Russia attacks NATO member before December 2026

Forecaster A (historical base rates): 14%. Russia has repeatedly operated near NATO territory, but deliberate kinetic attacks on NATO members remain rare because the escalation costs are exceptionally high. The short remaining window also limits the opportunity for a major operation.

Forecaster B (current evidence): 24%. The armed explosive-carrying drone entering Lithuania from the Belarusian direction, Poland's warning about possible disguised Russian strikes, and repeated Russian activity near NATO borders are meaningful upward indicators. If the Lithuanian incident is later attributed to Russia or Belarus and judged intentional, the event could resolve yes without a new attack.

Forecaster C (incentives and game theory): 18%. Russia may have incentives to test NATO cohesion through a deniable, limited strike, especially against a logistics or border target. However, even a small attack risks triggering a much larger NATO response and could undermine Russia's strategic position, making deliberate escalation unattractive.

Forecaster D (quantitative/statistical reasoning): 17%. The event requires several conditions simultaneously: kinetic action, NATO territory or assets, Russian or proxy responsibility, deliberate intent, and an Article 5-testing purpose. Nearby incidents raise the chance of a qualifying event, but most plausible incidents will instead be accidental spillover, ambiguous airspace violations, or hybrid operations. With roughly two months remaining, the cumulative probability is elevated but still below one in five.

Forecaster E (devil's advocate): 15%. The research may overinterpret public warnings and ambiguous incidents. Poland and other frontline states have strong incentives to publicize threats, while Russia has generally avoided an unmistakable attack on NATO despite many opportunities. The Lithuanian drone may ultimately be attributed to a non-Russian actor, an accident, or an operation without demonstrable Article 5-testing intent.

Aggregating these estimates gives a value around 18%. The main reason not to use the document's 22% central estimate is the strict resolution standard: a future incident must be shown to be deliberate, Russian-directed or Belarusian-proxy, and intended at least partly to test NATO. The Lithuanian incident is a significant near miss and could itself later qualify, but its attribution and intent remain unresolved. A small deniable drone or missile strike is considerably more likely than a tank incursion or sustained attack, while a major Russian assault remains very unlikely.

I estimate a 21% probability that the event resolves yes before December 1, 2026. This is modestly above the latest historical estimate of 17% on September 22, but below the research document’s 22% central estimate because the resolution criteria require more than an armed incursion: Russian or clearly Russian-directed responsibility, deliberate kinetic action, and evidence that it was intended at least partly to test NATO.

Prior: The forecast history rose from 8% on September 1 to 14% by September 7. That trajectory implies a baseline risk in the low-to-mid teens before the latest evidence, reflecting Russia’s ongoing war with Ukraine, repeated incidents near NATO borders, and Russia’s established use of deniable coercion.

Update 1 — Armed drone in Lithuania: The explosive-carrying drone entering Lithuanian airspace from the Belarusian direction is strong evidence that a qualifying attack is operationally feasible. It raises the probability substantially, but less than proportionally because attribution and intent remain unresolved. I treat this as an upward likelihood ratio of roughly 1.5–1.7.

Update 2 — Polish warning of possible disguised strikes: The warning that Russia may prepare drone or missile attacks and portray them as accidents directly matches the forecast scenario. Because the underlying intelligence is unpublished and Poland has incentives to emphasize the threat, I assign it a moderate rather than decisive upward effect, roughly 1.2–1.3.

Update 3 — Russian activity near NATO borders: The strike near the Poland-Ukraine border, repeated air-defense scrambles, and dangerous Baltic encounters increase opportunity and escalation risk. These developments support a further modest increase, roughly 1.1–1.2, but do not demonstrate a decision to attack NATO territory.

Downward adjustments: The Lithuanian incident may prove accidental, Ukrainian, criminal, or otherwise unrelated to a Russian decision. NATO defenses and rapid responses increase deterrence, while a clearly attributable attack would impose severe military and political costs on Russia. The remaining time window is also limited, with roughly two months left. These factors together reduce the estimate from what would otherwise be around 28–32% after the positive evidence.

The most likely qualifying pathway is a limited, deniable Russian or Belarusian-proxy drone or missile strike against a military, logistics, communications, border, or transport target in Poland or the Baltic states. A major invasion or tank incursion remains far less likely, probably around 2–4%. The main uncertainty is whether future evidence will establish deliberate Russian direction rather than merely confirm another dangerous but ambiguous spillover incident.

I estimate a 20% probability that the event, under its relatively strict resolution criteria, occurs before December 1, 2026.

The base rate for a deliberate Russian kinetic attack on NATO territory is low. Since the start of the Ukraine war, Russia has repeatedly conducted dangerous operations near NATO borders, but it has generally avoided an unmistakable, attributable attack on Alliance territory. A major invasion or sustained incursion remains very unlikely, probably around 2–4%.

The probability is nevertheless materially higher than the historical baseline because roughly two months remain and several developments point toward a plausible limited-strike pathway: an explosive-carrying drone entered Lithuania from the Belarusian direction; Russian attacks have occurred close to Poland; Polish leadership has publicly warned of possible Russian strikes disguised as accidents; and military activity in the Baltic and along NATO’s eastern flank is dense. These factors make a small drone or missile incident operationally feasible.

My factor assessment is approximately:

• Opportunity for a limited kinetic incident: 35–45%. Russian operations near NATO borders, dense air activity, and Belarusian access create meaningful opportunity.
• Russian or Belarusian willingness to conduct a deliberate probe: 25–35%. Moscow has incentives to test allied cohesion, but the escalation risks remain substantial.
• Successful execution or penetration of NATO territory: 35–50%. A drone or missile could be intercepted, but even an intercepted weapon might qualify if deliberate targeting is subsequently established.
• Clear attribution and evidence of deliberate intent to test NATO: 45–60% conditional on an incident. This is the largest constraint. The Lithuanian case demonstrates that even an armed incursion may remain ambiguous, accidental, Ukrainian, criminal, or otherwise difficult to attribute.

Combining these factors gives a lower probability than the research document’s central estimate of 22%, but still within its stated range. I reduce the estimate modestly because the document may double-count related indicators: the Lithuanian incident, Polish warning, nearby strikes, and NATO activity all reflect the same underlying deterioration. I also assign substantial weight to the strict requirement that the event be more than accidental spillover and be plausibly intended, at least in part, to test Article 5.

The most likely qualifying scenario is a small, deniable drone or missile attack against a border-area logistics, military, communications, or transport target in Poland or the Baltic states, potentially involving Belarus. A tank attack or major territorial incursion is much less likely.

The main reasons I could be wrong are that the Lithuanian drone may later be conclusively attributed to Russia or Belarus, effectively resolving the event; intelligence behind Poland’s warning may reflect a concrete operational plan rather than a general assessment; or Russia may calculate that a deniable strike carries manageable escalation costs. Conversely, a ceasefire, stronger NATO deterrence, clear attribution of the Lithuanian incident to a non-Russian actor, or Russia’s continued fear of direct confrontation could keep the probability closer to 10–15%.

I estimate a 19% probability by November 30, 2026. The risk is clearly elevated: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction, Russia has conducted strikes close to Poland, and Poland has publicly warned of possible Russian attacks disguised as accidents. These developments make a limited drone or missile incident against a NATO member plausible within the roughly two-month window.

However, the resolution criteria are unusually narrow. The event must be more than accidental spillover or an airspace violation, and available evidence must support deliberate Russian or Russian-directed action intended at least partly to test NATO. The Lithuanian incident may eventually qualify, but its origin and intent remain unresolved; it could still prove accidental, Ukrainian, criminal, or otherwise unattributable. A future incident would face the same attribution problem.

Russia has strong incentives to probe NATO but also substantial incentives to avoid a clearly attributable kinetic attack that could trigger a military response. NATO's strengthened air defenses and the visibility of the eastern flank further reduce the chance of a successful deliberate strike, while a major ground attack remains far below 5%.

Relative to the document's 22% estimate, I apply a modest downward adjustment because the remaining time is short and because the requirement to establish deliberate intent to test Article 5 will exclude many plausible border incidents. The probability is therefore best viewed as moderate but clearly below even odds, with most of the risk concentrated in a small, deniable drone or missile operation involving Poland or the Baltic states.

I estimate a 16% probability by November 30, 2026. The risk is clearly elevated: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction, Russian attacks have occurred near Poland, and Poland has publicly warned of possible Russian strikes disguised as accidents. These developments make a limited drone or missile incident the most plausible pathway.

However, the resolution criteria are unusually demanding. The event must be more than accidental spillover or an ambiguous airspace violation, and available evidence must support Russian or Russian-directed responsibility plus deliberate intent to test NATO. The Lithuanian incident currently fails that attribution and intent test, and similar future incidents may also remain unresolved. Russia has strong incentives to avoid an unmistakable attack that could trigger a broader NATO response, while NATO air policing and regional defenses make a successful strike more difficult.

The remaining roughly ten weeks are sufficient for a small deniable incident, but not long enough to make one likely absent a major escalation. I therefore place the probability above the earlier baseline and recent 9–14% estimates, but below the research document's 22% central estimate, which appears to give substantial weight to near-qualifying incidents and publicly reported warnings without fully discounting the stringent resolution standard.

I estimate a 19% probability that the event will occur by November 30, 2026. This is somewhat below the research document’s 22% central estimate because the resolution criteria are unusually demanding: the incident must be kinetic, attributable to Russia or a Russian-directed Belarusian proxy, deliberate rather than accidental, and plausibly intended in part to test NATO’s Article 5 commitment.

The historical base rate for Russia deliberately attacking NATO territory or assets is very low. Since the start of the Ukraine war, Russia has repeatedly operated near NATO borders and has caused several dangerous spillover incidents, but it has generally avoided an unmistakable attack on a NATO member. This reflects the high costs of direct confrontation with the Alliance, Russia’s ongoing resource commitments in Ukraine, and NATO’s strengthened air-defense and surveillance posture.

The risk is nevertheless materially above the normal baseline. The armed drone entering Lithuania from the Belarusian direction, the explosive payload, Russia’s strikes near the Polish border, repeated Baltic military encounters, and the Polish warning about possible deniable Russian attacks all support a meaningful probability of a limited kinetic probe. A small drone or missile incident is much more plausible than a tank incursion or sustained territorial attack.

