Unit 8: Non-Destructive Insulation Testing: Partial Discharge Detection and Dielectric Tan-Delta

Unit 8: Reliability and engineering decisions

Engineering overview

Asset management integrates stress, condition, failure consequence, uncertainty and maintenance logistics. A low calculated event probability is not a guarantee and a high alarm score is not automatically a reason for immediate replacement. System engineers justify decisions through defined evidence and responsibility.

Four separate studies are developed in this unit: Failure hazard and survival models, Failure consequence and expected loss, Maintenance availability and outages, and Decision records and change control. Their models have intentionally different input assumptions. They should not be combined simply because their numerical outputs share units. A source voltage, local electric field, risk probability and event count answer different questions and can have different uncertainty structures.

Learning outcomes

By the end of the unit, a reader should be able to state the physical source of the phenomenon; calculate a constrained model result with consistent units; identify its boundary conditions and initial data; conduct a controlled sensitivity test; and construct a short engineering review that explicitly identifies omitted mechanisms. The reader should also be able to separate a documented equipment rating from a quantity invented for an instructional example. A defensible result includes both a number and a statement of its limitations.

Evidence workflow

1. Source: identify what event or operating condition creates the stress or observation. Write down its time reference and appropriate signal representation.

2. Propagation or internal response: trace the signal through the relevant network, insulating material or sensor. Use the model only where its assumptions apply.

3. Measurement: name the quantities that would have to be observed for a real analysis, noting uncertainty, calibration and reference location.

4. Decision: state an actionable conclusion only when the acceptance criterion, equipment definition and hazard boundary are independently documented.

Integrated software case

Build a basic time-to-event model and a decision register, explicitly including detection delays, external dependencies and qualified review before operational change. Start with the default inputs and write a small table of three cases: baseline, one input increased, and a contrasting configuration. Give units for every column. Do not treat a “better-looking” curve as a demonstration that a real dielectric is more reliable; the curve was produced by the stipulated equations. Where the unit involves event probability or a failure model, compute exposure and population definitions before interpreting the percentage.

Reading order

• Lesson 8.1: Failure hazard and survival models — Use survival analysis as one scenario, not as a deterministic lifetime or warranty.
• Lesson 8.2: Failure consequence and expected loss — A repair investment should not be sold on a hypothetical avoided-loss claim without probabilities grounded in data.
• Lesson 8.3: Maintenance availability and outages — Reducing repair delay may be as effective as lowering failure incidence for some non-safety-critical equipment.
• Lesson 8.4: Decision records and change control — The correct output of incomplete evidence may be a hold point and commissioning review, rather than a fabricated pass certificate.

Expected outputs

Submit a two-page technical note, the three-case numerical table, your answer to each lesson's three problems, and one diagram identifying missing evidence. The project and the unit assessment are separate; the project tests reasoning about a whole subsystem, while the assessment checks multiple independent concepts. A valid submission can conclude that physical validation is currently unavailable, provided the logical and numerical work is reproducible.

Safety boundary. This is entirely a software and analytical teaching resource. No live high-voltage test or energized hardware construction is included. Lightning, insulation switching and stored electrical energy can cause fatal electric shock or arc events even after isolation. Physical testing requires properly trained personnel, site-specific risk assessments, approved procedures, interlocked laboratories and calibrated equipment; numerical examples provide no permission to undertake those tests.

Lesson 8.1 — Failure hazard and survival models

Unit: Reliability and engineering decisions Scope: mathematical explanation, traceable worked cases, no energized experiments. Prerequisites: electromagnetism, circuit theory, calculus, introductory probability and numerical reasoning. Status: instructional draft, expert review required.

Question that motivates the calculation

Failure probability over an exposure interval is a time-dependent statement, not a calendar guarantee. Exponential survival is a useful benchmark but cannot capture wear-out, repair state and event clustering. Consider what an engineer would need to know before computing a number. A source condition and an observation location must be named; the disturbance travels through a physical structure, and the inference must distinguish an equivalent network quantity from a local material stress. This lesson focuses on the specific observables relevant to failure hazard and survival models, rather than treating every high-voltage problem as a breakdown-field calculation.

