Scenario · Utility restoration

The Feeder That Could Not Be Restored Yet

Laila's plan to restore two segments looks workable, but it remains blocked until Mateo supplies current field clearance and the responsible operator authorizes the switching request.

11 min readGovernment and public sectorIllustrative evidence
What this is
A published decision scenario. Its setting and values are invented for illustration.
What this shows
How declared facts and rules produce a traceable result when conditions change.
What this does not show
A customer deployment, measured outcome, or transfer of authority to software.

Narrated film · 1:10

The Feeder That Could Not Be Restored Yet

See why a restoration plan must stop when its evidence changes, until the authorized operator has what they need.

Watch narrated film · 1:10 Read the story · 11 min
1:10

Story

Start with the event and the decision it creates.

The story

18:06 — one protective operation changes three local truths

At 18:06, Feeder 27 trips during a windstorm. Laila Morgan, Ridgeline Electric's distribution system operator, sees the protection source report the breaker open in a protection-lockout state. That source state is not worker protection, field clearance, or permission to switch. The exact records are protection event PROT-771 and outage case OUT-402, which initially associates 3,420 synthetic service points with the interruption across North, Central, and River.

Laila's goal is to determine whether North and River can enter a partial-restoration proposal while damaged Central remains held out. Mateo Ruiz owns the field-clearance evidence she will need. The outage clock has started for all 3,420 represented service points, but neither urgency nor a green map can supply the missing safety evidence.

The initial records are consequential and narrow. They do not establish what caused the trip, whether equipment is damaged, whether any conductor is safe, where a work boundary exists, or when service can return. Grid records the source-reported event and starts evaluating dependencies without filling in those missing truths.

18:09 — a plausible topology appears

The authored topology suggests a possible future configuration: after separately authorized external switching, North would return from the Feeder 27 source, River would transfer through a tie to source F31, and damaged Central would remain held out. This is a proposal to screen, not the current topology or a switching sequence.

The Scenario deliberately uses only a simple authored screen:

Segment Synthetic service points Proposed treatment Simple authored screen Result
North 1,480 Return from F27 1.20 × 1.25 = 1.500 MW ≤ 1.65 MW Pass
Central 1,160 Hold out 0.92 MW; no pickup is screened Remains out
River 780 Transfer through F31 0.58 × 1.25 = 0.725 MW ≤ 0.82 MW Pass

The screened proposal covers 2,260 of 3,420 service points, displayed as 66.1 percent under the fixture's declared rounding rule. The capacity screen passes. That result is not a power flow, protection study, switching instruction, safety conclusion, authorization, execution report, or restoration count.

18:14 — the plan depends on a pre-event fact

The selected record for isolation point SW-27-4 says open, but its observation time is 18:05:51—twenty seconds before the feeder trip. The outage system has derived an isolated label from that and another device indication.

Grid keeps the supporting facts visible while blocking the favorable conclusion. A symbol on a map is not field clearance. A topology label cannot prove that Ridgeline's external employee-protection conditions have been completed.

18:16–18:23 — a field-link gap returns with a contradiction

Mateo Ruiz, the employee responsible for clearance CLR-731, loses the field connection for seven minutes. His crew continues under Ridgeline's external procedure. The control-center model sees only the age of its last accepted field evidence; it neither directs the crew nor invents an update.

During the gap, the device adapter redelivers the original SW-27-4 event. The source event ID and 18:05:51 observation time are unchanged. The duplicate is ignored and does not refresh the observation; recent receipt cannot repair stale evidence.

When the connection returns, Mateo reports that the local position indication is insufficient to establish the work-zone boundary and that damaged conductor is visible inside the held-out Central segment. The outage-system label supports a favorable isolation conclusion; the field report refutes it. The evidence is contradictory, so the represented policy blocks the proposal.

The model does not average away the disagreement or decide that one source always outranks another. The disagreement is the decision-relevant state.

18:25 — three alternatives expose the stopping point

The fixture evaluates exactly three defined alternatives:

Alternative Result Why
Return all three segments from Feeder 27 Rejected The Central damage and isolation gate remain unresolved.
Transfer North and River together through F31 Rejected (1.20 + 0.58) × 1.25 = 2.225 MW, above the authored 0.82 MW tie headroom.
Hold Central out, return North from F27, and transfer River through F31 Conditional The simple load screens pass, but current clearance evidence is still missing.

Completing that small search does not prove the topology complete, find a global optimum, or make the third plan electrically feasible or safe. It only explains why one authored proposal survives farther than the other two.

