Skip to content
GREEN FUTURETECH.
Explore

Research libraryFactories on a Weak Grid

Chapter 02 of 14 · Part I · Draft web edition

Site measurements must replace national averages

A useful design envelope records the duration, coincidence and recovery of power and network failures at the intended site.

Sections
7
Exhibits
4
Minutes
26
Sources
30
EX 05 · Sub-Saharan Africa comparator: 6.9 outages in a typical month

The cloth is woven from this chapter's 4 exhibits: each weft is one exhibit's own data, normalised; each warp group is a section. The probe reads the exhibit's own value where it crosses. Procedural visualisation, not a measurement.

The chapter as a draft: 7 sections, 3 exhibit wefts, one shuttle.

Lead exhibit · 05Bar chartsourcedOutage frequency is a separate survey measure
05101510.4Cameroon 20246.9Sub-Saharan Africa comparator5.3Lower-middle-income comparator

Read-outCameroon 2024: 10.4 outages in a typical month

Method and source

World Bank Cameroon 2024 Country Profile, printed page 6 Figure 8 and page 11 Appendix. Survey population covers 615 formal non-agricultural private firms (5+ employees). Frequency does not measure outage duration or feeder tail risk.

Unit: outages in a typical month. Status: sourced. Sources: S01.

The chapter's warpBar: share of the reading · square: an exhibit

Section 2.0 · Opening · 1 min · no exhibit of its own · one movement Go to section ↓

Overture · 1 min

National enterprise surveys establish that electrical instability is a material operating constraint across Cameroon, where 93.3 percent of surveyed formal firms experienced power outages and reported 10.4 outages in a typical month.[S01] Yet an average monthly outage count cannot size an uninterruptible power supply (UPS), dimension an offline event buffer or verify whether a candidate backhaul link survives when utility mains drop.[S01] [S05] GFT argues that before an industrial sponsor selects edge hardware, battery autonomy or synchronisation intervals for a textile plant, the project team must replace macroeconomic averages with a time-synchronised site survey that logs the duration, coincidence and recovery lag of electrical and network failures at the actual plant boundary.[S03] [S05] Until those feeder-level and carrier-level observations are collected under a documented protocol, every autonomy duration, queue budget and availability figure remains a conditional design scenario rather than an observed site fact.[S02] [S05]

¶ 01 · 4 sources

where 93.3 percent of surveyed formal firms experienced power outages and reported 10.4 outages…S01

S01S05S03S02

2.13 min · 1 sub-steps · 1 exhibit

Country statistics establish context and cannot size a site UPS

Related · chapter 016 paragraphs step it

Related exhibit 01 · chapter 01Bar chartsourcedOutages affected most firms in the Cameroon survey
025507510093.3Cameroon 202469.7Sub-Saharan Africa55Lower Middle Income

Read-outCameroon 2024: 93.3 percent of firms experiencing electrical outages

Method and source

World Bank Cameroon 2024 Country Profile, published 2025, printed page 6, Figure 8. Comparator groups and vintages are as published, not a textile-only or site-level forecast.

Unit: percent of firms experiencing electrical outages. Status: sourced. Sources: S01.

Read this exhibit in its chapter ↗
2.1 · Introduction · paragraph 1 of 6

Macroeconomic business-environment indicators justify why digital resilience belongs in the capital-expenditure scope of a Cameroonian factory, while simultaneously demonstrating why aggregate survey numbers cannot serve as engineering inputs.[S01] [S02] In the World Bank Enterprise Survey for Cameroon 2024, field teams interviewed business owners and top managers across 615 formal private non-agricultural firms employing at least five workers between June 2024 and February 2025.[S01] Across that national sample, 93.3 percent of firms reported experiencing electrical outages, compared with 69.7 percent for the Sub-Saharan Africa comparator group and 55.0 percent for the lower-middle-income comparator group.[S01] When respondents selected the single biggest obstacle to their business from 15 constraints, 12.1 percent of all firms and 25.3 percent of large firms (100 or more employees) identified electricity as their primary obstacle, ahead of political instability at 19.7 percent and access to finance at 11.3 percent.[S01]

The survey also reports a second, distinct reliability indicator: the number of electrical outages experienced in a typical month, presented in Exhibit 5.[S01] Surveyed firms in Cameroon reported 10.4 electrical outages in a typical month, against 6.9 in the Sub-Saharan Africa comparator and 5.3 in the lower-middle-income comparator.[S01] By establishment size, outage incidence reached 95.7 percent among small firms (5 to 19 employees), 90.6 percent among medium firms (20 to 99 employees) and 77.9 percent among large firms (100 or more employees), whereas typical monthly frequency stood at 10.6 outages for small firms, 9.4 for medium firms and 11.8 for large firms.[S01] Firms applying for an electrical connection waited an average of 35.5 days across all surveyed establishments.[S01]