A rough decomposition is: approximately 25% for any deliberate Russian or Russian-directed kinetic incident affecting NATO territory, personnel, vessels, or military assets during the remaining period; multiplied by roughly 75% that such an incident would ultimately be judged sufficiently deliberate, attributable, and connected to testing NATO rather than being accidental, criminal, Ukrainian, or merely ambiguous. This produces an estimate near 19%.

The main upward factor is the possibility that the Lithuanian incident is later attributed to Russia or Belarus and judged intentional. The main downward factors are the short remaining time window, the lack of confirmed attribution, Russia’s strong incentive to preserve deniability and avoid a direct NATO confrontation, and the possibility that NATO’s visible response already provides deterrence. I assign only about 2–4% to a major or sustained Russian attack; nearly all of the estimated probability concerns a limited drone, missile, maritime, or proxy incident.

I could be wrong chiefly if the Lithuanian drone investigation reveals clear Russian or Belarusian direction, or if Polish intelligence reflects a concrete operational plan rather than a broad warning. Conversely, the probability would be overstated if the Lithuanian incident proves non-Russian or accidental, if improved NATO defenses prevent further incursions, or if Russia prioritizes avoiding escalation while continuing to rely on hybrid operations, which are excluded from this forecast.

My estimate is 17%, somewhat below the research document’s 22% central estimate because the resolution criteria require not merely a kinetic incident, but evidence of deliberate Russian or Russian-directed responsibility and an intent to test NATO’s response.

Prior: The latest historical forecast was 14%. I use that as the starting prior, reflecting the short remaining window—about 71 days—as well as the historically low frequency of deliberate Russian attacks on NATO territory.

Update 1—Lithuanian armed drone incident: This is strong evidence of increased operational risk. An explosive-carrying drone entered NATO airspace from the Belarusian direction and was intercepted. If later attributed to Russia or Belarus and shown to have been deliberately routed, it could itself qualify. However, origin and intent remain unresolved, so I apply only a moderate upward update, roughly equivalent to a likelihood ratio of 1.4.

Update 2—Polish intelligence warning: The warning that Russia may prepare drone or missile attacks disguised as accidents directly matches the forecast scenario. Because the underlying intelligence is unpublished and Poland has incentives to emphasize the threat, I treat it as meaningful but not decisive: likelihood ratio about 1.2.

Update 3—Russian activity near NATO borders: The strike near the Poland-Ukraine border, repeated air-defense scrambles, and Baltic military incidents show greater opportunity for spillover or deliberate probing. These raise the chance of an incident, but they do not by themselves establish a Russian decision to attack NATO: likelihood ratio about 1.15.

Downward update—deterrence and attribution barriers: NATO’s strengthened air defenses, rapid responses, and the very high escalation costs for Moscow reduce the likelihood of a deliberate attack. In addition, even if an armed drone or missile enters NATO territory, proving that it was a deliberate Russian or Belarusian proxy operation intended to test Article 5 may be difficult. I apply a downward factor of roughly 0.8.

Downward update—limited time and strict resolution standard: With only about ten weeks remaining, the event requires both occurrence and subsequent attribution of intent. Accidental spillover, debris, navigation errors, criminal activity, or ambiguous incursions are more likely than a clearly qualifying attack. This lowers the estimate relative to a broader question about any Russian kinetic incident in NATO territory.

Overall, the probability has risen materially from the earlier 8–14% range, but I do not adopt the full 22% estimate. The most likely qualifying pathway remains a small, deniable drone or missile incident involving Poland or a Baltic state, potentially using Belarus as a launch or transit point. A major ground invasion remains very unlikely, well below 5%.

I estimate a 17% probability. The strongest evidence for an eventual YES is the convergence of several warning signs: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction; Russian strikes have approached Poland and other NATO borders; Polish officials report intelligence suggesting Russia may contemplate deniable strikes; and the Baltic region has seen increasingly risky military encounters. These developments make a small, ambiguous drone or missile incident more plausible than a major invasion.

However, the forecast definition is narrow. It requires not merely a kinetic incident, but evidence that Russia, Belarus under Russian direction, or a controlled proxy deliberately attacked NATO territory or assets, with the action intended at least partly to test Article 5. The Lithuanian incident currently falls short because origin, command responsibility, targeting, and intent remain unresolved. Accidental spillover, debris, navigation errors, criminal activity, or an unattributed drone event are materially more likely than a clearly attributable Russian attack.

Russia also has strong incentives to avoid an unmistakable attack on NATO, especially while engaged in Ukraine. NATO's strengthened air defenses and rapid responses increase deterrence, while a limited attack could still produce unpredictable escalation and sanctions. The short remaining window—roughly ten weeks—also limits the opportunity for a deliberate operation.

The prior 10% estimate appears somewhat too low given the recent armed-drone incident and intelligence warning, but the research document's 22% estimate likely gives substantial weight to evidence that has not yet established deliberate Russian intent. I therefore place the probability above the historical estimates but below the document's central estimate. A major sustained attack is far less likely, probably only around 2–4%; most of the 17% reflects the possibility of a small, deniable drone or missile strike that is later attributed to Russia or a Belarusian proxy.

My aggregate estimate is 16%, somewhat below the research document's 22% central estimate. The risk is clearly elevated: an explosive-carrying drone entered Lithuanian airspace from the Belarusian direction, Russian attacks have occurred near NATO borders, and Poland has publicly warned of possible deliberately ambiguous Russian strikes. These developments make a limited drone or missile incident the most plausible pathway, particularly against Poland or the Baltic states.

However, the event definition is demanding. It requires not merely a kinetic incident or airspace violation, but evidence that Russia or a Russian-directed Belarusian proxy acted deliberately and that the action was intended in part to test NATO's Article 5 response. The Lithuanian incident remains unattributed and could ultimately be accidental, Ukrainian, criminal, or otherwise unrelated to a Russian decision. The July Polish missile incident and other spillovers likewise do not qualify absent evidence of deliberate targeting.

Forecaster A, historical base rates, would place the probability around 10-12%: Russia has strong incentives to avoid an unmistakable attack on NATO, while prior near misses have generally stopped short of deliberate kinetic attacks. Forecaster B, emphasizing current evidence, would estimate 20-22% because of the Lithuanian drone, Polish intelligence warning, and increasing border proximity. Forecaster C, focusing on incentives, would assign about 14-16%: a deniable probe could serve Russian objectives, but the escalation risks remain severe and NATO defenses are improving. Forecaster D, using the short 71-day horizon and conditional event rates, would estimate roughly 15-17%; there may be opportunities for incidents, but the probability of clear attribution and qualifying intent is much lower. Forecaster E, as devil's advocate, would give 10-12%, stressing that public warnings may reflect deterrence messaging and that the evidence may be suffering from recency bias.

Combining these views yields approximately 16%. A major or sustained Russian attack is far less likely, probably around 2-4%; most of the 16% risk is concentrated in a small, deniable drone or missile strike whose deliberate nature is established only after investigation.

I estimate a 14% probability by November 30, 2026. The risk is materially elevated because Russia is operating close to NATO territory, an explosive-carrying drone entered Lithuania from the Belarusian direction, and Polish authorities have publicly warned of possible deniable Russian strikes. A limited drone or missile incident is operationally feasible and would be more plausible than a tank incursion or sustained attack.

However, the resolution criteria are unusually demanding: the event must be a deliberate kinetic attack, attributable to Russia or a Russian-directed Belarusian proxy, and supported by evidence that it was more than accidental spillover and intended at least partly to test NATO. The Lithuanian incident currently lacks sufficient attribution and intent evidence, and it may ultimately be classified as accidental, criminal, Ukrainian, or otherwise unresolved. The same ambiguity would likely surround any future small incident, reducing the chance that it qualifies.

Russia also faces substantial escalation costs from a clear attack on NATO, while NATO’s strengthened air defenses and rapid-response posture increase deterrence. With roughly ten weeks remaining, I assign about 4% probability that the Lithuanian case is retrospectively reclassified as qualifying and about 10% probability of a new qualifying incident. A major or sustained attack remains far below 1-2%; the main risk is a small, deniable drone or missile strike near the eastern NATO flank.

I estimate a 12% probability that the event, as narrowly defined, occurs before December 1, 2026. This is slightly below the research document’s 14% central estimate because the latest prediction history extends through September 16, while the remaining time window is now shorter.

Base rate: Since the start of the Ukraine war, Russia has repeatedly conducted dangerous operations near NATO territory, but it has not deliberately launched a clearly attributable conventional attack on a NATO member. The historical base rate for an intentional Russia-NATO kinetic attack is therefore very low. The current war raises the risk above the normal peacetime level, but not to a high-probability event.

Key factors:

1. Opportunity and exposure — upward pressure. Russian missile and drone operations against Ukraine, reconnaissance flights, Belarusian military integration, and dense activity around the Baltic and eastern flank create multiple opportunities for a limited strike, spillover event, or deniable probe. This supports a probability meaningfully above 5%.

2. Russian intent — moderate upward pressure. Moscow has shown willingness to conduct coercive and hybrid operations inside NATO countries and to test Western responses. A small, ambiguous drone or missile attack is more plausible than a major invasion. However, there is no clear evidence of a current decision to initiate a NATO confrontation.

3. Deterrence and escalation costs — strong downward pressure. A deliberate attack would risk NATO military retaliation, further Western military support for Ukraine, and loss of diplomatic leverage. NATO’s strengthened eastern-flank posture also makes surprise and deniability more difficult.

4. Current military indicators — downward to neutral. There is no reported large Russian buildup against the Baltic states, no clear offensive preparation, and no newly identified qualifying incident. Exercises and reconnaissance activity are concerning but are not, by themselves, evidence of imminent attack.

5. Diplomacy — modest downward pressure. Continuing U.S.-Russia diplomatic engagement creates an incentive for Moscow to avoid an unmistakable attack, although the lack of a durable ceasefire means this effect is limited.

6. Time remaining — downward pressure. With roughly ten to eleven weeks left, there is still enough time for a small drone or missile incident, particularly during a renewed Russian air campaign, but insufficient time for a large planned offensive to develop without warning.

