SECTION 19 — POWER LANE DEEP DIVE (Z6→Z0)

# ============================================================
# LONDON CITY OS — ALMOST-CODE (CANON) — v0.1
# SECTION 19 — POWER LANE DEEP DIVE (Z6→Z0)
#   Power = generation inflow + system balancing + transmission + distribution + restoration.
#   Goal: prevent local faults from cascading; preserve critical loads; restore safely.
# ============================================================
CANON_VERSION: "v0.1"
PLACE:
  place_id: "GBR-LON"
  place_name: "London"
  lane: "POWER"
  z_scope: "Z6_to_Z0"
  pack: "POWER_DEEP_DIVE"
  depends_on_sections:
    - "SECTION_07_SENSORS_PACK"
    - "SECTION_08_ROUTER_CORE"
    - "SECTION_11_EVENT_SURGE"
    - "SECTION_12_GOV_GRAPH"
    - "SECTION_13_LANE_DIRECTORY_INDEX"
# ------------------------------------------------------------
# 19A) Definition locks (power-specific)
# ------------------------------------------------------------
DEFINITION_LOCK:
  GRID_STABILITY:
    >
    Continuous balance of supply/demand + safe voltage/frequency bounds.
    Stability is a time-domain constraint, not an asset list.
  TRANSMISSION:
    >
    High-voltage backbone moving electricity long distances to grid supply points/substations.
  DISTRIBUTION:
    >
    Regional networks taking power from transmission to homes/businesses (the London last-mile lattice).
  OUTAGE:
    >
    Loss of supply to a zone; can be local fault, equipment failure, weather, cyber, fire.
  CRITICAL_LOADS:
    >
    Loads that must be preserved: hospitals, water pumping/treatment, transport control,
    telecoms/data centres, emergency services, core finance/government nodes.
  N_MINUS_1:
    >
    The redundancy assumption: loss of one major component should not collapse the whole system.
    When redundancy is thin, faults become cascades.
  RESTORATION_STITCHING_RULE:
    >
    Restore without secondary damage: avoid unsafe switching, uncontrolled re-energisation,
    frequency/voltage excursions, and re-feeding faults.
  POWER_P0:
    >
    Below-threshold electricity continuity: widespread multi-subnet outage, or major substation incident,
    or system instability requiring emergency load control.
# ------------------------------------------------------------
# 19B) Z6 org anchors (minimal viable London power stack)
# ------------------------------------------------------------
ORG_REGISTRY_Z6:
  GBR-GB::POWER::Z6::ORG.SYSTEM_OPERATOR:
    org_kind: "SYSTEM_OPERATOR_BALANCING"
    canonical_real_world: "National Energy System Operator (NESO)"
    scope: ["SYSTEM_BALANCING","OPERATIONAL_SECURITY","MARKET_DISPATCH_INTERFACE","EMERGENCY_PROCEDURES"]
  GBR-ENGWLS::POWER::Z6::ORG.TRANSMISSION_OWNER:
    org_kind: "TRANSMISSION_NETWORK_OWNER"
    canonical_real_world: "National Grid Electricity Transmission (NGET)"
    scope: ["HIGH_VOLTAGE_ASSETS","SUBSTATIONS","MAINTENANCE","CAPACITY_UPGRADES"]
  GBR-LON::POWER::Z6::ORG.DISTRIBUTION_OPERATOR:
    org_kind: "DISTRIBUTION_NETWORK_OPERATOR"
    canonical_real_world: "UK Power Networks (London distribution)"
    scope: ["PRIMARY_SUBSTATIONS","SECONDARY_NETWORKS","FAULT_REPAIR","CUSTOMER_OUTAGES","PLANNED_WORKS"]
  GBR-GB::POWER::Z6::ORG.REGULATOR:
    org_kind: "ECONOMIC_AND_CONSUMER_REGULATION"
