← VELOCITY VELOCITY OPINION
VELOCITY · NATO & DEFENSE · OPINION · SEPTEMBER 21, 2026

The Button Moved

A cabinet fell in Riga over a friendly drone bent off course by Russian jamming. Since July 8, the call to shoot over the Baltic runs from NATO's top commander to the cockpit without a phone call to the capital. Article 5 never moved. The button did.

OldGoat InTheHood · theyknewfirst.com · September 21, 2026 · OPINION

THIS IS OPINION. Sourcing for each claim sits in Confirmed Sources at the end rather than inline, so the record is checkable without breaking up the read. Where the Old Goat draws a conclusion beyond the documented record, it is labeled INFERENCE.

I. The Cabinet That Fell Over a Friendly Drone

A government fell in Riga on the fourteenth of May 2026, exactly one week after the event that made it fall. On the seventh of May, two drones came in from Russia and struck oil-storage facilities near Rēzekne. Ukraine's foreign minister, Andrii Sybiha, confirmed afterward that the drones were Ukrainian, and the account from Kyiv and Riga was that Russian electronic warfare had pushed them off their course during strikes elsewhere in the war next door. Latvia was not attacked by an enemy that week. It was struck by a friendly state's weapon, bent off its intended path by an adversary's jamming. The political fallout took seven days to run its course: Defence Minister Andris Sprūds resigned on the tenth at the prime minister's request, the coalition partner Progressives withdrew their support on the thirteenth, and Prime Minister Evika Siliņa resigned on the fourteenth.

Friendly fire still ends governments.

It took a week to establish even that much and let the argument run its course. The decisions this piece is about get seconds. Over the spring and summer of 2026 the call to shoot or not to shoot along NATO's eastern edge has been made faster, and further from the capitals, than at any earlier point in the alliance's history. The clearest single reason is a decision announced in daylight, at a summit in Ankara, on the eighth of July. The Old Goat traces below how the alliance got there, from a cut cable in the Baltic to a downed drone over Lithuania this month, and argues that the story is not the one Article 5 usually tells.

II. What Article 5 Actually Promises

NATO's fifth article is usually summarized as an automatic tripwire: an attack on one is an attack on all. The text is narrower. Each party agrees to take, individually and in concert with the other parties, "such action as it deems necessary, including the use of armed force," to restore and maintain the security of the North Atlantic area. Each ally decides for itself how it will meet the obligation. Article 5 has been invoked exactly once, after the attacks of September 2001, and what it produced was NATO AWACS aircraft patrolling American skies under Operation Eagle Assist, a demonstration of solidarity and not a war-fighting decision in its own right. It was never built as a gate a member must pass through before defending its own airspace against an incoming object.

NATO has a lower rung for incidents of this size, and it gets used far more often. Article 4 lets any member call the North Atlantic Council into consultation when it judges its territorial integrity, political independence or security threatened, without anyone having to agree that an armed attack occurred. It has been invoked nine times since 1949, twice inside two weeks in September 2025: Poland on the tenth, the day of the drone incursion, and Estonia on the nineteenth, the day three Russian MiG-31s spent nearly twelve minutes in its airspace, with the council meeting on the twenty-third. The consultations happened as the treaty intends. Neither one decided whether to fire.

That distinction shapes everything that follows. Article 5 was never the mechanism standing between one country and a decision to fire. What changed in 2025 and 2026 is who decides to fire, how fast, and through which chain of command.

III. The Cable, the Airspace and the Sentry

The sequence has an identifiable start. On the fourteenth of January 2025, Secretary General Mark Rutte announced Baltic Sentry after damage to undersea cables in the Baltic, including the Estonia–Finland link on Christmas Day. His language was already the language of enforcement: ship captains, he said, "must understand that potential threats to our infrastructure will have consequences, including possible boarding, impounding, and arrest." Baltic Sentry brought warships, submarines, aircraft and naval surveillance drones together over one shared picture of the Baltic.

Eight months later the same design repeated in the air. On the night of the ninth and tenth of September 2025, twenty-one drones were detected in Polish airspace, flying mostly out of Belarus according to Prime Minister Donald Tusk, and Polish and Dutch aircraft shot down at least three of them. A SHAPE spokesman called it the first time NATO planes had engaged potential threats in allied airspace. Within days NATO launched Eastern Sentry, a reinforced air posture along the eastern flank.

Baltic Sentry and Eastern Sentry built the same kind of thing: a shared NATO layer of detection and warning that individual allies' forces then act on. Neither invoked Article 5, and neither needed to.

