CIMA Risk — Daily TRM Intelligence Brief

Wednesday, 6 May 2026 · Cycle 2026-05-05 · Internal use only

Executive Summary

  1. We assess the ELN Eastern Front's public “revolutionary trial” (juicio revolucionario) of two CTI investigators and two police hostages held in Arauca is a calibrated leverage move ahead of the 31 May first round, not a precursor to execution; sustained Arauca-corridor friction over the next 7 days is likely (55-80%) [MEDIUM confidence].
  2. We judge the capture of alias “El Mono” (Bloque Occidental Jacobo Arenas finance ringleader) on 5 May raises the probability of FARC-aligned dissident retaliation on the Panamericana between Cali and Popayán into the upper end of the band; an attributable kinetic incident or sustained corridor closure within 7 days is likely (55-80%) [MEDIUM confidence].
  3. We assess Bogotá's Avenida Caracas TransMilenio corridor (Calle 26–Calle 76 segment) faces continued demonstration-driven service disruption through 9 May, driven by the Universidad Pedagógica student-guard violence cycle now in its second consecutive day; recurrence is likely (55-80%) [MEDIUM confidence].
  4. We estimate the convergence of the IDEAM tropical wave (onda tropical) signal with five active partial-closure points on Vía al Llano (Coviandina K17–K65) makes a closure exceeding 4 hours or a landslide event on the corridor within 7 days likely (55-80%) [MEDIUM confidence].
  5. We judge the EPS-arrears-driven service withdrawals (Clínica Medical four Bogotá sites suspending services; Liga contra el Cáncer Seccional Bogotá suspending oncology services with COP 4 billion in receivables) signal continuing degradation of the Bogotá healthcare safety net relevant to expat and corporate-traveler medical-access planning; further cascade closures by end-May are likely (55-80%) [MEDIUM confidence].

Daily Scorecard

IDStatusWindowWhat we saidWhat today's evidence shows
CL-2026-05-06-01OPEN6–13 MayELN Eastern Front sustains Arauca-corridor leverage signal; ≥1 communiqué OR kinetic OR exchange counter-offer in 7 days5 May trigger event materialized: ELN announced “juicio revolucionario” with multi-year sentences against four hostages. Counter-signal: ELN simultaneously released Brenda Carrascal Carvajalino in Catatumbo. Drivers strengthening; outcome window starts 6 May.
CL-2026-05-06-02OPEN6–13 MayBloque Occidental Jacobo Arenas retaliation on Panamericana Cauca-NariñoIndicator-raise observed: alias “El Mono” (named finance ringleader, drone procurement role) captured 5 May in Santander de Quilichao. Second named-commander capture inside the corridor within 72 hours of the 3 May Cajibío attack tightens the retaliation window. Probability revised toward upper edge of likely band.
CL-2026-05-06-03OPEN6–13 MayELN Nororiental kinetic tempo continues in CatatumboIndicators raising: Army dismantled ELN cocaine laboratory in Durania (527 kg seized) and an armed clash in El Carmen left one police officer wounded, both 5 May. Probability moves toward upper edge of roughly even chance band.
CL-2026-05-06-04OPEN6–9 MayAvenida Caracas TransMilenio corridor service disruption recurrenceDrivers strengthening: 5 May saw a second consecutive day of demonstrations on Calle 72–76 with Avenida Caracas trunk closed for hours; one SITP bus vandalized on camera; closures from Calle 26 to Calle 76 implemented. Recurrence within window probability remains likely.