18:37 — external clearance evidence changes what may be proposed

Between 18:23 and 18:37, Mateo and Ridgeline's system operator complete the utility's external field and safety process. Grid neither encodes nor instructs those steps. At 18:37, that process produces attributable report CLR-731-R4, bound to the held-out Central zone, responsible employee, procedure revision, source time, and external system record.

That report changes the isolation evidence from unresolved to supported. It does not release the clearance, energize equipment, or authorize the partial plan. It permits the model to assemble a packet for the person who holds the next authority.

18:40–18:47 — human authority and external execution remain separate

Laila reviews packet RESTORE-PACKET-220, which binds the protective event, current topology, Mateo's clearance report, the surviving alternative and its arithmetic, the held-out Central boundary, unresolved assumptions, external validation sources, and stop conditions.

Laila authorizes external switching order SO-220 under Ridgeline's represented policy. Her assertion records the decision on one exact packet. It does not move a switch.

The external DMS acknowledges the request at 18:40:08. It has received the request; it has not proved execution. Later SCADA and field reports describe external work, while protection, meter, and outage sources support later device and service states. Only after the source-defined outage aggregate arrives does the model publish the source's initial label: 2,260 restored / 1,160 remaining. Even then, that aggregate does not prove that every premise, device, or person has service or is safe.

19:04 — the restoration count is corrected

Meter exception revision METER-552 reports sixteen synthetic River service points still without service because of a separate secondary condition. The current figures become:

restored = 2,260 - 16 = 2,244
remaining = 3,420 - 2,244 = 1,176
displayed restored share = 65.6%

The correction does not undo Laila's earlier authorization or prove it was wrong. It changes the current outage state, adds follow-on work, and makes the first operations summary and public-update draft stale. Their successors must use 2,244 while retaining the lineage back to the initial source report.

The opening question therefore has a bounded answer. The capacity screen remained conditional until a current external clearance report made the partial plan reviewable. Laila's authorization enabled only an external request; later source reports separately described work and corrected the service count. None of those states establishes electrical safety, complete restoration, or a public outcome.

Why this setting is recognizable

The U.S. Department of Energy's public restoration overview describes utilities maintaining plans to restore electricity safely after outages. DOE's Power System Data Analytics describes measurement, processing, display, system visibility, and operator-support tools. OSHA's electric power generation, transmission, and distribution standard distinguishes relevant system-operator and employee-in-charge responsibilities and addresses controlled deenergizing, clearance, and reenergization within its applicability.

Those official sources ground only the high-level restoration, operator-support, and clearance context. They do not establish Ridgeline's topology, calculations, facts, authority delegation, switching sequence, Grid composition, or result. Actual applicability, system state, procedure, engineering, and safety judgments belong to the responsible utility and qualified professionals.

Where the model stops

Grid can represent selected evidence, freshness, contradiction, declared alternatives, a synthetic capacity screen, an exact packet, and correction lineage. It cannot determine electrical truth, perform power flow or protection analysis, establish deenergization or clearance, issue or execute switching, direct a crew, release a clearance, energize a feeder, certify restoration, or publish a public outcome.

This public page contains no real utility, location, voltage, coordinate, control endpoint, protection setting, credential, customer record, or crew location. It is not an operational diagram and must not be adapted into switching guidance.

What remains to prove

Source revision 2026-08-27.1 has reviewed domain context, product boundaries, and a public-suitability finding, so this authored, non-operational scenario can be published at R2. The fixture itself remains authored.

The next proof is an exact deterministic implementation of the three segments, calculations, stale indication, seven-minute link gap, duplicate, contradiction, clearance state, three alternatives, authority stop, external evidence states, and sixteen-service-point correction. It needs a separately identified independent oracle reviewer, retained execution and verification evidence, negative cases, and a high-consequence assurance review. Any intended-environment work would additionally require utility-owned engineering, safety, cybersecurity, identity, delegation, source, control, records, accessibility, reconciliation, and operator qualification. No later readiness label can turn this editorial fixture into a switching procedure or electrical safety claim.

Decision path

Follow the changed fact step by step.

A calculation, proposal, approval, execution report, and outcome are different events. The order keeps those boundaries visible.

  1. 01 · 18:06

    One protective operation changes three local truths

    Feeder 27 opens into a protection-lockout state, all three synthetic segments enter outage evaluation, and cause, equipment condition, field clearance, and restoration remain unresolved.

  2. 02 · 18:09

    A plausible topology appears

    North and River each pass a simple authored pickup screen while damaged Central remains held out, yielding a capacity result—not a safety or restoration conclusion.

  3. 03 · 18:14

    The plan depends on a pre-event fact

    One selected open indication predates the trip, and an outage-system isolation label cannot substitute for current field clearance.

  4. 04 · 18:16–18:23

    A field-link gap returns with a contradiction

    Duplicate delivery cannot refresh the stale observation, and Mateo's later field report refutes the favorable current-clearance conclusion.

