| ID | Safety function | Current implementation | Required closure |
|---|---|---|---|
| SFR-01 | Emergency-stop demand removes actuator energy | ECAD CONNECTED - UNVALIDATED | DC application, timing, diagnostic coverage, fault exclusions, CCF and physical tests |
| SFR-02 | Prevention of unexpected restart | ECAD CONNECTED / FIRMWARE BOUNDARY DEFINED - UNVALIDATED | falling-edge behavior, power-cycle/brownout/HIL and physical zero-motion proof |
| SFR-03 | External-device monitoring | ECAD CONNECTED - UNVALIDATED | diagnostic coverage, timing, fault injection, CCF and qualified validation |
| SFR-04 | Control-power loss enters safe state | PARTIAL ARCHITECTURE | as-built supply decay, firmware/HIL, contactor opening, actuator torque decay and collapse containment |
| SFR-05 | Actuator VDD backfeed prevention | NOT IMPLEMENTED - HARNESS BLOCKER | custom/de-pinned data-only links, 283-terminal physical bindings, 25 branch feeds and as-built tests |
| SFR-06 | Branch overcurrent interruption | NOT IMPLEMENTED | fault current, wire length, ambient, bundling, inrush, duty, connector limits, regeneration and jurisdiction |
| SFR-07 | Watchdog loss requests safe stop | DEFINED - NO SAFETY CREDIT | hardware implementation, fault response and any future safety allocation |
| SFR-08 | Torque-disable command | COMPILED - UNFLASHED - STANDARD CONTROL | flash, bench test, all 25 axes, bus loss, timeout and torque-decay evidence |
| SFR-09 | Charger interlock | FUTURE - NOT IMPLEMENTED | onboard source/charger architecture and fault-tested hardwired interlock |
| SFR-10 | Fall restraint prevents head/floor contact | NOT SELECTED OR PROVED | WLL, arrest energy, travel, attachment loads, inspection and qualified mechanical acceptance |
| SFR-11 | Safety-related speed/travel limiting | NOT IMPLEMENTED - MOTION PROHIBITED | architecture, PLr allocation, independent sensing, response time and validation |
| SFR-12 | Power-loss collapse containment | NOT IMPLEMENTED - MOTION PROHIBITED | accepted restraint, joint decay, gravity motion, braking, rebound, overtravel and physical proof |
Exact current circuit
Open the terminal/net map / download the full implementation matrix / open holds.
Current conclusion
Only SFR-01 through SFR-03 have a connected candidate circuit, and it remains unvalidated. SFR-04 is partial. SFR-05 and SFR-06 expose unresolved harness/protection blockers. SFR-07 and SFR-08 are standard-control paths with no safety credit. SFR-09 through SFR-12 are not implemented.