What Changed in the Last 24 Hours

KindSeverityItem
NEWHIGHELN announces “revolutionary trial” against four hostages held in Arauca. Eastern Front communiqué imposes prison sentences of up to 60 months on two CTI investigators and two police officers held since mid-2025. MinDefensa, Defensoría del Pueblo and President of the Supreme Court rejected the act publicly.
NEWHIGHCaptured: alias “El Mono” / “Wilmer” in Santander de Quilichao, Cauca. Asserted finance ringleader of Bloque Occidental Jacobo Arenas under Iván Mordisco; named driver of drone-delivered explosive procurement, including munitions used in the 3 May Cajibío attack (20 dead). Operation conducted by Comando Contra el Narcotráfico with Fiscalía, fines for extradition.
NEWHIGHCaptured: alias “Negro Uber” in Florencia, Caquetá. Asserted ringleader of Comandos de Frontera (Segunda Marquetalia bloc); investigators allege nine years of activity coordinating drug trafficking and recruitment.
NEWHIGHCaptured: alias “El Alex” / Jorge Espinoza Peña at El Dorado airport. Mexican national, asserted financial and logistics operator for the Sinaloa Cartel, requested in extradition by the United States for fentanyl trafficking. Auto-HIGH on El Dorado access corridor protocol applies.
NEWMEDLiberation: Brenda Felicita Carrascal Carvajalino, kidnapped by ELN October 2025. Released 5 May in Catatumbo through Defensoría del Pueblo, Catholic Church and UN Mission accompaniment. The same actor that announced the “trial” in Arauca released a hostage in Catatumbo on the same day — a calibrated dual signal we flag for analytical attention.
ESCHIGHAvenida Caracas TransMilenio corridor closure escalates. Second consecutive day of student-driven demonstrations after Monday's violent confrontation between TransMilenio guards and Universidad Pedagógica students. Trunk closures Calle 26 through Calle 76; SITP bus vandalized; rotating service detours via Carrera 30 and Carrera 10.
NEWHIGHMine explosion in Sutatausa, Cundinamarca (mine La Trinidad / Carbonera Los Pinos). Nine miners confirmed dead, six rescued. Agencia Nacional de Minería (ANM) had inspected the site 26 days prior and issued safety recommendations; investigation opened.
NEWMEDBus rollover on Girardota–Barbosa axis (Antioquia). Metro-feeder service vehicle, approximately 30 injured. Autopista Norte affected northbound out of the Aburrá valley.
NEWMEDFlooding cluster in northern Valle del Cauca. Versalles and La Unión: La Mina and Aguas Lindas creeks overflowed; approximately 80 homes affected in Versalles, 500 people affected in La Unión; access roads cut by mudslides.
CONTHIGHPopayán “Monster Truck” tragedy fallout continues. Driver reportedly fled Popayán; organizing company issued condolences; Cauca authorities investigating regulatory chain. Three dead (including two children), more than 40 injured. Auto-HIGH Panamericana corridor protocol active.
NEWMEDClínica Medical suspends services at four Bogotá sites. Operator cites approximately COP 300 billion in EPS receivables. Liga contra el Cáncer Seccional Bogotá separately suspending oncology services over COP 4 billion in arrears. Tibanica bridge agreement Bogotá–Soacha signed (COP 118 billion investment) on the same political news day.
NEWMEDPolitics: Luis Gilberto Murillo reportedly preparing to withdraw candidacy and join Iván Cepeda's campaign. Multi-source convergence (La Silla Vacía, Noticias RCN, El Espectador). Public announcement expected Wednesday 6 May. Campaign calendar volatility implications for next 24-48 hours.
NEWMEDPolitics: Senator Mauricio Gómez Amín resigned Senate seat and Liberal Party. Will serve as debate chief for Abelardo De la Espriella's campaign.
NEWMEDTropical wave (onda tropical) approaching Colombian Pacific and Andean regions. IDEAM forecasts intensified rain and electrical storms across Pacific, Andean, Amazon, southern Caribbean and western Orinoco regions for the first half of the week.
NEWMEDTriple homicide in Yotoco, Valle del Cauca. Three family members killed at La Regina, on a property under SAE administration with an active 500-family informal settlement; firearms and bladed weapons used. Auto-HIGH Panamericana protocol applies.
DELOWEcuador reduces “security tax” on Colombian imports from 100% to 75% effective 1 June. Following diplomatic engagement; commercial-flow easing for Ipiales-Tulcán border axis. Diplomatic-track de-escalation.

Operational Map

Map deferred to Phase 2 build (geopandas pipeline not yet operational in cloud cycle).

Yesterday's Mobility Check

What we flagged on 4 May: Avenida Caracas TransMilenio guard-student confrontation at Calle 76 station with several injured; Sutatausa mine emergency in early hours.
What materialized today (5 May): Avenida Caracas escalation as predicted — second-day demonstrations with rolling closures and a vandalized SITP bus. Sutatausa mine death toll reached nine. Six injured Bogotá traffic-incident clusters during the morning rush (Avenida Centenario K115 truck rollover, Calle 127/Autopista Norte truck rollover, Avenida Boyacá/Calle 153 motorcycle collision).
Gaps: Single-source unverified Telegram report of armed roadblock by armed group on Riohacha–Maicao Troncal del Caribe (La Guajira) lacks corroboration from Policía Guajira or El Heraldo as of cycle close; flagged for next-cycle verification.

