Section 54 of 83
53. Decommissioning
Stable section ID: S05-CON-005-SECTION-54 · 28 content blocks
Decommissioning permanently removes a Cartridge from authorized operational service.
A Cartridge may be decommissioned because of:
end of service life;
irreparable damage;
unsafe or obsolete design;
certification withdrawal;
technological replacement;
building renovation or demolition;
unavailability of required maintenance;
excessive degradation;
cybersecurity risk;
regulatory change.
Decommissioning shall include:
confirmation of Cartridge identity;
review of hazardous materials and stored energy;
identification of connected and dependent systems;
safe shutdown and isolation;
removal of confidential or controlled data where appropriate;
safe physical disconnection;
protection or closure of remaining host interfaces;
update of Building BIOS and Digital Twin records;
removal from operational and maintenance schedules;
assessment for reuse, refurbishment, recycling, or disposal;
final lifecycle-state assignment.
Decommissioning shall not delete engineering or safety history. Historical records may be required to understand building configuration, incidents, material content, warranty, liability, or future reuse.
A physically installed but decommissioned Cartridge shall be clearly marked and prevented from unintended reactivation. If it remains in place, its effect on fire safety, structural behavior, environmental control, utilities, and maintenance access shall be evaluated.
Digital credentials, communication access, remote-control permissions, and automated software-update services shall be revoked or transferred as required.
The Instance Identity shall never be reassigned to another Cartridge.