As Exhibit 5 shows, the published frequency of 10.4 outages per month is nearly double the lower-middle-income benchmark of 5.3 outages per month.[S01] However, an engineering team must separate what Exhibit 5 proves from what it cannot establish.[S01] First, a monthly count of 10.4 events carries no information about the distribution of event durations.[S01] Ten interruptions lasting three minutes each impose 30 minutes of cumulative monthly downtime in an illustrative calculation and require only short ride-through storage, whereas ten interruptions containing two eight-hour feeder faults impose a completely different battery and data-retention duty.[S05] Second, the Country Profile headline chart reports incidence and monthly count on separate axes and does not publish a site-level duration percentile, phase-imbalance count or voltage-sag profile.[S01]

2.2 Survey stratification prevents direct extrapolation to a textile feeder

The World Bank Enterprise Surveys methodology explains why national point estimates cannot be assigned to a specific industrial plot or textile mill.[S02] Under the global methodology applied since 2005 to 2006 and updated in August 2022 to use International Standard Industrial Classification (ISIC) Revision 4 codes, the formal-sector survey samples registered companies with five or more workers and at least 1 percent private ownership across manufacturing (ISIC codes 10 to 33), construction, retail, wholesale, hospitality, transport, storage, communications, information technology, and professional, scientific and technical activities.[S02] Agriculture, fishing, mining, public utilities, financial intermediation, public administration, education, health and 100 percent state-owned enterprises are excluded.[S01] [S02]

In the Cameroon 2024 sample of 615 establishments, only 161 firms belonged to manufacturing (49 food-manufacturing and 112 other-manufacturing firms), alongside 126 retail and 328 other-services firms, stratified across the Centre (207 firms), Littoral (199), North (146) and West (63) regions.[S01] Furthermore, because the World Bank tracks panel enterprises across survey waves, sampling weights are adjusted to account for altered probabilities of inclusion in the sample frame.[S02] Even within manufacturing, outage incidence reached 100.0 percent in food manufacturing and 87.3 percent in other manufacturing, with typical monthly counts of 11.9 and 10.4 outages respectively.[S01]

Consequently, the 10.4 monthly outage figure is a sampling-weighted, multi-sector national mean, not a textile-sector measurement or a feeder log for Douala, Dibamba or Garoua.[S01] [S02] While Cameroon's cotton-to-garment opportunity rests on moving local fibre processing from roughly 5 percent (with about 95 percent exported raw) toward the national 50 percent target by 2030, and while historic reports on CICAM cited July 2023 capacity utilisation of 33.7 percent at Garoua, 48.9 percent at CICAM 1 and 10.83 percent at CICAM 2, neither source provides feeder-specific electrical or telecoms telemetry.[R06] [R07] [R12] Treating the national 10.4 monthly average as a factory design envelope would conflate a macroeconomic statistic with a site engineering specification.[S01] [S02]

2.33 min · 1 sub-steps · read with a related exhibit

Power quality needs an event log as well as an energy meter

A conventional utility billing meter or monthly kilowatt-hour totaliser measures cumulative energy transfer over a billing cycle, which is useful for tariff reconciliation and resource accounting but blind to the transient disturbances that disrupt digital systems.[S03] [S05] Operational technology (OT) and edge-computing equipment, including programmable logic controllers, machine-vision cameras, industrial switches, time servers and local database hosts, fail on timescales of milliseconds to seconds when exposed to voltage sags, single-phasing, frequency excursions or slow contactor transfer intervals.[S03] A plant energy meter can record normal daily consumption while a 400-millisecond illustrative voltage dip or an uncoordinated generator changeover reboots an unprotected switch and severs a transaction in flight.[S03] [S13]

¶ 01 · 3 sources

…normal daily consumption while a 400-millisecond illustrative voltage dip or an uncoordinated generator changeover…S03, S13 · illustrative

Related · Exhibit 14 · chapter 04

S03S05S13

To specify the continuity boundary required by NIST Special Publication 800-82 Revision 3 for operational technology reliability and safety and by NIST Special Publication 800-34 Revision 1 for information-system contingency planning, the site baseline must capture a discrete power-event log rather than a simple energy total.[S03] [S05]

¶ 02 · 2 sources

…required by NIST Special Publication 800-82 Revision 3 for operational technology reliability and safety…S03, S05

