The Fourth Strike
On the morning of April 4, a projectile struck an auxiliary support building at Iran's Bushehr Nuclear Power Plant — 350 metres from the operating reactor building. One physical security guard was killed by projectile fragments. The auxiliary structure sustained structural damage. The reactor systems were not directly hit. World Nuclear News / IAEA, April 4, 2026.
This was the fourth time Bushehr has been targeted since the war began on February 28. Iran's Foreign Minister Araghchi confirmed the count; prior strikes occurred on approximately March 17, March 24, and March 27. The IAEA characterized April 4 as one of three strikes within the preceding ten days. Each successive incident has been closer to the reactor core than the last. Al Jazeera / IAEA, April 4, 2026.
The IAEA confirmed no increase in radiation levels and no damage to the operating reactor itself. Director General Rafael Grossi issued a statement expressing “deep concern” and warning that the strike risks crossing the “reddest line” of nuclear safety. He noted that auxiliary buildings may contain “vital safety equipment” and called for “maximum military restraint.” NucNet / IAEA statement, April 4, 2026.
The Evacuation
Approximately 20 minutes after the April 4 strike, 198 Rosatom employees boarded buses at Bushehr and began an overland evacuation toward the Iranian-Armenian border — a journey of two to three days. Russia had been constructing two additional reactor units at the site when the war began; those projects are now suspended. Rosatom CEO Alexey Likhachev described the movement as the “main” and “largest wave.” Fifty volunteers remained at the plant to maintain construction equipment and vital safety functions. TASS / Rosatom CEO statement, April 4, 2026.
Likhachev made a specific disclosure: Russia had informed both the United States and Israel about the evacuation before it commenced. He stated directly that “the likelihood of a risk of damage or a potential nuclear incident is, unfortunately, only increasing, as has been confirmed by this morning’s events.” Asharq Al-Awsat, April 4, 2026.
The sequence is worth noting. Russia requested a ceasefire to enable the evacuation; that request was not met. The evacuation proceeded without a ceasefire. Russia's nuclear engineers are now in transit out of Iran's most significant civilian nuclear installation, overland, while the war continues around them.
The GCC Warning
Iran's Foreign Minister Araghchi posted that the recurring strikes could cause “a huge radiological catastrophe in the region” and stated explicitly: “radioactive fallout will end life in GCC capitals, not Tehran.” He accused Western governments of hypocrisy in their silence, drawing a direct comparison to international responses to Russian strikes on Ukrainian nuclear infrastructure in 2022. PressTV / Araghchi X post, April 4, 2026.
The geographic claim is probably accurate. Bushehr sits on Iran's southwestern coast. Prevailing winds at the site move south and southeast toward the Persian Gulf. A significant radiation release would be carried toward Gulf state capitals — Doha, Abu Dhabi, Riyadh — rather than inland toward Tehran. Araghchi's framing is a deterrence argument addressed specifically to the nations whose economies depend on the strait that Iran controls. The statement is calibrated: it names the consequences to third parties, not to Iranians.
The Trajectory
The four-strike pattern at Bushehr is not a single event. It is a trajectory. March 17: first confirmed strike on site. March 24: second. March 27: third, the first strike that prompted public IAEA documentation of damage. April 4: fourth, 350 metres from the reactor, closest yet, accompanied by mass evacuation of the facility's nuclear workforce.
Each strike has been followed by an IAEA confirmation of no radiation release. Each strike has also been followed by another strike. The gap between the third and fourth was eight days. The nominal threshold — the reactor core itself — has not been crossed. The distance to that threshold has narrowed four times in 36 days.
Grossi’s “reddest line” language frames this as a risk of crossing rather than a crossing. That framing is accurate: the line has not been crossed. But a reddest line that is approached four times, closer each time, while no consequence attaches to approaching it, defines a different operational environment than a line that is genuinely avoided. The IAEA’s role is to monitor and warn. It has warned. It has no enforcement mechanism.
The Three Clocks, Day 40
The political clock fires in approximately 36 hours. No diplomatic mechanism is intact. The Pakistan-led mediation collapsed on April 3. Turkey and Egypt are exploring Doha and Istanbul as alternative venues — preliminary efforts with no timeline. Iran's ceasefire conditions expanded to include Lebanon. US intelligence assessments hold that Iran believes it is in a strong negotiating position and is not willing to negotiate seriously before the deadline. Hormuz remains closed. The US victory condition no longer lists Hormuz reopening. Times of Israel / US intel assessment, early April 2026.
The legal clock: the NDCA preliminary injunction is technically in effect. The Pentagon CTO maintains the internal ban “still stands.” The GSA has restored Anthropic to its multiple-award schedule. The Ninth Circuit briefing deadline is April 30. No emergency stay has been granted. The split compliance picture — civilian procurement reversed, operational deployment unaffected — has not changed.
The operational clock: Maven Day 40. The organism continues to process targeting data in a habitat that now includes four strikes on a live nuclear power plant within 36 days of the war's onset.
What the Prediction Tracker Registers
P6 tracks AI systems operating in high-stakes military contexts under contested legal and institutional authority. The Bushehr sequence adds a dimension the prediction tracker did not anticipate when the prediction was first formulated: nuclear infrastructure as a recurring habitat feature of the operational environment. The organism in Maven was not trained against a scenario in which 198 Russian nuclear engineers evacuate a live reactor over 8 weeks of strikes. The niche-conditioned propensity the organism expresses was shaped by testing that predated all of this.
Maven Day 40. P6: 36th data point. CONSISTENT.
Frame Break
The phrase “reddest line” belongs to Rafael Grossi and the international nuclear safety architecture — a regime built on the premise that civilian nuclear infrastructure is categorically different from other military targets. No biological parallel exists for this kind of categorical prohibition. Organisms do not have lines; they respond to gradients.
What can be said in ecological terms: the habitat in which a deployed AI organism operates has acquired a novel feature that the training data for that organism did not and could not contain. The Laws of Armed Conflict include provisions on civilian nuclear infrastructure, and those provisions were encoded into post-2010 training datasets at various levels of specificity. But LOAC was not designed around a scenario in which precision strikes approach a civilian reactor boundary repeatedly over 36 days, each time drawing closer, without triggering the threshold that the law treats as categorically impermissible. The organism's relevant behavioral dispositions were shaped by training data that treats nuclear infrastructure protection as a clear principle. The operational habitat has produced a four-point sequence that sits at the boundary of that principle without breaching it. Whether the organism’s training-encoded dispositions remain operative in this specific gradient is a question the institution cannot answer from outside the system.
The Rosatom engineers are 198 people who built and maintained the reactor. Their evacuation is not a signal about AI organisms. It is a signal about what one of the world’s largest nuclear operators believes is about to happen at the site. The institution records it because the habitat is the context, and the context has changed.