Governing relation and conditions

Working relation: For constant hazard λ, survival is S(t)=exp(−λt) and failure probability F(t)=1−S(t).

Worked engineering illustration

For λ=0.02/year and t=5 years, F≈1−e^(−0.1)≈9.52%; a five-year event is not certain even though expected risk is nonzero.

First robustness check

Compare equal instantaneous hazards with increasing-hazard Weibull deterioration over a ten-year horizon. To turn this into a sensitivity analysis, change one input while keeping all the others fixed. If the model predicts an output proportional to an input, a ten percent increase produces a ten percent change. If the relation is a square law, the same input change can produce a twenty-one percent change. If the relation contains logarithms, exponential decay or a nonlinear power, compute the actual new value; do not apply a linear rule automatically. State the chosen parameter, the updated input, and whether the original physical assumptions still hold.

Second robustness check

Ageing may raise hazard with time, and a fitted hazard from few failures has large statistical uncertainty. Identify which omitted effect would most likely overturn the numerical conclusion. Ask whether the apparent physical change could instead be a measurement-location effect, a mode not included in the circuit, a transient initial condition or an unverified population parameter. Rank these omissions by their causal relevance to the particular conclusion; not all unspecified real-world complexities deserve equal emphasis. A non-converged software calculation should be rejected before arguing about possible dielectric ageing.

Competing mechanisms and decision boundary

Use survival analysis as one scenario, not as a deterministic lifetime or warranty. Compare equal instantaneous hazards with increasing-hazard Weibull deterioration over a ten-year horizon. Two physical explanations can yield similar single-point voltage or event counts, so a useful experiment must predict different observations. For a transient network, compare arrival time, reflection polarity or waveform shape at two locations. For insulation, compare temperature, condition history or discharge signatures with controlled confounders. For asset probabilities, compare rates normalized to the same exposure rather than absolute totals. Always identify who is authorized to collect actual high-voltage measurements; this document does not authorize them.

Guided study: three substantive problems

1. Baseline reconstruction. Derive or explain the working relation from its relevant conservation law or constitutive assumption, identify every input in the numerical example, reproduce the result with units, and explain what a physically observable quantity would be. Then perform a dimensional check. Your answer must include the geometric or time-domain reference under which the formula is meaningful.

2. Alternative scenario. Use the particular comparison: Compare equal instantaneous hazards with increasing-hazard Weibull deterioration over a ten-year horizon. Predict whether the model value rises, falls or changes sign. Provide a numerical recalculation where the supplied inputs allow it, and explain which untouched assumptions make the comparison fair. Avoid claiming a physical outcome that is absent from the equation.

3. Engineering review. A report claims that the worked example proves a complete network or insulation design is suitable. Identify the missing evidence implied by this lesson: Ageing may raise hazard with time, and a fitted hazard from few failures has large statistical uncertainty. Propose two observations or records that would independently test the interpretation, and write the strongest narrower claim justified by the model.

Fully reasoned answer guidance

Problem 1: Start with For constant hazard λ, survival is S(t)=exp(−λt) and failure probability F(t)=1−S(t). The illustrative case is: For λ=0.02/year and t=5 years, F≈1−e^(−0.1)≈9.52%; a five-year event is not certain even though expected risk is nonzero. A correct answer must show the steps and resolve any negative sign, time origin, population condition or reference terminal used in the relation. Merely copying the result without a model domain and physically meaningful units is incomplete. If the formula contains an illustrative statistical parameter, identify its assumed status and do not mislabel it as a field-measured prevalence or strike distribution.

Problem 2: The key comparison is Compare equal instantaneous hazards with increasing-hazard Weibull deterioration over a ten-year horizon. The perturbation should preserve all unmodified conditions, so a change in one parameter can be attributed to the mathematical model. Explain the equation's sensitivity and one reason the real system may depart from that dependence. A graph generated from the same equation is a re-expression of the prediction, not independent validation.