S03S05

Note · 6 sources

S03S05S31S32S10S22

Distinguishing brownouts, single-phasing and transfer intervals from complete blackouts is essential for textile operations.[S03] During changeover from utility mains to a site diesel generator through an open-transition automatic transfer switch, the motive-power bus experiences a dead interval of several seconds to several minutes while the generator starts and stabilises voltage and frequency.[S03] [S05] If an edge gateway or network switch sits upstream of an online UPS, that open-transition transfer interval reboots the digital node just like an eight-hour illustrative grid blackout.[S05] Moreover, although the Linux ext4 filesystem enables write barriers by default (barrier=1) to enforce on-disk journal ordering and defaults to a five-second commit interval (commit=5), a sudden loss of DC power on an unbacked host can still lose up to five seconds of un-fsynced metadata, and SQLite databases in write-ahead logging (WAL) mode with PRAGMA synchronous=NORMAL can roll back recently committed transactions after a power loss.[S16] [S29]

¶ 03 · 4 sources

although the Linux ext4 filesystem enables write barriers by default (barrier=1) to enforce on-disk…S16, S29

S03S05S16S29

2.4 Electrical engineering authority remains distinct from digital logging

2.4

A site power-event log defines the disturbance environment that the digital system must survive, but it does not replace qualified electrical engineering design.[S03] GFT's recording method specifies what telemetry IT and OT architects need to classify services and size digital backup autonomy; it does not prescribe earthing topologies, short-circuit ratings, arc-flash boundaries or protective relay settings.[S03] The project sponsor must commission a licensed electrical engineer to inspect the site transformer, verify neutral-to-earth bonding, specify overcurrent and surge protection, and certify that any temporary power-quality logger is installed safely.[S03]

¶ 04 · 1 source

S03

2.53 min · 1 sub-steps · read with a related exhibit

A reachable modem does not establish usable connectivity

Just as a monthly energy meter hides power transients, a router link light or a simple Internet Control Message Protocol (ICMP) echo test hides the network failure modes that stall industrial data synchronisation.[S18] [S24] In practice, an edge outbox attempting to forward committed production events to a central repository depends on a multi-layer protocol chain, and failure at any intermediate layer renders the backhaul unusable for application recovery.[S12] [S23] [S24]

GFT decomposes backhaul usability into six sequential verification layers that the site survey probe must measure and log independently during scheduled production shifts:[S05] [S18]

¶ 02 · 2 sources

S05S18

  1. Local physical and data-link readiness: The edge computer's local area network (LAN) interface, access switch port and site router interface must maintain carrier link without excessive frame errors or port flapping.[S03] [S18]
  2. Domain Name System (DNS) resolution: DNS is a query-response protocol associating domain names with IP addresses.[S0204] Under RFC 9520, which updates RFC 2308 to require negative caching for DNS resolution failures, resolvers cache resolution failures to reduce latency and authoritative server load.[S0201] Consequently, even after a physical cellular or fibre link recovers, cached negative responses or stale forwarder states on the site router can prevent the edge client from resolving the ingestion hostname until the negative cache timer expires.[S0201] [S0204]
  3. Transport-layer connection establishment: Under RFC 9293, the Transmission Control Protocol (TCP) provides a reliable, in-order byte-stream service using a three-way handshake (SYN, SYN-ACK, ACK).[S24] A bare TCP connection proves only that three small control segments traversed the path; it does not prove bulk payload capacity or remote application health.[S24]
  4. Cryptographic session establishment: Industrial ingestion endpoints require Transport Layer Security (TLS) Version 1.3 as specified in RFC 9846 (published July 2026, obsoleting RFC 8446).[S23] If high packet loss fragments the certificate chain or if an unbacked local clock has reset to an epoch date after a power cut, certificate validation fails and the TLS 1.3 handshake aborts even though raw TCP packets pass.[S23] [S32]
  5. Sustained payload goodput under load: RFC 7228 notes that constrained and challenged networks exhibit lossy channels, limited and unpredictable bandwidth, and severe penalties for larger packets.[S18] Under the RFC 6349 framework for TCP throughput testing, end-to-end TCP throughput depends on round-trip time, packet loss rate, maximum segment size and window limits.[S0202] A link that passes a 64-byte illustrative keepalive probe can suffer retransmission timeouts when transmitting a 500-byte illustrative event batch or an inspection image archive.[S18] [S0202]
  6. Application-level durable commit acknowledgement: Under HTTP semantics (RFC 9110) and atomic commit rules (SQLite atomic commit), usable connectivity requires that the remote ingestion service validate the payload, commit the record to non-volatile storage, and return an explicit application-level receipt (such as HTTP 200 OK or 201 Created carrying the committed event ID) across the open TLS session before disconnection.[S12] [S13] [S23]

