Interactive resource
Use the working tool for this page
This page has a matching worksheet, calculator or comparison resource. It runs in your browser: enter your own measured values and keep the evidence behind every result.
Open resourceREDDY COMPRESSORS
Power-station compressed-air integration guide for critical controls, recovery priorities and station interfaces
Control field | |
|---|---|
Parent | |
Proposed route | /industries/power-station-service-and-instrument-air/ |
Page type | Industry integration guide |
Distinct intent | Plan critical control demand, recovery priorities and station interfaces. |
Required asset | Critical Air Supply Dependency Map |
AI answer focus | Plan critical control demand recovery priorities and station interfaces. |
Schema candidate | Article or Service according to the actual offering and visible content. |
Map comparison references |
1. Executive Engineering Answer
A power station should not be treated as one undifferentiated compressed-air consumer. Service air and instrument/control air can share generation infrastructure in some plant designs, but their consequences of failure, contamination tolerance, pressure stability requirements, distribution priorities and recovery logic are different.
Instrument air supports control functions whose loss can affect valve positioning, actuation, process isolation, burner and balance-of-plant sequences, pneumatic instruments and other plant-specific control duties. The exact users vary by station technology and owner design. Service air normally serves maintenance, workshop, cleaning and general utility duties. Those loads can be important to operations, but they should not be allowed to consume reserve capacity needed by critical control users during a disturbance.
The engineering objective is not simply to install “enough compressor capacity.” It is to ensure that the station can maintain the required air quality and minimum pressure at critical users through normal demand variation, a credible equipment outage, treatment-system transitions and defined recovery events. This requires demand classification, redundancy analysis, receiver and storage strategy, pressure zoning, treatment architecture, cross-connection governance, monitoring, alarm philosophy and tested restoration procedures.
No universal pressure, purity class, receiver volume, dew point or redundancy rule is imposed on every power station by this page. Those values must be established from the station design basis, instrument and actuator requirements, owner engineering standards, ambient conditions, applicable standards, equipment documentation and the consequences of losing each air consumer.
2. Scope, Boundaries and Page Ownership
It does not replace the compressor technology, dryer, filtration, distribution, pressure-management, controls, audit, energy or maintenance pages elsewhere in the Reddy Compressors architecture.
Owns: critical-air dependency mapping, service-air versus instrument-air segregation, recovery priority, station-interface definition, minimum-data requirements, resilience logic and power-station commissioning evidence.
Does not own: generic rotary-screw technology, generic dryer theory, generic pipe-sizing theory, generic specific-power calculations, generic leak-management methods or generic compressor overhaul procedures.
Does not assume: a particular station fuel, boiler/turbine configuration, OEM, compressor brand, pressure setpoint, air purity class, or a single architecture suitable for all generating plants.
Does require: plant-specific verification before any design value, operating limit or claim is issued for construction, commissioning or operations.
3. Service Air and Instrument Air Are Different Engineering Duties
Engineering dimension | Service air | Instrument / control air |
|---|---|---|
Primary purpose | Maintenance tools, workshop users, general utility and plant-specific noncritical pneumatic duties. | Control, actuation, instrumentation and other station duties whose loss may affect process stability, safe sequencing or availability. |
Demand character | Often intermittent, locally concentrated and sensitive to maintenance activity. | Often lower individual flow per user but distributed, continuous/standby, highly consequence-sensitive and transient during valve movements or upset response. |
Quality basis | Defined by end use; some users tolerate general plant-air quality while others may need local treatment. | Defined by instrument/actuator requirements and station engineering basis; contamination, liquid water and instability can impair control performance. |
Pressure priority | Can usually tolerate load shedding before critical control users, subject to plant-specific exceptions. | Must retain minimum required pressure at the critical user through the defined design event. |
Storage philosophy | Useful for peaks and local tool demand but should not erode critical reserve. | Storage is part of continuity strategy; usable reserve must be calculated between a verified upper and minimum allowable pressure. |
Cross-connection risk | An open service-air path can consume critical reserve or introduce unsuitable air. | Backfeed should be engineered, valved, monitored and quality-protected if it is permitted at all. |
Recovery priority | Restore after critical control demand is secure unless a service user is itself required for recovery. | Restore/protect first according to the critical-air dependency map and station operating procedure. |
A common failure in poorly governed systems is to treat every connected pneumatic user as equal. During a compressor or dryer outage, unrestricted service-air demand can accelerate header pressure decay and reduce the time available for operators or automatic sequences to stabilise the plant. The correct response is not automatically to “oversize everything”; it is to identify which loads must survive, which can be shed, which can be locally buffered, and which should be permanently segregated.
4. Required Asset — Critical Air Supply Dependency Map
It should be maintained as an engineering record, not as a marketing diagram. Each station should populate it from actual P&IDs, instrument indexes, valve lists, OEM documentation, cause-and-effect logic, control narratives and operating procedures.