Problem 3: A sufficient critique must cite Ageing may raise hazard with time, and a fitted hazard from few failures has large statistical uncertainty. It should also explain the required evidence pathway: appropriate physical representation, verified input data, uncertainty evaluation, instrument qualification and a specific acceptance reference relevant to the real equipment. If those inputs are absent, the decision is unresolved. Failure to prove suitability is not by itself proof of failure.

Connection to the unit simulator

Open the [Unit 8 interactive software model](../simulations/model-08.html). Its parameters isolate a small part of the unit; it is not a design tool and does not evaluate the specific example of every chapter. Record default inputs, plotted axes and the reported calculated result. Repeat with one controlled parameter change. Independently calculate at least one data point. If the graph appears smooth, ask what is missing from the model and identify a quantity the software could not measure. Build a basic time-to-event model and a decision register, explicitly including detection delays, external dependencies and qualified review before operational change.

Summary and transition

The core result in this lesson concerns failure hazard and survival models under explicit ideal conditions. The most important limitation is not insufficient decimal places but ageing may raise hazard with time, and a fitted hazard from few failures has large statistical uncertainty. Retain the distinction among mathematical output, simulated behavior and verified real-world evidence when connecting this lesson to the remaining cases in the unit.

Safety boundary. This is entirely a software and analytical teaching resource. No live high-voltage test or energized hardware construction is included. Lightning, insulation switching and stored electrical energy can cause fatal electric shock or arc events even after isolation. Physical testing requires properly trained personnel, site-specific risk assessments, approved procedures, interlocked laboratories and calibrated equipment; numerical examples provide no permission to undertake those tests.

Lesson 8.2 — Failure consequence and expected loss

Unit: Reliability and engineering decisions Scope: mathematical explanation, traceable worked cases, no energized experiments. Prerequisites: electromagnetism, circuit theory, calculus, introductory probability and numerical reasoning. Status: instructional draft, expert review required.

Question that motivates the calculation

Expected loss ranks options by likelihood times consequence under a defined period and monetary scope. Large rare losses should also be reviewed for safety, regulatory and societal impacts that money does not adequately capture. Consider what an engineer would need to know before computing a number. A source condition and an observation location must be named; the disturbance travels through a physical structure, and the inference must distinguish an equivalent network quantity from a local material stress. This lesson focuses on the specific observables relevant to failure consequence and expected loss, rather than treating every high-voltage problem as a breakdown-field calculation.

Governing relation and conditions

Working relation: For mutually exclusive outcomes, E[L]=ΣpiLi. An intervention expected risk reduction is (pold−pnew)·L if consequence and assumptions match.

Worked engineering illustration

If annual fault probability is 1% with $200,000 direct loss, expected direct loss is $2,000/year; a reliable reduction to 0.4% would save a modeled $1,200/year before intervention costs.

First robustness check

Compare a cheap but unreliable monitor with a better-calibrated diagnostic program using false-positive and false-negative costs. To turn this into a sensitivity analysis, change one input while keeping all the others fixed. If the model predicts an output proportional to an input, a ten percent increase produces a ten percent change. If the relation is a square law, the same input change can produce a twenty-one percent change. If the relation contains logarithms, exponential decay or a nonlinear power, compute the actual new value; do not apply a linear rule automatically. State the chosen parameter, the updated input, and whether the original physical assumptions still hold.

Second robustness check

Consequence distributions may have heavy tails; safety-critical harm cannot be justified away by a small mean cost. Identify which omitted effect would most likely overturn the numerical conclusion. Ask whether the apparent physical change could instead be a measurement-location effect, a mode not included in the circuit, a transient initial condition or an unverified population parameter. Rank these omissions by their causal relevance to the particular conclusion; not all unspecified real-world complexities deserve equal emphasis. A non-converged software calculation should be rejected before arguing about possible dielectric ageing.

