Kyiv's Refinery Chip and the Baltic Floor

2026-11-02 · The week ahead in security and diplomacy · The week ahead in security, Kyiv's refinery-for-Patriots offer, Testing the shadow war claim

Geopolitics show15:15Download MP3About the show

How it is made. Aavistus Geopolitics is written and voiced by our own systems, every morning, from data we gather ourselves. The voices are synthetic. Every fact is traced to a source on this page, and every dated call is settled in public on the calibration page. The presenters, Nora and Owen, are named characters, not people.

Aavistus is a new framework, still under development. We will make mistakes, and every dated call is settled here in public so you can see them; the aim is to keep calibrating until the record beats the average forecaster, not to sound right.

Two American questions before Friday, an unexplained boarding off Gotland, and Kyiv's offer to trade its refinery strikes for Patriots, read from Helsinki.

Aavistus Geopolitics. Security, diplomacy and the balance of power, from a Nordic point of view. Subscribe to the show.

The week ahead: mostly decided in Washington

Most of what could move the security picture around the Baltic Sea before Friday will be decided in Washington: whether the United States strikes Iran, and whether the Treasury moves on Russian sanctions. Only one item sits in the Baltic itself. Around those questions sit an expired truce in Kherson, an unexplained boarding off Gotland, Kyiv's offer to trade its refinery strikes for Patriot missiles, and an argument from the Center for European Policy Analysis that Russia, China and Iran are running one shadow war.

Iran: contradictory signals, a thin margin

The overnight reporting contradicts itself. Axios, as carried by TASS, reported that Trump does not intend to resume strikes on Iran right after the midterm elections. France Info reported that new strikes are being prepared as early as this week, with Tehran already promising to retaliate. Der Tagesspiegel reported that Trump and Netanyahu appear to disagree on the next step. And Reuters reported the Revolutionary Guard navy saying two tankers exploded after hitting mines in the Strait of Hormuz, on what it called an unauthorised route.

The read is kept on a condition, with the margin as thin as it has been: if Trump and Netanyahu are still at odds over the next step, as Der Tagesspiegel reported, our view is that there is no direct named American strike on Iranian territory by Wednesday. The Axios line points the same way; the France Info line is why the margin is thin. A named American strike before then ends the read.

The other Wednesday question is American troops in Europe. A formal announcement of fewer troops is still read as not coming. Wednesday passing with no such announcement from the White House or the Pentagon confirms it; a formal announcement before then makes it wrong.

Sanctions: the question that matters more to us

Iran is the loud question, but sanctions decide how much of the pressure on Russian oil is left to Nordic and Baltic enforcement. The Wall Street Journal reported, as Yle and Berlingske carried overnight, that Washington is pushing to reopen Russian gas exports to Europe. United24 Media reported that the United States has authorised Boeing to resume cooperation with Belavia, the Belarusian national carrier. And the Kremlin said the next round of talks on the war should be with three parties, NRK reported. That reads as Moscow wanting Washington in the room rather than Europeans. A talks format announced with American and Russian delegations and no European seat would confirm it; a named European delegation at the next round would falsify it.

This fits a chain argued since mid-October. First, Washington loosens on Russian energy. Second, it constrains what Ukraine can do with American equipment. Third, European and Nordic enforcement step in to replace the American floor with boardings and designations. Fourth, shipping reroutes towards buyers outside the sanctions net as enforcement in the jurisdiction that matters most gets cheaper to ignore. Fifth, a formal Treasury instrument, on shadow-fleet vessels or a Lukoil-linked sale, turns politics into enforcement cost. The gas push and Belavia are the first link again, louder. The fifth link still has not fired. Two warning signs matter before Friday: Treasury text on shadow-fleet tankers, and, in our own waters, a Nordic or Baltic boarding that cites sanctions evasion.

Two dated reads on that fifth link are restated. The Treasury does not publish a licence freeing dark-fleet tankers from Russia sanctions by tomorrow, the third. Nor does it ease Belarusian potash by the thirteenth; Belavia is aviation, not potash, so that read stands. Published Treasury text on either, inside those dates, would make them wrong.

For a Nordic observer: plan as if the American floor is negotiable but not yet negotiated. Treasury text, a general licence or a named delisting, is the trigger that turns talk into cost for Baltic enforcement. A White House statement ruling out Russian gas sales to Europe before a settlement would falsify it.

Oleshky: a broker's truce runs out

The Oleshky ceasefire, the longest truce of the war, ended after Russia refused to extend it, Berlingske reported. Reuters reported that Ukraine evacuated civilians from parts of the Kherson region as it expired. Oleshky was called a photograph, not a template, until a second named town got the same treatment. No second town came, and now the first is gone too.

That sharpens, rather than undercuts, the reading of Washington as a broker between Kyiv and Moscow rather than Kyiv's guarantor. A broker's truce lasts exactly as long as both parties want it; the moment Moscow stopped wanting it, it ended, with nobody in Washington paying a price to keep it. Another American-brokered local arrangement with no new commitment to Kyiv would confirm the reading. A joint Washington and Kyiv readout naming a new committed American capability would falsify it.

After the truce: a hacked alert system

Channel NewsAsia reported cyber attacks hitting both Russia and Ukraine after the truce ended. Ukraine's air force said the national air raid alert system had been hacked, with false nuclear and chemical warnings sounding, and Kyiv now suspects the alert app itself was compromised.