2.6 Active probing must respect shift calendars and retain monitoring gaps

2.6

To measure usable connectivity without inventing carrier performance figures, the site survey should deploy a lightweight software probe on the candidate site network that executes this six-step chain against a test endpoint at a regular cadence during agreed production hours, testing representative payload sizes under RFC 6349 principles.[S05] [S0202] [S0203] Because no site carrier trace has been collected for a GFT textile plant in Cameroon as of the edition date, this paper publishes zero Cameroon bandwidth, latency or packet-loss claims.[S18]

¶ 03 · 4 sources

…representative payload sizes under RFC 6349 principles. Because no site carrier trace has been…S05, S0202, S0203, S18

S05S0202S0203S18

Three rules govern the connectivity probe log.[S10] [S22] [S0203] First, the probe must record its own state using persistent local logging such as systemd-journald with Storage=persistent so records survive reboots.[S22] Second, the probe host must log clock synchronisation status and offset under RFC 5905 and RFC 8633 (chronyd with rtcsync or rtcfile).[S10] [S11] [S30] Third, whenever the probe host is unpowered or isolated from the LAN, the interval must be flagged explicitly as a monitoring gap (observer_offline), never interpolated as available or failed.[S05] [S0203]

¶ 04 · 6 sources

…status and offset under RFC 5905 and RFC 8633 (chronyd with rtcsync or rtcfile).…S10, S11, S30, S05, S0203

S10S22S0203S11S30S05

Interlude · the cloth half-woven

4 exhibits carry this chapter's argument.

Woven: sections 2.0 to 2.5Still to weave: 2.7 to 2.12

  1. 05Outage frequency is a separate survey measureBar chart
  2. 06Coincident failures reveal the real design envelopeControl map
  3. 07Connectivity recovery can lag restoration of mainsTimeline
  4. 08Every site unknown has a collection methodRegister
Hover or focus an exhibit to light its weft; select it to jump to it.

2.74 min · 6 paragraphs · 1 exhibit

The joint failure history matters more than separate averages

Exhibit 066 paragraphs step it

Exhibit 06Control mapillustrativeCoincident failures reveal the real design envelope
Mains OK /…Mains OK /…Mains Down…Mains Down…Unbacked CPE router1364020Shared-feeder tower b…1364812Independent dual-path…1382182

Read-outUnbacked CPE router: Mains OK / WAN OK 136, Mains OK / WAN Down 4, Mains Down / WAN OK 0, Mains Down / WAN Down 20 (illustrative shift-hours out of 160)

Method and source

Illustrative synthetic 160-hour (four-week, single-shift) site log demonstrating the joint-state matrix method. Values are assumed scenario counts that sum to 160 hours per row; they are not observed Cameroon statistics.

Unit: illustrative shift-hours out of 160. Status: illustrative. Sources: S05, S18. Illustrative figures are teaching examples, not measured factory results.

2.7 · Introduction · paragraph 1 of 6

Even when a project team measures site electricity and site connectivity with proper instruments, analysing the two logs in isolation produces a dangerous sizing error.[S03] [S05] Reliability engineers who multiply a standalone mains-availability fraction by a standalone WAN-availability fraction implicitly assume that electrical outages and telecommunications outages are statistically independent.[S05] In industrial zones, that assumption fails because power feeders and telecoms networks share physical and electrical dependencies:[S03] [S18]

  • Shared utility feeder at the local access tower or exchange: When a medium-voltage feeder trips across an industrial district, cellular base stations and fibre aggregation cabinets serving that district lose mains power at the same instant as the factory.[S03] If a tower battery exhausts after 30 to 60 minutes in an illustrative scenario, WAN connectivity fails midway through the factory's mains outage.[S05] [S18]
  • Unprotected customer-premises equipment inside the plant: Leaving the ISP optical network terminal (ONT), microwave power-over-Ethernet injector or wiring-closet switch on an unprotected circuit turns every mains outage into an immediate 100 percent WAN outage.[S03] [S05]
  • Shared civil ducts and overhead poles: Vehicle impacts, excavations, storms or fires along plant approach corridors frequently sever overhead power lines and aerial fibre cables on the same poles simultaneously.[S03] [S05]
  • Post-outage congestion and reconnection storms: Simultaneous sector restoration causes thousands of nearby devices to re-authenticate on local cellular cells at once, degrading goodput just as the factory's outbox attempts to drain its backlog.[S08] [S18]

To make these interactions visible, the site baseline must cross-tabulate power state and network state over identical time slices to form a joint outage envelope, illustrated in Exhibit 6.[S05] [S18]

