Faculty member fatally shot in Caudill Laboratories; campus locked down for three hours
AI-generated · every claim is source-linkedA graduate student shot and killed faculty member Zijie Yan in Caudill Laboratories. Alert Carolina activated within one minute of the 911 call, among the fastest documented campus response times. But the lockdown stretched over three hours as the suspect fled and was eventually captured off-campus. A CNA Corporation after-action review found that 49.5% of respondents rated the update alerts 'not useful or only slightly useful' due to vague location language.
- Alerts
- 22
- Response
- 1 min
- Killed
- 1
- Injured
- 0
Alert Sequence
22 messages in sequence · 22 verified verbatim
Confirmed wording is transcribed character-for-character from a primary source. Use Verify this quote under each message to open that source in a new tab and compare the text yourself.
How the first alert is built
To check this alert, Claude Opus 5 (an AI) read it in full 25 separate times, independently. Each read decided whether the message answers each of the six questions and gave a short reason. A final reviewer then weighed all 25 and wrote the plain-English verdict you see when you open a row. The score (for example 22/25) is how many reads agreed; the 25 individual reads are tucked underneath if you want to check them.
Students, Faculty, and Staff: Due to today’s incident on campus, UNC-Chapel Hill will operate at a Condition 2 on Tuesday, Aug. 29. This means that classes are canceled, and non-mandatory operations are suspended. More information and details about Condition 2 can be found on the Adverse Weather & Emergency Closing webpage. This will be in place until 11:59 p.m. on Tuesday, Aug. 29. The University will provide more information tomorrow. For updates on alerts, visit alertcarolina.unc.edu.
Sourcepresent25/25
Final assessment
Present, 25 of 25. The notice states that "UNC-Chapel Hill will operate at a Condition 2" and promises "The University will provide more information tomorrow".
Who is sending the alert and who is responding. People act faster on a message from a clearly identifiable, credible sender, such as a named department, the police, or a branded alert system, than on an anonymous notice. A branded signature counts.
See all 25 individual reads
- present: "UNC-Chapel Hill" and "The University" identify themselves as the sender.
- present: "UNC-Chapel Hill" and "The University" identify the institution issuing the operating decision.
- present: The message speaks as "UNC-Chapel Hill" and "The University".
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operating notice.
- present: "UNC-Chapel Hill" and "The University" identify the sender.
- present: "UNC-Chapel Hill" and "The University" identify the institution as sender, with alertcarolina named.
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operational notice.
- present: The message is issued by UNC-Chapel Hill and points to alertcarolina.unc.edu.
- present: The message identifies "UNC-Chapel Hill" and "The University" as the sender.
- present: "UNC-Chapel Hill" names itself as the entity setting Condition 2.
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operating status notice.
- present: "UNC-Chapel Hill" and "The University" identify the sender.
- present: "UNC-Chapel Hill" and "The University" identify the institution sending the notice.
- present: UNC-Chapel Hill and its alertcarolina site identify the institution as sender.
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operational notice.
- present: It states that "UNC-Chapel Hill will operate at a Condition 2", naming the university as sender.
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operating notice.
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operational notice.
- present: "UNC-Chapel Hill" and "The University" identify the sender.
- present: "UNC-Chapel Hill" and "The University" identify the sender of the operating decision.
- present: "UNC-Chapel Hill" and "The University" identify the sender.
- present: "UNC-Chapel Hill" and "The University" identify the institutional sender.
- present: The message speaks as "UNC-Chapel Hill" and points to alertcarolina.unc.edu.
- present: "UNC-Chapel Hill" and "The University" identify the institution sending the notice.
- present: "UNC-Chapel Hill" and "The University" identify the sender.
Hazardabsent0/25
Final assessment
Absent, 0 of 25. The message attributes the closure only to "today’s incident on campus" and never names a shooting or any other threat.
What the threat actually is. A complete warning names the specific danger, such as a shooter, a fire, a tornado, or a gas leak, rather than a vague emergency, because people decide what to do based on what they are facing.