    canonical_real_world: "Ofgem"
    scope: ["NETWORK_PRICE_CONTROL","RELIABILITY_INCENTIVES","ENFORCEMENT","CONSULTATIONS"]
  GBR-UK::POWER::Z6::ORG.POLICY_OWNER:
    org_kind: "NATIONAL_POLICY"
    canonical_real_world: "Department for Energy Security and Net Zero (DESNZ)"
    scope: ["POLICY_DIRECTION","RESILIENCE_PROGRAMMES","LEGISLATION_INTERFACE"]
# ------------------------------------------------------------
# 19C) Z5 control nodes (who executes)
# ------------------------------------------------------------
CONTROL_NODES_Z5:
  GBR-GB::POWER::Z5::CTRL.SYSTEM_BALANCING:
    owner_org: "GBR-GB::POWER::Z6::ORG.SYSTEM_OPERATOR"
    node_kind: "FREQUENCY_VOLTAGE_SECURITY_CONTROL"
    can_execute:
      - "ACT.POWER.BALANCE_MARKET_ACTIONS"
      - "ACT.POWER.SECURITY_CONSTRAINTS"
      - "ACT.POWER.EMERGENCY_OPERATIONS_MODE"
      - "ACT.POWER.PUBLISH_SYSTEM_STATUS"
  GBR-ENGWLS::POWER::Z5::CTRL.TRANSMISSION_SWITCHING:
    owner_org: "GBR-ENGWLS::POWER::Z6::ORG.TRANSMISSION_OWNER"
    node_kind: "HIGH_VOLTAGE_SWITCHING_AND_REPAIR"
    can_execute:
      - "ACT.POWER.ISOLATE_FAULTED_SUBSTATION"
      - "ACT.POWER.RECONFIGURE_TRANSMISSION_PATHS"
      - "ACT.POWER.MAINTENANCE_GATE"
      - "ACT.POWER.PUBLISH_TRANSMISSION_STATUS"
  GBR-LON::POWER::Z5::CTRL.DISTRIBUTION_OUTAGE_MGMT:
    owner_org: "GBR-LON::POWER::Z6::ORG.DISTRIBUTION_OPERATOR"
    node_kind: "DNO_OUTAGE_AND_RESTORATION_CONTROL"
    can_execute:
      - "ACT.POWER.FAULT_LOCALISATION"
      - "ACT.POWER.ZONE_ISOLATION"
      - "ACT.POWER.RECONFIGURE_FEEDERS"
      - "ACT.POWER.RESTORE_STAGED"
      - "ACT.POWER.DEPLOY_FIELD_CREWS"
      - "ACT.POWER.PUBLISH_CUSTOMER_OUTAGE_STATUS"
  GBR-GB::POWER::Z5::CTRL.REGULATORY_ENFORCEMENT:
    owner_org: "GBR-GB::POWER::Z6::ORG.REGULATOR"
    node_kind: "INCENTIVES_ENFORCEMENT_OVERSIGHT"
    can_execute:
      - "ACT.POWER.INVESTIGATE_FAILURE"
      - "ACT.POWER.REQUIRE_REMEDIATION"
      - "ACT.POWER.PUBLISH_REGULATORY_NOTICE"
# ------------------------------------------------------------
# 19D) Z4 corridors (the pipes)
# ------------------------------------------------------------
CORRIDORS_Z4:
  GBR-GB::POWER::Z4::CORR.SYSTEM_BALANCING:
    payload: "REAL_TIME_BALANCE"
    anchors: ["CTRL.SYSTEM_BALANCING"]
    coupling: ["MARKETS","WEATHER","INTERCONNECTORS (optional)"]
  GBR-ENGWLS::POWER::Z4::CORR.TRANSMISSION_BACKBONE:
    payload: "HIGH_VOLTAGE_TRANSPORT"
    anchors: ["CTRL.TRANSMISSION_SWITCHING"]
    invariants: ["N_MINUS_1","PROTECTION_SELECTIVITY"]
  GBR-LON::POWER::Z4::CORR.DISTRIBUTION_LONDON:
    payload: "LAST_MILE_SUPPLY"
    anchors: ["CTRL.DISTRIBUTION_OUTAGE_MGMT"]
    invariants: ["LOCAL_REDUNDANCY","SAFE_SWITCHING"]
  GBR-LON::POWER::Z4::CORR.CRITICAL_LOAD_PRESERVATION:
    payload: "PRIORITY_SUPPLY_TO_CRITICAL_NODES"
    anchors: ["CTRL.SYSTEM_BALANCING","CTRL.DISTRIBUTION_OUTAGE_MGMT","CTRL.TRANSMISSION_SWITCHING"]
    couples_to: ["HEALTH","WATER","TRAN","DATA","SAFE","FIN","GOV"]
  GBR-LON::POWER::Z4::CORR.RESTORATION_AND_BLACKSTART:
    payload: "SYSTEM_RESTORATION_SEQUENCE"
    anchors: ["CTRL.SYSTEM_BALANCING","CTRL.TRANSMISSION_SWITCHING","CTRL.DISTRIBUTION_OUTAGE_MGMT"]
    note: "Use as abstract corridor; expand into explicit blackstart plans later."