  5. 05 · 18:25

    Three alternatives expose the stopping point

    Restoring all segments and loading both candidates onto the tie fail; the partial plan remains conditional because its clearance evidence is missing.

  6. 06 · 18:37

    External clearance evidence changes what may be proposed

    A current, attributable clearance report supports the held-out boundary without releasing the clearance, energizing equipment, or authorizing switching.

  7. 07 · 18:40–18:47

    Human authority and external execution remain separate

    Laila authorizes an exact packet, the DMS acknowledges a request, and later field, SCADA, protection, and outage evidence answer distinct execution and service-state questions.

  8. 08 · 19:04

    The restoration count is corrected

    Meter evidence reduces the source-reported restored count from 2,260 to 2,244 and advances current views without rewriting the authorization record.

Evidence and limits

What the scenario represents—and what real-world use still requires.

Represented in this scenario

  • Time-qualified device, outage, field, clearance, decision, execution, and correction evidence with explicit ownership
  • The synthetic capacity screen, contradictory evidence, bounded alternatives, rejected reasons, and affected derivative cone
  • Proposal, clearance evidence, switching authorization, request acknowledgment, reported execution, service validation, and public status as distinct states

Required integration and operating work

  • Author and qualify utility-owned schemas, topology, source precedence, adapters, identity and delegation, operator experience, records, accessibility, security, reconciliation, and correction workflow
  • Implement the deterministic fixture, freeze an independent oracle, test stale, duplicate, contradictory, expired-clearance, unauthorized, indeterminate, and corrected paths, and retain exact execution, verification, and high-consequence assurance evidence

Decisions that remain with people and institutions

  • Field clearance, switching, energization, crew action, protection behavior, or release of a clearance
  • Electrical feasibility, deenergization, safety, execution, or service restoration
  • Outage communication, customer status, reliability result, legal conclusion, or public outcome
Evidence, authority, and publication recordView the scenario contract, capability record, authority stages, verification status, and related work.

Scenario contract

The setting, trigger, decision, and authority boundary.

Setting
Ridgeline Electric, an invented distribution utility serving the invented Pine River district during one windstorm outage.
Timeframe
18:06 through 19:04 during the scenario's restoration period
Trigger
Feeder 27 trips and the preferred partial-restoration plan depends on one isolation point whose apparent open status predates the trip.
Decision
Whether any bounded partial-restoration alternative may be presented for authorization while the damaged Central segment remains held out.
Authority
Grid may join evidence, run the authored screen, and assemble a proposal; Mateo Ruiz owns the represented field-clearance evidence, Laila Morgan owns switching authorization, and external utility systems, qualified crews, meter and outage systems, and the public-information officer retain execution, observed-state, and publication authority.

Feasible is not ready

The capacity screen passes before the safety evidence does.

A simple modeled comparison, stale indication, field contradiction, current clearance, human decision, external work, and corrected count remain distinct.

  1. SourcesDevice, outage, and field revisions

    Observation time and source ownership determine whether a fact is current for this scenario decision.

  2. ModelTwo pickup screens pass

    North at 1.500 MW and River at 0.725 MW fit authored limits without establishing electrical feasibility or safety.

  3. EvidenceIsolation remains unresolved

    A stale open indication and field refutation block the favorable conclusion until external clearance evidence arrives.

  4. Human authorityExact switching decision

    Laila may authorize one represented packet under the authored policy; Grid cannot issue or perform switching.

  5. External evidenceWork, validation, and correction

    Request acceptance, reported device state, outage aggregation, and meter correction answer different questions.

The topology and every value are synthetic; this R2 editorial Scenario is neither a switching diagram nor an executed Grid fixture.

What is established

What is documented, what this scenario combines, and what still needs testing.

This separates documented capabilities from authored combinations in the scenario. Neither proves a complete deployment or outcome.

Documented

Documented building blocks

Capabilities described in maintained Grid documentation or another named source.

  • Reviewed product primitives document reactive values and bindings, predicates, provenance, ordered streams, connector contracts, governed artifacts, and multiple surfaces within their stated limits; they do not establish a utility-restoration product or safety case.
  • Reviewed product primitives document ways to represent revisioned observations, stale and contradictory evidence, an affected dependency cone, and retained decision artifacts; they do not provide power flow, protection analysis, field clearance, switching authority, control, or restoration evidence.
Combined here

Combined in this scenario

Capability combinations represented in this scenario that still require end-to-end evaluation.

