# Complete RTD validity interlock and transport recovery

Status: deferred
Type: campaign
Updated: 2026-08-15
Next Action: reactivate when campaign 017 is reactivated for the same scheduled actual-chamber window, attended heater-safe testing is authorized, and the owner has approved the layered RTD-only runaway-prevention contract and quantitative acceptance limits
Campaign ID: 018-complete-rtd-validity-interlock-and-transport-recovery
Campaign Number: 018
Outcome: In the chamber-gated successor-firmware tranche after campaign 017, complete the RTD-only temperature-sensor validity interlock and transport recovery, using fixtures for injected validity and state-transition checks and an actual chamber for thermal-response and runaway-prevention qualification, without expanding scope to LM73. Focus areas: 1 Firmware; 3 Remote controller automation; 4 Automatic power/cycle control; 6 Qualification, release, and supply change.
Depends On: 017-complete-temperature-control-profile-recovery-and-regulation
Decision: Do not hold the SD qualification baseline for this work. Campaign 017 and actual-chamber availability gate final qualification; the owner must also approve the layered RTD-only runaway-prevention contract and acceptance limits. LM73 remains excluded, and inherited SD qualification requires reviewed change-impact analysis plus focused regression.
Detour For: none
Return To: none
Completion Gate: The owner-approved layered runaway-prevention contract is implemented, fixture fault-injection checks prove safe RTD invalidity and transport state transitions, actual-chamber testing proves thermal-response and runaway-prevention behavior within approved limits, SD qualification inheritance or requalification is dispositioned, all workpackage gates pass, and settled behavior is documented.
Completion Evidence: none
Disposition: Final RTD interlock and transport-recovery qualification is part of the chamber-gated thermal successor-firmware tranche. Dev fixtures may cover injected validity and state-transition logic but cannot establish actual thermal response or runaway-prevention performance, and this work must not hold the SD qualification baseline.
Reactivate When: campaign 017 is reactivated for the same scheduled actual-chamber window, attended heater-safe testing is authorized, and the owner has approved the layered RTD-only runaway-prevention contract and quantitative acceptance limits

## Request

Primary deferred workpackage:
`work/wp/deferred/wp-temperature-sensor-validity-interlock-and-rtd-transport-recovery.md`.

Fixture-only preparation may cover injected RTD invalidity, transport failures,
and state transitions, but it must not be represented as qualification of the
actual chamber's thermal response. Reactivate after request `017` is active in
the same chamber window and the owner approves the layered RTD-only
runaway-prevention contract and quantitative limits. Exclude LM73 unless a
separately authorized artifact changes that boundary.

## Completion Check

The owner-approved layered runaway-prevention contract is implemented, fixture fault-injection checks prove safe RTD invalidity and transport state transitions, actual-chamber testing proves thermal-response and runaway-prevention behavior within approved limits, SD qualification inheritance or requalification is dispositioned, all workpackage gates pass, and settled behavior is documented.