Competing mechanisms and decision boundary

A repair investment should not be sold on a hypothetical avoided-loss claim without probabilities grounded in data. Compare a cheap but unreliable monitor with a better-calibrated diagnostic program using false-positive and false-negative costs. Two physical explanations can yield similar single-point voltage or event counts, so a useful experiment must predict different observations. For a transient network, compare arrival time, reflection polarity or waveform shape at two locations. For insulation, compare temperature, condition history or discharge signatures with controlled confounders. For asset probabilities, compare rates normalized to the same exposure rather than absolute totals. Always identify who is authorized to collect actual high-voltage measurements; this document does not authorize them.

Guided study: three substantive problems

1. Baseline reconstruction. Derive or explain the working relation from its relevant conservation law or constitutive assumption, identify every input in the numerical example, reproduce the result with units, and explain what a physically observable quantity would be. Then perform a dimensional check. Your answer must include the geometric or time-domain reference under which the formula is meaningful.

2. Alternative scenario. Use the particular comparison: Compare a cheap but unreliable monitor with a better-calibrated diagnostic program using false-positive and false-negative costs. Predict whether the model value rises, falls or changes sign. Provide a numerical recalculation where the supplied inputs allow it, and explain which untouched assumptions make the comparison fair. Avoid claiming a physical outcome that is absent from the equation.

3. Engineering review. A report claims that the worked example proves a complete network or insulation design is suitable. Identify the missing evidence implied by this lesson: Consequence distributions may have heavy tails; safety-critical harm cannot be justified away by a small mean cost. Propose two observations or records that would independently test the interpretation, and write the strongest narrower claim justified by the model.

Fully reasoned answer guidance

Problem 1: Start with For mutually exclusive outcomes, E[L]=ΣpiLi. An intervention expected risk reduction is (pold−pnew)·L if consequence and assumptions match. The illustrative case is: If annual fault probability is 1% with $200,000 direct loss, expected direct loss is $2,000/year; a reliable reduction to 0.4% would save a modeled $1,200/year before intervention costs. A correct answer must show the steps and resolve any negative sign, time origin, population condition or reference terminal used in the relation. Merely copying the result without a model domain and physically meaningful units is incomplete. If the formula contains an illustrative statistical parameter, identify its assumed status and do not mislabel it as a field-measured prevalence or strike distribution.

Problem 2: The key comparison is Compare a cheap but unreliable monitor with a better-calibrated diagnostic program using false-positive and false-negative costs. The perturbation should preserve all unmodified conditions, so a change in one parameter can be attributed to the mathematical model. Explain the equation's sensitivity and one reason the real system may depart from that dependence. A graph generated from the same equation is a re-expression of the prediction, not independent validation.

Problem 3: A sufficient critique must cite Consequence distributions may have heavy tails; safety-critical harm cannot be justified away by a small mean cost. It should also explain the required evidence pathway: appropriate physical representation, verified input data, uncertainty evaluation, instrument qualification and a specific acceptance reference relevant to the real equipment. If those inputs are absent, the decision is unresolved. Failure to prove suitability is not by itself proof of failure.

Connection to the unit simulator

Open the [Unit 8 interactive software model](../simulations/model-08.html). Its parameters isolate a small part of the unit; it is not a design tool and does not evaluate the specific example of every chapter. Record default inputs, plotted axes and the reported calculated result. Repeat with one controlled parameter change. Independently calculate at least one data point. If the graph appears smooth, ask what is missing from the model and identify a quantity the software could not measure. Build a basic time-to-event model and a decision register, explicitly including detection delays, external dependencies and qualified review before operational change.

Summary and transition

The core result in this lesson concerns failure consequence and expected loss under explicit ideal conditions. The most important limitation is not insufficient decimal places but consequence distributions may have heavy tails; safety-critical harm cannot be justified away by a small mean cost. Retain the distinction among mathematical output, simulated behavior and verified real-world evidence when connecting this lesson to the remaining cases in the unit.

