Section 62 of 102
61. Manual, Degraded and Offline Operation
Stable section ID: S05-CON-010-SECTION-62 · 31 content blocks
System05 buildings shall remain capable of safe operation when the Building Operations AI Agent is unavailable, disconnected, impaired, suspended, outdated, or under maintenance.
Manual operation shall provide authorized users with practical means to control essential building functions without depending on natural-language interaction, cloud services, or AI reasoning.
Degraded operation may occur because of:
- Sensor failure.
- Communication loss.
- Data conflict.
- Tool unavailability.
- Cybersecurity restrictions.
- Power interruption.
- Model or software fault.
- Registry unavailability.
- Missing permissions.
- Partial equipment failure.
When degraded, the agent shall:
- Identify affected capabilities.
- Reduce authority accordingly.
- Preserve the last verified safe state where appropriate.
- Avoid unsupported conclusions.
- Notify authorized users.
- Record the degraded condition.
- Provide available manual procedures.
- Escalate unresolved risk.
Offline operation should retain sufficient local capability for:
- Essential environmental control.
- Required life-safety functions.
- Manual equipment control.
- Local alarms.
- Emergency shutdown.
- Access to critical instructions.
- Preservation of essential operational records.
Restoration of connectivity shall not automatically authorize the agent to resume interrupted actions. The agent shall verify current building state, reconcile offline events, revalidate permissions, and identify configuration conflicts before returning to normal operation.