Next 7 Days — Announced Disruptions

Scheduled-Disruptions Ledger unavailable this cycle (Mac-resident xlsx not yet committed to cloud). Items surfaced from collected sources only:

Pico y Placa — Wednesday 6 May 2026

BogotáMedellínCali
Private vehicles: No circulation for plates ending 1, 2, 3, 4, 5 (06:00–21:00, Mon–Fri).
Taxis: No circulation 1–2 (05:30–21:00).
Special transport: Plates 1–2 restricted (05:30–21:00).
Source: Radio Santa Fe and @BogotaTransito 5 May rotation.
Not surfaced in this cycle's collection (sources attempted: Secretaría de Movilidad de Medellín, @SttMed). Verify with Secretaría before deployment. Daily rotation changes. Not surfaced in this cycle's collection (sources attempted: Secretaría de Movilidad de Cali, @SecMovilidadCali). Verify with Secretaría before deployment. Daily rotation changes.

Mobility — City Grid

Bogotá

HIGH Avenida Caracas trunk (Calle 26–Calle 76) under recurrent demonstration-driven closure. Carrera 7/Calle 112 and Calle 74/Avenida Caracas additional friction points. Carrera 7/Calle 28 (Universidad Pedagógica/Colegio Superior de Cundinamarca) student protest expected to recur.

MED El Dorado access auto-HIGH today: extradition operation (alias “El Alex”) at Terminal 2 elevated police footprint and security-screening delays.

MED Avenida Centenario / Calle 13: cluster of cargo-vehicle rollovers and breakdowns through morning rush.

LOW Cortes de luz and water outages: localized in Santa Fe / Suba / Soacha – per Enel and Acueducto schedules 6–7 May.

Corporate Advisory — Bogotá: Avoid Avenida Caracas trunk between Calle 26 and Calle 76 during morning and evening rush windows on 6 May. Use Carrera 30 / NQS as primary north-south alternate. For El Dorado access, allow additional 30 minutes for security screening. Verify Pico y Placa with primary source before deployment.

Medellín

HIGH Girardota–Barbosa axis (Autopista Norte): bus rollover with approximately 30 injured 5 May; expect investigative cordon and northbound delays through 6 May morning.

MED Puente La Limona (It&agüí–San Antonio de Prado axis): subsidence and settlement; community traffic delays.

MED Comuna 8 / Boston / Los Ángeles: pavement subsidence cluster (second event in two weeks per El Colombiano).

LOW Antioquia rural Suroeste cocaine seizure (448 packages) does not directly affect urban mobility but elevates highway-checkpoint posture on Medellín–Quibdó / Medellín–Turbo axes.

Corporate Advisory — Medellín: If routing northward through Girardota–Barbosa, allow extra travel time on 6 May. Avoid Carrera 39/Calle 59 area pending sinkhole assessment.

Cali

MED School-wall collapse at sede Pablo Neruda (comuna 16) under investigation; secondary impact on local Carrera 39 area.

MED Yotoco rural (Valle): triple homicide on La Regina property — police presence northbound from Cali on the trunk to Buga, possible road-control delays.

LOW Routine pico y placa rotation in effect (digits not surfaced this cycle).

Corporate Advisory — Cali: Buenaventura corridor remains under Policía Valle posture following capture of five “Los Espartanos” alleged tractomula-hijack ringleaders 5 May. Routine commercial cargo movement reportedly normal; verify with carrier before dispatch.

Regional Mobility / Corridor Watch

Vía al Llano (Bogotá–Villavicencio, Coviandina concession)

Five active partial-closure points overnight per Coviandina (paso bidireccional K18+300–K19+000; reduced lane K17+500–K18+300; right-lane closure K36+500–K37+100; reduced lane K43+250; reduced lane K65+700 due to vehicle rollover at 11:55 a.m. 5 May; toll lanes 6–7 closed at Naranjal). Brief light rain conditions reported through morning. MED

Corporate Advisory — Vía al Llano: With IDEAM tropical-wave signal hitting the Andean piedmont 6–8 May, we estimate a moderate-to-high probability of weather-driven closure exceeding 4 hours within 7 days. Build a 6-hour buffer into ground-transport bookings Bogotá–Villavicencio. Track Coviandina X feed for live status.

Panamericana Cauca–Nariño

Cajibío attack (3 May, 20 dead) under active retaliation-watch following 5 May capture of alias “El Mono.” Two FARC-aligned dissident explosives experts captured separately in Cauca on 5 May per Caracol. Ongoing anniversary indicator: Cajibío was the trigger event 7-10 days ago. HIGH

Corporate Advisory — Panamericana Cauca: We assess ground transit between Cali and Pasto as HIGH risk through 13 May. Defer non-essential ground travel; route by air via Pasto airport where feasible. Convoys should not stop in Cajibío, El Bordo, El Tambo or Mercaderes municipal jurisdictions outside daylight hours.

