[brudgers]

A couple of my architect friends -- and they are good competent architects who spend the proper portion of their fees to hire competent consulting engineers -- designed an emergency services center a few years ago. The hurricane came - the project was in Florida - the utility cut grid power per protocol and the automatic transfer switch didn't flip to onsite power. Neither did the backup automatic switch.

The person trained to operate the manual switch was on a scheduled vacation (hurricane season in the US is six months it ain't reasonable to prohibit vacations). It took over an hour to get the system back online. Now keep in mind that all of this was with emergency services grade equipment trained professional staff and regular inspections and testing. And everybody wasn't away on vacation by policy.

Proper wiring is a necessary, but not sufficient condition. Power grid failures are many sigma events.

[warfangle]

> The person

And there's the problem.

[brudgers]

The HIL was the backup to the backup.

[HIL]: https://en.wikipedia.org/wiki/Human-in-the-loop