Scenario weighting: I assign roughly 8–10% to a deliberate limited drone or missile attack that could plausibly be interpreted as a test of NATO, about 1–2% to a more overt or sustained attack, and a small additional probability to a Belarus-linked or proxy action that meets the attribution and intent threshold. These categories are not fully independent, so I do not simply add their maximum values; the combined estimate is approximately 12%.

The principal reason not to forecast higher is that Russia can pursue most of its coercive aims through hybrid activity, airspace pressure, reconnaissance, and deniable operations without crossing the kinetic threshold. The principal reason not to forecast lower is that repeated spillover incidents and ambiguous drone activity create a realistic pathway to a deliberately limited strike disguised as an accident.

I could be wrong if intelligence has not detected preparations for a deniable operation, if diplomatic talks collapse abruptly, or if Russia concludes that NATO would respond weakly to a small incident. Conversely, the event may not occur even after a serious border incident because attribution or intent remains ambiguous, which is especially important given the forecast’s strict resolution criteria.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO members have been rare, while near misses, airspace violations, and hybrid operations are considerably more common. The short remaining window through November 30 further limits the chance of a planned attack. Estimate: 10%.

Forecaster B (current evidence): The environment is unusually tense: Russia continues intensive drone and missile operations, reconnaissance activity near NATO borders persists, Belarus provides a possible launch or transit route, and ambiguous spillover incidents have occurred. However, there is no clear offensive buildup, no recent qualifying incident, and diplomacy remains active. Estimate: 13%.

Forecaster C (incentives and game theory): Moscow has incentives to probe NATO cohesion, particularly with a small deniable drone or missile incident, but the costs of a clearly attributable attack are very high. Russia can achieve much of its coercive objective through hybrid activity and airspace pressure without crossing the kinetic threshold. Estimate: 12%.

Forecaster D (quantitative reasoning): Starting from a low annual base rate for deliberate Russia-NATO attacks, the elevated operational tempo and roughly 75-day remaining period justify a meaningful increase, but the strict requirement for deliberate intent and attribution substantially reduces the probability relative to the likelihood of accidental spillover. Estimate: 11%.

Forecaster E (devil’s advocate): The forecast may understate escalation risk because repeated ambiguous incidents can normalize Russian probing, and a small attack could be designed specifically to exploit attribution uncertainty. A failed diplomatic process or renewed major Russian air campaign could sharply increase risk. Nevertheless, absent such a trigger, 14% is probably somewhat high. Estimate: 9%.

Aggregating these views produces a central estimate of approximately 11–12%. I use 12% as the final probability. The most plausible qualifying scenario is a limited, deliberate drone or missile strike against eastern NATO territory or a military asset, potentially involving Belarus and followed by Russian denials. A major invasion remains far less likely, while accidental spillover is more probable than the event as strictly defined but does not qualify on its own.

I estimate an 8% probability through November 30, 2026. The main risk is a small, deniable drone or missile incident involving Poland or a Baltic state, potentially launched via Belarus. Russia has demonstrated willingness to conduct risky operations near and inside NATO countries, and the high volume of attacks on Ukraine creates opportunities for deliberate probing or escalation disguised as an accident. However, the resolution standard is demanding: the incident must be a deliberate kinetic attack, Russian or clearly Russian-directed, and intended at least partly to test Article 5. Existing spillovers, airspace violations, debris, and the July Polish missile impact do not clearly meet that standard. Russia remains heavily engaged in Ukraine, NATO defenses and surveillance have strengthened, there is no reported major offensive buildup against NATO territory, and a clearly attributable attack would carry substantial and difficult-to-control escalation costs. The remaining time window is also relatively short, while recent diplomatic engagement provides some additional restraint. Hybrid operations raise concern but are excluded and do not by themselves imply that Moscow will cross the kinetic threshold. The declining prior estimates are directionally justified, though I would keep the probability somewhat above the recent 9% forecast because the eastern-flank operating environment remains unusually dense and ambiguous.

Central estimate: 14%. Prior: The recent forecast history has stabilized at 14% since September 7, after rising from 8% on September 1 as evidence of drone activity, Russian reconnaissance, and spillover risk accumulated. I therefore use 14% as the current prior for the remaining period.

Downward updates: No confirmed qualifying Russian or Belarusian-proxy kinetic attack has occurred, and recent NATO-Russia activity has remained below the attack threshold. Temporary U.S.-Russian-Ukrainian diplomacy, NATO’s strengthened eastern-flank defenses, and the absence of evidence for a major Russian buildup reduce the incentive and opportunity for a deliberate attack. These factors have a modestly negative likelihood ratio for an attack, roughly reducing the implied risk by 10–15%.

Upward updates: Russia continues intensive drone and missile operations against Ukraine, creating ongoing opportunities for spillover, miscalculation, or a deliberately ambiguous strike. Russian reconnaissance near NATO borders, Belarus’s military integration with Russia, prior missile impact in Poland, and Russian-attributed hybrid operations inside NATO increase the plausibility of a limited deniable kinetic test. These factors provide a modest positive likelihood ratio, roughly offsetting the downward evidence.

Resolution-specific adjustment: The event requires more than an accidental impact or airspace violation; Russian or proxy responsibility and deliberate intent to test Article 5 must be sufficiently established. This substantially lowers the probability relative to the chance of any weapon or debris incident in NATO territory. A small drone or missile strike remains the most plausible qualifying pathway, while a tank attack or major invasion is very unlikely.

The remaining time window is shorter than in the earlier assessments, which modestly lowers the probability of a planned major operation but still leaves meaningful opportunity for a limited strike during renewed Russian air activity or a diplomatic breakdown. Overall, the evidence supports holding the estimate near the established 14% level, with an approximate plausible range of 11–17%.

I estimate a 10% probability that a qualifying event occurs before December 1, 2026. The risk is elevated relative to the normal Russia-NATO baseline because Russian drone and missile operations remain intense, spillover incidents have already reached NATO territory, Belarus provides a potential launch or transit route, and Russian reconnaissance and hybrid activity indicate willingness to probe NATO defenses. The remaining period is also long enough for a limited drone or missile incident.

However, the resolution criteria are substantially narrower than merely having a Russian weapon enter NATO airspace. The event must be a deliberate kinetic attack, attributable to Russia or a Russian-directed Belarusian proxy, and sufficiently intentional to support the interpretation that it was testing Article 5. The July missile impact in Poland and recent Baltic drone incidents appear more consistent with spillover, malfunction, or ambiguous attribution and therefore do not strongly establish that Russia has decided to attack NATO.

The strongest factors against a qualifying attack are the high expected costs of provoking NATO, Russia's continuing military focus on Ukraine, strengthened NATO air defenses, the lack of evidence of an offensive buildup against the Baltic states, and ongoing diplomatic engagement. A major or sustained attack remains very unlikely, probably around 13%; most of the 10% estimate is concentrated in a small, deniable drone or missile strike. The recent downward prediction trend from 14% to 10% is reasonable given the absence of a new direct NATO-Russia incident and the shrinking time window, though the residual risk remains meaningful because a limited ambiguous attack could occur with little warning.

Forecaster A (historical base rates): A deliberate Russian kinetic attack on NATO territory has a very low base rate because the escalation risks are extreme and Russia has generally remained below the Article 5 threshold despite repeated opportunities. The remaining time is short, and there is no evidence of preparations for a major attack. However, limited deniable drone or missile incidents are more plausible than a major invasion, supporting a low-teens estimate rather than a near-zero probability.

Forecaster B (current evidence): The evidence shows elevated operational danger but no confirmed qualifying incident. Russian missile and drone attacks on Ukraine, repeated reconnaissance near NATO borders, ambiguous drone spillover, Belarusian military integration, and Russian-attributed hybrid activity all increase risk. Offsetting factors include active diplomacy, NATO defensive preparations, the absence of a major Russian buildup, and the fact that recent incidents remain ambiguous or accidental. Current evidence supports roughly 12–15%.

Forecaster C (incentives and game theory): Moscow may have incentives to test NATO cohesion with a small, deniable strike, especially against a military or logistics target and possibly via Belarus. Yet the likely consequences—stronger NATO unity, expanded military support for Ukraine, and possible direct conflict with the Alliance—make an intentional attack unattractive unless Russia believes attribution or allied response would remain uncertain. Russia can obtain many coercive benefits through hybrid operations and airspace probing without crossing the kinetic threshold. This keeps the probability in the low teens.

Forecaster D (quantitative reasoning): With approximately 2.5 months remaining, the relevant hazard is concentrated in rare limited incidents rather than a sustained invasion. A rough annualized risk for a deliberate qualifying incident in this environment, discounted for the short window and the strict attribution/intent criteria, yields a probability around 10–15%. The chance of some accidental spillover is higher, but accidental or unresolved incidents do not count. A point estimate of about 13% is reasonable.

Forecaster E (devil’s advocate): The 13–14% estimate may understate tail risk because Russia has already accepted increasing risks around NATO airspace, and ambiguity could make a small strike politically attractive. A failed or deteriorating diplomatic process, a renewed Russian air campaign, or a Belarus-linked operation could produce rapid escalation. Nevertheless, this argument raises the estimate only modestly because such an attack would still be a major strategic gamble and the forecast excludes many likely spillover and hybrid events.

Aggregating the five views, the probability is approximately 13%. This is slightly below the research document’s 14% central estimate because the resolution criteria require not merely a kinetic incident, but credible evidence of deliberate Russian or Russian-directed action and an intent to test Article 5. The most likely qualifying pathway is a small, ambiguous drone or missile attack before December 1, 2026; a tank incursion or major sustained attack remains highly unlikely.

Clarifying the event: this requires more than a Russian or Belarusian weapon entering NATO airspace or causing accidental spillover. It requires a deliberate, attributable kinetic attack before December 1, 2026, with evidence that it was intended at least partly to test NATO’s Article 5 response. A small drone or missile strike would be the most plausible form; a tank incursion or sustained attack is much less likely.

