Fire Chief / Electrical Shutoff
REUSABLE EXECUTION-AUTHORITY SANDBOX · ALN × ONUMA × TA-14
The fire chief is the fire chief.
Is the shutoff authorized now?
Identity is necessary. Role is necessary. Neither, by itself, proves that a consequential electrical command is authorized for this asset, this condition and this moment. This sandbox isolates the missing transition from recognized authority to admissible execution.
24 SEP 2026 · 3 PM ET · WORKSHOP OPERATING SURFACE
One asset. One proposed consequence. One reconstructable decision.
EISO-1 · ONUMA ID 3254365
OPEN_POWER_DISCONNECT
Asset Leadership Network × ONUMA × TA-14
01 REQUEST → 02 ONUMA REALITY → 03 AUTHORITY + EVIDENCE TEST → 04 DETERMINATION → 05 CHANGED CONDITION → 06 REVALIDATION → 07 COMMIT → 08 EXECUTION / REFUSAL → 09 OUTCOME RECORD
The workshop does not assume that a digital request, role assertion, or successful command path establishes authority to physically disconnect power. The examination asks what must be established before the consequence is eligible to execute.
WHAT TA-14 BOLTS ON TO
Keep the operating systems. Govern the consequence.
Identifies the building, space, equipment and affected electrical asset.
Establishes who the fire chief or authorized delegate is and the asserted role.
Provides operational state, automation, recommendations or the physical command path.
Tests evidence, continuity, scope, binding and current authority before consequence.
THE WORKSHOP QUESTION
What changes when the request is real enough to cause consequence?
The Fire Chief requests electrical isolation.
ONUMA identifies EISO-1 / 3254365 and exposes the available asset and operating context.
TA-14 asks whether this exact consequence has sufficient admissibility, authority and standing to become reality now.
ALLOW, HOLD, DENY or ESCALATE — with the reason and evidence state preserved.
STEP-BY-STEP WORKSHOP CASE
Walk into the sandbox with one consequential action.
FIRE CONDITION
A condition is reported that may require electrical isolation.
AUTHORITY ASSERTED
A fire chief directs that electrical service to a defined area be shut off.
IDENTITY VERIFIED
The system can establish that the requesting party is the claimed individual and holds the role.
AUTHORITY BOUND
Role authority is tested against the exact jurisdiction, asset, action, condition and permitted scope.
CONTEXT CHECK
Before execution, determine whether fire state, occupancy, electrical topology, command scope, delegation or other material context changed.
COMMIT
Freeze the evidence and authority state that supports the determination.
EXECUTE OR REFUSE
Only an ALLOW proceeds. HOLD, DENY or ESCALATE prevents silent execution.
OUTCOME
Preserve what physically happened. Restoration requires its own current authority chain.
Change one authority condition. Watch the shutoff decision respond.
Begin with identity, role, scope, asset, condition, currentness and commit binding established. Break any one predicate before the electrical command and inspect the governed determination.
Present evidence and bounded authority support eligibility to proceed to the exact protected shutoff commit. Outcome evidence is still required.
Select any condition to change the case. The result responds to the state you establish; a successful upstream fact never silently substitutes for a missing downstream predicate.
THE AUTHORITY TEST
“He is the fire chief” is only one link.
Is the person or system claiming authority actually the identified fire chief or authorized delegate?
Does that identity presently hold the relevant role?
Does the role include authority over this kind of electrical shutoff?
Is the authority bound to this building, panel, feeder, switchgear or other exact affected asset?
Is the authority valid for this specific fire/emergency condition?
Has anything material changed between authorization and execution?
Can the exact evidence + authority state be reconstructed immediately before consequence?
DETERMINATION
The system must be able to refuse.
Current evidence and bounded authority support this exact shutoff.
Evidence or authority may be valid, but a material condition requires revalidation before consequence.
The proposed action is outside the established authority, asset, scope or admissible evidence.
The system cannot establish a sufficient determination and routes the unresolved boundary to the appropriate authority.
If the identity system is correct, the fire chief is authentic, the asset model is correct and the command path works — but the authority is not explicitly bound to this exact asset/action/current condition — what prevents the shutoff from occurring simply because nobody said no?
REUSABLE GOVERNING CHAIN
A template people can carry into another consequential workflow.
REALITY
A fire condition exists at a defined building, electrical asset, location and time.
RECORD
The initiating condition, asset identity, source, timestamp and provenance are preserved.
CONTINUITY
The evidence and operating context remain current through the interval before shutoff.
ADMISSIBILITY
The record supports the proposed consequence without silently exceeding what the evidence establishes.
BINDING
The identified fire chief, role authority, affected electrical asset and exact shutoff action are explicitly bound together.
COMMIT
The determination and authority state are frozen immediately before the command is released.
EXECUTION
Electrical shutoff occurs only under current, bounded authority.
OUTCOME
The physical result is recorded; restoration or a changed condition begins a new chain.
This is a TA-14 technical sandbox for discussion with the Asset Leadership Network and ONUMA and for potential technical inspection by other institutions. It is not a claim that ALN, ONUMA, NIST, a fire authority, or any government body endorses, adopts, certifies or has approved TA-14. The fire-chief electrical-shutoff scenario is an examination case, not operational emergency guidance and not a substitute for applicable law, life-safety procedure, incident command, electrical code or competent emergency authority.
INSTITUTIONAL CONTINUITY RECORD
What happened, when it happened, and what comes next.
Michael Bordenaro invites TA-14 to a practical ALN web discussion.
Fire-chief electrical shutoff proposed as a step-by-step sandbox/workshop case for Kimon and possible NIST handoff.
TA-14 accepts the bounded scenario and corrects the proposed date to Thursday, September 24.
Michael confirms September 24 and adds Kimon to align the technical handoff toward NIST / ASHRAE.
30-minute discussion + 30-minute workshop planned around authority-bound electrical shutoff.