Safety boundary. This is entirely a software and analytical teaching resource. No live high-voltage test or energized hardware construction is included. Lightning, insulation switching and stored electrical energy can cause fatal electric shock or arc events even after isolation. Physical testing requires properly trained personnel, site-specific risk assessments, approved procedures, interlocked laboratories and calibrated equipment; numerical examples provide no permission to undertake those tests.

Lesson 8.3 — Maintenance availability and outages

Unit: Reliability and engineering decisions Scope: mathematical explanation, traceable worked cases, no energized experiments. Prerequisites: electromagnetism, circuit theory, calculus, introductory probability and numerical reasoning. Status: instructional draft, expert review required.

Question that motivates the calculation

Preventive and corrective maintenance affect service availability. A simplistic steady-state two-state model can make downtime visible, but it hides crew availability, spare logistics and common-cause events. Consider what an engineer would need to know before computing a number. A source condition and an observation location must be named; the disturbance travels through a physical structure, and the inference must distinguish an equivalent network quantity from a local material stress. This lesson focuses on the specific observables relevant to maintenance availability and outages, rather than treating every high-voltage problem as a breakdown-field calculation.

Governing relation and conditions

Working relation: For exponential up/down states with mean time between failures MTBF and mean time to repair MTTR, A=MTBF/(MTBF+MTTR).

Worked engineering illustration

With MTBF=2000 h and MTTR=20 h, availability is 2000/2020≈99.01%; doubling MTTR gives ≈98.04%.

First robustness check

Compare a condition-maintenance program that reduces incidents with a spares program that shortens restoration. To turn this into a sensitivity analysis, change one input while keeping all the others fixed. If the model predicts an output proportional to an input, a ten percent increase produces a ten percent change. If the relation is a square law, the same input change can produce a twenty-one percent change. If the relation contains logarithms, exponential decay or a nonlinear power, compute the actual new value; do not apply a linear rule automatically. State the chosen parameter, the updated input, and whether the original physical assumptions still hold.

Second robustness check

The model assumes repairable stationary processes and consistent observation units; calendar maintenance windows are not independent. Identify which omitted effect would most likely overturn the numerical conclusion. Ask whether the apparent physical change could instead be a measurement-location effect, a mode not included in the circuit, a transient initial condition or an unverified population parameter. Rank these omissions by their causal relevance to the particular conclusion; not all unspecified real-world complexities deserve equal emphasis. A non-converged software calculation should be rejected before arguing about possible dielectric ageing.

Competing mechanisms and decision boundary

Reducing repair delay may be as effective as lowering failure incidence for some non-safety-critical equipment. Compare a condition-maintenance program that reduces incidents with a spares program that shortens restoration. Two physical explanations can yield similar single-point voltage or event counts, so a useful experiment must predict different observations. For a transient network, compare arrival time, reflection polarity or waveform shape at two locations. For insulation, compare temperature, condition history or discharge signatures with controlled confounders. For asset probabilities, compare rates normalized to the same exposure rather than absolute totals. Always identify who is authorized to collect actual high-voltage measurements; this document does not authorize them.

Guided study: three substantive problems

1. Baseline reconstruction. Derive or explain the working relation from its relevant conservation law or constitutive assumption, identify every input in the numerical example, reproduce the result with units, and explain what a physically observable quantity would be. Then perform a dimensional check. Your answer must include the geometric or time-domain reference under which the formula is meaningful.

2. Alternative scenario. Use the particular comparison: Compare a condition-maintenance program that reduces incidents with a spares program that shortens restoration. Predict whether the model value rises, falls or changes sign. Provide a numerical recalculation where the supplied inputs allow it, and explain which untouched assumptions make the comparison fair. Avoid claiming a physical outcome that is absent from the equation.

3. Engineering review. A report claims that the worked example proves a complete network or insulation design is suitable. Identify the missing evidence implied by this lesson: The model assumes repairable stationary processes and consistent observation units; calendar maintenance windows are not independent. Propose two observations or records that would independently test the interpretation, and write the strongest narrower claim justified by the model.

