Forensic seismology¶

Use recorded seismic signals, propagation models, provenance, and uncertainty-aware comparison to detect, locate, characterize, and evidentially attribute remote events for treaty, legal, historical, or incident investigation.

Version: v2 · 2026-08-30 · History
Domain-specific #: 1862
Origin domain: seismology
Subdomain: forensic event attribution and monitoring

Core Idea¶

Forensic seismology is the evidentiary application of seismological observations and models to detect, locate, characterize, and attribute remote natural or human-caused events in support of an investigation or monitoring regime.^[1] Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence.

Its autonomous residual is the accountable use of seismology for event attribution under evidentiary constraints, not ordinary earthquake research, resource exploration, structural earthquake engineering, or an unsupported inference that any impulsive trace is an explosion. The identity fails when detection is equated with source identification, a magnitude estimate is converted directly into cause, propagation and instrument effects are ignored, one discriminator is treated as universal, alternative events are not tested, provenance is missing, or classified conclusions exceed the reported uncertainty.

Recognition requires an analyst to identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity. Once established, it supports supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations without turning those uses into the definition.

Structural Signature¶

Carrier: time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question
Inputs or antecedent state: waveforms and arrival information, instrument response, timing, station geometry, propagation model, background noise, source location and time, magnitude measures, waveform character, alternative natural and anthropogenic sources, corroborating modalities, custody, uncertainty, and reporting standard
Constitutive operation: Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence
Invariant: recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard
Recognition test: identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity
Output or consequence: supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations
Failure boundary: detection is equated with source identification, a magnitude estimate is converted directly into cause, propagation and instrument effects are ignored, one discriminator is treated as universal, alternative events are not tested, provenance is missing, or classified conclusions exceed the reported uncertainty

What It Is Not¶

It is not the whole field of seismology; many objects in that field do not satisfy its constitutive rule.
It is not its canonical example. Within international nuclear-test monitoring, seismic observations contribute to detecting and locating underground events and to evaluating whether their source characteristics are more consistent with an explosion or a natural earthquake. That is an instance, not a definition.
It is not Seismic analysis. Seismic analysis broadly models or interprets ground motion for many purposes. Forensic seismology adds an attribution-bearing investigative question, provenance, competing hypotheses, uncertainty, and an evidentiary reporting context.
It is not an unrestricted metaphor. Small events, complex crustal paths, overlapping sources, mining activity, collapses, and sparse observations can make multiple causes observationally similar; no single waveform feature or institutional label supplies universal attribution

Scope of Application¶

Forensic seismology applies when the analyst can specify time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question and establish that recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard. The entry is descriptive and nonprocedural. It omits monitoring thresholds, evasion analysis, station vulnerabilities, detailed discriminant settings, explosive design, and instructions for conducting or concealing hazardous acts.^[2]

Recognition. identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity
Comparison. Compare legitimate instances through investigative mandate, event type, location, origin time, scale, network coverage, frequency band, noise, instrument response, Earth model, path and site effects, discriminant family, alternative hypothesis, corroborating modality, provenance, uncertainty, and reporting threshold.
Boundary. Small events, complex crustal paths, overlapping sources, mining activity, collapses, and sparse observations can make multiple causes observationally similar; no single waveform feature or institutional label supplies universal attribution
Use. Preserve every assumption when using the identity for supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations.

Clarity¶

A clear claim names the carrier, governing rule, assumptions, and recognition test. This matters because forensic can mean legally admissible casework, treaty-verification analysis, or retrospective attribution, while a seismic event label can express detection, phenomenology, or causal conclusion at different confidence levels. The disciplined statement is that the object counts as Forensic seismology exactly when recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard

Identity and measurement remain separate. Detection probability, location error, magnitude uncertainty, classification error, calibration, and false-alarm behavior must be evaluated separately; a numerical score is meaningful only under a declared network, model, event population, and decision rule. Approximation or noisy evidence may weaken a classification without changing its definition.

