K05 assurance architecture
Power load rejection and islanding
Direct answer
Evaluate grid separation, load shedding, reactor or generation response models, UPS/storage behavior, essential cooling, and resynchronization.
Evidence boundary. These records describe architecture, control relationships, test requirements, and legal-source status. They do not certify a facility, authorize a mission, prove deployment, or replace current facility-specific engineering and legal review.
Objective
Evaluate grid separation, load shedding, reactor or generation response models, UPS/storage behavior, essential cooling, and resynchronization.
Abstract injected condition
hardware-in-the-loop or digital-twin load step and grid-state transition
Required observations
- protected-function state
- policy decision and confidence
- authority and configuration state
- timing and identity health
- incident chronology
- rollback or safe-state result
Pass evidence
safety limits remain satisfied; essential functions persist; resynchronization follows approved sequence
Safety envelope
- isolated range or approved hardware-in-the-loop environment
- no production plant or public-network target
- synthetic or authorized data and identities
- effects-disabled or non-damaging test substitutes
- independent stop authority
- complete artifact removal and reset evidence
Excluded public detail
- exploit or payload instructions
- credential theft procedure
- persistence or evasion recipe
- targeting or engagement thresholds
- weapon construction
- real-world unauthorized access