VIEW THIS AS

Auto mode follows the Route Engine until you choose a viewpoint.

YOU ARE HERE

ROUTE CHECK

CONNECTED TO

WHAT NEXT

Use the canonical route for this room, or HELP if you are unsure.

Why Mathematics? | Markov Reliability Models: State Transitions, Availability, Repair and Steady State

Why is mathematics important when systems can fail, recover and operate in degraded states? Markov reliability models represent those changes as transitions among clearly defined states. Matrices and exponential functions then calculate transient behaviour, steady availability, repair effects and expected performance.

Did You Know? A repairable system with failure rate 0.01 per hour and repair rate 0.09 per hour has long-run availability 0.09/(0.01+0.09)=0.90, even though the probability of no failure over a long mission keeps falling.

The model becomes useful when each state has an operational meaning. “Up” may mean full capacity, safe degraded service or merely the ability to respond, and those meanings lead to different rewards and decisions. Students should trace every arrow to a real failure, repair, switch or recovery event, check the time unit and ask whether the next transition depends on earlier history. These questions make matrix calculations honest and show when a richer state space, semi-Markov model or simulation is needed. They also keep transient mission questions separate from long-run maintenance planning. A clear state ledger lets another analyst verify that the matrix describes the same system and service promise.

Full chapter index

Chapters 1–8 · Understand the question
  1. Why states matter
  2. Discrete and continuous time
  3. The Markov property
  4. Two-state repairable model
  5. Generator matrix
  6. Mean times from rates
  7. Steady-state availability
  8. Transient availability
Chapters 9–16 · Reproduce the example
  1. Reliability versus availability
  2. Absorbing states
  3. Degraded states
  4. Rewards
  5. Repair priorities and crews
  6. Standby redundancy
  7. Common-cause transitions
  8. State-space explosion
Chapters 17–24 · Check assumptions
  1. Transition data
  2. Checking exponential dwell times
  3. Time-varying and phased missions
  4. Uniformisation and matrix methods
  5. Sensitivity
  6. A service-system example
  7. An engineering example
  8. An education example
Chapters 25–32 · Explore applications
  1. NASA primary guidance
  2. Verification calculations
  3. Limits
  4. Communication
  5. Learning sequence
  6. A hopeful conclusion
  7. A complete state-model rehearsal
  8. Choosing the right time horizon
Chapters 33–44 · Study and verify
  1. A spreadsheet workflow
  2. A coding workflow
  3. Applications and careers
  4. A student investigation
  5. Common misconceptions
  6. Connection to recent mathematics articles
  7. Guidance for students and parents
  8. Practice questions
  9. Frequently asked questions
  10. A reporting checklist
  11. A final audit
  12. Useful next reading

CHAPTER 1 OF 44 · Understand the question

1. Why states matter

Back to contents

Repairable and reconfigurable systems change among operating, degraded and failed states. A Markov model names those states and assigns transition rates or probabilities between them. It can calculate transient reliability, availability, expected occupancy and long-run behaviour. The value comes from making recovery and degradation explicit. A two-state model is not automatically realistic; state definitions and transition assumptions must match the system, maintenance and mission.

Contents · Next chapter

CHAPTER 2 OF 44 · Understand the question

2. Discrete and continuous time

Back to contents

A discrete-time Markov chain advances in steps with a transition-probability matrix whose rows sum to one. A continuous-time Markov chain, or CTMC, uses rates per unit time in a generator matrix whose rows sum to zero. Reliability and availability work often uses CTMCs because failures and repairs can occur at arbitrary times. Do not mix a per-hour rate with a one-step probability without converting through a model.

Contents · Previous chapter · Next chapter

CHAPTER 3 OF 44 · Understand the question

3. The Markov property

Back to contents

The Markov property says the distribution of the next transition depends on the current state, not the full earlier path, given the model. In a homogeneous CTMC, transition rates are also constant over time, producing exponential state dwell times. Real ageing, repair learning or accumulated damage can violate this. Add states, use phase-type approximations, semi-Markov models or time-dependent rates when history matters.

Contents · Previous chapter · Next chapter

CHAPTER 4 OF 44 · Understand the question

4. Two-state repairable model

Back to contents

Let a system be Up or Down. It fails from Up to Down at rate lambda and repairs from Down to Up at rate mu. This tiny model distinguishes failure and restoration, making it suitable for availability. It assumes one repair channel, constant rates and no degraded operation. The same state diagram can represent many systems, but lambda and mu must come from the population and conditions named in the claim.