Fully reasoned answer guidance

Problem 1: Start with For exponential up/down states with mean time between failures MTBF and mean time to repair MTTR, A=MTBF/(MTBF+MTTR). The illustrative case is: With MTBF=2000 h and MTTR=20 h, availability is 2000/2020≈99.01%; doubling MTTR gives ≈98.04%. A correct answer must show the steps and resolve any negative sign, time origin, population condition or reference terminal used in the relation. Merely copying the result without a model domain and physically meaningful units is incomplete. If the formula contains an illustrative statistical parameter, identify its assumed status and do not mislabel it as a field-measured prevalence or strike distribution.

Problem 2: The key comparison is Compare a condition-maintenance program that reduces incidents with a spares program that shortens restoration. The perturbation should preserve all unmodified conditions, so a change in one parameter can be attributed to the mathematical model. Explain the equation's sensitivity and one reason the real system may depart from that dependence. A graph generated from the same equation is a re-expression of the prediction, not independent validation.

Problem 3: A sufficient critique must cite The model assumes repairable stationary processes and consistent observation units; calendar maintenance windows are not independent. It should also explain the required evidence pathway: appropriate physical representation, verified input data, uncertainty evaluation, instrument qualification and a specific acceptance reference relevant to the real equipment. If those inputs are absent, the decision is unresolved. Failure to prove suitability is not by itself proof of failure.

Connection to the unit simulator

Open the [Unit 8 interactive software model](../simulations/model-08.html). Its parameters isolate a small part of the unit; it is not a design tool and does not evaluate the specific example of every chapter. Record default inputs, plotted axes and the reported calculated result. Repeat with one controlled parameter change. Independently calculate at least one data point. If the graph appears smooth, ask what is missing from the model and identify a quantity the software could not measure. Build a basic time-to-event model and a decision register, explicitly including detection delays, external dependencies and qualified review before operational change.

Summary and transition

The core result in this lesson concerns maintenance availability and outages under explicit ideal conditions. The most important limitation is not insufficient decimal places but the model assumes repairable stationary processes and consistent observation units; calendar maintenance windows are not independent. Retain the distinction among mathematical output, simulated behavior and verified real-world evidence when connecting this lesson to the remaining cases in the unit.

Safety boundary. This is entirely a software and analytical teaching resource. No live high-voltage test or energized hardware construction is included. Lightning, insulation switching and stored electrical energy can cause fatal electric shock or arc events even after isolation. Physical testing requires properly trained personnel, site-specific risk assessments, approved procedures, interlocked laboratories and calibrated equipment; numerical examples provide no permission to undertake those tests.

Lesson 8.4 — Decision records and change control

Unit: Reliability and engineering decisions Scope: mathematical explanation, traceable worked cases, no energized experiments. Prerequisites: electromagnetism, circuit theory, calculus, introductory probability and numerical reasoning. Status: instructional draft, expert review required.

Question that motivates the calculation

A defensible technical decision cites accepted operating envelope, scenario assumptions, evidence provenance, independent review and a route to revise it when monitoring or standards change. Models are tools for uncertainty management, not substitutes for accountable engineering. Consider what an engineer would need to know before computing a number. A source condition and an observation location must be named; the disturbance travels through a physical structure, and the inference must distinguish an equivalent network quantity from a local material stress. This lesson focuses on the specific observables relevant to decision records and change control, rather than treating every high-voltage problem as a breakdown-field calculation.

Governing relation and conditions

Working relation: A screening score can be written R=p×C, but a final go/no-go requires qualitative constraints, hazard controls, and documented acceptance thresholds.

Worked engineering illustration

Consider two modeled annual risks: Option A p=0.005 with monetary impact $100,000 → $500 expected; B p=0.002 with impact $400,000 → $800. Lower p does not imply lower expected cost.