Catatumbo

Army-ELN kinetic tempo continued 5 May: Durania cocaine laboratory destroyed (527 kg), El Carmen station harassment fire (hostigamiento) wounded one officer. Dual signal: ELN released Brenda Carrascal Carvajalino (kidnapped October 2025) the same day. Recruitment-of-minors signal continues per “Dayana” case (15 years, ELN-recruited then transferred to FARC dissident faction in Tibú). HIGH

Corporate Advisory — Catatumbo: Tibú and Sardínata rural areas remain off-limits for non-essential travel. Convoy escort recommended on Ocaña–Cúcuta axis. Cross-border posture at Villa del Rosario — recent Tren de Aragüa kidnapping resolved by Gaula 5 May — informs heightened ID-check posture.

Medellín ↔ Bogotá corridor

Tibanica bridge agreement signed 5 May (Bogotá–Soacha conurbation, COP 118 billion). Magdalena Medio: Ecopetrol and Parex announced US$ 250 million investment in Casabe / Peñas Blancas / Llanito; localized labor-attraction effect. Suroeste antioqueño cocaine seizure (448 packages) elevates highway-checkpoint footprint on the Medellín–Turbo branch. LOW

Border crossings

Ipiales–Tulcán: Ecuador security-tax reduction announced for 1 June (100% to 75%) easing commercial-flow friction. Cucutá–San Antonio: capture of two kidnapping victims (one Peruvian national, group Tren de Aragüa; one common-criminal kidnapping) by Gaula 5 May; routine. Maicao–Paraguachón: single-source Telegram report of armed roadblock on Riohacha–Maicao Troncal del Caribe pending verification. MED

Security — By Region

Cauca / Valle / Nariño

Capture of alias “El Mono” (named Bloque Occidental Jacobo Arenas finance ringleader) and two further explosives experts in Cauca on 5 May. Triple homicide in Yotoco rural property under SAE administration. Capture of alias “Wilson” (Tumaco subringleader of FARC-aligned dissident faction) in Nariño per MinDefensa late-cycle communiqué. Five “Los Espartanos” tractomula-hijack ringleaders captured in Buenaventura. HIGH

Corporate Advisory — Cauca/Valle/Nariño: The 7-10 day post-capture retaliation window is now in force across both the Cajibío capture (5 May) and the Tumaco capture (late 5 May). Expect possible IED, drone-delivered explosive, or armed-clash incidents on the Panamericana between Cali and Pasto; defer non-essential ground travel.

Catatumbo (Norte de Santander)

Sustained kinetic tempo across multiple municipalities. ELN cocaine lab destroyed in Durania; armed clash in El Carmen with one officer wounded; minor-recruitment cycle continues with cross-faction transfers documented. HIGH

Corporate Advisory — Catatumbo: See Vía al Llano / Catatumbo guidance above. Coordinate with corporate-security HUMINT operator before any movement into Tibú.

Casanare / Arauca

ELN Eastern Front “revolutionary trial” announcement raises hostage-leverage signal; Gobernador del Casanare and Director General de Policía announced reinforcement plan for the department on 5 May. Saravena–Arauquita–Tame axis remains under standing watch. HIGH

Corporate Advisory — Arauca: Defer non-essential travel into Saravena, Arauquita, Tame and Fortul through 13 May. Oil-sector operators (Ecopetrol, Sierracol, Parex) should anticipate possible armed-strike call (paro armado) or pipeline-interdiction event in window.

La Guajira / Other

Single-source Telegram report (@LaColombiaOscuraa, F-6 unverified pending corroboration) of armed roadblock on Riohacha–Maicao Troncal del Caribe; not yet corroborated by Policía Guajira. Sandra Nogales (Junta de Acción Comunal vice-president) assassinated in Bello, Antioquia 5 May; community-leader attacks pattern consistent with prior 12 months. Asesinato (homicide) cluster in Yotoco SAE-administered property unrelated to armed-group conflict per preliminary Policía Valle assessment. MED

Weather — IDEAM

IDEAM forecast through end of week: tropical wave (onda tropical) approaches, with intensified rain and electrical storms across Pacific, Andean, Amazon, southern Caribbean and western Orinoco regions. Late-afternoon 5 May: convective cells generated heavy rain over Chocó, occidental Antioquia, Valle del Cauca, southern Santander, southern Casanare, Meta, southern Guaviare, occidental Vaupés, northern Córdoba and northern Cesar.

Compound risk: the Andean piedmont Vía al Llano corridor and the Cauca–Nariño Pacific slope are both in the rainfall path. Versalles and La Unión flooding cluster (5 May) preview the corridor effects.

