AllowsMeasurement
Defines whether accepted data may enter measurement and display.
Process-bus trust
Visible data is not automatically allowed to trip.
AllowsPickup
Defines whether protection pickup/timing may be evaluated from the source.
AllowsTrip
Defines whether an operated protection element may assert the virtual relay trip latch.
Trust evidence includes complete windows, decode health, mapping/scaling provenance, freshness, smpCnt continuity, quality, SCL identity, svID, dataset, confRev, and selected source context. Duplicate/out-of-order frames can remain visible diagnostically while being rejected before measurement/protection admission.
Closed-loop TESTSET authority
Relay trip permission and TESTSET measured trip are different decisions.
01Relay internal trip request
02BO1 operate/contact behavior
03Virtual trip wire
04TESTSET BI1 raw samples
05Deglitch/debounce
06BI1 accepted edge
07Measured trip / auto-stop
No internal shortcut:
TripLatched can request BO1 but cannot directly become the TESTSET result. Opening BO1→BI1 must remove external trip timing even if the relay still trips internally.Pickup semantics
Generic ANY PICKUP is evidence, not operated-element attribution.
| Evidence item | Authority | Interpretation |
|---|---|---|
RELAY ANY PU [source] | Relay protection snapshot | First generic element pickup requesting BO2. |
TESTSET BI2 ACCEPT | External virtual BI path | Accepted generic ANY-PICKUP contact edge. |
| Operated-element pickup | Operation correlation | Pickup timestamp for the element that ultimately operates. |
| Operated-element P→T | Operation record | That element's own pickup-to-trip interval. |
| Relay trip request | Live relay state | Rising trip-latch edge requesting BO1. |
TESTSET BI1 ACCEPT | External virtual BI path | Authoritative external trip time and optional auto-stop trigger. |
Because BO2 is generic ANY PICKUP, BI2 may precede the eventual operated element's pickup. Evidence schema 9 keeps these timestamps separate so the UI does not manufacture a false element P→T.
Clock and timing evidence
Every timing value belongs to a modeled clock domain.
TESTSET metrology
Monotonic integer microseconds with 1 µs resolution.
TESTSET binary inputs
10 kHz / 100 µs sampling with 0.5 ms deglitch and 0 ms debounce holdoff in the default profile.
Relay processing
4 kHz / 250 µs causal acquisition/protection grid. WPF is presentation only.
Frozen capture and reset
Completed evidence survives equipment re-arm.
After BI1 auto-stop, output state is OUTPUT OFF · FROZEN CAPTURE. The waveform/phasor snapshot may belong to a later causal relay frame than the BI1 acceptance timestamp; beta.6 records that relationship instead of pretending they are identical instants.
One RESET transaction drains stale causal acquisition, clears relay state once, releases BO1/BO2 and TESTSET BI1/BI2, and exposes READY TO RE-ARM only when the postcondition is true. Completed timing and operation history are retained.
Evidence schema 9
Closed-loop exports preserve the explanation chain.
Run identity
Test-run ID, T0, source profile, topology/wiring, timing profile, and fingerprints.
Timing correlation
First-any pickup source, relay pickup/trip request, operated-element timing, TESTSET BI2/BI1, output stop, timing resolution, and event timeline.
Capture and state
Causal front-end snapshot, exact trip capture, frozen-capture relationship, protection evidence, and retained history across reset.
Virtual MMS control evidence
Accepted control is still only simulator authority.
AVR/OLTC MMS browse/read, reports, GI/integrity, modeled SBO/SBOw control, and virtual settings are reviewable laboratory behaviors. Accepted commands may change only the virtual transformer/OLTC process under modeled authority/interlocks; they do not create physical switching authority.
Evidence boundary
Reviewability is not calibration or conformance.
Evidence can prove what this deterministic software model did under a recorded configuration. It does not prove commercial test-set calibration, named-relay hardware timing, IEC 61850 conformance certification, IEC 60255 type-test status, commissioning acceptance, or field-equipment fitness.