EXPERIMENT 02 / INFRASTRUCTURE RESILIENCE

Infrastructure Resilience Studio

Same maintenance. Same fault. Compare two cooling arrangements and see what changes.

Or inspect a suspicious reading and decide whether the evidence supports readiness →

Shared peak34.63°C

Independent peak32.13°C

2.50°C lower peak

Make a prediction before exploring

01 / MAKE A PREDICTION

Does a second cooling loop solve every failure?

Supply A goes into maintenance at 20 s. At 60 s, a cooling loop fails. Compare a shared loop with two independent loops. Which arrangement stays cooler?

Choose a prediction, then inspect both responses below.

POWER / COOLING / LOADSYNTHETIC SYSTEM

Blue: electrical paths. Teal: cooling paths. Dashed: unavailable. Amber: battery support or starting. Paths show availability, not measured flow.

Inspect an equipment block

The selected arrangement is shown at 60 s. Dashed outlines indicate unavailable equipment. Amber also marks battery support and restart delays.

02 / COMPARE THE CONSEQUENCES

Compare the response.

Independent loops retain one cooling path when the other loop fails. Electrical supply and available capacity still constrain the result.

Zone temperature (°C)34.6°C

Baseline 24°C · 0 s600 s / 10 min

Amber: shared loopTeal: independent loops

Results across the full 600-second synthetic scenario
Arrangement	Peak temperature	Outside illustrative service limits	Unserved energy	Recovery at
Shared loop	34.63°C	455 s	0.00 kWh	Not within ten minutes
Independent loops	32.13°C	347 s	0.00 kWh	572 s

Understand the result definitions

The illustrative service limit is any second with no power to the load or a zone above 27°C. Unserved energy integrates the load power shortfall. Recovery requires every component to be available and temperature within 0.05°C of the initial 24°C. These definitions do not establish facility availability, redundancy classification or an operating limit.

Follow the recovery sequence

0 sBoth supplies and cooling paths are available. The zone begins at 24°C.
20 sSupply A is isolated for planned maintenance.
20 sSupply A unavailable; UPS A on battery; Cooling A unavailable.
60 sThe shared cooling loop fails. UPS supports the load only; cooling follows its supply and loop.
60 sLoop A unavailable; Loop B unavailable; Cooling B unavailable.
80 sUPS A unavailable.
98 sZone crosses above the illustrative 27°C comparison threshold.
150 sMaintenance ends; the affected equipment begins its restart delay.
150 sSupply A starting.
165 sSupply A available; UPS A available.
210 sThe failed component is restored; its restart delay begins.
210 sLoop A starting; Loop B starting; Cooling A starting; Cooling B starting.
225 sAll equipment is available. Stored heat may still need to be removed.
225 sLoop A available; Loop B available; Cooling A available; Cooling B available.
553 sZone returns to or below the illustrative 27°C comparison threshold.

LOAD × FAULT DURATION

Find where the outcome changes.

Each cell is a direct model run. Fault duration starts at 60 s; restoration occurs 60 s later than the selected duration. Both arrangements use the same fixed assumptions.

Map metricMap arrangementGrid detail

Run a study to explore paired outcomes.

Select load (kW)Select fault duration (s)

ONE CHANGE AT A TIME

Compare plausible interventions.

Capture a baseline, then compare both arrangements. Default constraints preserve requested load and prevent increased unserved load energy. A lower thermal peak achieved by dropping load is not an eligible improvement.

ObjectiveRank arrangement Allow reduced requested load

Both arrangements · 600-second horizon · recovery may not be observed
Change / eligibility	Arrangement	Peak (°C)	Power loss (s)	Above 27°C (s)	Outside limits (s)	Unserved (kWh)	Recovery (s)

INDEPENDENT EXERCISE / OBSERVABILITY V1

Can you trust the reading?

A simulated replay of a fictional zone. Inspect evidence before attributing an alarm to equipment or declaring readiness.

ScenarioInspect time 130 s

Is the rising temperature supported by independent evidence?

Choose evidence to inspect at this time Check update age Compare independent reference Review recovery window

Select evidence to begin.

What the evidence supports

Measurements over time

Primary: solid line. Inspected reference: dashed line. Held readings retain their last value; quality and update age appear in the point table.

Alarm lifecycle

Acknowledgement records awareness. It changes neither equipment nor temperature and does not clear an alarm.

Synthetic points and quality

Invented points at the inspected second
Point	Value	Meaning / quality

Event timeline

Readiness evidence

Proceed only when every critical check passes. A missing or inconclusive check is a stopping criterion. Owners below are fictional review responsibilities.

Requirement → evidence → disposition
Requirement / owner	Precondition / expected	Observation	Disposition

Assumptions and limits

The replay evaluates a model. Physical inspection, instrument calibration, site-specific acceptance and authorisation would require separate evidence.

The report is standalone HTML, suitable for printing. Links and reports contain validated scenario inputs and synthetic evidence, without notebook titles or notes. Save the current experiment in the browser-local notebook below.

The observability exercise requires JavaScript. A steady reading can be stale: check its update age and an independent measurement before making a readiness decision. The static resilience comparison above remains available.

Saved experiments · your personal notebook

Saved in this browser on this device. Export a backup before clearing browser data. Preview and production keep separate collections.

Your saved experiments

Import notebook or replay

Open the notebook to load your saved experiments.

Compare two saved replays

Both may differ in several inputs. Deltas describe these scenarios; they do not identify a single cause.

Scenario AScenario BArrangement

Inspect the evidence and assumptions

Synthetic model v1 · 601 samples · 600-second horizon. A peak can still be rising at the end; recovery may not be observed within this window. The 27°C comparison threshold is illustrative.

Model source and assumptions · Computed verification checks · Essay on shared hosts and recovery

Static default comparison shown. Interactive controls become available when the simulation is ready.

The observability mode uses a separate versioned, 300-second synthetic zone. It adds sampling, quality, alarms and acceptance evidence; it does not change the original replay model. Its own assumptions appear with the exercise and in every exported report.

MODEL / EXPLICIT BOUNDARIES

The design is in the relationships.

Two electrical supplies each feed one UPS and one cooling unit. Either UPS can carry the whole critical load. Cooling runs from its electrical supply; UPS batteries support the load only. The shared arrangement uses one loop for both cooling units. The independent arrangement separates those loops; a loop fault affects loop B only.

Events begin at 20 s for maintenance and 60 s for the second fault. Each restored component waits for its configured restart delay. The zone starts at 24°C, with an effective thermal capacitance of 6,000 kJ/K. Every one-second step adds (load power − cooling delivered) / 6,000 to temperature. Spare capacity removes stored heat, with an idealized lower bound of 24°C.

All ratings, limits and events are illustrative. The model omits spatial temperatures, protection coordination, switching failures, battery recharge, nonlinear equipment curves and control interactions. A 27°C service threshold is a comparison rule, not a recommended operating limit. Neither arrangement establishes a redundancy classification or design approval.

Inspect computed checks →Read the recovery note →Read the essay on shared failure →

Terms used on this page

UPS (uninterruptible power supply): Batteries and power electronics that keep equipment running for a short time when its normal supply fails.
Ride-through: How long equipment can keep running on stored energy, such as a UPS battery, after its supply is lost.

All terms →