See all 25 individual reads
- absent: It refers only to "today's incident", which names no specific threat.
- absent: It refers only to "today's incident on campus", never naming what the threat was.
- absent: Only "today's incident on campus" appears, which never names the actual threat.
- absent: Only "today's incident on campus" appears, which names no specific threat.
- absent: It refers only to "today's incident on campus", naming no specific threat.
- absent: It refers only to "today's incident on campus", which names no specific threat.
- absent: It refers only to "today's incident on campus", which names no specific hazard.
- absent: It refers only to "today’s incident on campus" without naming what happened.
- absent: It refers only to "today's incident on campus" without naming what happened.
- absent: It refers only to "today's incident on campus" without naming what the threat was.
- absent: It refers only to "today's incident on campus", a generic phrase naming no threat.
- absent: It refers only to "today's incident on campus" without naming the threat.
- absent: It refers only to "today's incident on campus", never naming what happened.
- absent: It refers only to "today's incident on campus" without naming the threat.
- absent: It refers only to "today's incident on campus" without naming what the threat was.
- absent: It refers only to "today's incident on campus" without naming what the threat was.
- absent: It refers only to "today's incident on campus" without naming what happened.
- absent: It refers only to "today's incident on campus", a generic phrase naming no specific threat.
- absent: It refers only to "today's incident", a generic phrase that names no hazard.
- absent: It refers only to "today's incident on campus", naming no specific threat.
- absent: Only "today's incident on campus" is referenced, which names no actual threat.
- absent: It refers only to "today's incident on campus", a generic phrase naming no hazard.
- absent: It refers only to "today's incident", a generic phrase that names no threat.
- absent: It refers only to "today's incident on campus", never naming what the threat was.
- absent: It refers only to "today's incident", a generic phrase that never names the threat.
Locationpresent25/25
Final assessment
Present, 25 of 25. The phrase "on campus" places the triggering event at UNC-Chapel Hill, and the Condition 2 closure covers that campus.
Where the threat is. Saying whether danger is in a specific building, a part of campus, or area-wide lets people judge their own proximity and choose a safe direction. Without a where, a warning is hard to act on precisely.
See all 25 individual reads
- present: The incident is described as "on campus" and closures apply there.
- present: The incident is placed "on campus" at UNC-Chapel Hill.
- present: The incident is placed "on campus" at UNC-Chapel Hill.
- present: The message says the incident was "on campus" and concerns the Chapel Hill campus.
- present: "on campus" locates it at UNC-Chapel Hill.
- present: It says the incident was "on campus" and applies to university operations.
- present: The incident is placed "on campus" at UNC-Chapel Hill.
- present: "on campus" and the UNC-Chapel Hill campus define the affected place.
- present: The incident and the operating condition are placed "on campus" at UNC-Chapel Hill.
- present: The incident and the operating condition are both located "on campus".
- present: "on campus" locates the incident that prompted the closure.
- present: The incident is placed "on campus" at UNC-Chapel Hill.
- present: The incident and the operating condition are placed on the Chapel Hill campus.
- present: The affected place is UNC-Chapel Hill's campus.
- present: "on campus" locates the incident and the closure.
- present: The incident and the operating condition are tied to the campus.
- present: "on campus" locates the incident and the affected operations.
- present: The incident is placed "on campus" and the closure applies to the university.
- present: The incident is placed "on campus" and the closure applies to the university.
- present: The incident and the closure are both located "on campus" at UNC-Chapel Hill.
- present: "on campus" is the stated location.
- present: It places the matter "on campus" at UNC-Chapel Hill.
- present: It specifies the incident was "on campus" at UNC-Chapel Hill.
- present: "on campus" locates the incident and the affected operations.
- present: The incident is placed "on campus" and the closure covers the University.
Guidancepresent25/25
Final assessment
Present, 25 of 25. Recipients are told classes are canceled, pointed to the Adverse Weather and Emergency Closing webpage, and told "For updates on alerts, visit alertcarolina.unc.edu".
