Interface & Cartridge Architecture

Safe Disconnection is the controlled transition from an operating or connected state to physical separation without creating unacceptable structural, electrical, fluid, thermal, mechanical, digital, environmental, or human risk.

The general Safe Disconnection sequence shall include:

confirm identity of the interface to be disconnected;

verify authorization and reason for disconnection;

identify all dependent systems and components;

stop or transfer active functions;

preserve required data and configuration;

remove or bypass structural load;

isolate electrical energy;

isolate pressure and fluid flow;

discharge stored electrical, mechanical, thermal, or pressure energy;

verify zero-energy or approved safe condition;

establish temporary supports, caps, barriers, or protections;

disable automated restart;

release secondary retention where permitted;

release the primary lock;

separate the interface along the approved path;

prevent damage to seals, contacts, datums, and adjacent components;

protect exposed interface sides;

inspect the disconnected components;

update interface states and building configuration;

create the disconnection event record.

For structural interfaces, unloading shall be demonstrated rather than assumed. Temporary shoring, load-transfer devices, sequenced removal, or structural monitoring may be required.

For electrical interfaces, absence of voltage shall be verified using an approved method. A software “off” command alone shall not establish electrical isolation.

For fluid interfaces, valves shall be closed, pressure relieved, retained fluid controlled, and exposed ports capped or sealed.

For data and control interfaces, commands shall be terminated safely, dependent devices notified, access credentials updated where necessary, and autonomous reconnection prevented.

After disconnection, the remaining building shall be evaluated as a new configuration. Removal of one Cartridge or component shall not leave unsupported loads, open fire barriers, exposed conductors, unsealed pipes, invalid control logic, or undocumented safety reductions.

Emergency disconnection may use an abbreviated sequence when delay would create greater danger. The permitted omissions, emergency authority, resulting limitations, and required post-event inspection shall be defined in advance.

An interface shall be classified as safely disconnected only when physical separation, residual hazards, temporary protections, configuration records, and resulting building condition have all been verified.