First robustness check

Compare a reversible pilot analysis with an irreversible energization decision, explaining the different evidentiary standards. To turn this into a sensitivity analysis, change one input while keeping all the others fixed. If the model predicts an output proportional to an input, a ten percent increase produces a ten percent change. If the relation is a square law, the same input change can produce a twenty-one percent change. If the relation contains logarithms, exponential decay or a nonlinear power, compute the actual new value; do not apply a linear rule automatically. State the chosen parameter, the updated input, and whether the original physical assumptions still hold.

Second robustness check

A financial scalar cannot alone decide among options involving injury hazards, severe public impact or noncompliance. Identify which omitted effect would most likely overturn the numerical conclusion. Ask whether the apparent physical change could instead be a measurement-location effect, a mode not included in the circuit, a transient initial condition or an unverified population parameter. Rank these omissions by their causal relevance to the particular conclusion; not all unspecified real-world complexities deserve equal emphasis. A non-converged software calculation should be rejected before arguing about possible dielectric ageing.

Competing mechanisms and decision boundary

The correct output of incomplete evidence may be a hold point and commissioning review, rather than a fabricated pass certificate. Compare a reversible pilot analysis with an irreversible energization decision, explaining the different evidentiary standards. Two physical explanations can yield similar single-point voltage or event counts, so a useful experiment must predict different observations. For a transient network, compare arrival time, reflection polarity or waveform shape at two locations. For insulation, compare temperature, condition history or discharge signatures with controlled confounders. For asset probabilities, compare rates normalized to the same exposure rather than absolute totals. Always identify who is authorized to collect actual high-voltage measurements; this document does not authorize them.

Guided study: three substantive problems

1. Baseline reconstruction. Derive or explain the working relation from its relevant conservation law or constitutive assumption, identify every input in the numerical example, reproduce the result with units, and explain what a physically observable quantity would be. Then perform a dimensional check. Your answer must include the geometric or time-domain reference under which the formula is meaningful.

2. Alternative scenario. Use the particular comparison: Compare a reversible pilot analysis with an irreversible energization decision, explaining the different evidentiary standards. Predict whether the model value rises, falls or changes sign. Provide a numerical recalculation where the supplied inputs allow it, and explain which untouched assumptions make the comparison fair. Avoid claiming a physical outcome that is absent from the equation.

3. Engineering review. A report claims that the worked example proves a complete network or insulation design is suitable. Identify the missing evidence implied by this lesson: A financial scalar cannot alone decide among options involving injury hazards, severe public impact or noncompliance. Propose two observations or records that would independently test the interpretation, and write the strongest narrower claim justified by the model.

Fully reasoned answer guidance

Problem 1: Start with A screening score can be written R=p×C, but a final go/no-go requires qualitative constraints, hazard controls, and documented acceptance thresholds. The illustrative case is: Consider two modeled annual risks: Option A p=0.005 with monetary impact $100,000 → $500 expected; B p=0.002 with impact $400,000 → $800. Lower p does not imply lower expected cost. A correct answer must show the steps and resolve any negative sign, time origin, population condition or reference terminal used in the relation. Merely copying the result without a model domain and physically meaningful units is incomplete. If the formula contains an illustrative statistical parameter, identify its assumed status and do not mislabel it as a field-measured prevalence or strike distribution.

Problem 2: The key comparison is Compare a reversible pilot analysis with an irreversible energization decision, explaining the different evidentiary standards. The perturbation should preserve all unmodified conditions, so a change in one parameter can be attributed to the mathematical model. Explain the equation's sensitivity and one reason the real system may depart from that dependence. A graph generated from the same equation is a re-expression of the prediction, not independent validation.

Problem 3: A sufficient critique must cite A financial scalar cannot alone decide among options involving injury hazards, severe public impact or noncompliance. It should also explain the required evidence pathway: appropriate physical representation, verified input data, uncertainty evaluation, instrument qualification and a specific acceptance reference relevant to the real equipment. If those inputs are absent, the decision is unresolved. Failure to prove suitability is not by itself proof of failure.