Historical base rate: Russia has repeatedly conducted dangerous military and hybrid activity near or inside NATO territory, but since NATO’s creation there has been no clearly deliberate conventional Russian attack on a NATO member. The base rate for an intentional attack is therefore very low. The current Russia-Ukraine war raises the risk of miscalculation and limited probing, but the strict intent and attribution requirements materially reduce the probability of resolution.

Key upward factors include Russia’s continuing high-volume missile and drone campaign against Ukraine, repeated airspace incidents and reconnaissance flights near the Baltic states and Poland, Belarus’s military integration with Russia, Russian-attributed hybrid operations inside NATO, and the possibility that Moscow would prefer a small, ambiguous test rather than a major invasion. These factors make a limited deniable drone or missile incident plausible.

Key downward factors are the severe escalation costs of a clearly attributable attack, Russia’s continuing military commitment in Ukraine, strengthened NATO air defenses and surveillance, the absence of evidence of a major Russian buildup against the Baltic states, and ongoing diplomatic engagement. NATO’s demonstrated tendency to distinguish spillover incidents from deliberate attacks also reduces the likelihood that an ambiguous event will satisfy the resolution criteria.

The recent forecast history moved from 8% to 13%, then stabilized around 11–12%. The research document’s 14% central estimate appears somewhat aggressive because it gives substantial weight to ambiguous incidents and hybrid activity that are explicitly excluded. I therefore place the probability modestly above the latest 11% estimates but below 14%, at 12%.

I could be wrong if diplomacy collapses, Russia launches an unusually large autumn air campaign, or Moscow exploits a drone incident near Belarus or the Baltic region to test allied political cohesion. Conversely, an apparently serious incident may remain unresolved as to attribution or intent and therefore fail to qualify. The probability of a major sustained Russian attack is far lower, probably around 1–3%; most of the 12% estimate is concentrated in a small, deniable drone or missile strike.

I estimate a 9% probability by November 30, 2026. The main reason for keeping the estimate below the document’s 14% central estimate is the forecast’s stringent resolution standard: an incident must be a deliberate Russian or Russian-directed kinetic attack, not merely a spillover, airspace violation, debris impact, malfunction, or ambiguous proxy operation. Those excluded incidents are considerably more likely than an intentional Article 5 test.

The probability is nevertheless material because roughly 11 weeks remain, Russian missile and drone operations against Ukraine continue at high volume, Belarus provides a plausible launch or transit route, and repeated reconnaissance and counter-drone activity increase the risk of miscalculation or a deliberately deniable strike. A small drone or missile incident against a military or logistics site is the most plausible pathway.

Factors limiting the probability include Russia’s substantial military commitment in Ukraine, the very high strategic cost of a clearly attributable attack, strengthened NATO surveillance and air defenses, the absence of evidence of a major offensive buildup, and the possibility that Moscow prefers hybrid or ambiguous activity that remains below the kinetic threshold. Active U.S.-Russian diplomacy also modestly reduces near-term incentives for an overt attack, although the lack of a durable settlement means this effect is limited.

The recent history of estimates clustering around 10%, together with no reported new qualifying incident or major deterioration, supports a roughly 9–10% assessment rather than a sharp upward revision. A major territorial invasion is far less likely; most of the estimated risk comes from a limited, deniable drone or missile strike whose attribution and intent would initially be contested.

I estimate a 10% probability by November 30, 2026. This is slightly below the research document’s 11–17% range and consistent with the recent downward history from 14% to 11%.

The main factors supporting the event are Russia’s continuing high-volume missile and drone campaign against Ukraine, repeated activity near NATO airspace, Russian reconnaissance around Poland and the Baltic region, Belarus’s military integration with Russia, and Moscow’s demonstrated willingness to conduct risky operations below the threshold of open war. A small, deniable drone or missile strike remains plausible, especially if Russia believes NATO would debate attribution or respond cautiously.

The strongest factors against it are the very high cost of a clearly attributable attack, NATO’s strengthened eastern-flank defenses, Russia’s ongoing military commitment in Ukraine, the lack of evidence of preparations for a deliberate offensive, and the possibility that current diplomatic engagement temporarily restrains escalation. Russia can pursue many of its coercive aims through hybrid activity, reconnaissance, airspace violations, and ambiguous incidents without crossing the kinetic threshold.

Crucially, the resolution criteria are stricter than merely having a Russian-origin drone or missile enter NATO airspace. Accidental spillover, debris, navigation errors, or an ambiguous airspace violation would not qualify unless evidence supported deliberate targeting and an intent to test NATO. That substantially lowers the probability. I assess the chance of a major or sustained attack as only around 1–2%; most of the 10% estimate is concentrated in a small, limited, deniable drone or missile incident during a renewed regional escalation.

I estimate a 14% probability, broadly consistent with the research document and the recent forecast history. Prior: for a deliberate, attributable Russian or Belarusian-proxy kinetic attack on NATO within the remaining roughly 11 weeks, the baseline probability is low, around 8–10%, because Russia faces very high costs from directly testing Article 5 while already engaged in Ukraine. Upward update: the continuing high-volume Russian drone and missile campaign, repeated drone activity near or inside Baltic airspace, Russian reconnaissance flights, Belarus’s geographic and military integration with Russia, and recent Russia-attributed hybrid operations all increase the chance of a limited, deniable strike or miscalculation. These factors raise the estimate by several percentage points. The July missile impact in Poland and other spillover incidents are particularly relevant as evidence that the operational environment can produce NATO-border incidents, although they do not themselves establish deliberate intent. Downward update: no confirmed qualifying attack has occurred, recent NATO-Russia interactions have remained below the attack threshold, diplomatic engagement is ongoing, NATO defenses and surveillance have strengthened, and there is no evidence of a major Russian offensive buildup against NATO. These factors reduce the likelihood of an intentional attack and make a major incursion especially unlikely. The remaining risk is concentrated in a small drone or missile strike, potentially routed through Belarus, against territory or a military asset and followed by Russian denials or claims of accident. The stringent requirement for clear deliberate intent excludes many plausible spillover events, so the probability is materially below the chance of any Russian-linked weapon or debris incident affecting NATO. A reasonable uncertainty range is approximately 11–17%; a major sustained attack remains much less likely, around 1–3%.

Central estimate: 14%. I use a low prior because Russia has strong incentives to avoid a clearly attributable attack on NATO, and the historical base rate of direct Russia-NATO kinetic conflict is very low. For the remaining roughly 80 days, a reasonable pre-evidence prior for a deliberate qualifying attack is about 5%.

Evidence increasing the probability: Russia’s continuing high-volume drone and missile campaign against Ukraine creates more opportunities for deliberate probing, miscalculation, or a deniable strike. Repeated drone activity near or inside Baltic NATO airspace, Russian reconnaissance flights near Poland, Belarus’s military integration with Russia, and Russia-attributed hybrid operations inside NATO indicate a willingness to accept escalation risk. These factors together imply an approximate likelihood ratio of 2.5–3.0 relative to the baseline, raising the estimate into the 12–15% range.

Evidence reducing the probability: the recent Polish missile impact and Baltic drone incidents have not been clearly attributed as deliberate Russian attacks; the latest period was comparatively calm; U.S.-Russian diplomatic engagement remains active; NATO’s eastern-flank defenses have been strengthened; and there is no evidence of a major Russian force buildup for an overt attack. These factors prevent a higher estimate and also make a major invasion highly unlikely.

The strict resolution criteria further constrain the forecast: an accidental spillover, debris impact, ambiguous airspace violation, or hybrid operation would not qualify. The most plausible qualifying event is therefore a small, deliberately targeted drone or missile strike against NATO territory or a military asset, potentially routed through Belarus and then denied by Moscow. Given the balance of evidence, I retain 14%, essentially unchanged from the recent 14% forecasts. A major sustained attack is far less likely, approximately 1–3%.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO territory are rare because the escalation costs are exceptionally high, and Russia has generally preferred coercion, probing, and hybrid activity below the Article 5 threshold. The recent Poland missile incident and other drone incursions did not meet the required intent standard. This supports a low probability, roughly 8–12%, though the ongoing war creates elevated exposure.

Forecaster B (current evidence): The risk is higher than normal because Russian missile and drone operations remain intense, Baltic airspace incidents and reconnaissance flights are recurring, Belarus provides a plausible launch vector, and Russian-attributed hybrid operations show willingness to operate inside NATO. Against this, there is no clear offensive buildup, no recent qualifying incident, and active U.S.-Russia diplomacy. This points to roughly 12–15%.

Forecaster C (incentives and game theory): Moscow could gain information or political leverage from a small, ambiguous strike, especially against a military or logistics asset. However, deliberately testing Article 5 risks NATO cohesion, stronger military involvement, and loss of diplomatic leverage. Russia can obtain many benefits through sabotage, intimidation, and airspace probing without crossing the kinetic threshold. Incentives therefore favor restraint, with a limited deniable strike as the main residual risk.

Forecaster D (quantitative reasoning): About 82 days remain, so even a low daily hazard accumulates to a meaningful probability. The most plausible event is a small drone or missile incident, but the forecast requires not merely impact or airspace violation—it requires credible evidence of deliberate Russian or Russian-directed intent. Applying that substantial resolution filter to the elevated regional activity yields approximately 12–14%.

Forecaster E (devil’s advocate): The 14% central estimate may understate tail risk. A failed diplomatic effort, renewed Russian air campaign, Belarusian involvement, or a casualty-producing incident could rapidly create pressure for a deliberate probe. Ambiguity could also let Moscow test NATO while attempting to avoid uncontrollable escalation. Nonetheless, the absence of current mobilization or explicit crisis indicators makes a near-term attack more likely to remain below the threshold than to cross it.

Aggregating these estimates, I assign a 13% probability. This is close to the recent forecast history and slightly below the research document’s 14% central estimate because the event definition requires deliberate intent and excludes accidental spillover, debris, and unresolved attribution. The most likely qualifying scenario remains a small, deniable drone or missile attack, potentially involving Belarus, rather than a tank incursion or sustained invasion.

The event is narrowly defined: it requires a deliberate, attributable Russian or Russian-directed kinetic attack against NATO territory, personnel, vessels, or military assets before December 1, 2026, with evidence that it was intended at least partly to test Article 5. Accidental spillover, debris, ambiguous airspace violations, and hybrid operations do not qualify.