Contents · Previous chapter · Next chapter

CHAPTER 5 OF 44 · Understand the question

5. Generator matrix

Back to contents

With row-vector convention and state order Up, Down, the generator is Q=[[-lambda, lambda],[mu, -mu]]. Off-diagonal entries are transition rates. Each diagonal is the negative sum of outgoing rates, so every row sums to zero. For lambda=0.01/h and mu=0.09/h, Q=[[-0.01,0.01],[0.09,-0.09]]. A row that does not sum to zero signals a model-construction error.

Contents · Previous chapter · Next chapter

CHAPTER 6 OF 44 · Understand the question

6. Mean times from rates

Back to contents

For exponential time to failure, MTTF=1/lambda=100 hours. For exponential repair duration, MTTR=1/mu≈11.11 hours. These are model means, not scheduled times or guarantees. If repair includes diagnosis, logistics and restart, mu should reflect the full restoration process. A mixture of quick and slow repairs may not be exponential. Plot dwell times and check whether one constant rate is defensible.

QuantityExpressionValue
Failure rate lambdagiven0.01/h
Repair rate mugiven0.09/h
MTTF1/lambda100 h
MTTR1/mu11.11 h
Steady availabilitymu/(lambda+mu)0.90
Two-state repairable model.

Contents · Previous chapter · Next chapter

CHAPTER 7 OF 44 · Understand the question

7. Steady-state availability

Back to contents

At equilibrium, flow from Up to Down equals flow from Down to Up: pi_up lambda=pi_down mu, with probabilities summing to one. Thus pi_up=mu/(lambda+mu). For 0.01 and 0.09, availability is 0.90 and unavailability is 0.10. This is long-run point availability under the model. It is not the probability of no failure during a 100-hour mission.

Contents · Previous chapter · Next chapter

CHAPTER 8 OF 44 · Understand the question

8. Transient availability

Back to contents

If the system starts Up, A(t)=mu/(lambda+mu)+lambda/(lambda+mu)exp[−(lambda+mu)t]. At t=0 this equals one; as time grows, it approaches 0.90. Transient availability matters after startup, reset or a maintenance campaign. The matrix exponential p(t)=p(0)exp(Qt) generalises the calculation. State the initial condition; steady state may be inappropriate for a short mission.

Contents · Previous chapter · Next chapter

CHAPTER 9 OF 44 · Reproduce the example

9. Reliability versus availability

Back to contents

Reliability for a mission often means no failure has occurred by time t. In the two-state model, if any failure ends mission success, R(t)=exp(−lambda t), regardless of repair. Availability permits failures followed by repair and asks whether the system is Up at t. A system can have modest reliability yet high availability when repair is quick. Mixing these metrics creates misleading claims.

Contents · Previous chapter · Next chapter

CHAPTER 10 OF 44 · Reproduce the example

10. Absorbing states

Back to contents

For non-repairable mission reliability, Failed can be an absorbing state with no outgoing transition. The probability of remaining in working states gives reliability. Mean time to absorption follows linear equations or matrix methods. Repairable availability models keep return transitions. Decide whether mission failure can be recovered; the state diagram must represent the operational rule rather than a generic repair arrow.

Contents · Previous chapter · Next chapter

CHAPTER 11 OF 44 · Reproduce the example

11. Degraded states

Back to contents

A system with two redundant units may operate fully with two, degraded with one and fail with zero. States 2, 1 and 0 capture this. If each working unit fails at rate lambda independently, transition 2→1 has rate 2lambda and 1→0 has rate lambda. Repairs can add reverse transitions. The factor two counts two possible failures. Common-cause transitions from 2 directly to 0 must be added explicitly when relevant.

Contents · Previous chapter · Next chapter

CHAPTER 12 OF 44 · Reproduce the example

12. Rewards

Back to contents

A Markov reward model assigns a value to each state. Up states can receive availability reward one and Down states zero. A degraded state might receive capacity 0.5, cost per hour or another outcome. Expected reward combines state probabilities with these values. NASA notes that upstates with reward one and down states zero yield availability-type measures. Rewards extend the model without changing transition logic, but their units and meaning must be stated.