# ------------------------------------------------------------
# 19E) Z3 portals (interfaces)
# ------------------------------------------------------------
PORTALS_Z3:
  GBR-LON::POWER::Z3::PORTAL.GRID_SUPPLY_POINTS:
    corridor: "CORR.TRANSMISSION_BACKBONE"
    portal_kind: "TX_TO_DX_INTERFACE"
  GBR-LON::POWER::Z3::PORTAL.PRIMARY_SUBSTATIONS:
    corridor: "CORR.DISTRIBUTION_LONDON"
    portal_kind: "DISTRIBUTION_HUB"
  GBR-LON::POWER::Z3::PORTAL.FEEDERS_AND_SWITCHGEAR:
    corridor: "CORR.DISTRIBUTION_LONDON"
    portal_kind: "LAST_MILE_CONTROL_POINTS"
  GBR-LON::POWER::Z3::PORTAL.CUSTOMERS:
    corridor: "CORR.DISTRIBUTION_LONDON"
    portal_kind: "LAST_MILE_DEMAND"
  GBR-LON::POWER::Z3::PORTAL.CRITICAL_SITES:
    corridor: "CORR.CRITICAL_LOAD_PRESERVATION"
    portal_kind: "PRIORITY_DEMAND"
    examples: ["HOSPITALS","WATER_PUMPING","RAIL_CONTROL","TELECOMS","DATA_CENTRES"]
  GBR-GB::POWER::Z3::PORTAL.SYSTEM_STATUS_PUBLISHING:
    corridor: "CORR.SYSTEM_BALANCING"
    portal_kind: "PUBLIC_TRUST_INTERFACE"
# ------------------------------------------------------------
# 19F) Z3 valves (choke controls)
# ------------------------------------------------------------
VALVES_Z3:
  GBR-GB::POWER::Z3::VALVE.EMERGENCY_OPERATIONS_MODE:
    owner_ctrl: "CTRL.SYSTEM_BALANCING"
    purpose: "protect system stability; prevent frequency collapse"
  GBR-ENGWLS::POWER::Z3::VALVE.SUBSTATION_ISOLATION:
    owner_ctrl: "CTRL.TRANSMISSION_SWITCHING"
    purpose: "truncate faults; prevent propagation through backbone"
  GBR-LON::POWER::Z3::VALVE.FEEDER_RECONFIGURATION:
    owner_ctrl: "CTRL.DISTRIBUTION_OUTAGE_MGMT"
    purpose: "restore via alternate feeds; protect critical sites first"
  GBR-LON::POWER::Z3::VALVE.CRITICAL_LOAD_PRIORITY:
    owner_ctrl: "CTRL.DISTRIBUTION_OUTAGE_MGMT"
    purpose: "sequence restoration; preserve life-safety + city organs"
  GBR-LON::POWER::Z3::VALVE.PLANNED_MAINTENANCE_GATE:
    owner_ctrl: "CTRL.TRANSMISSION_SWITCHING"
    purpose: "avoid stacking maintenance with high-demand/high-risk windows"
  GBR-LON::POWER::Z3::VALVE.RESTORATION_STITCH_PROTOCOL:
    owner_ctrl: "CTRL.DISTRIBUTION_OUTAGE_MGMT"
    purpose: "staged energisation; verify before expanding supply radius"
# ------------------------------------------------------------
# 19G) Z2 subnets (operational tiling for London)
# ------------------------------------------------------------
SUBNETS_Z2:
  GBR-LON::POWER::Z2::SUBNET.CENTRAL_CORE:
    description: "highest consequence density; critical loads packed"
  GBR-LON::POWER::Z2::SUBNET.NORTH:
    description: "tile; residential + mixed critical nodes"
  GBR-LON::POWER::Z2::SUBNET.WEST:
    description: "tile; aviation/major corridors coupling (high consequence)"
  GBR-LON::POWER::Z2::SUBNET.EAST:
    description: "tile; industrial/logistics + density pockets"
  GBR-LON::POWER::Z2::SUBNET.SOUTH:
    description: "tile; mixed density + cross-river dependencies"
  GBR-LON::POWER::Z2::SUBNET.OUTER_RING:
    description: "buffer zones; leverage for rerouting and isolation"
# ------------------------------------------------------------
# 19H) Z1 cells (where failure first appears)
# ------------------------------------------------------------
CELLS_Z1:
  GBR-LON::POWER::Z1::CELL.LOCAL_FAULT_CLUSTER:
    surface_kind: "INCIDENT_FIELD"