The protective action to take. A clear, specific instruction, such as shelter in place, evacuate, avoid the area, or run-hide-fight, drives faster and more correct protective behavior than describing the threat alone.
See all 25 individual reads
- present: It directs readers to alertcarolina.unc.edu for updates, a monitoring instruction.
- present: It directs readers to the closing webpage and to "visit alertcarolina.unc.edu" for alert updates.
- present: Readers are directed to alertcarolina.unc.edu for updates, a monitoring instruction.
- present: Readers are directed to "visit alertcarolina.unc.edu" for alert updates.
- present: Readers are pointed to alertcarolina.unc.edu for updates and told operations are suspended.
- present: It tells readers to consult the Adverse Weather page and to "visit alertcarolina.unc.edu" for updates.
- present: Readers are directed to alertcarolina.unc.edu for updates, a monitoring instruction.
- present: It directs readers to the closing webpage and to alertcarolina.unc.edu for updates.
- present: Readers are directed to the Adverse Weather webpage and to "visit alertcarolina.unc.edu" for updates.
- present: Readers are directed to the closing webpage and to "visit alertcarolina.unc.edu" for updates.
- present: Readers are directed to the closing webpage and told to "visit alertcarolina.unc.edu" for updates.
- present: "For updates on alerts, visit alertcarolina.unc.edu" directs recipients to monitor.
- present: Readers are directed to the Adverse Weather webpage and to "visit alertcarolina.unc.edu" for updates.
- present: It directs readers to the Adverse Weather webpage and to alertcarolina.unc.edu for updates.
- present: Readers are directed to alertcarolina.unc.edu for updates and to the closing webpage.
- present: It directs readers to the closing webpage and to "visit alertcarolina.unc.edu" for alert updates.
- present: "For updates on alerts, visit alertcarolina.unc.edu" directs recipients to monitor for information.
- present: Readers are pointed to the closing webpage and told to visit alertcarolina.unc.edu for updates.
- present: It directs readers to alertcarolina.unc.edu "For updates on alerts", a monitoring instruction.
- present: It directs readers to the closing webpage and to "alertcarolina.unc.edu" for updates.
- present: Readers are directed to the closing webpage and to alertcarolina.unc.edu for updates.
- present: It directs readers to alertcarolina.unc.edu for updates, a monitoring instruction.
- present: It directs readers to the closing webpage and "For updates on alerts, visit alertcarolina.unc.edu".
- present: Readers are directed to alertcarolina.unc.edu for updates, a monitoring instruction.
- present: Readers are pointed to the emergency webpage and told to "visit alertcarolina.unc.edu" for updates.
Timepresent25/25
Final assessment
Present, 25 of 25. Condition 2 is set for "Tuesday, Aug. 29" and runs "until 11:59 p.m." that day, an exact closing window.
When the message applies. A timestamp, the word now or immediately, or a phrase like until further notice tells the reader whether the danger is current and how quickly to act.
See all 25 individual reads
- present: It sets Condition 2 for "Tuesday, Aug. 29" until "11:59 p.m." that day.
- present: It fixes Condition 2 for "Tuesday, Aug. 29" "until 11:59 p.m." that day.
- present: Dates and a cutoff of "11:59 p.m. on Tuesday, Aug. 29" are supplied.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit timing.
- present: "today", "Tuesday, Aug. 29" and "until 11:59 p.m." are explicit time markers.
- present: It names "Tuesday, Aug. 29" and an end point of "11:59 p.m." that day.
- present: It sets Condition 2 for "Tuesday, Aug. 29" until "11:59 p.m.".
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit dates and times.
- present: It gives the date Tuesday, Aug. 29 and an end time of "11:59 p.m.".
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give the exact window.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." set explicit timing.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit dates and times.
- present: It gives "today", "Tuesday, Aug. 29" and an end point of "11:59 p.m.".
- present: Times are explicit: Tuesday, Aug. 29 and until 11:59 p.m.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit timing.
- present: It specifies Tuesday, Aug. 29 and an end at "11:59 p.m." that day.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." set the window precisely.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit dates and duration.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit timing.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give exact timing.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." set the timing.