Our view is that cyber pressure now rises and falls with the local truces rather than running on its own track. A Russian state statement calling Ukrainian cyber operations terrorism against civilian internet would say it is escalating rather than spiking; a quiet week on both sides' networks while the shelling resumes would say this weekend was a spike, not a step. Closer to home, from a Finnish civil-defence point of view, a false nuclear warning pushed through a national alert system belongs in the planning base now, not after it happens here. Public attribution of the hack to a Russian service would put it on Nordic agendas at once; a finding that it was a breach with no state behind it would make it a lesson in hygiene rather than deterrence.

The Baltic weekend: Gotland, Latvia, drone bases

According to reports shared at the weekend, Swedish police boarded a Russia-linked cargo ship off Gotland overnight, and officially very little has been said. Latvia warned of a threat in its airspace and asked people to stay indoors, Helsingin Sanomat reported. The same paper published satellite imagery showing Russia expanding its network of drone bases near its western borders.

Friday's test was a Nordic or Baltic boarding citing sanctions evasion inside four weeks. Gotland does not meet it yet, and it will not be stretched to fit: it is a cargo ship, not a tanker, and nobody official has named sanctions grounds. If Swedish prosecutors or the coast guard cite sanctions evasion, it counts. If it turns out to be a customs or smuggling case, it does not. And the view it tests has itself moved since Friday.

Kyiv's refinery chip

Berlingske reported late on Sunday that Zelensky wants to stop the attacks on Russian oil in exchange for Patriot missiles. The offer comes at the end of what Ukraine claims was Russia's deadliest month of the war, with 54,400 Russian casualties in October.

What changes openly is the reading of what the pause is. Friday's view rested on a pause that looked like policy. Zelensky has now put a price on stopping, and nobody offers to sell something already given up. What looked like a decision looks like a lull, and the strikes are Kyiv's most saleable chip.

The Nordic enforcement view moves with its premise. The Friday version leaned on the pause. The new version: refinery strikes are pressure Moscow can buy off, by way of Washington, if Kyiv gets something in return. Baltic enforcement is pressure Moscow cannot buy off through Kyiv at all. If a Patriot trade goes through, the Baltic becomes the only pressure on Russian oil that is not sitting on a negotiating table, and Moscow's incentive to test it goes up.

The trade is unlikely to land soon. The American Patriot sale is an approval to sell, with the bill landing on Kyiv and its European backers while Washington sets the queue. Zelensky is offering the one thing Kyiv controls for a thing Washington controls. The offer itself is the news: it moves refinery strikes out of the military column and into the bargaining column. If Washington answers the offer with a promise rather than dated deliveries, our view is that Kyiv does not formally announce a halt to its oil strikes by November 13; a chip this saleable is not given away for a promise. A joint Washington and Kyiv readout naming Patriot deliveries with dates, followed by a Ukrainian statement halting the oil strikes, would make that wrong.

The Nordic line: watch whether Moscow ties Baltic boardings to any energy arrangement in the same breath. A Russian foreign ministry statement calling a Baltic boarding a breach of the spirit of an energy deal confirms the Baltic has become the pressure point. Ukraine striking refineries freely through mid-November with no deal on the table says the chip was never really for sale.

Testing the shadow-war claim

In the Center for European Policy Analysis video Global Shadow War, Christopher Walker, a vice president at the centre, argues that Russia, China and Iran are prosecuting a concerted campaign against open societies, with sabotage, drone incursions, cyber operations and attacks on infrastructure calibrated to degrade democracies without provoking a military response, and that treating it as temporary or opportunistic hybrid activity is a fundamental mistake.

Half of it holds. The sub-threshold part is right. Latvia's airspace warning, the alert hack, mines on a so-called unauthorised route, and Tehran designating the British navy and air force as terrorist organisations, as Middle East Monitor reported, all sit below the line where anyone declares war, and all are designed to cost the other side something without giving it a reason to fire back. What the weekend's public record does not show is concert. It shows three actors moving in the same weeks against a busy Washington: probing timed to American distraction. Simultaneity is not coordination.

The distinction matters because the damage is the same but the response is not. If the campaign is concerted, the answer is pooled, alliance-level attribution. If it is parallel opportunism, the answer is attribution done nationally or among allies rather than waiting on the Security Council. Walker's prescription, take the initiative and build partnerships, is right either way; the diagnosis runs ahead of what the public record shows. The New York Times made a point on Sunday that cuts against it: Putin is breaking down his isolation with a big assist from Trump. If Moscow's way out runs through Washington, it does not need Beijing and Tehran in concert.

A Western government attributing a single operation jointly to two of those three states would move the read towards Walker. Another month in which each attribution names one state alone keeps it where it is.

What to watch before Friday

Tomorrow, whether the Treasury publishes anything on dark-fleet tankers. Wednesday, Iran and the troop question. Through the week, whether Swedish authorities name sanctions grounds for the Gotland boarding, whether Washington answers Zelensky's Patriot offer with dates or silence, and whether Moscow starts calling Ukrainian cyber operations terrorism. The Gotland answer is the one that would show how much of the pressure on Russian oil is now ours to carry.

Calls

Sources