Contents · Previous chapter · Next chapter

CHAPTER 13 OF 44 · Reproduce the example

13. Repair priorities and crews

Back to contents

Systems with several failed components may share one repair crew, so only one repair transition can occur at a time. Unlimited parallel repair assumptions can overstate availability. Add states for repair queue or crew assignment where important. Repair priority affects which state is reached next and can be optimised using rewards and costs. Field maintenance data should include waiting, parts and administrative delay, not only hands-on time.

Contents · Previous chapter · Next chapter

CHAPTER 14 OF 44 · Reproduce the example

14. Standby redundancy

Back to contents

A standby system changes state when an active unit fails, detection succeeds and a spare starts. States can distinguish active-plus-healthy-spare, active-plus-failed-spare, switched operation and total failure. Dormant failure, imperfect coverage and switching time require transitions. A static parallel formula often assumes away this sequence. Markov models make it explicit, at the cost of more states and parameters.

StateMeaningAvailability reward
2two units working1
1one unit working1 or degraded
0no units working0
Example states and rewards.

Contents · Previous chapter · Next chapter

CHAPTER 15 OF 44 · Reproduce the example

15. Common-cause transitions

Back to contents

If two working units can fail together from a shared cause, include a direct transition from state 2 to state 0 with its own rate or condition. Modelling only independent single-unit transitions exaggerates redundancy. Separate common-cause and independent rates carefully to avoid double counting. Evidence may be sparse, so sensitivity ranges are often more honest than one precise rate.

Contents · Previous chapter · Next chapter

CHAPTER 16 OF 44 · Reproduce the example

16. State-space explosion

Back to contents

A system with many components, modes and repair conditions can produce an enormous state space. Aggregate states only when they have equivalent future behaviour for the quantities of interest. Symmetry can collapse identities into counts of working units. Truncation, decomposition, simulation or specialised tools may be needed. A smaller transparent model can be better than a huge unvalidated one, but simplifications must be recorded.

Contents · Previous chapter · Next chapter

CHAPTER 17 OF 44 · Check assumptions

17. Transition data

Back to contents

Estimate rates from exposure time and transition counts under an appropriate model. For a constant failure rate, lambda may be failures divided by Up exposure; repair rate may be repairs divided by Down exposure. Censoring, covariates, fleet heterogeneity and repeated events complicate inference. Confidence intervals and Bayesian methods can express uncertainty. Do not infer an hourly rate from a catalogue probability without a stated conversion model.

Contents · Previous chapter · Next chapter

CHAPTER 18 OF 44 · Check assumptions

18. Checking exponential dwell times

Back to contents

A homogeneous CTMC implies exponential waiting times in each state. Plot survival of Up and Down durations, inspect hazard shape and stratify by environment or repair type. Increasing failure hazard suggests ageing; repair time may be lognormal or have a long logistics tail. Phase-type models can approximate non-exponential durations by adding hidden stages. The Markov property can be improved through better state definitions.

Contents · Previous chapter · Next chapter

CHAPTER 19 OF 44 · Check assumptions

19. Time-varying and phased missions

Back to contents

Rates may change with mission phase, temperature, load or calendar time. A non-homogeneous Markov model allows Q(t) to vary. Phased missions can use different generators and transfer state probabilities at phase boundaries. NASA research highlights limitations of simple homogeneous assumptions for phased missions. Record phase duration and state-restoration rules. Do not average rates across very different phases unless the resulting metric answers a clear question.

Contents · Previous chapter · Next chapter

CHAPTER 20 OF 44 · Check assumptions

20. Uniformisation and matrix methods

Back to contents

The matrix exponential solves continuous-time state probabilities. Uniformisation converts a CTMC into a Poisson-weighted discrete chain using a rate at least as large as all exit rates. Eigenvalue methods and numerical ODE solvers are alternatives. Whichever method is used, verify nonnegative probabilities, row sums and boundary cases. Numerical precision is secondary to correct states and rates.

Contents · Previous chapter · Next chapter

CHAPTER 21 OF 44 · Check assumptions

21. Sensitivity

Back to contents

Differentiate or perturb lambda, mu, coverage and common-cause rates to see which inputs control availability or reliability. In the two-state steady model, increasing mu and decreasing lambda both improve availability, but costs and feasible changes differ. A high sensitivity to an uncertain common-cause rate signals a need for evidence or design separation. Report ranges rather than one optimistic scenario.