    parent_corridor: "CORR.DISTRIBUTION_LONDON"
  GBR-LON::POWER::Z1::CELL.SUBSTATION_COMPONENT_RISK:
    surface_kind: "LATENT_HAZARD_FIELD"
    parent_portal: "PORTAL.GRID_SUPPLY_POINTS"
  GBR-LON::POWER::Z1::CELL.OUTAGE_QUEUE_INDEX:
    surface_kind: "QUEUE_FIELD"
    parent_portal: "PORTAL.CUSTOMERS"
  GBR-LON::POWER::Z1::CELL.CRITICAL_SITE_AT_RISK:
    surface_kind: "LAST_MILE_CONFLICT_ZONE"
    parent_portal: "PORTAL.CRITICAL_SITES"
  GBR-LON::POWER::Z1::CELL.RESTORATION_REBOUND_RISK:
    surface_kind: "INTERFACE_BUFFER"
    parent_valve: "VALVE.RESTORATION_STITCH_PROTOCOL"
# ------------------------------------------------------------
# 19I) Sensors (power specialisations)
# ------------------------------------------------------------
SENSORS_POWER:
  S.power.system_frequency_deviation_proxy:
    maps_to: "S.incident_state"
  S.power.system_constraint_level_proxy:
    maps_to: "S.variance_index"
  S.power.transmission_trip_events_proxy:
    maps_to: "S.incident_state"
  S.power.substation_condition_risk_proxy:
    maps_to: "S.rebound_risk"
  S.power.distribution_fault_rate:
    maps_to: "S.incident_state"
  S.power.customers_off_supply_proxy:
    maps_to: "S.queue_index"
  S.power.outage_duration_proxy:
    maps_to: "S.backlog_age"
  S.power.critical_sites_on_backup_proxy:
    maps_to: "S.queue_index"
  S.power.field_crew_capacity_delta:
    maps_to: "S.capacity_delta"
  S.power.planned_works_stack_index:
    maps_to: "S.rebound_risk"
  S.power.fire_or_access_constraint_flag:
    maps_to: "S.incident_state"
  S.power.public_trust_signal:
    maps_to: "S.substitution_pressure"
# ------------------------------------------------------------
# 19J) Tripwires (P1/P0) + truncation/stitch rules
# ------------------------------------------------------------
TRIPWIRES:
  POWER_P1_EARLY_WARNING:
    if:
      - "distribution_fault_rate rising 2 windows"
      - "OR customers_off_supply_proxy rising + outage_duration_proxy rising"
      - "OR planned_works_stack_index rising during high-risk window"
      - "OR substation_condition_risk_proxy rising (latent hazard signature)"
    then:
      - "activate PLAYBOOK.POWER.OUTAGE_CONTAINMENT_AND_REROUTE"
      - "activate PLAYBOOK.POWER.CRITICAL_LOAD_SHIELD"
      - "activate PLAYBOOK.POWER.MAINTENANCE_DESTACK"
  POWER_P1_TRIGGER:
    if:
      - "customers_off_supply_proxy > 55"
      - "OR critical_sites_on_backup_proxy rising"
      - "OR transmission_trip_events_proxy spike"
    then:
      - "TRUNCATE: isolate fault + reconfigure feeders; prioritise critical loads"
      - "publish unified status via DATA/GOV comms spine"
  POWER_P0_TRIGGER:
    if:
      - "multi-subnet outage + duration accelerating"
      - "OR major substation incident/fire/access constraint"
      - "OR system_frequency_deviation_proxy severe"
    then:
      - "HARD CONTAINMENT: emergency operations mode + restoration corridor activation"
      - "stitch only after stability window + verified safe re-energisation"
# ------------------------------------------------------------
# 19K) Playbooks (executable sequences)
# ------------------------------------------------------------
PLAYBOOK_LIBRARY:
  PLAYBOOK.POWER.OUTAGE_CONTAINMENT_AND_REROUTE:
    intent: "Stop local faults from expanding; restore via alternate paths fast."