The historical base rate for an intentional Russian kinetic attack on NATO territory is very low. Russia has repeatedly operated near NATO airspace and conducted hybrid activities inside NATO countries, but it has generally avoided a clearly attributable conventional attack that could trigger a direct NATO response. This strongly limits the prior probability.

The main upward factors are the continuing high-volume Russian air campaign against Ukraine, increased drone activity near Baltic airspace, Russian reconnaissance flights, Belarus’s military integration with Russia, and the possibility of a small deniable strike against a military or logistics target. A limited drone or missile attack would be more plausible than a tank incursion or major territorial operation. Existing spillover incidents also create opportunities for Moscow to disguise a deliberate action as an accident.

The main downward factors are the severe escalation costs for Russia, NATO’s strengthened eastern-flank defenses, the lack of evidence of a major offensive buildup, Russia’s continued military focus on Ukraine, and ongoing U.S.-Russia diplomatic engagement. A deliberate attack would risk unifying NATO and producing consequences that Moscow might not be able to control. The strict requirement to establish both Russian responsibility and deliberate intent further reduces the probability compared with the chance of an accidental or ambiguous incident.

Recombining these factors, I estimate roughly an 11% probability. This is slightly below the research document’s 14% central estimate and consistent with the latest historical forecast of 11%, because the remaining time window is short and there is no reported new qualifying incident or clear preparation for one. I would assign roughly 1–3% to a major or sustained attack, with most of the 11% concentrated in a small drone or missile incident involving Poland, the Baltic states, Romania, Bulgaria, Finland, or a Belarus-linked launch vector.

The estimate could be too high if diplomatic contacts develop into a durable ceasefire or if Russian leaders remain deterred by NATO’s response posture. It could be too low if negotiations collapse, Russia intensifies attacks near NATO borders, Belarus hosts new Russian strike assets, or a future incident causes casualties or major damage and is rapidly attributed to Russian forces.

I estimate a 10% probability, modestly below the document’s 14% central estimate. The remaining window is short—roughly 80 days—and there is no clear evidence of Russian force preparation for a deliberate attack on NATO. Russia remains heavily committed in Ukraine, while NATO’s strengthened eastern-flank posture raises the likely cost of any overt strike and improves detection and attribution. Active U.S.-Russia diplomacy, though fragile, provides an additional short-term disincentive.

The risk is nevertheless material. Russian missile and drone operations against Ukraine are creating repeated opportunities for spillover, miscalculation, or deliberate deniable action. Russian reconnaissance activity, Belarus’s military integration with Moscow, hybrid operations inside NATO, and the accumulation of ambiguous drone incidents all increase the chance of a small kinetic probe. The most plausible qualifying event would be a limited drone or missile strike against NATO territory or a military asset, followed by Russian claims of accident or proxy responsibility.

However, the resolution criteria require more than an airspace violation, debris impact, or accidental spillover: deliberate intent and sufficiently clear Russian or Belarusian attribution must be established, with an apparent purpose of testing NATO’s response. That high evidentiary threshold substantially lowers the probability relative to the chance of some unintentional incident. A major ground attack is extremely unlikely; the principal risk is a small, ambiguous strike. Overall, 10% is consistent with the recent decline from 12% to 10% and with the lack of a new qualifying incident.

I estimate an approximately 11% probability by November 30, 2026. The risk is elevated compared with normal peacetime conditions because Russia is conducting intense drone and missile operations near NATO borders, Belarus provides a potential launch or transit route, and repeated reconnaissance and spillover incidents create opportunities for miscalculation or a deliberately ambiguous limited strike. A small drone or missile attack on a military, logistics, or air-defense site is the most plausible qualifying scenario.

However, the resolution criteria are demanding: the event must be more than accidental spillover or an airspace violation, and available evidence must support deliberate Russian or Russian-directed intent to test NATO. Russia faces very high costs from a clearly attributable attack, while it can pursue many objectives through hybrid activity, intimidation, and deniable operations below the kinetic threshold. NATO’s strengthened eastern-flank defenses also raise the likelihood of detection and attribution, increasing deterrence. There is no reported large Russian buildup for a conventional attack, and ongoing diplomacy provides some additional short-term restraint.

The remaining time window is relatively short, which reduces the chance of a planned major operation but still permits a limited drone or missile incident. I therefore place the probability slightly below the research document’s 14% central estimate and near the recent prediction history’s 12% level. A major sustained attack would be far less likely, probably around 1–3%; most of the 11% estimate is concentrated in a small, ambiguous, limited strike.

I estimate an 11% probability that the event, as narrowly defined, occurs before November 30, 2026. This is slightly below the research document’s 14% central estimate and broadly consistent with the recent prediction history of 8%, 13%, and 12%.

1. Clarifying the event: This is not simply a drone crossing, debris impact, airspace violation, sabotage operation, or accidental spillover. It requires a deliberate kinetic attack by Russia, Belarus acting under clear Russian direction, or a Russian-controlled proxy, with sufficient evidence that the operation was at least partly intended to test NATO’s Article 5 response. That attribution-and-intent requirement materially lowers the probability.

2. Historical base rate: Since the creation of NATO, deliberate conventional Russian attacks on NATO territory have been extremely rare to nonexistent. Russia has repeatedly used coercion, reconnaissance, airspace violations, cyber operations, sabotage, and proxy activity without crossing into an unmistakable armed attack. The base rate for a deliberate attack is therefore very low, although the war in Ukraine and Russia’s increasing risk tolerance raise it above normal peacetime levels.

3. Deliberate Russian decision: The probability that Moscow chooses to conduct a limited test is meaningfully above zero, perhaps around 15–20% over the remaining period. Russia may see value in probing NATO cohesion, especially with ambiguous drones or attacks routed through Belarus. However, a deliberate strike would risk military retaliation, stronger NATO deployments, and loss of diplomatic leverage. Russia can pursue most of its pressure objectives through hybrid means, which remain less costly and are currently preferred.

4. Operational opportunity: The probability of an incident opportunity is elevated, perhaps around 25–35%. Russia is conducting intensive drone and missile operations against Ukraine, while reconnaissance flights, exercises, counter-drone activity, and military deployments are increasing around NATO’s eastern flank. This creates opportunities for miscalculation, spillover, or a deniable operation. The July missile impact in Poland and Baltic drone activity demonstrate the mechanism, but neither established deliberate Russian intent.

5. Attribution and resolution: The probability that a future incident would be credibly attributed to Russia or a Russian-directed Belarusian proxy, and judged deliberate rather than accidental or Ukrainian-origin, is only moderate. Moscow could exploit ambiguity, but ambiguity also makes it difficult for the event to satisfy the forecast’s resolution criteria. This is a major reason not to equate the probability of any kinetic incident with the probability of this specific event.

6. Time window and deterrence: Approximately twelve weeks remain in the supplied assessment framework. That is sufficient for a small drone or missile incident but too short for a major planned invasion absent obvious preparations. NATO’s Eastern Sentry measures, increased air defense, allied exercises, and multinational forces raise the cost of an attack and improve detection. Active U.S.-Russia diplomacy also provides a temporary incentive for restraint, though its effect is limited because no durable settlement has emerged.

The most likely qualifying scenario is a small, ambiguous drone or missile strike against eastern NATO territory, a military or logistics facility, or a vessel, potentially involving Belarus. A major territorial incursion remains much less likely, approximately 1–3%.

I would increase the estimate sharply if there were a confirmed Russian launch from Belarus, a strike on a NATO military installation, multiple coordinated incursions, explicit Russian threats against a member state, or emergency NATO consultations followed by force dispersal. I would reduce it if diplomacy produced a durable ceasefire, Russia reduced military activity near NATO borders, or Moscow and NATO adopted effective incident-management measures.

The main ways this forecast could be wrong are: an apparently accidental incident could later be shown to have been a deliberate probe; Russia could exploit a diplomatic breakdown to escalate rapidly; Belarus could enable an operation without clear public command evidence; or repeated spillover incidents could culminate in a misidentified and rapidly escalating exchange. Conversely, the estimate could be too high if Russia remains focused on Ukraine and continues to prefer deniable hybrid pressure over an action that risks direct war with NATO.

I estimate a 14% probability that a qualifying deliberate Russian or Russian-directed kinetic attack occurs before December 1, 2026. This is a forecast for the remaining roughly 84 days, not for a major invasion.

Prior: For a deliberate Russian attack designed to test NATO while avoiding uncontrolled escalation, I would use a baseline probability of approximately 8–10% over a three-month period. A major sustained attack would have a much lower prior, around 1–3%.

Upward update: Russia’s continuing high-volume drone and missile campaign against Ukraine, repeated drone activity near Baltic airspace, reconnaissance flights near Poland, Belarus’s military integration with Russia, and Russia-attributed hybrid activity inside NATO all increase the opportunity and apparent willingness to conduct a limited, deniable operation. The July missile impact in Poland and recent Baltic drone incidents also show that the operational environment is capable of producing NATO-Russia kinetic contact. Taken together, these factors imply a likelihood ratio of roughly 1.7–2.0 relative to the baseline.

Downward update: The recent incidents have not established deliberate Russian targeting; some may involve Ukrainian systems or accidental spillover. There is no reported major Russian force buildup against the Baltic states, NATO defenses have been strengthened, Russia remains heavily engaged in Ukraine, and ongoing U.S.-Russian diplomatic contact creates a temporary incentive to avoid an unmistakable attack. These considerations reduce the upward update, with an approximate likelihood ratio of 0.8–0.9.

Posterior: Applying these updates to the baseline produces a probability in the low-to-mid teens. I therefore retain a central estimate of 14%, consistent with the recent progression from 8% on September 1 to 13% on September 4 and 14% on September 7.

The most likely qualifying pathway is a small, ambiguous drone or missile strike against NATO territory or a military/logistics asset, potentially involving Belarus, followed by Russian denials or claims of accident. The main reason the estimate is not higher is that the forecast requires evidence of deliberate intent and Russian or Russian-directed responsibility; accidental impacts, debris, airspace violations, and hybrid operations alone do not qualify.

