The Four-Minute Window

The drone that struck Galati on the night of May 28 was a Geran-2 — the Russian-produced version of an Iranian Shahed, identifiable from its debris signature. It entered Romanian airspace as one of 43 Russian drones flying toward the region. Ukrainian air defenses intercepted one above Reni, altering its trajectory toward Romania. Romanian fighter jets and a helicopter scrambled at 0119 local time. Four minutes passed between detection in Romanian airspace and impact on the apartment building. Two civilians were injured.

The Romanian joint staff commander's account of that interval is the most useful analysis of the strike. Four minutes was insufficient to detect, identify and intercept the drone. Romanian law prohibits air defense engagement if the resulting debris could enter neighboring airspace. The commander stated that the risk of interceptor debris inflicting more damage than the drone precluded engagement. The window is physically too narrow to shorten by responding faster, and the legal constraint cannot be waived in four minutes even if the timeline were adequate.

Twenty-eight prior Russian drone incursions into Romanian airspace had produced no civilian casualties. Some produced fragments on Romanian territory; Romania recorded roughly 50 drone strikes near the Ukrainian-Romanian border since the start of the full-scale invasion, including 30 in which debris fell on Romanian soil. The Galati strike crossed a line that 28 prior incursions had approached: the first time Russian ordnance injured NATO citizens.

Russia's response made clear how the Kremlin intends the strike to function. The deputy security council chairman stated that European states "haven't seen anything yet" and that supporting Ukraine makes them "direct participants" in the conflict. The president denied Russian origin and offered to examine the wreckage personally. The paired response — external threat framing combined with procedural deflection — is calibrated to establish that harm to NATO civilians is a consequence of European policy choices rather than a violation that demands military response. Russia has observed how NATO responded to 28 prior airspace incursions, none of which produced a military consequence at the site of the violation. The Galati strike tests whether civilian casualties shift that calibration.

Romania's response was proportionate given the constraints it cannot change: it expelled the Russian consul from Constanta, shut the consulate and began consultation about Article 4 activation. No NATO military response authorization followed.

The structural problem that the Galati strike exposed has no current solution. Romania cannot intercept safely on a four-minute timeline under existing rules. Closing the exposure requires air defense authority to conduct cross-border intercept operations into Ukrainian and potentially Moldovan airspace — agreements that do not exist and that require political decisions none of the parties have made. Those decisions require NATO to acknowledge that the Romanian border has become a live air defense problem, which changes the political framing of the conflict in ways that several alliance members have been carefully avoiding.

Four minutes is the operative number. Any cross-border intercept authority that would address the Galati scenario requires pre-positioned assets and automated decision processes — not command authorization cycles. The framework does not currently support either.

Russia reads the response it gets. Each incursion that produces no military consequence at the site of the violation is data. The Galati strike, if it produces the same calibration outcome as its 28 predecessors, establishes that civilian casualties in NATO territory also produce no military consequence at the site. The next test of that calibration is not a question of whether but when.