Skip to content

Staged Lever Ramp

Protocol — instantiates Stock-First Control Restoration

Re-applies the ordinary flow lever in graduated stages after repair, advancing only as each step confirms the lever is transmitting again, instead of snapping straight back to full power.

Staged Lever Ramp governs the return to normal control. Once the stock has been repaired, the temptation is to slam the flow lever back to its old setting — but a freshly-recovered stock is fragile, and full force can re-break it. The ramp instead raises the lever from a low setting toward normal in discrete increments, advancing to the next step only after the current one confirms the lever is transmitting into the outcome again. Its defining property is that the lever setting is the controlled variable and it moves only on evidence: each increment is a small, reversible bet that the coupling holds. It is the last step of the restoration, not the first, and it assumes the repair is already done.

Example

After a blackout, a power grid cannot simply reconnect every breaker at once: the grid's voltage and frequency stability — the stock the dispatch lever acts through — has collapsed, and the inrush of full load would crash it again. A black start proceeds in stages: energize a small cranking path from a self-starting generator, then add load in small blocks, letting frequency settle within limits before the next block is picked up.[1] The dispatch lever is ramped upward one increment at a time, each advance gated on the grid holding the new load without destabilizing.

Normal dispatch resumes only after the staged climb has confirmed the grid carries steadily increasing load — and if a block causes frequency to sag, the ramp holds or sheds back a step rather than pressing on. The outcome is a controlled reconstruction of full operation in which no single step risks the whole recovery.

How it works

The ramp starts well below normal, advances in bounded increments, and gates each increment on a transmission check — does the outcome now move with the lever the way the map says it should? A step that fails to transmit does not escalate; it holds or retreats, because the ramp is deliberately reversible. What distinguishes it from simply resuming is that the lever climbs conditionally: force is added only where the just-repaired stock has demonstrably absorbed the previous increment.

Tuning parameters

  • Step size — how large each increment is. Bigger steps resume faster but risk re-injuring the stock; smaller steps are safer but slow, and tempt an impatient jump.
  • Dwell time per step — how long to hold and verify before advancing. Longer catches slow-developing instability; shorter returns to normal sooner.
  • Advance criterion — what counts as "transmitting" enough to proceed — a response threshold, a stability margin — and how much slack it demands.
  • Step-back policy — whether a failed step holds, retreats one level, or aborts to a safe fallback mode; pre-committing this is what keeps pressure from erasing it.
  • Ceiling — whether the ramp targets the old full setting or a reduced "new normal" when the stock's capacity is permanently lower than before.

When it helps, and when it misleads

Its strength is that it keeps the reactivation from re-breaking a just-repaired stock, and it turns the anxious question "are we back to normal?" into an incremental, evidence-gated climb where every step is a cheap test with a fallback. Ramp too fast and you re-injure the stock; ramp too slow and the system is stranded in reduced capacity, which itself tempts a leap to full power. The classic misuse is skipping the confirmation gates under pressure — "we've waited long enough, go to full" — which quietly turns the staged ramp back into the slam it was built to replace. The discipline is to keep each advance genuinely conditional on a transmission check and to pre-commit the step-back policy before the pressure arrives.

How it implements the components

Staged Lever Ramp realizes the resumption side of the machinery — the parts that bring ordinary control back online:

  • staged_control_reactivation — it is the staged resumption: the ordered, gated climb from safe-low back to normal control.
  • normal_flow_lever — it operates the ordinary flow lever, advancing its setting increment by increment.

It does not itself test whether coupling has returned — it consumes that check from a probe (coupling_probe → low_amplitude_reactivation_probe) — nor does it decide the stock is repaired enough to begin (repair_threshold → Replenishment or Refill Protocol); the ramp resumes control, it neither tests coupling nor sets the go-ahead.

Notes

The ramp is strictly the last step and presupposes the repair is done. Run it on a stock that has not actually recovered and it does not fail safely — it just re-breaks the stock slowly instead of all at once, while looking like careful progress. The repair threshold, owned upstream, is the gate that says the ramp may begin.

References

[1] Black start is the power-industry procedure for restoring a grid from total collapse using self-starting generation and a cranking path, adding load in stages — a worked instance of resuming a lever only as the underlying stock demonstrably absorbs each increment. ↩