    truncate:
      - {act: ACT.POWER.FAULT_LOCALISATION, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
      - {act: ACT.POWER.ZONE_ISOLATION, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
      - {act: ACT.POWER.RECONFIGURE_FEEDERS, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
      - {act: ACT.POWER.DEPLOY_FIELD_CREWS, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
      - {act: ACT.POWER.PUBLISH_CUSTOMER_OUTAGE_STATUS, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
    stitch:
      - "restore in rings (critical -> dense -> outer), verifying each ring before expanding"
      - "avoid re-feeding suspected faults; keep isolation until cleared"
  PLAYBOOK.POWER.CRITICAL_LOAD_SHIELD:
    intent: "Keep city organs alive during outage."
    truncate:
      - {act: ACT.POWER.CRITICAL_LOAD_PRIORITY, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
      - {act: ACT.POWER.RECONFIGURE_TRANSMISSION_PATHS, owner: "CTRL.TRANSMISSION_SWITCHING", when: "tx constrained"}
      - {act: ACT.POWER.PUBLISH_SYSTEM_STATUS, owner: "CTRL.SYSTEM_BALANCING"}
    stitch:
      - "downgrade priority mode only after critical_sites_on_backup returns to baseline"
  PLAYBOOK.POWER.MAINTENANCE_DESTACK:
    intent: "Prevent redundancy thinning from stacking planned works during high-risk windows."
    truncate:
      - {act: ACT.POWER.MAINTENANCE_GATE, owner: "CTRL.TRANSMISSION_SWITCHING"}
      - {act: ACT.POWER.PUBLISH_TRANSMISSION_STATUS, owner: "CTRL.TRANSMISSION_SWITCHING"}
    stitch:
      - "re-introduce planned works only when weather/demand/incident_state stable"
  PLAYBOOK.POWER.SUBSTATION_INCIDENT_CONTAINMENT:
    intent: "Contain substation fires/failures; prevent cascade to critical sites."
    truncate:
      - {act: ACT.POWER.ISOLATE_FAULTED_SUBSTATION, owner: "CTRL.TRANSMISSION_SWITCHING"}
      - {act: ACT.POWER.RECONFIGURE_TRANSMISSION_PATHS, owner: "CTRL.TRANSMISSION_SWITCHING"}
      - {act: ACT.POWER.EMERGENCY_OPERATIONS_MODE, owner: "CTRL.SYSTEM_BALANCING", when: "system stress"}
      - {act: ACT.POWER.PUBLISH_SYSTEM_STATUS, owner: "CTRL.SYSTEM_BALANCING"}
    stitch:
      - "restore through staged re-energisation; maintain conservative protection settings until stable"
  PLAYBOOK.POWER.RESTORATION_CORRIDOR:
    intent: "Systematic restoration after major event; avoid rebound faults."