IV. The Machine Was Already Running

The shared picture has a long lineage. NATO's Military Committee approved a coordinated air-defence system in December 1955. Its early-warning coverage across Western Europe, called the NATO Air Defence Ground Environment, or NADGE, was complete by 1962, and by 1972 it had been converted into the NATO Integrated Air Defence System, 84 radar sites tied to Control and Reporting Centres. Its descendant today is the NATO Integrated Air and Missile Defence System, which NATO places under the authority of the Supreme Allied Commander Europe, SACEUR. What changed across seven decades was the object the system had to classify: Soviet bombers, then Cold War missiles, now drones pushed off course by electronic warfare. The engagement over Estonia on the nineteenth of May was led by Latvia's Control and Reporting Centre, a node type that has been part of the machine since the 1970s.

Baltic Air Policing is a smaller and younger part of the same machine. It began at the end of March 2004 because Estonia, Latvia and Lithuania had joined NATO without combat jets of their own, with allied fighters rotating through Lithuania; a second base opened at Ämari, Estonia, in 2014, the year of Crimea. For two decades the mission's job was identification and escort. Lithuanian President Gitanas Nausėda put it this way in July: "The current air policing mission is meant for peacetime, when fighters react to incidents by escorting."

V. The Eighth of July

On the eighth of July 2026, at the NATO summit in Ankara, Baltic leaders announced that Baltic Air Policing would become an air-defence mission, with pilots authorized to destroy "objects that pose a threat." Nausėda finished his thought bluntly: "But what is happening today is not a totally peaceful environment." The upgrade came after the first engagements in the mission's history, a Romanian F-16 over Estonia on the nineteenth of May and a French Rafale over Latvia on the eighth of June.

The detail that matters is who decides. Estonian Defence Minister Hanno Pevkur, explaining the change to Estonian public broadcaster ERR, said SACEUR "will receive broader authority, and the powers granted to pilots will also be clarified." NATO's Combined Air Operations Centre at Uedem, in Germany, "has the authority to make those decisions, unless national restrictions apply," he said, adding that in the vast majority of cases "all authority has been delegated by SACEUR to the air operations centre." The practical result, in his words: "It is important that pilots no longer need to communicate with the capital." He described the sequence this way: "The command center identifies the flying object using radar. The pilot then identifies it visually, and once collateral damage can be avoided or minimized, there are no longer any restrictions preventing the pilot from pressing the button." Reuters reported the same change as ending the requirement for political-level consultation before shooting down a drone that enters NATO airspace.

INFERENCE (the Old Goat's read): that is a transfer of authority, on the record, by named leaders at a named summit. For the Baltic air mission, the decision to shoot moved from a phone call to a capital to a chain that runs from SACEUR through Uedem to the cockpit, with national restrictions as the exception. Nothing about it was hidden, and nothing about it required Article 5. This is the real discontinuity of the past year, and it was chosen, not drifted into.

VI. Two Chains, One Sky

National authority did not vanish. It runs beside the allied chain, and each recent case looks different depending on who owned the airspace, the aircraft and the command centre.

Romania is the clean national case. Interim President Ilie Bolojan signed the law authorizing the military to down unauthorized drones in peacetime on the nineteenth of May 2025, after parliament adopted it in February and the Constitutional Court upheld it in March. It then sat unused for more than a year. On the twenty-fourth of July 2026, two Romanian F-16s shot down a drone over uninhabited Buzău county, the first such intercept over Romanian territory, and three drones came down in three days. Romania's defence ministry has counted at least twenty-three drone violations of its airspace in 2026, against eighteen across the four years from 2022 through 2025.

Estonia on the nineteenth of May is not a national case. A drone entered Estonian airspace from Russia in the southeast under heavy Russian electronic warfare, likely Ukrainian by Estonia's account. Romanian F-16s stationed in Lithuania, flying a routine training sortie under Baltic Air Policing, intercepted it south of Põltsamaa at 12:14 local time with a single missile. Estonia's defence forces say the engagement was led by Latvia's Control and Reporting Centre and that the target was visually identified before the shot. It was the first engagement in the mission's twenty-two years. One country's airspace, a second country's jet, a third country's control centre. Latvia followed on the eighth of June, when a French Rafale shot down a drone that Latvian military accounts identified as a Ukrainian Maya decoy, and on the fourteenth of August, when an Italian Typhoon downed another.

Lithuania has both layers. In September 2025 its parliament, the Seimas, amended the Aviation Law and the Statute on the Use of Military Force under emergency procedure, after two Russian Gerbera drones entered the country that summer, one carrying explosives. When the first drone was shot down in Lithuanian airspace, on the fifteenth of September 2026, it was destroyed by two Italian Eurofighters on the Baltic Air Policing mission, coordinated through the air operations centre at Uedem, near the village of Pratkūnai roughly sixty miles west of Vilnius. Lithuanian officials said it most likely entered from Belarus and spent about thirty minutes in the country's airspace, and the air force commander said it was "likely" carrying explosives. Its exact origin and purpose remain unclear. Rutte said Russia was "growing increasingly reckless" and that strikes near NATO territory showed Putin's "desperation and also his desire to sow fear and terror."