Political / Labor

Campaign volatility ahead of Wednesday 6 May: Luis Gilberto Murillo reportedly preparing to withdraw candidacy and announce alignment with Iván Cepeda; multi-source convergence (La Silla Vacía, RCN, El Espectador). Mauricio Gómez Amín resigned Senate seat and Liberal Party to chair debate strategy for Abelardo De la Espriella. GAD3 polling firm withdrew from publishing Colombia electoral surveys, citing the Comisión Técnica of Law 2494 of 2025 as “impossible” to comply with operationally. Iván Cepeda publicly denounced unspecified armed-group pressure to influence first-round elections.

Labor / sectoral: Tayrona national park: tourism-transport workers' armed strike (paro armado in the labor sense, not armed-group sense) following death of a transport worker. Magdalena–La Guajira axis Cañaveral blockade reported. Clínica Medical four-site service withdrawal in Bogotá; Liga contra el Cáncer Seccional Bogotá oncology suspension; Coosalud EPS extraordinary shareholders meeting ordered by Superintendencia. The cumulative health-system signal is consistent with a Q2 services-availability degradation we have flagged in prior cycles.

Diplomatic: Ecuador-Colombia security-tax reduction (100% to 75%) signed for 1 June implementation; ONDCP US strategy publication continues to pressure Colombia on coca-cultivation reduction.

Predictive Indicators — Forward 72-96 Hour Threat Window

Announced events with travel-risk implications

Leading indicators we are watching

Watch list

Anniversaries and retaliation windows

ACLED anniversary registry unavailable this cycle (collector failure: registry.json not found at curated path; flagged for next-cycle restoration). Manual recall: 8 May is the one-year mark of two CTI investigators' kidnapping by ELN in Arauca — the date itself is a probable communiqué trigger for ELN propaganda.

Today's Forward Calls

CL-2026-05-06-01 · ELN Eastern Front, Arauca corridor

We assess the ELN Eastern Front's public “revolutionary trial” of two CTI investigators and two police hostages held since mid-2025 is a calibrated leverage move ahead of the 31 May first-round vote, not a precursor to execution; sustained Arauca-corridor friction over the next week is likely (55-80%, medium confidence). Three Tier-2 outlets and the Defensoría converge on the announcement; the parallel ELN release of Brenda Carrascal Carvajalino in Catatumbo on the same day reads as a deliberate dual signal. The strongest counter-case — that the trial framing is a precursor to execution rather than leverage — rests on the explicit condemnatory language, but ELN's historical pattern uses hostages as multi-year leverage rather than as immediate-execution targets; we judge precursor-to-execution unlikely unless proof-of-life lapses beyond 14 days. If this call misses, the most likely cause is window calibration: ELN tempo on hostage signaling routinely runs 14-21 days, and a 7-day window may close before the next public signal.

Falsifiable outcome: ≥1 ELN communiqué on the four Arauca hostages, OR attributable kinetic incident on Arauquita–Saravena–Tame axis, OR humanitarian-exchange counter-offer from any candidate or outgoing government, by 13 May. · Drivers: El Tiempo, El Espectador, INVÍAS Emergency Report, Defensoría del Pueblo.

CL-2026-05-06-02 · FARC-aligned dissident faction (Bloque Occidental Jacobo Arenas), Panamericana Cauca–Nariño

We judge the 5 May capture of alias “El Mono” (asserted finance ringleader and drone-procurement coordinator) materially raises the probability of armed-group retaliation on the Panamericana between Cali and Popayán; an attributable IED, drone-delivered explosive, armed clash, or 4+ hour corridor closure within 7 days is likely (55-80%, medium confidence). The capture follows the 3 May Cajibío attack (20 dead) within 48 hours, compressing the typical 7-10 day post-capture retaliation window. The strongest counter-case is that government reinforcement of the Panamericana suppresses incidents in the immediate term; historically, however, reinforcement lags incidents by 7-10 days. If this call misses, the most likely cause is actor surprise: the faction may shift to softer non-corridor targets — municipal officials, transmission infrastructure — that would not satisfy the outcome wording.

Falsifiable outcome: ≥1 attributable IED, drone-delivered explosive, or armed clash on the Panamericana attributable to Bloque Occidental, OR documented Panamericana closure between Cali and Popayán exceeding 4 hours attributable to dissident-faction action, by 13 May. · Drivers: Ejército Nacional, Fiscalía, El Colombiano, El País Cali, Defensoría Alerta Temprana.

CL-2026-05-06-03 · ELN Frente de Guerra Nororiental, Catatumbo

We estimate the 5 May Durania cocaine-laboratory destruction (527 kg seized) and the El Carmen station harassment fire (hostigamiento) signal that ELN-Nororiental kinetic tempo will continue through the next week; an attributable IED, armed clash producing civilian casualty, or community displacement above 50 households is at roughly even chance (45-55%, low confidence). The Brenda Carrascal Carvajalino release the same day complicates the picture, suggesting Central Command tactical flexibility. The strongest counter-case is that the El Carmen clash was a tactical local event without campaign weight; we retained MEDIUM-band probability because the underlying ELN-Nororiental capability has not changed and the laboratory raid is a typical retaliation trigger. If this call misses, the most likely cause is window calibration; ELN-Nororiental tempo runs roughly two-week pulses and 7 days may close before the next signal.

