PAI-SF / 6 / PAI-SF-HOV-003

Post-Override Reset Integrity

Objective

Prevent silent resumption of operation after override without authenticated reset.

Control / requirement

Reset requires explicit authenticated action and a diagnostic pass before resuming operation.

Applicability

All systems with an override mechanism.

Expected evidence

Reset logs; diagnostic pass records. [T2]

Assurance expectation

Evidence that reset cannot occur without the diagnostic pass, not merely that a diagnostic step exists in documentation.

Dependencies

PAI-SF-IRP-003 (Domain 8, HITL revalidation) where the override followed an actual incident.

Exclusions

Not applicable to override mechanisms with no distinct reset state (e.g., momentary override with automatic resumption by design).

Maturity / conformance relevance

Expected at all conformance levels.

Ecosystem relationship

Governs the return-to-operation moment specifically — a different point in time from HOV-001's override event itself.

Domain

7. Runtime Monitoring and Telemetry

Download full Control Catalogue ↓