SSMT – Disaster-Prevention Playbook (9.13–9.17)

Risk:
Thermal overrun in a small equipment room with limited telemetry

Inputs:
Ambient temperature from one sensor in the room.
Symbolic contrast e_T_room from that sensor.

Guard (symbol space):
e_T_room tracks how “hot above normal” the room is.

Action (enter):
e_T_room >= +0.7
for >= 10 minutes
→ send alert + trigger cooling response path

Clear (exit):
e_T_room <= (+0.7 - 0.2)
for >= 10 minutes
→ resolve alert

Notes:
• This is an S1-style deployment: only e_T and dwell.
• Hysteresis of 0.2 (symbol space) prevents rapid alert spam if temperature oscillates near the threshold.
• Works anywhere, because 0.7 is a symbolic excursion, not a hardcoded °C.

Risk:
Warm exposure during staging or handoff

Inputs:
Probe at the tray or container, not the general room.
Symbolic contrast e_T_tray.
Symbolic excursion budget S-CDD.

Definitions:
S-CDD := sum_t max( e_T(t) - e* , 0 )
where e* is your allowed symbolic headroom.

Action (enter):
e_T_tray >= +0.5 for >= 5 minutes
OR
S-CDD > 1.5
→ quarantine / escalate

Clear (exit):
e_T_tray <= (+0.5 - 0.2)
for >= 5 minutes
→ release hold

Notes:
• The rule is expressed fully in symbol space (`e_T_tray`, `S-CDD`), so it can be audited later without guessing units.
• Posting this rule in plain text is encouraged: frontline teams can act without decoding math.

Risk:
Different product classes with different freeze/overheat sensitivities co-located in one zone

Inputs:
Per-zone stream (zone temperature).
Per-SKU pivot tags T_m_tag_list (each SKU has its own meaningful T_m).
Symbolic dial a_phase_zone per SKU requirement.

Guard (symbol space):
a_phase_zone := tanh(
    c_m_sku * ( (T_zone_K - T_m_sku) / DeltaT_m_sku )
)

Action (enter):
a_phase_zone <= -Phi_freeze_sku
for >= T_min_sku
→ relocate / protect SKU

Clear (exit):
a_phase_zone >= +Phi_clear_sku
for >= T_clear_sku
→ safe

Notes:
• Each SKU can have its own Phi_freeze_sku, Phi_clear_sku and dwell times. That lets one warehouse enforce many stability envelopes without rewriting °C/°F per product.
• Routing logic can literally watch `a_phase_zone` for each SKU and decide “move now.”

Risk:
Thermal runaway precursor in energy storage modules

Inputs:
Module or cell surface temperatures.
Symbolic contrast e_T_module around a declared neutral band.
Short-window volatility V_T(5–10 min).

Guard (symbol space):
e_T_module := encode_eT( T_module_K , lens , anchors )
V_T := sqrt( Var_{5-10min}( e_T_module ) )

Action (enter):
e_T_module >= +E_hot
OR
V_T >= V_star
for >= T_hot_min
→ throttle / isolate module per safety procedure

Clear (exit):
e_T_module <= (+E_hot - E_hyst)
for >= T_clear
→ allow recovery

Notes:
• We are not checking absolute temperature. We are checking “how intense above normal” (e_T_module) and “how unstable right now” (V_T).
• Hysteresis band `E_hyst` prevents oscillation between “trip” and “clear.”
• This can be rolled out fleet-wide with shared symbolic thresholds and dwell config.

Risk:
Thermal stress or condensation risk from rapid swings

Inputs:
Ambient temperatures by gallery / case.
Symbolic anomaly Z_T.
Rolling symbolic volatility V_T(L).

Definitions:
Z_T(t) := ( e_T(t) - median_{30d,same-hour}( e_T ) )
          / MAD_{30d,same-hour}( e_T )
V_T(L)  := sqrt( Var_{[t-L,t]}( e_T ) )

Action (enter):
V_T >= V_star
OR
abs(Z_T) >= Z_star
for >= T_min
→ trigger slow corrective control, not immediate hard swing

Clear (exit):
V_T < (V_star - V_hyst)
AND
abs(Z_T) < Z_star
for >= T_clear
→ resume steady state

Notes:
• This treats “danger” as either too much short-term volatility (V_T) or a sustained symbolic anomaly (Z_T), not just “temperature passed X.”
• The same policy text can be used across multiple sites. You only retune V_star, V_hyst, Z_star, and dwell.

1. Tabletop replay:
   Run last month’s symbolic stream through each rule.
   Confirm enter/clear timing and that dwell windows feel realistic.

2. Failover simulation:
   Kill a sensor feed. Verify:
   health.sensor_ok = false
   → manual inspection is triggered
   → system does NOT silently assume “all good.”

3. Hysteresis tuning:
   Sweep rho and k_side (soft hysteresis memory and side selector).
   Goal: low alert flicker without delaying clears so long that safety suffers.

"Heat Advisory triggered in symbol space: e_T exceeded +E_hot for T_hot_min."

"Freeze Risk cleared: a_phase exceeded +Phi_clear for T_clear."

"Audit trail attached: manifest_id, thresholds, dwell windows, and health flags are logged."