In Exhibit 6, three illustrative site topologies are compared across a synthetic 160-hour production window in which utility mains are unavailable for 20 hours (12.5 percent of shift hours, an illustrative scenario input).[S05] [S18] In the first row (Unbacked CPE router), because the site modem loses power whenever utility mains fail, the system spends zero hours in Mains Down / WAN OK and 20 hours in the joint failure state (Mains Down / WAN Down), bringing total WAN unavailability to 24 hours out of 160.[S03] [S05] In the second row (Shared-feeder tower battery), protecting the plant router on a local UPS yields 8 hours of connected operation during short cuts, but the external tower shares the utility feeder and exhausts its battery during longer cuts, leaving 12 hours in Mains Down / WAN Down.[S05] [S18] Only in the third row (Independent dual-path target), where the router is protected and secondary backhaul avoids the local feeder failure mode, does the plant remain connected for 18 of the 20 mains-outage hours.[S05] Exhibit 6 is methodological: it shows why separate marginal averages hide the exact cell (Mains Down / WAN Down) that governs simultaneous battery and storage duty.[S02] [S05]

Each of the four cells in Exhibit 6 places a distinct demand on the continuity architecture.[S03] [S05] Mains OK / WAN OK represents normal connected operation.[S08] Mains OK / WAN Down represents isolated operation while machinery runs at full speed on utility power, generating production events at peak shift rate and governing maximum local queue intake.[S03] [S08] Mains Down / WAN OK allows a battery-backed digital node to flush final transactions and send a power-loss alert before shutting down or switching to generator power.[S05] [S14] Mains Down / WAN Down represents compound isolation, where all point-of-work capture must commit atomically to local storage without external DNS, NTP, identity or cloud dependencies.[S08] [S10] [S13]

2.82 min · 1 sub-steps · read with a related exhibit

Tail durations decide retention and autonomy requirements

Averages conceal the extremes that break bounded queues and exhaust batteries.[S05] [S08] Whether a local SQLite WAL partition fills up or a protected digital circuit brown-outs depends on the upper tail of the outage-duration distribution: the longest single offline interval and the longest cluster of back-to-back outages whose recovery gap is too short to recharge batteries or drain queues.[S05] [S08] [S16]

To characterise outage durations without inventing parametric curves, the site survey should compile observed durations into an empirical distribution function (EDF) as defined in RFC 2330.[S0203] For $N$ scalar duration measurements, $F(x)$ gives the fractional proportion of measurements less than or equal to $x$, and the $p$-th percentile is the smallest observed value $x$ for which $F(x) \ge p$ percent.[S0203]

¶ 02 · 1 source

…(EDF) as defined in RFC 2330S0203

S0203

2.9 Sample size limits the percentiles that a baseline can claim

2.9

RFC 2330 states a strict mathematical rule for empirical percentiles: any percentile summary must report the sample size $N$, because any percentile difference finer than $1/N$ is below the resolution of the sample.[S0203] If a four-week site survey observes $N = 10$ electrical outages (near the World Bank Cameroon 2024 typical monthly count of 10.4 outages), the sample resolution is $1/10 = 10$ percentage points.[S01] [S0203] On 10 events, claiming to distinguish a 95th percentile from a 99th percentile is an interpolation artefact, and even a 90-day baseline with an illustrative $N = 30$ outages ($1/30 \approx 3.33$ percent resolution) cannot resolve a true 99th percentile.[S0203]

¶ 03 · 2 sources

RFC 2330 states a strict mathematical rule for empirical percentilesS0203

S0203S01

To prevent false statistical precision when sizing autonomy and retention in Chapters 4 and 7, GFT requires the site duration table to report four explicit items:[S02] [S05] [S0203]

¶ 04 · 3 sources

To prevent false statistical precision when sizing autonomy and retention in Chapters 4 and 7S02, S05, S0203

S02S05S0203

  1. Exact event count ($N$) and observation window: Discrete disturbances observed, calendar dates and total monitored hours.[S0203]
  2. Shift-calendar stratification: Separation of disturbances during active production shifts from unstaffed nights or weekends, because an eight-hour illustrative Sunday outage when lines are stopped adds zero production events to the outbox.[S05] [S08]
  3. Right-censored observations: Any outage still underway at survey close or truncated when a recorder battery dies after an illustrative four hours must be logged as right-censored (> 4.0 h, censored), never dropped or recorded as a completed 4.0-hour event.[S05]
  4. Inter-arrival and recharge gaps: Elapsed operating time between consecutive outages.[S05] Two three-hour illustrative mains cuts separated by 20 minutes of restored power act as a single compound drain on a UPS battery requiring several hours to recharge, and can starve SQLite WAL checkpointing if an uplink reader holds an open read cursor across back-to-back WAN failures (where SQLite defaults to a 1,000-page automatic passive checkpoint threshold).[S05] [S08] [S14]
List · 4 sources