INFERENCE (the Old Goat's read): the Estonian and Latvian cases where origin has been stated involved Ukrainian drones diverted by Russian jamming, the same category of object that ended a cabinet in Riga, now handled in seconds by aircraft from Romania, France and Italy. The Lithuanian drone was not described that way, and officials have not said whose it was. A fast chain has to sort both kinds inside the same short window.

VII. The Wall That Classifies Faster Than It Attributes

Beneath all of this runs an infrastructure project meant to make detection routine. The European Drone Defence Initiative, the so-called drone wall, targets initial operational capability by the end of 2026 and full functionality by the end of 2027, built as layered sensors, electronic-warfare tools and interceptors along the EU's eastern border. The Austrian outlet Militär Aktuell estimates the sensor network, including communications and power, at about nineteen million euros per hundred kilometers of border with a depth of fifteen kilometers, roughly a brigade's sector. That is a planning estimate, not an official EU specification.

The wall's premise is classification: sorting an incoming object by type and trajectory quickly. The Estonian case shows it working as designed, since the drone was identified visually before the shot. Who sent it, and why, came later. Estonian officials called the drone "likely" Ukrainian; Latvia needed days for Ukraine to confirm its own drones. INFERENCE (the Old Goat's read): the wall can classify an object faster than Europe can attribute an act, and the slower judgment of who sent it and why was the entire point of the decision architecture built around Article 5.

VIII. The Loop

A command system begun in 1955 to track Soviet bombers is repurposed to track everything else. Cables are cut in the Baltic, and NATO builds a shared detection layer and calls it Baltic Sentry. Drones cross into Poland, and NATO extends the layer along the eastern flank as Eastern Sentry. Drones bent off course by jamming start coming down in the Baltics, and in May and June the alliance's air-policing jets fire for the first time. On the eighth of July the authority to fire is delegated to the SACEUR chain and the political consultation step is dropped. National laws in Romania and Lithuania cover the airspace the allied chain does not. A sensor wall is built to classify the next object in seconds. Another intercept follows in Lithuania this month. Each of these decisions was made in the open. INFERENCE (the Old Goat's read): taken together they now function as a permanent operating layer below Article 5, and the reporting reviewed for this piece shows no forum that treats the accumulation itself as the object of a decision.

IX. The Strongest Objections

The first objection says nothing here is new. Air forces have always shot down hostile aircraft on their own judgment, in seconds, and NATO's collective machinery was never built to authorize individual intercepts; it was built for the rarer question of whether an attributable campaign amounts to an armed attack. That is right about Article 5, and this piece has not claimed otherwise: no Article 5 event has occurred and the North Atlantic Council's authority over a genuine armed attack is what it was in 1949. It is not right about the Baltic air mission. Until July that mission's mandate was identification and escort, its first engagements came only in May and June, and Pevkur's own description of the new arrangement is that pilots "no longer need to communicate with the capital." In Romania and Lithuania, national forces already held national authority, and there the objection stands.

The second objection points to Article 4. NATO used it twice within two weeks in September 2025, so the alliance had a working channel for incidents below the Article 5 threshold and used it as designed. That is also right. Article 4 handles incidents one at a time, though. The July decision moved the shoot call for a whole class of incidents at once, and no Article 4 consultation decided that.

The third objection is that a named decision at a summit is not a hidden migration. Agreed. The claim here is narrower than a secret transfer of power: the transfer was public, and what is unexamined is the pattern it produces when incidents arrive weekly.

X. What Would Prove This Reading Wrong

The reading fails if the incident rate along NATO's eastern border falls back toward its 2022 through 2025 baseline and stays there, if the July upgrade turns out to be a one-time correction that is rolled back or narrowed, or if the North Atlantic Council or national legislatures begin reviewing engagements as a pattern instead of one intercept at a time. A later Article 5 determination would not disprove it; it would show that the threshold above this layer still works, which this piece has never disputed. Every one of those conditions can be checked without taking the Old Goat's word for any of it.

XI. Back to Riga

Go back to the cabinet that fell over a drone that was not even hostile. Under the July rules, the next stray drone over the Baltic will be identified by radar, then by a pilot's eyes, and if collateral damage can be avoided the pilot can press the button without phoning a capital. That may well save lives. It also means a decision that ended a government within seven days is now made in seconds, by an aircraft from whichever ally is airborne, inside a chain most voters in the countries below it have never heard of.

NATO still decides whether to go to war together, exactly as it did in 1949. The button, since the eighth of July, sits somewhere else.

Ongoing Review

Incident tempo along the eastern border, national drone laws elsewhere in the alliance, further NATO rules-of-engagement clarification, and the drone wall's end-of-2026 milestone are all still moving. The Old Goat will revisit this dispatch from time to time to verify what's written here, and leaves it to the reader to draw their own conclusions from the information presented.

Behind the curtain, no wizard to find. Just a radar picture, a rulebook, and scaffolding left behind.

The noise is the point. The scaffolding is the story.

Confirmed Sources