Falsifiable outcome: ≥1 attributable IED or armed clash producing civilian casualty, OR community displacement of more than 50 households, OR sectoral armed strike (paro armado) declaration affecting commercial transport, by 13 May. · Drivers: Colombia.com, BluRadio, El Colombiano, OCHA.

CL-2026-05-06-04 · Universidad Pedagógica student body and adjacent activist networks, Bogotá Avenida Caracas

We assess the Avenida Caracas TransMilenio corridor (Calle 26–Calle 76 segment) is in a recurrent demonstration-disruption cycle following Monday's violent guard-student confrontation and Tuesday's second-day demonstration with vandalized SITP bus; service interruption exceeding 60 minutes or a violent station confrontation producing injuries is likely (55-80%, medium confidence) within the 6–9 May window. The pattern matches the 2024-2025 Caracas trunk recurrence pattern; police negotiated stand-down would absorb energy for 24-48 hours but historically does not last. The strongest counter-case is that the trunk is now operationally over-watched following Tuesday's incident; we judge that operational tempo is sustainable for 24-48 hours but rarely longer. If this call misses, the most likely cause is collection gap: a low-magnitude service interruption under 60 minutes may not surface in our overnight collection.

Falsifiable outcome: TransMilenio service interruption on Caracas trunk lasting more than 60 minutes attributable to demonstration activity, OR documented violent confrontation at any station on the trunk producing injuries, by 9 May. · Drivers: El Colombiano, Pasa en Bogotá Telegram, El Espectador, El Nuevo Siglo.

CL-2026-05-06-05 · Tropical wave compounding Vía al Llano structural fragility (Bogotá–Villavicencio corridor)

We estimate the convergence of the IDEAM tropical-wave (onda tropical) signal with five concurrent active partial-closure points on Vía al Llano (Coviandina K17–K65) makes a closure exceeding 4 hours or a landslide event causing injury or property damage on the K0–K85 segment within 7 days likely (55-80%, medium confidence). The corridor has historically failed under saturation rainfall events compounding ongoing geotechnical works. The strongest counter-case is that Coviandina's active monitoring and rapid-response posture absorbs marginal events; we judge that capacity sufficient for 1-2 day events but not for sustained 4-7 day rainfall windows of the type now forecast. If this call misses, the most likely cause is window calibration: rockslide cycles on Vía al Llano typically lag rainfall onset by 24-72 hours, and a 7-day window may capture only the early portion of the response curve.

Falsifiable outcome: ≥1 documented closure exceeding 4 hours OR landslide event causing injury or property damage on Vía al Llano K0–K85, by 13 May. · Drivers: Coviandina, IDEAM, INVÍAS Emergency Report, ANI.

Key Judgments — Synthesis

KJ-1. We assess the 5 May ELN “revolutionary trial” in Arauca and the simultaneous Brenda Carrascal Carvajalino release in Catatumbo represent a coordinated dual signal designed to leverage both ends of the negotiation table ahead of 31 May; sustained Arauca-corridor friction over the next 7 days is likely (55-80%) [HIGH confidence in the dual-signal interpretation; MEDIUM in the window].

KJ-2. We judge that the capture of alias “El Mono” (5 May, Cauca) tightens the post-Cajibío retaliation window such that an attributable kinetic incident on the Panamericana between Cali and Popayán within the next 7 days is likely (55-80%) [MEDIUM confidence].

KJ-3. We estimate Bogotá's Avenida Caracas trunk (Calle 26–Calle 76) faces continued demonstration-driven service disruption through 9 May, with recurrence likely (55-80%) [MEDIUM confidence].

KJ-4. We assess the IDEAM tropical-wave signal compounded against five active Vía al Llano partial-closure points makes a corridor closure exceeding 4 hours or a landslide event within 7 days likely (55-80%) [MEDIUM confidence].

KJ-5. We judge that the cumulative EPS-arrears signal (Clínica Medical four sites, Liga contra el Cáncer Seccional Bogotá, Coosalud extraordinary shareholders meeting) marks acceleration of Bogotá healthcare safety-net degradation; further cascade closures within four weeks are likely (55-80%) [MEDIUM confidence], with material implications for expat and corporate-traveler medical-access planning.