S0203S05S08S14

Because pre-commissioning samples are small, the design offline interval (such as the illustrative two-hour protected digital autonomy in Chapter 4 and eight-hour event retention in Chapter 7) must be set as an explicit management risk-acceptance boundary informed by observed maxima, censored events and operator interviews, never extrapolated from the World Bank's 10.4 monthly frequency figure.[S01] [S05]

¶ 05 · 2 sources

never extrapolated from the World Bank’s 10.4 monthly frequency figureS01, S05 · illustrative

S01S05

2.102 min · 1 sub-steps · 1 exhibit

Restart and backlog recovery belong in the baseline

Step 1 of 6Mains voltage returns

Exhibit 07 · illustrativeConnectivity recovery can lag restoration of mains

0Mains voltage returns2Stable power and CPEboot5Link up and DNSrecovery7TCP and TLS 1.3handshake8First remote durablecommit45Backlog clearancecomplete
0Mainsvoltage r…2Stablepower and…5Link upand DNS r…7TCP andTLS 1.3 h…8Firstremote du…45Backlogclearance…

Mains voltage returns

0: Mains voltage returns. Utility feeder re-energises at t = 0 min; ATS waits for voltage stability. · illustrative

An external utility or telecommunications outage is shorter than the operational disruption it causes.

Stable power and CPE boot

2: Stable power and CPE boot. Transfer switch closes; unbacked ISP modem and access switch cold-boot. · illustrative

Link up and DNS recovery

5: Link up and DNS recovery. Carrier link establishes; negative DNS cache entries expire and hostname resolves. · illustrative

TCP and TLS 1.3 handshake

7: TCP and TLS 1.3 handshake. Edge client completes TCP 3WHS, TLS 1.3 certificate validation and auth. · illustrative

First remote durable commit

8: First remote durable commit. Cloud endpoint accepts first replayed batch and returns committed-ID receipt. · illustrative

Backlog clearance complete

45: Backlog clearance complete. Outbox drains accumulated offline events while live shift arrivals continue. · illustrative

Method and source · Exhibit 07

Illustrative event sequence in relative minutes from physical voltage return (t = 0). Timings are hypothetical scenario values showing protocol and operational ordering under RFC 9293 (TCP), RFC 9846 (TLS 1.3) and NIST SP 800-184; they are not measured site timings.

Unit: illustrative relative minutes from mains return. Status: illustrative. Sources: S06, S23, S24. Illustrative figures are teaching examples, not measured factory results.

2.10 · the bodyExhibit 07 above; its figures are illustrative where marked.

An external utility or telecommunications outage is shorter than the operational disruption it causes.[S06] Between physical supply restoration and a reconciled remote ledger lies a sequence of hardware boot, name resolution, cryptographic handshake, transaction verification and queue-drain delays.[S13] [S23] [S24] Exhibit 7 illustrates why usable remote synchronisation lags the physical return of mains voltage.[S06] [S23] [S24]

As shown in Exhibit 7, six milestones separate grid fault clearance from full recovery in an illustrative sequence:[S06] [S23] [S24]

¶ 02 · 3 sourcesExhibit 07

S06S23S24

  1. External supply return ($t_0$, 0 minutes in the illustrative timeline): Feeder voltage returns while transfer switches verify stability.[S03] [S05]
  2. Stable power confirmation and cold boot ($t_1$, illustrative 2 minutes): Unbacked routers or exhausted edge nodes cold-boot, replay ext4 journals and start systemd.service units.[S21] [S22] [S29]
  3. First accepted local event ($t_{\text{local}}$): Local capture resumes once storage mounts and SQLite recovers any hot journal or WAL.[S13] [S21]
  4. Link, DNS and cryptographic session recovery ($t_2$ to $t_3$, illustrative 5 to 7 minutes): Carrier bearer link establishes, RFC 9520 negative DNS cache entries expire, and TCP (RFC 9293) and TLS 1.3 (RFC 9846) handshakes complete.[S23] [S24] [S0201]
  5. First verified remote durable commit ($t_4$, illustrative 8 minutes): The remote endpoint commits the first replayed batch and returns an HTTP application receipt.[S12] [S13]
  6. Oldest pending record clearance ($t_5$, illustrative 45 minutes): Because the outbox must drain accumulated backlog $B = r_{\text{in}} \times D_{\text{outage}}$ while live shift arrivals continue at rate $r_{\text{in}}$, clearance takes $B / (r_{\text{up}} - r_{\text{in}})$ and finishes only when net upload goodput $r_{\text{up}} - r_{\text{in}}$ clears the queue.[S06] [S08] [S0202]