Manages Complexity¶

The abstraction compresses international treaty monitoring, national and regional networks, historical event reconstruction, industrial and mining incidents, maritime losses, cryospheric sources, natural-versus-anthropogenic attribution, and multimodal investigation into a stable carrier, rule, invariant, and failure boundary. It makes comparison tractable while retaining the variables that control validity.

Compression can hide assumptions. A responsible use therefore declares investigative mandate, event type, location, origin time, scale, network coverage, frequency band, noise, instrument response, Earth model, path and site effects, discriminant family, alternative hypothesis, corroborating modality, provenance, uncertainty, and reporting threshold and returns to the full diagnostic whenever a convention or boundary case changes.

Abstract Reasoning¶

Type the carrier. Establish time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question and reject examples from a different problem.
Lock the rule. Express that recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard independently of one notation or implementation.
Derive carefully. Infer supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations only under the stated assumptions.
Stress-test. Contrast the legitimate boundary case—Small events, complex crustal paths, overlapping sources, mining activity, collapses, and sparse observations can make multiple causes observationally similar; no single waveform feature or institutional label supplies universal attribution—with this counterexample: using earthquake recordings solely to estimate a building's expected structural demand is seismic engineering analysis, not forensic seismology, because no remote-event attribution question is being answered.

Knowledge Transfer¶

Transfer within seismology is strong when new cases preserve the same carrier, mechanism, and diagnostic. The move from Within international nuclear-test monitoring, seismic observations contribute to detecting and locating underground events and to evaluating whether their source characteristics are more consistent with an explosion or a natural earthquake. to Archived regional seismograms can help reconstruct the time and location of an otherwise poorly observed industrial, maritime, mining, or cryospheric event. demonstrates that continuity.^[3]

Outside the domain, only the skeleton—infer a hidden source from distributed traces only after modeling how the source, carrier, noise, and recorder jointly produced the observed record—travels automatically. The terms seismogram, station, arrival, waveform, source, propagation path, instrument response, event location, magnitude, discrimination, calibration, provenance, uncertainty, corroboration, and verification regime retain domain-specific meanings, so every role and inference must be revalidated.

Examples¶

Canonical¶

Within international nuclear-test monitoring, seismic observations contribute to detecting and locating underground events and to evaluating whether their source characteristics are more consistent with an explosion or a natural earthquake. The seismic conclusion is one evidence stream within a verification regime and depends on network performance, Earth models, event size and location, alternative explanations, uncertainty, and possible corroboration by other monitoring technologies. It is canonical because the carrier, rule, invariant, and consequence are all inspectable.^[1]

Mapped back: time-stamped seismic observations from one or more instruments together with station metadata, Earth and source models, candidate event hypotheses, provenance records, and an investigative or verification question → Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence → recorded seismic signals are used for an attribution-bearing question, the source-path-instrument chain is modeled, alternative event classes are considered, and conclusions remain tied to data provenance, uncertainty, and the governing evidentiary standard → supporting test-ban monitoring, reconstructing remote explosions or collapses, timing maritime or industrial incidents, distinguishing event classes at an evidentiary level, preserving auditable scientific records, and integrating geophysical findings with broader investigations

Applied / In Practice¶

Archived regional seismograms can help reconstruct the time and location of an otherwise poorly observed industrial, maritime, mining, or cryospheric event. A defensible reconstruction preserves the archive's timing and instrument limits, models travel paths, distinguishes event class from exact cause, and separates scientific inference from legal responsibility. It qualifies only after the same diagnostic and failure boundary are checked.^[2]

Mapped back: declared instance → recognition test → boundary check → qualified use

Structural Tensions¶

T1: Exact identity vs. practical recognition. The constitutive condition may be exact while evidence is indirect. Diagnostic: Can the reviewer state both the condition and the warrant?
T2: Canonical form vs. variants. international treaty monitoring, national and regional networks, historical event reconstruction, industrial and mining incidents, maritime losses, cryospheric sources, natural-versus-anthropogenic attribution, and multimodal investigation can preserve or change the identity. Diagnostic: Which named role is invariant across the variants?
T3: Compression vs. hidden assumptions. The label is useful only while prerequisites remain visible. Diagnostic: Can each downstream inference be traced to a declared assumption?
T4: Autonomy vs. reduction. The candidate uses broader structures but claims the accountable use of seismology for event attribution under evidentiary constraints, not ordinary earthquake research, resource exploration, structural earthquake engineering, or an unsupported inference that any impulsive trace is an explosion. Diagnostic: Does that residual still support independent recognition after the parent and neighbors are subtracted?