Glossary

cabecilla
Armed-group ringleader / faction commander.
juicio revolucionario
“Revolutionary trial” — ELN propaganda framing for extending hostage detention as a political-judicial act.
hostigamiento
Harassment fire / standoff attack on a fixed military or police position.
paro armado
Sectoral armed strike — armed-group-enforced movement shutdown affecting civilian and commercial traffic under threat.
Pico y Placa
License-plate restriction — the codified daily rotation that bars certain plate-ending digits from circulating during peak hours.
Defensoría del Pueblo
Office of the Ombudsman — Colombian national human-rights agency that issues Alertas Tempranas (early warnings) on humanitarian risk.
Fiscalía General de la Nación
Attorney General's Office — Colombian national prosecutor.
Procurador General
Inspector General — Colombian disciplinary-oversight authority for public officials.
Cancillería
Foreign Ministry.
Coviandina
Concession operator of the Vía al Llano (Bogotá–Villavicencio corridor).
INVÍAS
Instituto Nacional de Vías — Colombian national highways agency.
IDEAM
Instituto de Hidrología, Meteorología y Estudios Ambientales — national meteorological agency.
ANM
Agencia Nacional de Minería — mining regulator.
onda tropical
Tropical wave — a low-pressure trough crossing the tropical Atlantic, frequently producing heavy rain on the Colombian Pacific and Andean slopes.
vereda
Rural settlement / hamlet (sub-municipal addressing unit).
corregimiento
Rural township within a municipality.
disidencias FARC
FARC-aligned dissident factions that refused the 2016 peace accord; principal blocs include EMC under alias “Iván Mordisco” and EMBF under alias “Calarcá.”
Bloque Occidental Jacobo Arenas
EMC sub-unit operating in Cauca and southwestern Valle del Cauca.
Comandos de Frontera
Segunda Marquetalia bloc operating along the Putumayo–Caquetá frontier with Ecuador.
Clan del Golfo / Ejército Gaitanista
Largest narcotrafficking organization in Colombia, with operations in northern departments and the Pacific coast.
SAE
Sociedad de Activos Especiales — agency administering assets seized from criminal organizations.
Inpec
National prison administration agency.
EPS
Empresa Promotora de Salud — health-insurance company in the Colombian SGSSS system.
Fomag
Fondo del Magisterio — teachers' pension and health fund.
SITP
Sistema Integrado de Transporte Público — Bogotá integrated public-transport system.
TransMilenio
Bogotá Bus Rapid Transit network on dedicated corridors (the Avenida Caracas line is the principal north-south trunk).
tractomula
Heavy commercial freight tractor-trailer.
Cl / Cra / Av
Calle / Carrera / Avenida — Colombian street-prefix conventions preserved as they appear on signage.

Sources (Tier-labeled)