2.11 Partitioning outage components prevents economic double-counting

2.11

Recording all six timestamps allows the project team to partition every incident into non-overlapping intervals for Chapters 4, 7 and 12:[S05] [S06]

¶ 03 · 2 sources

7 and 12S05, S06

S05S06

  • External fault duration ($t_0 - t_{\text{onset}}$): Carrier or utility failure at the site demarcation point.[S05]
  • Local capture outage ($\max(0, t_{\text{local}} - t_{\text{local\_stop}})$): Interval when local capture was unpowered or unready; zero when battery ride-through succeeds.[S03] [S05] [S13]
  • Equipment restart and handshake delay ($t_4 - t_0$): Post-restoration lag to re-establish an authenticated commit channel.[S06] [S23] [S24]
  • Queue-drain and staleness recovery ($t_5 - t_4$): Interval when the remote dashboard is connected but lagging real time while backlog drains.[S06] [S08]

Separating these intervals ensures that Chapter 12 never attributes motive-power stoppage to digital communication lag and never double-counts the minutes between $t_0$ and $t_5$.[S03] [S05]

¶ 04 · 2 sources

…never double-counts the minutes between $t_0$ and $t_5$S03, S05

S03S05

2.123 min · 7 paragraphs · 1 exhibit

The site dossier must expose what remains unknown

Before freezing service classes in Chapter 3 or sizing UPS batteries in Chapter 4, the engineering team should compile a formal Site Continuity Dossier covering six domains:[S03] [S05]

  1. Single-line electrical diagram and feeder provenance: Utility voltage, transformer rating, generator capacity, ATS transition type, earthing, and the breaker panel feeding the protected digital load.[S03]
  2. Telecommunications demarcation and physical routing: Entry duct or pole route from plant boundary to cabinet, base station or fibre PoP identity, and CPE power protection status.[S03] [S05] [S18]
  3. Production shift calendar and point-of-work density: Planned shifts per day, working days per week, seasonal peaks, and active capture stations per hall.[S03] [S05]
  4. Candidate protected digital load inventory: Every device required during a mains cut (edge host, broker, switches, time source, operator display and, only where required offline, vision cameras and lighting) with measured power draw across operating modes.[S03] [S05]
  5. Environmental envelope at the equipment location: Ambient temperature, humidity, cotton-lint exposure and enclosure ventilation across peak shift temperatures.[S03] [S05]
  6. Local maintenance and escalation ownership: Named electrical technician, IT/OT administrator or shift supervisor responsible for logs, fallback and recovery sign-off.[S03] [S05] [S06]
  7. Warning

    Unverified path independence and unrecorded tail risk. The most common survey failure is accepting a vendor's verbal assurance that a backup link is "independent" without walking the cable duct and checking whether the backup base station shares the factory's utility substation.[S03] [S05] Until path_unverified is cleared by a physical route audit and joint outage log, the design must assume that external backhaul can fail simultaneously with utility mains.[S03] [S05]

Exhibit 8 provides an illustrative template for this dossier, pairing each baseline metric with its recorder, operator cadence, missing-data flag and approval owner.[S02] [S03] [S05]

¶ 01 · 3 sourcesExhibit 08

S02S03S05

Exhibit 08RegisterillustrativeEvery site unknown has a collection method
Metric and boundary
Mains voltage, phase and frequency events
Unit
V, Hz, ms
Recorder or source
Three-phase power quality logger at LV board
Operator cadence
Continuous event trigger plus 1 min summary
Missing-data flag
recorder_unpowered
Approval owner
Site electrical engineer

Read-outMetric and boundary: Mains voltage, phase and frequency events. Unit: V, Hz, ms. Recorder or source: Three-phase power quality logger at LV board. Operator cadence: Continuous event trigger plus 1 min summary. Missing-data flag: recorder_unpowered. Approval owner: Site electrical engineer

Open the full register (6 rows)
Mains voltage, phase and frequency eventsV, Hz, msThree-phase power quality logger at LV boardContinuous event trigger plus 1 min summaryrecorder_unpoweredSite electrical engineer
Generator and UPS transfer intervalms, sDigital sub-panel logger and UPS telemetryEvery changeover event plus weekly testtransfer_uninstrumentedMaintenance lead
End-to-end WAN commit probe (DNS, TLS, HTTP)ms, bytes/s, statusPersistent edge probe to test ingestion endpointOperator-chosen (e.g. every 60 s in shift)observer_offlineIT and OT integrator
Joint power-and-WAN state occupancyshift-hoursJoined power and probe ledger (UTC / UUIDv7)Compiled daily and at baseline closeclock_unsynchronisedPlant operations manager
Enclosure ambient temperature and dustdeg C, RH percentCalibrated data logger inside edge cabinetOperator-chosen (e.g. every 10 min)sensor_absentReliability engineer
Carrier path and tower power dependencyroute audit recordPhysical duct walkdown and ISP questionnairePre-contract and after any route changepath_unverifiedProcurement lead
Method and source

Illustrative site-survey dossier template derived from NIST SP 800-82 Rev. 3 (S03), NIST SP 800-34 Rev. 1 (S05) and World Bank survey boundary discipline (S02). Cadences are operator-selected planning inputs, not observed GFT results.