Contents · Previous chapter · Next chapter

CHAPTER 22 OF 44 · Check assumptions

22. A service-system example

Back to contents

A repairable online service can be Up, Degraded or Down. Incidents move it downward; mitigation and repair move it upward. Availability rewards may be one, partial and zero. Deployment phases can change rates. Shared dependencies create direct transitions to Down. Logs provide exposure and transition counts, but detection delays and unobserved degradation matter. The model complements, rather than replaces, process monitoring and incident analysis.

Contents · Previous chapter · Next chapter

CHAPTER 23 OF 44 · Check assumptions

23. An engineering example

Back to contents

A two-pump system can occupy states with two, one or zero working pumps. Independent failures move 2→1 at rate 2lambda and 1→0 at lambda. One repair crew moves 0→1 and 1→2 at rate mu. A common power loss moves 2 or 1 directly to 0. If one pump supplies enough flow, states 2 and 1 are available; if not, state 1 receives a degraded reward.

Contents · Previous chapter · Next chapter

CHAPTER 24 OF 44 · Check assumptions

24. An education example

Back to contents

Students can model a school printer as Ready, Printing, Jammed and Under Repair using illustrative transition probabilities. They calculate short-run state probabilities and steady availability, then question whether repair time is exponential. The goal is learning states and transitions, not judging people. A familiar low-stakes system helps students see why current state, history and repair definition matter.

Contents · Previous chapter · Next chapter

CHAPTER 25 OF 44 · Explore applications

25. NASA primary guidance

Back to contents

NASA’s reliability resources define availability as the probability a repairable item performs its intended function when operated and maintained as prescribed. NASA technical reports describe Markov models for dependability, steady-state distributions, rewards and repair policies. Read the NASA reliability definitions, introduction to Markov modelling and Markov reward processes.

Contents · Previous chapter · Next chapter

CHAPTER 26 OF 44 · Explore applications

26. Verification calculations

Back to contents

Check that the generator rows sum to zero. Calculate MTTF 100 h, MTTR 11.11 h, steady availability 0.90 and unavailability 0.10. Verify A(0)=1 and its limit 0.90. Use a numerical matrix exponential at several times and compare the closed form. Simulate many failure-repair histories and compare occupancy. Test lambda=0, mu→infinity and no-repair boundaries.

Contents · Previous chapter · Next chapter

CHAPTER 27 OF 44 · Explore applications

27. Limits

Back to contents

Markov models can become large, data-hungry and sensitive to state definitions. Constant rates and memorylessness may be wrong. Aggregation can hide history, load and common causes. Stationary availability may not describe short missions. Transition estimates from one fleet may not transfer. A mathematically valid generator cannot prove that important states or transitions are present. Use diagnostics, failure analysis and operational review.

Contents · Previous chapter · Next chapter

CHAPTER 28 OF 44 · Explore applications

28. Communication

Back to contents

Show the state diagram and define every state operationally. Report transition directions, rates, units, sources, uncertainty, repair resources, coverage, common causes and initial condition. Distinguish absorbing and repairable models, reliability and availability, transient and steady metrics. Describe the solver and validation. Present sensitivity and limitations. A reader should be able to rebuild Q and check each row.

Contents · Previous chapter · Next chapter

CHAPTER 29 OF 44 · Explore applications

29. Learning sequence

Back to contents

Begin with Up and Down, write Q and calculate steady availability. Derive transient availability and compare with mission reliability. Add a degraded state, then model two redundant units with combinatorial rates. Add one repair crew, imperfect coverage and a common-cause transition. Simulate the chain and compare with matrix results. Finish by checking dwell-time assumptions. This links algebra, exponentials, matrices, probability and system design.

Contents · Previous chapter · Next chapter

CHAPTER 30 OF 44 · Explore applications

30. A hopeful conclusion

Back to contents

Markov reliability models turn repair and reconfiguration into a living mathematical system. Students see matrices describe motion through states, while engineers can compare immediate, long-run and degraded performance. The method is most useful when states are concrete and assumptions are tested. Mathematics then supports better maintenance and architecture choices without pretending that every future transition is memoryless or known.

Contents · Previous chapter · Next chapter

CHAPTER 31 OF 44 · Explore applications

31. A complete state-model rehearsal

Back to contents

Rehearse the model with a state ledger before trusting the matrix. For every state, record which components work, what function is delivered, whether repair is active and which next transitions are physically possible. Build Q from that ledger and verify rate units, nonnegative off-diagonals and zero row sums. Solve the two-state subset by hand, then compare the larger model with a matrix exponential and event simulation. Check initial probabilities, steady limits and rewards. Plot observed dwell-time survival for each state and challenge the exponential assumption. Add one common-cause transition and one repair-crew constraint separately so their effects are visible. Perturb rates across evidence-based ranges and compare short-mission reliability with long-run availability. If aggregation combines states with different future behaviour, split them and test whether the result changes materially. This rehearsal links the abstract matrix to operations and exposes unsupported transitions before they become precise-looking availability estimates.