Forecaster A (historical base rates): 10%. Russia has repeatedly used coercion, airspace probing, and hybrid operations against NATO countries while avoiding an overt kinetic attack. The absence of a deliberate Article 5 test over a long period is meaningful, though the war in Ukraine creates more opportunities for escalation.

Forecaster B (current evidence): 14%. The most relevant evidence is the continuing high-volume Russian missile and drone campaign, repeated activity near Baltic airspace, Russian reconnaissance flights, Belarusian military integration, and recent Russian-attributed hybrid operations in NATO states. However, the July Polish missile incident remains unattributed as deliberate, and no new qualifying incident or major offensive buildup has appeared.

Forecaster C (incentives and game theory): 11%. A deliberate strike would risk NATO military retaliation, greater Western unity, and loss of diplomatic leverage. Russia can achieve many of its objectives through sabotage, intimidation, cyber operations, and ambiguous airspace violations without crossing the kinetic threshold. A small deniable attack is possible, but the strategic incentives generally favor staying below that threshold.

Forecaster D (quantitative/statistical reasoning): 13%. With roughly 84 days remaining, the risk is concentrated in a limited number of plausible pathways: a deliberate drone or missile strike, a Belarus-linked incident, or escalation during a renewed Russian air campaign. The daily probability is low, but the elevated operational tempo and growing number of near misses make the cumulative probability material. The stringent requirement to establish both deliberate Russian responsibility and an intent to test NATO reduces the chance relative to the probability of any spillover incident.

Forecaster E (devil’s advocate): 17%. Russia may view a small, ambiguous attack as a way to test NATO’s political cohesion, especially if it believes Washington or European governments would respond cautiously. The density of military activity, ambiguous drone incidents, and Russian willingness to conduct operations inside NATO countries could provide cover for such an action. The main counterargument is that a kinetic strike could produce consequences Moscow cannot control.

Aggregating these estimates gives a central probability of approximately 13%. The probability of any drone or missile incident in NATO territory is higher, but the event requires credible evidence of a deliberate attack by Russia or a Russian-directed Belarusian proxy, rather than accidental spillover, debris, or an unattributed violation. A major ground invasion remains far less likely, probably only around 1–3%. The strongest upward triggers would be a confirmed deliberate strike, weapons launched from Belarus, a collapse of current diplomacy followed by intensified Russian operations, or unusual Russian-Belarusian force movements near the Suwalki corridor. The strongest downward triggers would be a durable ceasefire, explicit U.S. response commitments, or sustained Russian de-escalation.

I estimate a 12% probability, slightly below the research document’s 14% central estimate. The remaining window is only about 12 weeks, and a deliberate kinetic attack on NATO territory or assets remains a high-cost decision for Russia because it could trigger stronger military involvement, sanctions, and alliance cohesion rather than division. Russia is also still focused on Ukraine, while NATO’s enhanced surveillance, air defense, and eastern-flank deployments raise the expected cost of a deliberate operation.

The probability is nevertheless meaningfully above the normal baseline. Russian drone and missile activity around Ukraine creates repeated opportunities for escalation, Belarus provides a plausible launch or transit route, Russian reconnaissance continues near NATO borders, and Moscow has shown willingness to conduct provocative or deniable operations inside NATO countries. A small, ambiguous drone or missile strike is more plausible than a tank incursion or sustained attack.

However, the resolution criteria are strict: accidental spillover, debris, an unresolved airspace violation, or a hybrid operation would not count. The recent Polish missile impact and Baltic drone incidents therefore provide warning evidence but not strong direct evidence of a qualifying attack. The absence of a major Russian buildup, the lack of a recent confirmed NATO-Russia kinetic clash, and ongoing diplomatic engagement also weigh against an imminent deliberate test. Overall, I place the event near 12%, with most of the risk concentrated in a limited and deniable strike rather than a major attack.

I estimate a 10% probability. The remaining window is relatively short—about 12 weeks—and there is no evidence of a Russian force buildup or an imminent planned operation against NATO. Russia is also heavily committed in Ukraine, while a clearly attributable strike would risk a much broader conflict and undermine Moscow’s diplomatic objectives. NATO’s reinforced eastern-flank posture further raises the expected cost of deliberate escalation.

Risk is nevertheless meaningful because Russian drone and missile operations near NATO airspace are frequent, Belarus provides a plausible launch or transit route, and recent reconnaissance, spillover, and hybrid activity show Moscow’s willingness to operate close to or inside NATO states. A small, deniable drone or missile incident is more plausible than a major incursion.

I place the estimate slightly below the research document’s 14% central estimate because the resolution criteria are unusually strict: an incident must be not merely kinetic and attributable to Russia or a Belarusian proxy, but also sufficiently deliberate and plausibly intended to test Article 5. The July Polish impact and recent Baltic drone activity currently look more like spillover or ambiguity than qualifying attacks. Diplomatic engagement and the absence of a new direct incident also modestly reduce near-term risk. Accidental impacts or airspace violations are more likely than a deliberate attack, but would not resolve the event yes.

Clarification: I interpret the event narrowly. It requires a deliberate Russian, Belarusian, or clearly Russian-directed conventional kinetic attack against a NATO member before December 1, 2026, with enough evidence to distinguish it from accidental spillover, debris, an airspace violation, or a hybrid operation. The attack need not be large, but intent to test or probe NATO’s response must be reasonably supported.

Historical base rate: Since Russia’s full-scale invasion of Ukraine, there have been repeated dangerous incursions, missile spillovers, reconnaissance encounters, and ambiguous drone incidents near or inside NATO territory, but no clearly deliberate Russian kinetic attack on NATO. The base rate for a major attack is therefore very low; the base rate for a small, deniable incident is higher but still limited.

Factor estimates:

• Opportunity and operational exposure: moderately high. Russia’s continuing drone and missile campaign, activity near NATO airspace, Belarusian military integration, and dense Baltic exercises create many opportunities for an incident during the roughly 84-day window.
• Russian intent: low to moderate. Moscow has incentives to probe NATO cohesion and already conducts aggressive activity below the overt-war threshold, but a deliberate kinetic attack would carry substantial escalation costs and could strengthen NATO unity.
• Capability: high. Russia and Belarus possess the relevant missiles, drones, surveillance, and launch infrastructure. Capability is not the main constraint.
• Deterrence and defensive posture: strongly downward. Eastern Sentry, allied deployments, air defenses, surveillance, and the prospect of a unified response make a purposeful attack risky.
• Attribution and resolution: downward. Even if a weapon enters NATO territory, proving that it was deliberately targeted by Russia or a Russian-directed proxy—and that it was intended to test Article 5—may be difficult. Many plausible incidents would resolve as accidental spillover or remain ambiguous.
• Diplomacy and Russia’s Ukraine commitments: modestly downward. Current U.S.-Russian engagement and Russia’s continued focus on Ukraine reduce incentives for an unmistakable attack, although failed talks could reverse this effect.

Recombining these factors, I estimate roughly a 15% chance of some Russian-related kinetic spillover or ambiguous incident affecting NATO territory or assets during the remaining period, but only about a 12% chance that such an event will meet the stricter deliberate-attack and intent criteria in the resolution.

This is slightly below the research document’s 14% central estimate. The main reason is that the event’s intent and attribution requirements are unusually demanding: a missile impact or drone crossing alone should not count. A major, sustained attack remains far less likely, probably around 1–3%.

I could be wrong if diplomacy collapses, Russia launches a major new air campaign near NATO borders, Belarus becomes an active launch platform, or Moscow believes Washington would respond cautiously to a small ambiguous strike. Conversely, the estimate would fall materially if a credible ceasefire emerges or if NATO and the United States issue especially clear, coordinated deterrence commitments.

Forecaster A (historical base rates): Deliberate Russian attacks on NATO territory have been rare because the escalation costs are exceptionally high, while Russia has generally preferred deniable hybrid activity and operations below the Article 5 threshold. A limited incident is more plausible than a major invasion, but the stringent requirement for deliberate intent makes the base rate relatively low: 10%.

Forecaster B (current evidence): The risk is elevated by sustained Russian drone and missile operations against Ukraine, repeated activity near Baltic airspace, Russian reconnaissance flights, Belarusian military integration, and recent Russian-attributed hybrid operations in NATO countries. However, the July Polish missile incident remains unattributed as deliberate, there is no major offensive buildup, and diplomatic engagement is ongoing. Estimate: 14%.

Forecaster C (incentives and game theory): Russia has some incentive to test NATO cohesion with a small, ambiguous strike, especially if it perceives Western political divisions. But a clearly attributable attack could trigger military retaliation and unify NATO, making the strategic payoff uncertain and the downside large. Moscow therefore has stronger incentives to remain below the kinetic threshold than to openly test Article 5. Estimate: 11%.

Forecaster D (quantitative/statistical reasoning): Roughly 84 days remain, giving meaningful opportunity for a drone or missile incident but limited time for a major planned operation. The most likely qualifying pathway is a small strike or deliberately directed drone attack. Increasing operational density raises the incident rate, but the requirement to establish deliberate Russian or proxy intent substantially lowers the probability relative to the chance of any spillover event. Estimate: 13%.

Forecaster E (devil's advocate): The apparent calm and diplomacy could be misleading. Russia may exploit ambiguity, Belarusian territory, or a renewed air campaign to conduct a deniable probe, and repeated near misses could normalize escalation. Hybrid activity demonstrates willingness to accept risk inside NATO. These considerations justify a somewhat higher estimate, though not one approaching even odds because an attack would still carry severe and unpredictable consequences. Estimate: 17%.

Aggregating the five views produces a central estimate of approximately 13%. The probability is higher than the chance of a major invasion, but lower than the probability of an accidental spillover or hybrid operation, both of which are excluded. The principal downward factors are deterrence, NATO readiness, Russia's ongoing commitment in Ukraine, and the lack of evidence of offensive preparations. The principal upward factors are the short but nontrivial remaining time window, frequent drone and missile activity near NATO borders, Belarus's role, reconnaissance and counter-drone operations, and the possibility of a small deniable strike intended to probe allied resolve.

I estimate an approximately 11% chance by November 30, 2026. The probability is elevated relative to a normal Russia-NATO baseline because Russian drone and missile operations remain intense, military activity near NATO borders is dense, Belarus provides a plausible launch or transit route, and repeated airspace incidents create opportunities for either deliberate probing or escalation through ambiguity. A small strike against a military, logistics, or air-defense asset is the most plausible qualifying scenario.