  1. El Tiempo (T2) — “Ellos son los Policías y miembros del CTI que están secuestrados por el Eln...” 5 May 2026.
  2. El Tiempo (T2) — “'El Eln no es autoridad judicial': mindefensa tras anuncio del 'juicio revolucionario'.” 5 May 2026.
  3. El Espectador (T2) — ELN announcement and humanitarian-track parallel coverage. 5 May 2026.
  4. El Colombiano (T2) — “Defensoría rechaza juicio revolucionario del ELN.” 5 May 2026.
  5. El Colombiano (T2) — Capture of alias “El Mono” / Wilmer in Cauca. 5 May 2026.
  6. El Nuevo Siglo (T4) — “Capturado alias 'El Mono', pieza clave en atentado terrorista de Cajibío.” 5 May 2026.
  7. Ejército Nacional / Sexta División (A-2) — Telegram and X communiqués on captures (alias “Negro Uber,” alias “El Mono,” alias “El Turco,” alias “Wilson”). 5 May 2026.
  8. MinDefensa / Pedro Sánchez (A-2) — statements on captures and ELN trial rejection. 5–6 May 2026.
  9. Coviandina (A-1) — @CoviandinaSAS Vía al Llano operations updates, hourly. 5–6 May 2026.
  10. INVÍAS (A-1) — @InviasOficial corridor and infrastructure communiqués. 5 May 2026.
  11. IDEAM (A-1) — @IDEAMColombia tropical-wave forecast and rainfall reports. 5 May 2026.
  12. Defensoría del Pueblo / Iris Marín (A-2) — Brenda Carrascal Carvajalino release statement; ELN trial rejection. 5 May 2026.
  13. Policía Nacional / @PoliciaColombia (A-2) — multiple operational communiqués. 5 May 2026.
  14. La Silla Vacía (T1) — “Luis Gilberto Murillo renunciaría a su candidatura.” 5 May 2026.
  15. La Silla Vacía (T1) — Cepeda denounces armed-group pressure to influence elections. 5 May 2026.
  16. BluRadio (T4) — El Carmen Norte de Santander hostigamiento; Sutatausa mining tragedy. 5 May 2026.
  17. Caracol Radio (T4) — “Dos expertos en explosivos clave para las disidencias fueron capturados en el Cauca.” 5–6 May 2026.
  18. Noticias RCN (T4) — Tayrona transport-worker armed strike; ELN trial coverage. 5 May 2026.
  19. Vanguardia (T4) — Bucaramanga / Norte de Santander regional reporting; Cordialidad gridlock. 5 May 2026.
  20. Colombia.com (T4) — “Golpe al ELN: Ejército desmantela laboratorio de cocaína en Durania.” 5 May 2026.
  21. Noticias Caracol (T4) — Girardota bus rollover; multiple security and political items. 5 May 2026.
  22. Radio Santa Fe (T4) — “Pico y Placa particulares en Bogotá: Este miércoles 6 de mayo de 2026.” 5 May 2026.
  23. El Heraldo (T4) — Vicepresidential debate from Barranquilla; regional reporting. 5 May 2026.
  24. El País Cali (T2) — Yotoco massacre and other Valle del Cauca security incidents. 5–6 May 2026.
  25. Telegram @PasaenBogotaSrBacca (C-3) — Bogotá traffic incidents and demonstration reporting; corroborates @BogotaTransito.
  26. Telegram @LaColombiaOscuraa (F-6) — Riohacha–Maicao Troncal del Caribe armed-roadblock report, single-source unverified pending corroboration.
  27. Telegram @ejercitonacionalcolombia (A-2) — Ejército Nacional channel mirror.
  28. InSight Crime (T2) — “Mapping Out US Alleged Drug Boat Strikes.” 5 May 2026.
  29. InSight Crime (T2) — “Ecuador Says Extortion Is Down. The Reality Is More Complicated.” 5 May 2026.
  30. Aerocivil (A-1) — @AerocivilCol RPA / aviation safety updates. 5 May 2026.
  31. ANI (A-1) — @ANI_Colombia infrastructure communiqués. 5 May 2026.
  32. Cancillería (A-1) — webfetch_cancilleria news index. 5 May 2026.
  33. Presidencia / @infopresidencia (A-1) — Universidad Nacional Facultad de Artes event coverage. 5 May 2026.
  34. @BogotaTransito (B-2) — live traffic and demonstration reporting through 5 May.
  35. @SectorMovilidad / Movilidad Bogotá (B-2) — Autopista Sur nightly closures announcement; corridor coordination.
  36. Misión ONU Colombia / @MisionONUCol (A-2) — humanitarian-mission support to Brenda Carrascal Carvajalino release.

Appendix A — Source Execution Table

SourceStatusItemsNotes
feedly_morning_trm_publicpartial1631108/111 feeds succeeded; failed: Emily Hart (HTTP 403), International Crisis Group (HTTP 403), Policía Nariño (HTTP 404). Bootstrap of seen-index treated all 1631 as new this cycle.
imap_cimariskpartial158 new (Google Alerts batch and brief notification).
webfetch_anisuccess1ANI portal fetched.
webfetch_cancilleriasuccess1Cancillería newsroom index fetched.
webfetch_coviandinasuccess1Concession-operator portal fetched.
webfetch_presidenciasuccess1Presidencia prensa portal fetched (JS-rendered fallback).
webfetch_telegram_ejercitosuccess4Ejército Nacional Telegram channel.
webfetch_telegram_pasa_bogotasuccess10Bogotá incident-reporting channel.
acled_baselineBLOCKED0FileNotFoundError: registry.json not found at curated path. Anniversary registry must be restored next cycle. Manual fallback applied for known anniversaries.
calendar_sourcesBLOCKED0Calendar-Driven-Sources-Master.xlsx not present in cloud filesystem. Restore on Mac and commit.
humint_logBLOCKED0HUMINT-Intake-Log.xlsx not present in cloud filesystem. Restore on Mac and commit.
ledgerBLOCKED0Scheduled-Disruptions-Ledger.xlsx not present in cloud filesystem. Restore on Mac and commit.
rss_emily_hartfailed0HTTP 403 on direct RSS fetch; the same source reported failed in feedly aggregate.
CIMA Risk — analytical product applying ICD 203 probability vocabulary, NATO STANAG 2511 source scoring, ACH (Heuer), 10th Man Doctrine (Ipcha Mistabra), Premortem, Maskirovka deception-screening, Bellingcat geolocation cross-checking and Ukrainian HUR/SBU OSINT-fusion speed. Internal use only.