- present: It specifies Tuesday, Aug. 29 and "until 11:59 p.m." that day.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit timing.
- present: "Tuesday, Aug. 29" and "until 11:59 p.m." supply explicit timing.
- present: "today", "Tuesday, Aug. 29" and "until 11:59 p.m." give explicit timing.
Impactabsent0/25
Final assessment
Absent, 0 of 25. Only operating status is conveyed, that "classes are canceled, and non-mandatory operations are suspended", with no account of harm or severity.
What the hazard could do to the people in its path. Beyond naming the threat, a complete warning conveys its potential consequences or severity, such as that a tornado can level buildings or that a leak could be explosive, so recipients grasp how much danger they are in. Research on warning message content finds that a concrete impact statement helps people personalize their risk and act sooner.
See all 25 individual reads
- absent: No consequence or severity of the incident is conveyed, only operating status.
- absent: No consequence or severity of the underlying incident is described at all.
- absent: No harm or severity is described, only an operating condition and cancellations.
- absent: No harm or severity is described, only cancelled classes and suspended operations.
- absent: No consequence or severity of the incident is described.
- absent: No consequence or severity of the incident is conveyed in the closure notice.
- absent: No harm, severity or consequence of the incident is described.
- absent: No consequence or severity of the unnamed incident is described.
- absent: No consequence or severity of the incident is described in the closure notice.
- absent: No severity or potential harm from the incident is conveyed.
- absent: No consequence, danger or severity of the incident is described.
- absent: No harm, danger, or severity is described.
- absent: No harm or severity is described, only the cancellation of classes and operations.
- absent: No harm or severity is described, only operational status.
- absent: No consequence or danger is described, only the resulting operating condition.
- absent: No consequence or severity of the unnamed incident is described.
- absent: No danger or consequence is described, only cancelled classes and suspended operations.
- absent: Nothing describes what harm occurred or could occur; only operating status is given.
- absent: No harm, danger or severity of the incident is described.
- absent: No harm, danger, or severity of the underlying incident is described.
- absent: No consequence or severity of the incident is described.
- absent: No consequence or danger is described, only the operating condition that follows.
- absent: Nothing describes possible harm; the message is an operating condition notice.
- absent: No danger, consequence, or severity is described, only operating condition.
- absent: No consequence or severity of the incident is described anywhere.
Coded by Claude Opus 5
Systematic AI judgments with visible reasoning, not human-validated codings.
Background
Key Findings
Community Response
How the campus community received and interpreted the alert(s), in their own words.
The August 28, 2023 UNC-Chapel Hill faculty shooting prompted both praise and critique of Alert Carolina. Students called some messages "confusing and scary", and the university's own incident feedback portal found respondents split on the lockdown updates and flagged the initial "on or near campus" wording as too vague, even as most rated the first text alert and the all-clear useful.
“confusing and scary”
“We need a method of clear communication and preventing misinformation.”
Reactions to the alert, drawn from press coverage; follow each link to verify. Quotes are reproduced from reporting and not independently re-confirmed against the original source.
Sources
Every claim on this page is meant to be checkable. Open the links below (and the Verify this quote control under each confirmed alert) to read the original university, news, or archive page yourself. Hostnames are shown so you can see where you are going; archived copies survive when live pages move or disappear. See also our methodology.
- Official
- ReportCNA Corporation After-Action Review
- Student Paper
- News
- Official
- Official
- Official
- Official
- Official
- Social
- Social
- Social
- Social
- Social
- Social
- Social
- Social
- Social
- Social
- Official
- Social
- Social
- Official
Campus Alert Archive. "University of North Carolina at Chapel Hill: Faculty member fatally shot in Caudill Laboratories; campus locked down for three hours." Incident of August 28, 2023. Added April 2026; last updated July 2026. https://campusalertarchive.com/case/unc-chapel-hill-shooting-2023-08-28/
Alert text quoted on this page remains the work of the issuing institution; the archive is a secondary source.