SAFETY-94: a healthy battery that lags or reverses is not flagged as frozen or refusing #171

Merged

admin merged 7 commits from safety-94-no-false-stale-or-refusal into release/1.0 2026-10-04 17:27:21 +02:00

Conversation 3 Commits 7 Files Changed 14

+1645 -100

7 Commits

Author	SHA1	Message	Date
adminandClaude Opus 5.5	7d06aa674d	SAFETY-97: centre the band on the idle reading clamped to 75 W ... Owner decision 2026-10-04 (review R1). A wrong idle reading more than about 100 W off hid every refusal on that battery. Clamped under the band, the band keeps 0 W +-25 W, so a battery reading about 0 W while refusing is caught whatever was learned or restored. Samples are still taken to 250 W. Beyond about +-170 W of idle a battery behaves as in 0.14.0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 16:57:16 +02:00
adminandClaude Opus 5.5	88ebf3a5a6	SAFETY-97 review: tests for four surviving mutants ... The N=1 stale-path refusal and SAFETY-42's parked test are centred on the idle reading; learning stops while control is stopped or the sign watchdog has latched. Each had no check (review mutants X7, X8, X13, X14). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 14:29:27 +02:00
adminandClaude Opus 5.5	3db2b6392f	SAFETY-97: test the centred stale-path refusal (mutant S10 survived) ... At a 5 s meter a register frozen at rest on B trips the stale gate before the 12-cycle evidence; its refusal must be centred on B's idle reading, or the site stops and re-trips instead of refusing B. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019DBUfvndgHwaV339Fvd2gr	2026-10-04 13:07:06 +02:00
adminandClaude Opus 5.5	80bfc5721e	SAFETY-97: point test_safety97 at MUTATION.md; record the DC-entity option ... test_bytecode requires every suite to name MUTATION.md (CI run 1158). DECISIONS: why the integration's DC battery power entity is not the fix. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019DBUfvndgHwaV339Fvd2gr	2026-10-04 12:51:52 +02:00
adminandClaude Opus 5.5	6918e154c8	SAFETY-97: "gives nothing" is graded against each battery's idle reading ... B's power reading shows -95 to -118 W at idle (standby draw), so the |reading| < 100 W refusal band never held a refusing B: never at N=2, and since SAFETY-94's shared rule not at N=1 either (review F1). Each unit now learns its idle reading (app/idle.py): only while control runs, the unit is not refused/stale/tripped and its command has stayed within 50 W for 120 s; first value a 120 s mean, then a 30 min follow; samples beyond 250 W dropped, value clamped to 250 W; saved per unit and restored. The shared refusal evidence, compute()'s N=1 engage and end, the unit refusal ends, the stale-path refusal and SAFETY-42's "parked" test are centred on it. Until learned it is 0 W, the rule as it was. Refusing B caught at N=1 28/28/65 s and N=2 24/24/60 s (1/2/5 s meters), before never; refusing A unchanged. Healthy B with its offset, SAFETY-94's scenarios, 96 runs: 0 stale, 0 refused. Live replay: 0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_019DBUfvndgHwaV339Fvd2gr	2026-10-04 12:21:24 +02:00
glenn schrooyenandClaude Opus 5.5	dd5eb6fdc8	SAFETY-94 review: tests for three surviving mutants; record two gaps ... - test_safety94 part 4: time under 250 W is not counted; a command that swaps direction every cycle is never refusal evidence; a reading moving away from the ask does not restart the evidence. These kill review mutants R1, R3 and R6, which survived the PR's tests. - DECISIONS: at N=1 a battery with B's standby offset no longer latches a refusal (SAFETY-97 now covers N=1); a part-time ask is caught after 35/d s of wall time. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 01:17:52 +02:00
adminandClaude Opus 5.5	6759d21ea5	SAFETY-94: a healthy battery that lags or reverses is not flagged as frozen or refusing ... The stale-reading gate counted its 35 s from the register's last change, so after a rest the first read after a new command tripped it (SAFETY-58; live 2026-10-03, four trips 1 s after the command). It now counts only the time the command asked the register to move. At N=1 the refusal engaged after 12 frozen cycles if the reading was under 100 W at that moment, which a battery reversing through its lag passes at a 1 s meter. The refusal now needs the N>1 evidence at every roster size: under 100 W, one way, for 12 cycles spanning 22 s, restarting when the reading moves 50 W towards the ask. DECISIONS/SAFETY-94-lagging-battery.md; test_safety94.py. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 00:15:42 +02:00