CI-02 probe F: the ORIGINAL gate, unchanged, on the same unmergeable PR

goodwe_controller/DOCS.md

@@ -640,7 +640,18 @@ The add-on alarms when **both** of these are true at once:
 
 - the meter's own document (power figure *and* both kWh registers) has not
   changed for `meter_freeze_s` — 300 s by default; **and**
-- the command standing on the wire is at the rail, within 5 % of `max_w`.
+- the command standing on the wire is at the rail, within 5 % of the ceiling
+  the command can actually reach.
+
+**That ceiling is `min(max_w, the setpoint device's own rating)`, not `max_w`.**
+The emitted command is clipped to the device's reported range as well as to
+`max_w`, so on a 4700 W inverter configured with `max_w: 5000` a rail measured
+at 4750 W is one the command can never stand at — the guard could not fire, and
+the status page said `armed` anyway. It now measures the rail against the
+smaller number and the page names it, saying *"below max_w because …"* when the
+device is what capped it. (On an install that started, the two are equal: a
+`max_w` above the device rating is refused at startup. This matters when the
+rating could not be read at boot — see below.)
 
 Neither half is usable alone. A bare "unchanged for N seconds" rule false-trips
 at the exact operating point this controller aims for — at a converged −10 W a
@@ -666,6 +677,13 @@ that reads the meter's own document; on `ha_dsmr`, `mqtt_p1`, `ha_signed` and
 `off` there is no signal to threshold and the status page says **NOT COVERED**
 rather than pretending the guard is armed.
 
+The same row appears for a second reason: a setpoint device that reports a range
+from which no command magnitude is available in both directions leaves no rail
+to measure at all, and a 0 W rail would be satisfied by *every* command. That is
+reported as **NOT COVERED** too, and the detector stays silent rather than
+degenerating into the bare "unchanged for N seconds" rule this design exists to
+avoid.
+
 | option | default | meaning |
 |---|---|---|
 | `meter_freeze_s` | 300 | Seconds of an unchanged measurement, *while the command is at the rail*, before the alarm |