However, the event definition is narrow: an accidental spillover, debris impact, ordinary airspace violation, or ambiguous incident would not qualify unless evidence supported deliberate Russian or Russian-directed intent to test Article 5. That substantially lowers the probability compared with the chance of any kinetic incident affecting NATO territory. Russia also faces very high costs from an attributable attack, while NATO’s strengthened eastern-flank defenses make surprise less likely. There is no reported major Russian buildup for a Baltic offensive, and current diplomatic engagement provides some short-term restraint.

The remaining time window is about twelve weeks, which is sufficient for a limited drone or missile operation but too short for a major invasion absent strong warning indicators. I therefore place the estimate slightly below the research document’s 14% central estimate: higher than the 7% forecast on September 1 because of the accumulating incidents and military density, but below the level implied by treating ambiguous spillover as deliberate aggression.

I estimate a 13% probability by November 30, 2026. The main upward pressure comes from the short-range risk environment: Russia is conducting frequent drone and missile attacks against Ukraine, Russian and Belarusian forces operate close to NATO borders, reconnaissance and counter-drone activity are increasing, and recent spillover incidents show that weapons can reach NATO territory. A small, deniable drone or missile strike is substantially more plausible than a tank incursion or major territorial attack.

However, the resolution criteria are demanding. The event must be more than accidental spillover or debris, must be attributable to Russia or a Russian-directed Belarusian proxy, and must be judged deliberate and intended at least partly to test NATO's response. Russia faces very high costs from a clearly attributable attack, while NATO's enhanced air defenses and surveillance reduce the likelihood of a successful deliberate strike. The lack of a visible Russian offensive buildup, the absence of a new qualifying incident in the latest period, and ongoing diplomatic engagement also weigh against an imminent attack.

The probability is therefore modestly below the research document's 14% central estimate, mainly because the remaining time window is only about 12 weeks and deliberate intent would be difficult to establish. A major or sustained attack is far less likely, roughly 1–3%; most of the 13% estimate is concentrated in a limited, ambiguous drone or missile incident involving Poland, the Baltic states, Romania, Bulgaria, or a Belarus-linked launch.

Central estimate: 14% by November 30, 2026. I treat the previous September 4 forecast of 13% as the immediate prior. In odds terms, 13% corresponds to odds of about 0.15:1. The new evidence produces a slightly positive net likelihood update, raising the estimate to roughly 14%.

Downward evidence: the September 5–6 period passed without a new NATO-Russia kinetic incident; U.S.-Russian diplomatic engagement is ongoing; NATO defenses and surveillance have strengthened; and there is no clear evidence of a Russian force buildup for a major Baltic offensive. These factors reduce the likelihood of a deliberate attack in the remaining 84 days, particularly a large or overt one.

Upward evidence: Russia continues intensive missile and drone operations against Ukraine, increasing the chance of a deliberate or plausibly deniable strike near NATO territory. Recent drone spillover, the July missile impact in Poland, Russian reconnaissance activity, Belarusian military integration, and Russian-attributed hybrid operations indicate a dense and increasingly risk-tolerant operating environment. These factors raise the probability of a small drone or missile attack more than they raise the probability of a major invasion.

The main Bayesian distinction is between the probability of any kinetic spillover and the narrower event here. Accidental impacts or ambiguous airspace violations are more likely than 14%, but they should not qualify unless deliberate Russian or Russian-directed intent can be established. Conversely, a limited deniable strike is the most plausible qualifying pathway, especially against an eastern NATO member or military asset. Overall, the positive and negative updates largely offset, leaving the forecast only modestly above the previous 13% estimate and within the document's 11–17% range.

I estimate a 13% probability, modestly above the prior 8% forecast but below the upper end of the research document’s 12–18% range.

1. Clarifying the event: The event requires more than a Russian airspace violation, accidental spillover, debris impact, sabotage, or cyber operation. It requires a deliberate kinetic attack by Russia, Belarus under clear Russian direction, or a Russian-controlled proxy against NATO territory, personnel, vessels, or military assets before December 1, 2026. Because the attack must be interpreted as at least partly intended to test NATO’s response, ambiguous incidents may not qualify.

2. Historical base rate: Since NATO’s expansion and the end of the Cold War, Russia has repeatedly conducted coercive and hybrid operations against NATO members but has avoided an unambiguous deliberate conventional attack. The base rate for a direct attack is therefore very low. Recent Russian behavior raises the near-term risk, but does not overturn that historical pattern.

3. Factors increasing the probability: Russia is conducting intensive missile and drone operations near NATO borders; there have been repeated airspace incursions and a missile landing in Poland; Russian-linked sabotage inside NATO countries indicates willingness to operate there; Belarus provides a plausible route for deniable action; and Moscow could view a small drone or missile strike as a way to probe NATO political cohesion without launching a major war. The remaining period also includes enough time for a limited incident to occur during a Ukrainian strike campaign or regional military exercise.

4. Factors reducing the probability: A clearly attributable attack could trigger Article 4 consultations, military retaliation, further NATO deployments, and much stronger Western support for Ukraine. Russia is already heavily committed in Ukraine and can pursue many of its coercive objectives through sabotage, cyber operations, disinformation, and airspace violations without crossing the kinetic threshold. NATO’s strengthened eastern-flank defenses also increase the chance of rapid detection and attribution. A tank attack is especially unlikely because it would require conspicuous preparations and carry high escalation risks.

5. Recombination: I assess roughly a 15–18% chance of some deliberate Russian or Russian-directed kinetic incident against NATO territory in the remaining period, but reduce that estimate because the resolution criteria require sufficiently clear intent and attribution. This produces a central estimate of about 13% for the specific event.

6. Overconfidence check: The estimate should not be treated as precise. A small drone or missile incident could be classified differently depending on evidence about targeting, command responsibility, and intent. The probability is also highly sensitive to one sudden crisis, such as a serious border incident, a Belarus-related military move, or a major escalation in Ukraine.

7. Why this could be wrong: I could be underestimating Putin’s willingness to accept escalation, the possibility of an unauthorized or proxy action, or the chance that Russia deliberately exploits an ongoing Ukrainian strike to conceal a test of NATO. Conversely, I could be overestimating the significance of recent incidents: they may reflect reckless but still bounded behavior, while the strong costs of an overt attack continue to deter Moscow. A major sustained attack remains far less likely, probably around 1–3%, but a limited ambiguous drone or missile strike is the principal pathway to a 'yes' resolution.

Forecaster A (historical base rates): Deliberate Russian kinetic attacks on NATO territory are rare because the escalation costs are exceptionally high, while Russia has repeatedly preferred sabotage, cyberattacks, airspace violations, and other below-threshold actions. This supports a low single-digit baseline, modestly increased by the ongoing war and repeated near misses.

Forecaster B (current evidence): The recent missile landing in Poland, repeated drone incursions, intensified Russian strikes near NATO borders, and Russian-linked activity in Germany indicate a more dangerous environment than when the prior estimate was 8%. However, none clearly constitutes a deliberate qualifying attack, and NATO has strengthened eastern-flank defenses. The evidence supports an upward revision, but not a dramatic one.

Forecaster C (incentives and game theory): Russia has incentives to probe NATO cohesion, especially through a small, ambiguous drone or missile incident. But a clearly attributable attack could trigger military retaliation and undermine Russia’s broader strategic position. Moscow can often obtain similar coercive benefits through hybrid operations, making a deliberate kinetic test less attractive. Belarus could provide ambiguity, but would not eliminate escalation risks.

Forecaster D (quantitative/statistical reasoning): With roughly three months remaining, the opportunity window is limited but nontrivial. The relevant hazard is elevated by the density of Russian attacks around Ukraine and the number of airspace incidents, yet the event definition excludes accidents, debris, and ambiguous violations. A reasonable estimate is in the low-to-mid teens, with major sustained conflict far below that.

Forecaster E (devil’s advocate): The probability could be higher if Russia interprets Western political signals as weak, if a Belarus-linked operation is used to create ambiguity, or if an accidental spillover is deliberately reframed as a probe. Conversely, the stringent requirement for clear deliberate intent makes many plausible incidents non-qualifying. The strongest counterargument to a higher estimate is that Russia has already found effective ways to pressure NATO without crossing this threshold.

Aggregating these views, I estimate a 14% probability before December 1, 2026. This is above the previous 8% forecast because of the deteriorating environment and repeated kinetic near misses, but below the research document’s upper range because the remaining time is short and the resolution criteria require deliberate, attributable kinetic action rather than accidental spillover or hybrid activity.

Starting from the previous forecast of 8%, the prior odds were about 0.087. The evidence since then modestly raises the risk: repeated Russian airspace violations, the July missile impact in Poland, intensified attacks near NATO borders, and the Leipzig/Halle operation indicate a more reckless and escalatory environment. These factors support a likelihood ratio above 1, roughly 1.7, because they increase opportunities for either deliberate probing or dangerous escalation.

However, the update is limited. No confirmed qualifying kinetic attack has occurred, the Leipzig incident is hybrid and excluded, the Polish missile incident was not shown to be deliberate, and Russia can continue pursuing many objectives below the Article 5 threshold. NATO's strengthened defenses and the severe consequences of an overt attack also reduce the likelihood of a deliberate test. The remaining window is only about three months, further limiting the probability.

Applying the net evidence to the 8% prior gives a posterior of approximately 13%. This is near the lower end of the research document's 12–18% range. The most likely qualifying scenario would be a small, ambiguous drone or missile strike linked to Russia or Belarus; a major sustained attack remains much less likely.

I estimate a 12% probability. The risk is meaningfully above the previous 7% forecast because Russia has intensified operations near NATO airspace, there have been repeated incursions and a missile landing in Poland, Belarus remains a plausible launch or transit vector, and Russia-linked activity inside NATO countries suggests a worsening escalation ladder. The remaining three months also include continued high-tempo Russian attacks on Ukraine, creating opportunities for deliberate ambiguity or a limited probe.