Unit: site baseline specification. Status: illustrative. Sources: S02, S03, S05. Illustrative figures are teaching examples, not measured factory results.

As Exhibit 8 emphasises, the fifth column (Missing-data flag) is as important as the measurement itself.[S02] [S05] Whenever a logger is absent, loses power during a long fault, or lacks a synchronised clock, the dossier records the explicit flag (recorder_unpowered, observer_offline, clock_unsynchronised or path_unverified) rather than substituting a national average or vendor brochure figure.[S02] [S10] [S22]

¶ 01 · 4 sourcesExhibit 08

S02S05S10S22

Note · 6 sources

S05S03R09R10R12S02

With the site survey protocol, joint-state matrix and recovery timestamps defined, the next step is to translate the measured interruption envelope into a binding operational contract.[S03] [S05] Chapter 3 establishes how local service classes, recovery-time objectives, recovery-point budgets and explicit degraded operating states turn site observations into testable engineering requirements before any hardware or cloud platform is purchased.[S03] [S05] [S06]

¶ 02 · 3 sources

S03S05S06

Check the record

The chapter keeps its sources within reach.

Every knot is a source this chapter cites; select one to read its record, or filter the register by grade. Publication dates and inherited-source limits stay explicit. Read the paper's full evidence summary.

30 sources · 279 citation marks on this pageMost cited: S05, 61 times

Grade AGrade BGrade CKnot size: citations on this page

All 30 records shown

R06 · Grade C · inherited record

Cameroon Trade Hub

Inherited evidence R06

About 95 percent of cotton fibre exported raw against 5 percent processed locally; industrialisation target of 50 percent local processing.

Publication date unrecorded. Inherited source-text record. The original publication has not been independently reopened for this web edition.

Chapter source notes

S01 World Bank. 2025.

S05 NIST. 2010.

S03 NIST. 2023.

S02 World Bank. 2026-10-30.

R06 Cameroon Trade Hub. Publication date unrecorded; inherited source-text check.

R07 Ecofin Agency. Publication date unrecorded; inherited source-text check.

R12 Business in Cameroon. Publication date unrecorded; inherited source-text check.

S13 SQLite. 2026-10-30.

S31 IETF / RFC Editor. 2024.

S32 IETF / RFC Editor. 2002.

S10 IETF / RFC Editor. 2010.

S22 systemd project. 2026-10-30.

S16 SQLite. 2026-10-30.

S29 Linux kernel project. 2026-10-30.

S18 IETF / RFC Editor. 2014.

S24 IETF / RFC Editor. 2022.

S12 IETF / RFC Editor. 2022.

S23 IETF / RFC Editor. 2026.

S0204 IETF / RFC Editor. 2024-03.

S0201 IETF / RFC Editor. 2023-12.

S0202 IETF / RFC Editor. 2011-08.

S0203 IETF / RFC Editor. 1998-05.

S11 IETF / RFC Editor. 2019.

S30 chrony project. 2026-10-30.

S08 IETF / RFC Editor. 2007.

S14 SQLite. 2026-10-30.

S06 NIST. 2016.

S21 systemd project. 2026-10-30.

R09 Ecofin Agency. Publication date unrecorded; inherited source-text check.

R10 Ecofin Agency. Publication date unrecorded; inherited source-text check.

Keep the thread · chapter 02 of 14

Chapter 03 picks up the thread.

Move the shuttle along the rack to preview any chapter: its sections, exhibits and reading time. Draft web edition. This research is not investment, legal or tax advice; illustrative models are not measured factory results.

The paper's rack · 14 boltsBolt length: reading time

03Part I: Specify the interruption

Local service classes turn resilience into a testable contract

Criticality, allowable staleness and restart dependencies should be assigned before choosing equipment or a cloud platform.

  • 3.1Classify tasks by the consequence of interruption
  • 3.2Availability and durability need separate budgets
  • 3.3Every dependency must inherit an offline requirement
  • 3.4Safe degradation must be an explicit state
Reading time
24 min
Exhibits
5
Sections
7
Continue to chapter 03
← Previous: chapter 01, The factory must keep its record when the grid failsContinue the threadChapter 03 · Local service classes turn resilience into a testable contract

Find a thread.

Type to search.