    truncate:
      - {act: ACT.POWER.EMERGENCY_OPERATIONS_MODE, owner: "CTRL.SYSTEM_BALANCING"}
      - {act: ACT.POWER.RESTORE_STAGED, owner: "CTRL.DISTRIBUTION_OUTAGE_MGMT"}
      - {act: ACT.POWER.PUBLISH_SYSTEM_STATUS, owner: "CTRL.SYSTEM_BALANCING"}
    stitch:
      - "exit emergency mode only after 2 stability windows and post-incident verification"
# ------------------------------------------------------------
# 19L) Failure mode traces (canonical, non-emotive)
# ------------------------------------------------------------
FAILURE_MODE_TRACE:
  TRACE_SUBSTATION_LATENT_HAZARD_TO_CITYWIDE_IMPACT:
    chain:
      - "latent component degradation ->"
      - "catastrophic fault/fire ->"
      - "substation isolation ->"
      - "loss of supply to high-consequence node ->"
      - "transport/finance disruption"
    repair:
      - "substation incident containment"
      - "critical load shield"
      - "stitch via staged restoration + verification"
  TRACE_LOCAL_FAULT_TO_CASCADE:
    chain:
      - "feeder fault ->"
      - "mis-coordination or thin redundancy ->"
      - "adjacent feeder overload ->"
      - "wider outage"
    repair:
      - "fault localisation + isolation + feeder reconfiguration"
      - "maintenance destack to preserve N-1 margin"
  TRACE_RESTORATION_TO_REBOUND_FAILURE:
    chain:
      - "rushed re-energisation ->"
      - "re-feed fault / protection trip ->"
      - "second outage wave"
    repair:
      - "restoration stitch protocol (ring restore + verify before expand)"
# ------------------------------------------------------------
# 19M) Cross-lane couplings (London)
# ------------------------------------------------------------
CROSS_LANE_COUPLINGS:
  POWER__WATER:
    strength: HIGH
    note: "pumping + treatment depend on electricity; outages become water continuity shocks"
  POWER__HEALTH:
    strength: HIGH
    note: "hospitals/ambulance dispatch/comms depend on power; backup time is finite"
  POWER__TRAN:
    strength: HIGH
    note: "rail signalling, tunnels, airports, traffic control are power-coupled"
  POWER__DATA:
    strength: HIGH
    note: "publishing + telecoms + data centres are power-coupled; comms failure amplifies panic"
  POWER__SAFE:
    strength: HIGH
    note: "fires, crowd control, emergency response; outage can increase incident load"
  POWER__FIN:
    strength: HIGH
    note: "payments/markets/business continuity; outage becomes direct economic loss"
  POWER__GOV:
    strength: HIGH
    note: "regulation + emergency powers + accountability; response latency matters"
# ------------------------------------------------------------
# 19N) Expansion rules (toward full London enumeration)
# ------------------------------------------------------------
EXPANSION_RULES:
  R1_ASSET_ENUMERATION:
    do:
      - "Enumerate grid supply points + primary substations + major switching nodes (Z3 portals)."
      - "Tile single-points vs redundant rings; attach substation_condition_risk sensors."
  R2_CRITICAL_LOAD_REGISTRY:
    do:
      - "Create a critical-site directory: hospitals, water nodes, transport control nodes, data centres."
      - "Bind each to priority feeders + restoration ordering edges."
  R3_OUTAGE_PLAYBOOK_BINDINGS:
    do:
      - "Bind each PLAYBOOK act to executor + publisher + pre-auth path (Section 12)."
      - "Add scenario packs: heatwave peak demand, storm faults, substation fire, cyber incident."
  R4_MAINTENANCE_DEBT_SIGNAL:
    do:
      - "Create latent-hazard tracking: repeated anomalies, moisture/thermal flags, deferred work."
      - "Tripwire: substation_condition_risk_proxy rising -> maintenance destack + targeted remediation."
  R5_SYSTEM_OPERATOR_TRANSITION_COMPAT:
    do:
      - "Model system-operator separation/state changes as boundary updates only; version-forward, no renames."
  R6_RESTORATION_SAFETY_LOCKS:
    do:
      - "Define ring-restore recipes per subnet (critical -> dense -> outer) with verification windows."