Contents · Previous chapter · Next chapter

CHAPTER 32 OF 44 · Explore applications

32. Choosing the right time horizon

Back to contents

A start-up mission, a daily service window and a mature fleet can produce different answers from the same generator. Transient probabilities retain the initial condition; steady state forgets it. If a system starts after preventive maintenance, assuming equilibrium may overstate early failure or understate early availability depending on the process. Report results at decision times and show convergence rather than quoting only a stationary value. For phased operations, carry the state distribution between phase-specific generators. Time horizon is part of the question, not an output formatting choice.

Contents · Previous chapter · Next chapter

CHAPTER 33 OF 44 · Study and verify

33. A spreadsheet workflow

Back to contents

List states in rows and columns and build a generator matrix with off-diagonal rates. Calculate each diagonal as the negative outgoing sum and add a row-sum check. Store initial probabilities separately. For a two-state model, calculate MTTF, MTTR, transient and steady availability with labelled units. For larger models, import a validated matrix-exponential result rather than constructing fragile formulas. Add a reward vector, sensitivity scenarios and probability-sum checks at every time point.

Contents · Previous chapter · Next chapter

CHAPTER 34 OF 44 · Study and verify

34. A coding workflow

Back to contents

Represent states and transitions in a table, then construct Q programmatically. Assert nonnegative off-diagonal rates and zero row sums. Compute p(t)=p(0)exp(Qt), steady distribution and expected rewards using tested numerical libraries. Verify against the two-state closed form and stochastic simulation. Preserve state ordering, units, initial condition and solver tolerances. Estimate rates from exposure with intervals, simulate parameter uncertainty and export diagrams, probability trajectories and sensitivity results.

Contents · Previous chapter · Next chapter

CHAPTER 35 OF 44 · Study and verify

35. Applications and careers

Back to contents

Markov reliability models support aerospace, power, telecommunications, maintenance, cloud services, transport, medical devices and fault-tolerant computing. Careers combine linear algebra, probability, operations research, engineering, data and domain knowledge. A state model does not certify a system or guarantee employment. Students can build foundations through matrices, exponentials, coding and systems thinking, then explore reliability, operations and engineering roles while keeping pathways open.

Contents · Previous chapter · Next chapter

CHAPTER 36 OF 44 · Study and verify

36. A student investigation

Back to contents

Simulate an Up/Down repairable system with lambda=0.01/h and mu=0.09/h. Estimate long-run Up fraction and compare it with 0.90. Plot transient availability from an Up start. Replace exponential repair with a fixed or lognormal duration and observe how the CTMC approximation changes. Add a Degraded state and reward 0.5. Explain which differences come from simulation error and which from model assumptions.

Contents · Previous chapter · Next chapter

CHAPTER 37 OF 44 · Study and verify

37. Common misconceptions

Back to contents

Reliability and availability are not synonyms. A rate is not a one-step probability. Generator rows sum to zero, not one. Steady state does not describe every short mission. MTTF plus MTTR alone may not capture queues or degraded states. A Markov model does not prove memorylessness. Adding states can improve realism but also create unsupported parameters. Independent unit failures need combinatorial rate multipliers; common causes need separate transitions.

Contents · Previous chapter · Next chapter

CHAPTER 38 OF 44 · Study and verify

38. Connection to recent mathematics articles

Back to contents

The reliability block diagram article provides static functional architecture. The fault tree article checks undesired-event logic. The Weibull reliability article models non-exponential lifetimes and censoring. Markov models add repair, state changes and availability.

Contents · Previous chapter · Next chapter

CHAPTER 39 OF 44 · Study and verify

39. Guidance for students and parents

Back to contents

Students should draw the state diagram before writing a matrix. Parents can ask what each arrow means, which unit the rate uses and why steady state is relevant. Encourage boundary checks such as zero failure or instant repair. Use simulated or low-stakes systems and avoid labelling people as failed states. The deepest transferable habit is checking whether the current state contains enough information for the next transition model to be credible.

