could be materially higher if the Ukraine war ends on terms Russia interprets as a victory, Russian forces regenerate quickly, U.S. political commitment to NATO weakens, or a crisis involving Belarus creates a plausible pretext for intervention. It could also be higher if repeated incursions produce an accidental or deliberately calibrated kinetic strike. Conversely, a durable ceasefire, stronger NATO deployments, clear allied red lines, or continued Russian military exhaustion would reduce the risk substantially. The main uncertainty is that a low-level attack could be designed to remain ambiguous, making classification under the event’s definition difficult.

I estimate an approximately 8% probability. The strongest factor against the event is Russia’s incentive to avoid a clearly attributable kinetic attack on NATO territory: even a limited strike could trigger a military response, strengthen NATO cohesion, and create an escalation pathway Russia cannot control. Russia is also heavily constrained by the war in Ukraine, while NATO’s eastern flank has increased its readiness and deterrent posture.

The risk is nevertheless material. Russia has repeatedly used airspace violations, sabotage, coercion, and other gray-zone actions, and it may eventually judge that a small drone or missile strike—or a Belarus-linked provocation—could test allied resolve. A limited fait accompli or ambiguous strike would be less costly than a major invasion, especially if Moscow perceives political divisions within NATO or reduced U.S. commitment. The next roughly 18 months also provide considerable time for miscalculation or escalation from the Ukraine war.

The cited estimates support a low-single-digit to low-teens range: the approximately 9% estimate for limited Baltic action is directly relevant, while the roughly 17% market estimate appears broader because it covers any Russia-NATO military clash and therefore likely includes events outside this narrower definition. Historical precedent—frequent hybrid activity but no deliberate kinetic attack on NATO territory—also argues for a probability below 10%. I assign 8%, with most of the risk concentrated in an ambiguous or limited drone/missile incident rather than a tank attack or sustained operation.

I estimate an 8% probability that Russia conducts a qualifying kinetic attack on NATO territory by November 30, 2026.

Prior: The historical base rate for a deliberate overt Russian attack on a NATO member is very low. Since NATO's creation, Russia has repeatedly used coercion, cyberattacks, sabotage, and airspace violations without launching a clearly attributable conventional attack. A prior around 3–5% is therefore appropriate for this relatively short time horizon.

Evidence increasing the probability: Russia is already conducting more aggressive gray-zone activity, NATO cohesion may be perceived as weaker, and limited attacks could theoretically be used to test allied resolve. The cited market estimate of roughly 17% for any NATO–Russia military clash and SIGMA's roughly 9% estimate for limited Baltic military action provide external indications that risk is elevated above the historical baseline. These signals raise the estimate toward the high single digits.

Evidence limiting the probability: A deliberate missile, drone, or ground attack would create a substantial risk of an uncontrollable NATO-Russia war, making it much costlier than hybrid activity. Russia remains constrained by the war in Ukraine, NATO deterrence and forward deployments remain significant, and past provocations have generally stayed below the threshold of unmistakable armed attack. The 17% clash estimate is also broader than this event because it may include accidental or ambiguous incidents, while the cited intelligence reporting is indirect and potentially unreliable.

Overall update: Combining the elevated regional risk with the strong deterrent and escalation costs produces a posterior near 8%. This includes a limited strike or proxy attack, but excludes cyber, sabotage, disinformation, and ambiguous airspace incidents unless they involve a clearly attributable kinetic attack on NATO territory.

My aggregate estimate is 8%. Forecaster A (historical base rates) assigns roughly 4–6%: Russia has repeatedly used hybrid pressure and airspace violations against NATO members but has avoided an acknowledged kinetic attack, despite many opportunities. Forecaster B (current evidence) assigns 9–12%, reflecting increased drone incursions, missile incidents, concern about NATO cohesion, and reported assessments that Moscow could consider a limited test. Forecaster C (incentives and game theory) assigns 6–9%: Russia has incentives to probe Western resolve, especially if it perceives U.S. disengagement or allied division, but a deliberate strike risks a war with the entire alliance and therefore has strongly negative expected value. Forecaster D (quantitative reasoning) assigns about 8–10%, broadly consistent with the cited estimates of around 9% for limited Baltic action and approximately 17% for a broader Russia–NATO clash; the narrower event definition warrants a lower figure than the broader clash estimate. Forecaster E (devil’s advocate) assigns 3–5%, emphasizing that the cited intelligence and market signals may conflate gray-zone incidents, accidents, and a general military clash with a deliberate attack intended to test Article 5. The final estimate is above the long-run baseline because of the Ukraine war, Russian coercive behavior, Belarusian integration, and possible perceived Western weakness, but remains below 10% because NATO deterrence is strong, Russia is heavily constrained by the war in Ukraine, and even a limited overt attack could trigger uncontrollable escalation. Hybrid incidents and accidental spillover are substantially more likely than the narrowly defined event and are excluded from this estimate.

I estimate a 7% probability. The event is narrower than a general Russia–NATO clash: it requires a deliberate kinetic attack on NATO territory, including a drone, missile, or tank strike, rather than an accidental incursion or hybrid operation. Russia has strong incentives to probe NATO cohesion, particularly if it perceives U.S. disengagement or allied divisions, and Belarus could provide additional access to the Baltic region. Ongoing airspace violations and other gray-zone activity modestly increase the risk of miscalculation or escalation. However, a deliberate attack would expose Russia to a potentially overwhelming NATO response and could create a much larger war, making it strategically far riskier than sabotage, cyberattacks, or deniable incursions. Russia’s continuing military demands in Ukraine and NATO’s increased eastern-flank posture further reduce the attractiveness of an overt test. The cited 9% estimate for a limited Baltic attack is broadly consistent with this assessment, while the roughly 17% market estimate for any NATO–Russia clash likely includes broader and less deliberate incidents than this question allows. I therefore place the probability toward the lower-middle part of the proposed 1–10% range.