Structural–Framed Character¶

The entry is structurally mixed but domain-framed. Its portable skeleton is infer a hidden source from distributed traces only after modeling how the source, carrier, noise, and recorder jointly produced the observed record; its identity-bearing terms are seismogram, station, arrival, waveform, source, propagation path, instrument response, event location, magnitude, discrimination, calibration, provenance, uncertainty, corroboration, and verification regime. Those terms determine admissible objects, evidence, and consequences inside seismology.

Structural Core vs. Domain Accent¶

The structural core is a carrier governed by Instruments preserve ground-motion traces produced by a source and transformed by propagation, site response, and recording systems; analysts compare observations with forward expectations and alternative hypotheses, attach uncertainty and provenance, and combine seismic results with independent contextual evidence and tested by identify the investigative question and authority, secure observation provenance, verify timing and instrument metadata, separate source effects from path and site effects, locate and characterize the event through validated models, compare plausible alternatives, seek independent corroboration, and report confidence and unresolved ambiguity. The domain accent is constitutive rather than decorative, so an analogy that preserves only the skeleton is not another instance of Forensic seismology.

The proposed strict upward parent is prime:signal_extraction. The practice literally recovers event parameters and source-relevant features from seismic observations using signal, noise, and propagation models; forensic provenance and attribution provide its autonomous specialization. The edge is proposal-only and points to a frozen prior-baseline Prime.

The entry does not collapse into the parent because the accountable use of seismology for event attribution under evidentiary constraints, not ordinary earthquake research, resource exploration, structural earthquake engineering, or an unsupported inference that any impulsive trace is an explosion A thematic neighbor is declined whenever it does not literally subsume that rule.

The prospective workspace queue contains one strict upward edge to prime:signal_extraction. No live DAG mutation is authorized.

Relationships to Other Abstractions¶

Current abstraction Forensic seismology Domain-specific

Parents (1) — more general patterns this builds on

Forensic seismology is a kind of Signal Extraction Prime

The proposed strict upward parent is prime:signal_extraction.

Hierarchy path (1) — routes to 1 parentless root

Forensic seismology → Signal Extraction

Neighborhood in Abstraction Space¶

Forensic seismology sits in a moderately populated region (44^th percentile for distinctiveness): it has near-neighbors but no dense thicket of look-alikes.

Family — Seismology, Geophysics & Surveying (25 abstractions)

Nearest neighbors

Computed from structural-signature embeddings · 2026-09-08

Not to Be Confused With¶

Earthquake seismology. Studies natural seismicity and Earth structure broadly without necessarily serving an investigation.
Seismic exploration. Uses controlled sources to image subsurface geology rather than attribute an unknown event.
Seismic inversion. Estimates model parameters from observations and can be one analytical component without the forensic evidentiary framework.
Infrasound monitoring. Uses atmospheric pressure waves and is a distinct but potentially corroborating monitoring technology.

References¶

[1] Alan Douglas, Forensic Seismology and Nuclear Test Bans, Cambridge University Press, 2013, DOI 10.1017/CBO9781139524001. registry ↩a ↩b

[2] National Research Council, The Comprehensive Nuclear Test Ban Treaty: Technical Issues for the United States, National Academies Press, 2012, DOI 10.17226/12849. registry ↩a ↩b

[3] Peter Bormann, ed., New Manual of Seismological Observatory Practice 2, IASPEI and GFZ German Research Centre for Geosciences, 2012, DOI 10.2312/GFZ.NMSOP-2. registry ↩