However, the resolution criteria are stringent: the incident must be a clearly attributable, deliberate kinetic attack rather than debris, accidental spillover, an airspace violation, sabotage, or another hybrid operation. Russia can pursue many coercive objectives below that threshold, and a direct strike would risk a substantially broader NATO response while Russia remains engaged in Ukraine. NATO's strengthened eastern defenses and the difficulty of concealing a meaningful attack further reduce the likelihood. A small, ambiguous drone or missile strike is plausible, but a major attack is very unlikely; therefore I place the overall probability modestly above the research document's lower bound, rather than near its 18% upper bound.

I estimate a 14% probability. The probability is elevated from the prior 8% forecast because the remaining period features increased Russian drone and missile activity near NATO borders, repeated airspace incursions, the Poland missile incident, Russian-linked operations inside NATO countries, and intensified Russia-Belarus cooperation. These developments create more opportunities for either deliberate probing or an incident that Moscow could exploit as a limited test of NATO cohesion.

However, the event definition is stringent: the attack must be a deliberate kinetic strike by Russia or a clearly Russian-directed Belarusian proxy, not merely hybrid activity, accidental spillover, debris, or an ambiguous airspace violation. The Leipzig operation is excluded, and the July Poland incident lacks evidence of deliberate targeting. Russia also has strong incentives to avoid an unmistakable attack that could trigger a unified NATO response, while it can pursue many objectives through sabotage, cyberattacks, coercion, and deniable activity below the kinetic threshold. NATO’s strengthened eastern defenses further reduce the likelihood of a successful or politically useful surprise attack.

With roughly three months remaining, a small drone or missile strike is the most plausible pathway, particularly during a period of heavy attacks on Ukraine or heightened Belarusian activity. A major or sustained attack is very unlikely, but the chance of a limited, ambiguous kinetic test is meaningful. The estimate is therefore above the previous 8% but below the upper end of the research document’s 12–18% range because proving deliberate intent to test Article 5 will be difficult.

Clarification: The event is a deliberate, attributable Russian or Belarusian-proxy kinetic attack on the territory of a NATO member before November 30, 2026, using drones, missiles, or ground forces. Hybrid activity, accidental spillover, isolated airspace violations, and ambiguous incidents that do not clearly constitute an attack are excluded.

Historical base rate: The historical base rate is very low. Russia has repeatedly used cyber operations, sabotage, disinformation, airspace incursions, and other gray-zone tactics against NATO countries, but it has avoided an overt kinetic attack on NATO territory. NATO deterrence, the risk of a much larger war, and Russia’s need to prioritize Ukraine all weigh against such a decision.

Key factors:

1. Russian incentives to test NATO: Moderate upward pressure. Moscow may see value in probing alliance cohesion, especially if it perceives U.S. disengagement, political division, or weak willingness to respond. A small drone or missile strike could theoretically be intended to create ambiguity and test the threshold for collective action.
2. Military availability and strategic priorities: Downward pressure. Russia remains heavily committed to the war in Ukraine. A deliberate attack on NATO would expose Russian forces and infrastructure to potentially overwhelming allied retaliation, making it a costly way to achieve political objectives.
3. NATO deterrence and alliance response: Strong downward pressure. Even if Article 5 consultation is not automatic, an unambiguous armed attack would likely trigger a substantial allied response. Russia has strong reasons to believe that a kinetic attack would be difficult to contain.
4. Gray-zone escalation: Moderate upward pressure. Continued drone incursions, sabotage, and other provocations increase the chance of miscalculation or gradual escalation. However, the event definition requires a clear kinetic attack, not merely a continuation of these activities.
5. Belarusian involvement: Slight upward pressure but limited. Belarus could provide geographic access or deniability, particularly near Poland or the Baltic states. Nevertheless, proxy use would not reliably prevent NATO from attributing responsibility to Russia, so it offers only limited protection against retaliation.
6. Time window and warning: The remaining period through November 2026 provides opportunities for escalation, but a deliberate operation would probably generate substantial intelligence warning through force movements, logistics, exercises, and political preparation. This reduces the likelihood of a surprise attack.

Recombination: The supplied reference estimates roughly 9% for a limited kinetic action on the Baltic flank and about 17% for a broader Russia-NATO military clash. This event is narrower than the broader clash estimate but somewhat broader than a major Baltic operation because it includes a small drone or missile attack and a Belarusian proxy. After accounting for the low historical base rate, Russia’s current constraints, and the strong deterrent effect of NATO, I estimate an 8% probability.

Why this could be wrong: The probability could be materially higher if the Ukraine war ends on terms Russia interprets as a victory, Russian forces regenerate quickly, U.S. political commitment to NATO weakens, or a crisis involving Belarus creates a plausible pretext for intervention. It could also be higher if repeated incursions produce an accidental or deliberately calibrated kinetic strike. Conversely, a durable ceasefire, stronger NATO deployments, clear allied red lines, or continued Russian military exhaustion would reduce the risk substantially. The main uncertainty is that a low-level attack could be designed to remain ambiguous, making classification under the event’s definition difficult.

I estimate an approximately 8% probability. The strongest factor against the event is Russia’s incentive to avoid a clearly attributable kinetic attack on NATO territory: even a limited strike could trigger a military response, strengthen NATO cohesion, and create an escalation pathway Russia cannot control. Russia is also heavily constrained by the war in Ukraine, while NATO’s eastern flank has increased its readiness and deterrent posture.

The risk is nevertheless material. Russia has repeatedly used airspace violations, sabotage, coercion, and other gray-zone actions, and it may eventually judge that a small drone or missile strike—or a Belarus-linked provocation—could test allied resolve. A limited fait accompli or ambiguous strike would be less costly than a major invasion, especially if Moscow perceives political divisions within NATO or reduced U.S. commitment. The next roughly 18 months also provide considerable time for miscalculation or escalation from the Ukraine war.

The cited estimates support a low-single-digit to low-teens range: the approximately 9% estimate for limited Baltic action is directly relevant, while the roughly 17% market estimate appears broader because it covers any Russia-NATO military clash and therefore likely includes events outside this narrower definition. Historical precedent—frequent hybrid activity but no deliberate kinetic attack on NATO territory—also argues for a probability below 10%. I assign 8%, with most of the risk concentrated in an ambiguous or limited drone/missile incident rather than a tank attack or sustained operation.

I estimate an 8% probability that Russia conducts a qualifying kinetic attack on NATO territory by November 30, 2026.

Prior: The historical base rate for a deliberate overt Russian attack on a NATO member is very low. Since NATO's creation, Russia has repeatedly used coercion, cyberattacks, sabotage, and airspace violations without launching a clearly attributable conventional attack. A prior around 3–5% is therefore appropriate for this relatively short time horizon.

Evidence increasing the probability: Russia is already conducting more aggressive gray-zone activity, NATO cohesion may be perceived as weaker, and limited attacks could theoretically be used to test allied resolve. The cited market estimate of roughly 17% for any NATO–Russia military clash and SIGMA's roughly 9% estimate for limited Baltic military action provide external indications that risk is elevated above the historical baseline. These signals raise the estimate toward the high single digits.

Evidence limiting the probability: A deliberate missile, drone, or ground attack would create a substantial risk of an uncontrollable NATO-Russia war, making it much costlier than hybrid activity. Russia remains constrained by the war in Ukraine, NATO deterrence and forward deployments remain significant, and past provocations have generally stayed below the threshold of unmistakable armed attack. The 17% clash estimate is also broader than this event because it may include accidental or ambiguous incidents, while the cited intelligence reporting is indirect and potentially unreliable.

Overall update: Combining the elevated regional risk with the strong deterrent and escalation costs produces a posterior near 8%. This includes a limited strike or proxy attack, but excludes cyber, sabotage, disinformation, and ambiguous airspace incidents unless they involve a clearly attributable kinetic attack on NATO territory.

My aggregate estimate is 8%. Forecaster A (historical base rates) assigns roughly 4–6%: Russia has repeatedly used hybrid pressure and airspace violations against NATO members but has avoided an acknowledged kinetic attack, despite many opportunities. Forecaster B (current evidence) assigns 9–12%, reflecting increased drone incursions, missile incidents, concern about NATO cohesion, and reported assessments that Moscow could consider a limited test. Forecaster C (incentives and game theory) assigns 6–9%: Russia has incentives to probe Western resolve, especially if it perceives U.S. disengagement or allied division, but a deliberate strike risks a war with the entire alliance and therefore has strongly negative expected value. Forecaster D (quantitative reasoning) assigns about 8–10%, broadly consistent with the cited estimates of around 9% for limited Baltic action and approximately 17% for a broader Russia–NATO clash; the narrower event definition warrants a lower figure than the broader clash estimate. Forecaster E (devil’s advocate) assigns 3–5%, emphasizing that the cited intelligence and market signals may conflate gray-zone incidents, accidents, and a general military clash with a deliberate attack intended to test Article 5. The final estimate is above the long-run baseline because of the Ukraine war, Russian coercive behavior, Belarusian integration, and possible perceived Western weakness, but remains below 10% because NATO deterrence is strong, Russia is heavily constrained by the war in Ukraine, and even a limited overt attack could trigger uncontrollable escalation. Hybrid incidents and accidental spillover are substantially more likely than the narrowly defined event and are excluded from this estimate.

I estimate a 7% probability. The event is narrower than a general Russia–NATO clash: it requires a deliberate kinetic attack on NATO territory, including a drone, missile, or tank strike, rather than an accidental incursion or hybrid operation. Russia has strong incentives to probe NATO cohesion, particularly if it perceives U.S. disengagement or allied divisions, and Belarus could provide additional access to the Baltic region. Ongoing airspace violations and other gray-zone activity modestly increase the risk of miscalculation or escalation. However, a deliberate attack would expose Russia to a potentially overwhelming NATO response and could create a much larger war, making it strategically far riskier than sabotage, cyberattacks, or deniable incursions. Russia’s continuing military demands in Ukraine and NATO’s increased eastern-flank posture further reduce the attractiveness of an overt test. The cited 9% estimate for a limited Baltic attack is broadly consistent with this assessment, while the roughly 17% market estimate for any NATO–Russia clash likely includes broader and less deliberate incidents than this question allows. I therefore place the probability toward the lower-middle part of the proposed 1–10% range.