Contents · Previous chapter · Next chapter

CHAPTER 40 OF 44 · Study and verify

40. Practice questions

Back to contents

1. Build Q for the two-state model. 2. Reproduce MTTF, MTTR and 0.90 availability. 3. Verify transient boundary values. 4. Distinguish mission reliability from availability. 5. Add one degraded state and reward. 6. Derive 2lambda for the first failure among two units. 7. Add common-cause and imperfect-coverage transitions. 8. Identify evidence against exponential dwell times. 9. Write a sensitivity conclusion.

Contents · Previous chapter · Next chapter

CHAPTER 41 OF 44 · Study and verify

41. Frequently asked questions

Back to contents

### Why do generator rows sum to zero? The diagonal balances the rates leaving each state.

### Is steady availability the chance of no failure? No. It permits failure and repair.

### What if repair times are not exponential? Use richer states, semi-Markov models or simulation.

### Why add rewards? They translate state occupancy into availability, capacity, cost or another defined outcome.

Contents · Previous chapter · Next chapter

CHAPTER 42 OF 44 · Study and verify

42. A reporting checklist

Back to contents

Report system function; state definitions; transition diagram; generator convention; rates, units, sources and intervals; initial condition; absorbing and repairable states; repair resources and queues; coverage and common causes; memoryless and homogeneity assumptions; transient times; steady distribution; reward definitions; reliability and availability outputs; solver; simulation checks; sensitivity; validation; software and version; and limitations.

Contents · Previous chapter · Next chapter

CHAPTER 43 OF 44 · Study and verify

43. A final audit

Back to contents

Rebuild the state list and every transition from operational evidence. Check Q off-diagonals, diagonals, units and row sums. Compare closed-form and numerical two-state results. Verify initial and limiting probabilities and that all probabilities remain nonnegative and sum to one. Audit combinatorial rate factors, shared repair crews, coverage and common causes. Plot dwell-time data against exponential assumptions. Challenge state aggregation and run parameter sensitivity before accepting a steady-state headline.

Contents · Previous chapter · Next chapter

CHAPTER 44 OF 44 · Study and verify

44. Useful next reading

Back to contents

Continue through the Mathematics Learning Hub. Explore NASA’s Markov model for reliability growth and decay and phased-mission reliability work for extensions. Next implement the two-state model, verify it by simulation and then add only one new state at a time, with evidence for every new transition.

Contents · Previous chapter · Mathematics Learning Hub

Extended practice laboratory

Practice case 1: Build two states

Setup: Use Up and Down states.

Task: Draw failure rate lambda from Up to Down and repair rate mu back.

Checking target: Verify each transition has units per time.

Practice case 2: Write the generator

Setup: Use lambda 0.01/h and mu 0.09/h.

Task: Write Q=[[-0.01,0.01],[0.09,-0.09]].

Checking target: Each row must sum to zero.

Practice case 3: Compute steady availability

Setup: Use mu/(lambda+mu).

Task: Calculate 0.09/0.10.

Checking target: Obtain 0.90 under constant-rate assumptions.

Practice case 4: Compute steady unavailability

Setup: Use lambda/(lambda+mu).

Task: Calculate 0.01/0.10.

Checking target: Obtain 0.10 and confirm availability plus unavailability equals one.

Practice case 5: Compute transient availability

Setup: Start Up at time zero.

Task: Use A(t)=mu/(lambda+mu)+lambda/(lambda+mu)exp[−(lambda+mu)t].

Checking target: Check A(0)=1 and convergence to 0.90.

Practice case 6: Find mean times

Setup: Convert rates to MTTF and MTTR.

Task: Calculate 1/lambda and 1/mu.

Checking target: Obtain 100 h and 11.11 h.

Practice case 7: Add degraded state

Setup: Use Full, Degraded and Down.

Task: Define allowed transitions and working-state rewards.

Checking target: Do not hide degraded capacity inside one Up state.

Practice case 8: Check Markov assumptions

Setup: Ask whether next transitions depend only on current state with constant rates.

Task: Inspect dwell times and history effects.

Checking target: Use semi-Markov or phase-type refinements when needed.

Practice case 9: Model redundancy

Setup: Create states for two, one and zero working units.

Task: Add failure, repair and common-cause transitions.

Checking target: Check combinatorial rate multipliers.

Practice case 10: Report the analysis

Setup: State states, rates, units and initial condition.

Task: Report transient and steady metrics with sensitivity.

Checking target: Avoid confusing reliability with availability.