8 Commits

Include renames

Author	SHA1	Message	Date
glenn schrooyenandClaude	e27e62ff72	SAFETY-119 round 3b: no-clock budget, fixed-seed tests, accepted limits ... The rolling budget now holds without a monotonic clock (it never refills). Quarter-edge tests use seeds 1-3 at 2, 5, 10 and 15 s (no hand-picked seeds). Re-pin comments point at part 6. DECISIONS lists the limits the owner accepted with N=8 on 2026-10-20. Co-Authored-By: Claude <noreply@anthropic.com>	2026-10-20 20:46:14 +02:00
glenn schrooyenandClaude	86b94bedb5	SAFETY-119 round 3: DECISIONS table ranges over all runs ... Co-Authored-By: Claude <noreply@anthropic.com>	2026-10-20 17:28:22 +02:00
glenn schrooyenandClaude	103db2fcda	SAFETY-119 round 3: rolling 15-minute budget for the hidden integrator bound ... At most 8 hidden bound cycles in any 900 s across all hand-backs, replacing the per-run budget. Chosen from a sweep (N 3 to 10, 1 to 15 s meters, both cases); DECISIONS has the table. Tests: never case at 5, 10, 15 s, quarter edge at 2, 10, 15 s, the rolling budget at its boundaries. Co-Authored-By: Claude <noreply@anthropic.com>	2026-10-20 17:27:43 +02:00
glenn schrooyenandClaude	e76c70ecb0	SAFETY-119 round 2: one settle window per run of hand-backs ... A hand-back used to restart the window, so a guard and a charge taking turns hid the loop's integrator bound for good (0 warnings in 2 h; 28 before the fix). A run of hand-backs (the wire away less than a settle between them) now hides the bound for at most 11 bound cycles and 22 s in all, then it counts. The quarter-edge kick stays hidden. No command or text changes. Tests for the two reviewer mutants that only unit checks caught (a restart counted as a hand-back; span only), DECISIONS gives the delay at 2 s, 5 s and 60 s. test_safety87.py:543 shortened. Co-Authored-By: Claude <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bdqr7PiaHcBnzPituu2yTC	2026-10-20 00:52:24 +02:00
glenn schrooyenandClaude Opus 5.5	b9ff6acea4	SAFETY-119 review: DECISIONS, at least once a quarter ... A bigger house warns more often (every 150 s at 7.4 kW), so 'about' was wrong. Text only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bdqr7PiaHcBnzPituu2yTC	2026-10-19 20:29:00 +02:00
glenn schrooyenandClaude Opus 5.5	98026f9a46	SAFETY-119 review: DECISIONS states the worst delay and the no-warn case ... The delay is 11 cycles, so up to 11 min at a 60 s cycle. A loop that loses the wire again within 11 cycles is never counted; review measured one such case (N=2, cheap-window charge, no forecast, house just over the rating). The over-rating rule applies on cycles the loop decided. Text only. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bdqr7PiaHcBnzPituu2yTC	2026-10-19 20:17:08 +02:00
glenn schrooyenandClaude	b0c2e5977d	SAFETY-119: re-pin test_safety84/87 digests (log only); prove it ... The re-pinned digests differ only in OUTPUT_CLAMP log rows; every command and claim is the same as without the fix (test_safety119.py part 5). DECISIONS: the delay at a 5 s meter and the open swap case. Co-Authored-By: Claude <noreply@anthropic.com>	2026-10-19 15:30:18 +02:00
glenn schrooyenandClaude	c4e15ec4cd	SAFETY-119: no "not keeping up" when the loop takes the wire back ... When the peak guard or a maintenance charge hands the wire back, the loop's integrator is re-seeded from that owner's command and kicked by a meter that does not show it yet. It crossed its rail for a cycle or two and raised goodwe_integrator_bound while the battery gave what it was told. The loop's integrator bound is not counted until the plant's settle (SHORT_CYCLES, SHORT_SPAN_S) has passed since the hand-back. An over-rating always counts; a bound that lasts warns after the settle. No command changes and no text changes. test_safety119.py; DECISIONS entry. Co-Authored-By: Claude <noreply@anthropic.com>	2026-10-19 14:14:08 +02:00