  • The authored Scenario composes a synthetic three-segment topology, source-precedence policy, simple MW screens, three bounded alternatives, a clearance pointer, an operator packet, and a correction-capable outage view.
  • Utility-owned adapters and experiences would be needed to connect selected SCADA, DMS, OMS, field, protection, meter, decision, execution, and communications records without centralizing their authority.
Needs testing

Not yet proved

Integration, operating, policy, or evidence work that is not complete.

  • No package-owned executable fixture, independent oracle, negative-case suite, retained execution and verification record, derivative-parity review, or high-consequence assurance review has yet established the authored behavior.
  • No qualified electrical study, safety procedure, utility identity and delegation, SCADA, DMS, OMS, field-work, meter, switching, communications, cybersecurity, or target-environment integration exists, and no observed customer or operational outcome exists.

From model result to outcome evidence

A modeled answer does not perform the work.

Calculation, review, authorization, submission acknowledgment, execution reporting, and observed outcome produce different records and must remain independently inspectable.

  1. 01 · ModelEvaluate the declared facts, rules, dependencies, and constraints.

    The result is model output, not an authorized decision.

  2. 02 · ProposalPrepare an exact candidate plan and explanation for review.

    A proposal does not carry institutional authority.

  3. 03 · Human authorizationThe named responsible actor accepts, rejects, or changes the exact reviewed revision.

    An interface action records the scenario step; authority still comes from the responsible institution.

  4. 04 · Submission acknowledgmentThe receiving system records that it accepted the exact instruction for processing.

    Receipt establishes neither execution nor outcome.

  5. 05 · Execution reportThe responsible execution owner separately reports what action was performed.

    Reported execution is not proof of the intended outcome.

  6. 06 · Outcome evidenceAuthoritative observation records what occurred and with what effect.

    An outcome claim requires evidence beyond the model, submission record, and execution report.

Acknowledgment ≠ execution ≠ outcome. Each state requires its own responsible source and evidence record.

Proof and limits

What this scenario supports—and what remains to validate.

These states describe the scenario source and its defined checks. Real-world validation requires separate evidence.

Scenario publication
PublishedReleased August 27, 2026 as an operating scenario.
Source readiness
R2 · Sources reviewedDomain support and product capability boundaries have been reviewed.
Scenario check
Checks not runScenario revision 2026-08-27.1 defines the steps and expected results; the checks have not run yet.
Independent review
PendingThe expected results have not received independent review.
Deployment evidence
NoneNo customer deployment, production performance, or real-world outcome is claimed.
Next proof required
Advance beyond R2Run the defined checks, retain the results, and have an independent reviewer check the expected results.

Evidence and stewardship

What supports this scenario—and when it must be reviewed again.

Illustrative evidence

Authored, non-operational utility scenario grounded by reviewed DOE and OSHA sources; it is not a switching order, electrical model, safety procedure, outage estimate, customer deployment, or measured Grid outcome.

Invented elements. Ridgeline Electric and every person, feeder, device, topology, load, service point, time, clearance, order, and outcome are invented. Official sources ground only the high-level restoration and clearance context, and reviewed Grid documents support only generic primitives—not this composition, electrical feasibility, safety, control, deployment, or result.

Owner
Grid FYI Editorial
Reviewed
August 27, 2026
Review due
February 27, 2027
Source revision
2026-08-27.1
Scenario package
electric-utility-feeder-that-could-not-be-restored-yet

Related work

Related reading and examples.

These links are chosen as direct companions to this scenario.

Use cases

Insights

White paperReadiness Is a Graph: From Local Green Status to Mission-Qualified AvailabilityA locally valid status does not establish that the right asset, configuration, crew, support, and time window resolve for a particular mission. This paper separates the public readiness record from a bounded Grid proposition and evaluation method.White paperCapacity, Time, and the Authority to Act: A Governed Health-System Planning ModelHealth-system capacity is a time-qualified network claim, not an open-bed total. This paper connects facility-declared service capability, acceptance windows, transport, support, uncertainty, and distinct authorities in a bounded aggregate planning proposition.White paperFrom Common Operating Picture to Common Operating ModelSeeing the same facts is not the same as calculating from the same rules. A common operating model connects source identity, dependencies, constraints, alternatives, authority, role-specific views, and replayable evidence.

Films

Continue

Read, watch, or explore the next step.

Thematic companion · 0:36When the Plan BreaksSeveral disruptions invalidate the plan; the affected models recalculate and a person authorizes the response. This released film approaches the same operating theme through a different scenario.Inspect implementation conceptsExplain and validate a changing decisionContinue into Grid Developers for maintained behavior, prerequisites, and implementation limits.Apply the operating patternFrom a Changed Fact to Coordinated ActionWhen one operating fact changes, trace its consequences through the model, compare feasible responses, and update the people and views that depend on the decision.