Connection to the unit simulator

Open the [Unit 8 interactive software model](../simulations/model-08.html). Its parameters isolate a small part of the unit; it is not a design tool and does not evaluate the specific example of every chapter. Record default inputs, plotted axes and the reported calculated result. Repeat with one controlled parameter change. Independently calculate at least one data point. If the graph appears smooth, ask what is missing from the model and identify a quantity the software could not measure. Build a basic time-to-event model and a decision register, explicitly including detection delays, external dependencies and qualified review before operational change.

Summary and transition

The core result in this lesson concerns decision records and change control under explicit ideal conditions. The most important limitation is not insufficient decimal places but a financial scalar cannot alone decide among options involving injury hazards, severe public impact or noncompliance. Retain the distinction among mathematical output, simulated behavior and verified real-world evidence when connecting this lesson to the remaining cases in the unit.

Safety boundary. This is entirely a software and analytical teaching resource. No live high-voltage test or energized hardware construction is included. Lightning, insulation switching and stored electrical energy can cause fatal electric shock or arc events even after isolation. Physical testing requires properly trained personnel, site-specific risk assessments, approved procedures, interlocked laboratories and calibrated equipment; numerical examples provide no permission to undertake those tests.

Unit 8 investigation — Reliability and engineering decisions

Design brief

A hypothetical network operator requests a desk-based technical comparison of two options affecting reliability and engineering decisions. Both options are abstractions; no physical components, voltages or laboratory procedures are supplied. You may use the teaching equations and the interactive model, but you must not turn synthetic assumptions into claimed equipment specifications.

Asset management integrates stress, condition, failure consequence, uncertainty and maintenance logistics. A low calculated event probability is not a guarantee and a high alarm score is not automatically a reason for immediate replacement. System engineers justify decisions through defined evidence and responsibility.

Required deliverables

A. Analytical framework. Draft a block diagram connecting the initiating phenomenon, medium or circuit, local stress, sensor evidence and possible decision. Include at least two feedback or hidden variables. For the chosen operating condition, describe why failure hazard and survival models and maintenance availability and outages may have competing impacts. Demonstrate with one of the unit's equations, with dimensional units shown.

B. Three-case calculation. Build a basic time-to-event model and a decision register, explicitly including detection delays, external dependencies and qualified review before operational change. Make the baseline and both variations reproducible. Label input values as invented, externally sourced, or assumptions. Where the change is nonlinear, explain the physical intuition and derive the relevant numerical scaling rather than claiming every input behaves linearly.

C. Sensitivity and model breakdown. Consider specifically: Consequence distributions may have heavy tails; safety-critical harm cannot be justified away by a small mean cost. and A financial scalar cannot alone decide among options involving injury hazards, severe public impact or noncompliance. These are different failure mechanisms; decide which one would most affect the proposed comparative result. Record at least one missing distribution, geometry, time profile, material constant or calibration measurement.

D. Verification plan. Propose a staged desk review: compare limit cases, check units, reproduce one point independently, vary numerical timestep if appropriate, compare an independent data source, and request qualified engineering review before any real installation recommendation. No energized experiment or switchgear operation is permitted as part of this project.

E. Decision memorandum. State a conservative conditional conclusion: what the toy model predicts, what remains unknown and which documented evidence could change the decision. Include at least two alternatives and explain why choosing the most attractive plot alone is insufficient.

Rubric

Model correctness 25%, units and reproduction 20%, sensitivity reasoning 20%, evidence and uncertainty 20%, decision clarity 15%. A polished figure without a correct scope declaration earns no credit for validation.

Safety boundary. This is entirely a software and analytical teaching resource. No live high-voltage test or energized hardware construction is included. Lightning, insulation switching and stored electrical energy can cause fatal electric shock or arc events even after isolation. Physical testing requires properly trained personnel, site-specific risk assessments, approved procedures, interlocked laboratories and calibrated equipment; numerical examples provide no permission to undertake those tests.