Layer | Typical questions to record | Required evidence / output |
|---|---|---|
1. Air source | Which compressors can supply the protected header? Are sources electrically independent? What happens on loss of one source? | Source list, capacity basis, electrical supply, start logic, loading limits and maintenance status. |
2. Treatment | Which dryers, filters, drains and separators are in the critical path? Can a treatment train be bypassed without violating quality? | Treatment configuration, differential-pressure limits, dew-point/quality targets, bypass philosophy and alarm points. |
3. Storage | Where is usable reserve located? What pressure range is genuinely available to critical users? | Receiver volumes, isolation valves, pressure limits, calculated free-air reserve and verified minimum user pressure. |
4. Distribution | Which headers, branches, restrictions and single points of failure feed critical users? | P&ID-marked critical routes, sectional isolation plan, pressure profile and identified bottlenecks. |
5. End users | Which actuators, instruments and packages need air, when do they move, and what is the consequence of loss? | Critical-user register with normal, transient and recovery demand plus minimum allowable pressure. |
6. Control dependencies | Does loss of air initiate a trip, fail-safe action, control degradation or manual intervention? | Cause-and-effect reference, fail position, recovery dependency and operator action. |
7. Recovery sequence | Which users must be restored first and which loads remain isolated until reserve is rebuilt? | Restart priority list, automatic/manual steps, hold points and acceptance criteria. |
Criticality classification example — use only after plant-specific review: Class A: loss can directly compromise a required control/safe-state function or prevent defined recovery; Class B: loss can materially reduce generation availability or delay recovery; Class C: deferrable service/maintenance use.
5. Demand Engineering: Normal Load Is Not the Design Case
Instrument-air design must distinguish steady leakage and continuous users from event-driven demand. A valve bank may consume little air while holding position but create a short-duration peak when many actuators stroke during start-up, shutdown, protection response or plant recovery. Service-air demand can also rise sharply during outages and maintenance windows. Therefore the station air model should contain time-based demand states, not only one average flow number.
Demand state | What to capture | Why it matters |
|---|---|---|
Normal generation | Continuous users, leakage, periodic actuations, active maintenance loads. | Establishes normal compressor loading and treatment duty. |
Start-up | Sequential valve strokes, purge/auxiliary operations, package activation and temporary service demand. | Can create coincident peaks not visible in normal operation. |
Planned shutdown | Maintenance-tool use plus actuator sequences and isolation changes. | Service demand may rise while generation configuration changes. |
Single compressor unavailable | Remaining source capacity and pressure response. | Tests N-1 or owner-defined resilience rather than nameplate total capacity. |
Dryer/filter train unavailable | Available treated-air path and pressure loss. | A healthy compressor does not guarantee usable instrument air. |
Electrical disturbance | Which compressors/controls/automatic drains remain powered and how fast they restart. | Common-cause loss may dominate the mechanical redundancy count. |
Emergency / trip response | Critical actuations, fail actions and operator interventions. | Determines reserve requirement during the most consequence-sensitive period. |
Recovery / black-start support where applicable | Minimum users needed before broader plant loads are restored. | Defines restoration priority and prevents premature service-air reconnection. |
6. Receiver and Stored-Air Reserve: Calculate Usable Air, Not Tank Volume Alone
Receiver size in litres or cubic metres is not the continuity metric. The useful quantity is the equivalent free-air reserve available between the initial receiver/header pressure and the minimum pressure that still satisfies the critical user. A simplified isothermal screening relationship is:
V_free ≈ V_receiver × (P1,abs − P2,abs) / P_ref
t ≈ V_free / (Q_critical − Q_remaining_supply)
where pressures are absolute and the flow basis is consistent. This is a screening calculation, not a substitute for a dynamic model when temperature change, regulator behaviour, line pack, multiple receivers, compressor response, actuator bursts or complex networks materially influence the result.
Illustrative input | Example value | Comment |
|---|---|---|
Receiver volume | 10 m³ | Illustrative only. |
Initial pressure | 8 bar(g) | Convert to absolute for calculation. |
Minimum protected pressure | 5.5 bar(g) | Must come from verified end-use requirement plus distribution allowance. |
Reference pressure | 1.013 bar(a) | Use the project’s declared reference basis. |
Critical demand during event | 20 m³/min FAD | Illustrative demand state. |
Remaining source contribution | 10 m³/min FAD | Only if the source is proven available during the event. |
Using those illustrative values, the receiver contributes approximately 24.7 m³ of free air between 8 bar(g) and 5.5 bar(g). With a 10 m³/min net deficit, this is only about 2.5 minutes of idealised reserve. The lesson is important: a physically large receiver may provide surprisingly little usable time when the allowed pressure band is narrow or the deficit is high. Conversely, demand shedding and maintained compressor contribution can materially extend the recovery window. Final sizing must include actual station data, dynamic effects and applicable pressure-vessel requirements.
7. Instrument-Air Quality and Treatment Architecture
The station should define particle, water and oil limits at a declared measurement point, then select treatment and monitoring capable of maintaining those limits through credible ambient and loading conditions. ISO 8573-1 provides the international framework for expressing compressed-air purity classes for particles, water and oil. ISO 8573-2 addresses measurement of oil aerosol, and ISO 8573-3 addresses humidity measurement. ISO 7183 addresses performance data and test methods for compressed-air dryers. As of 3 October 2026, ISO 8573-1:2010 remains the published edition while a new edition is under development; project specifications should verify the applicable edition before issue.
The engineering chain should therefore be written as: required end-use condition → contamination risks → treatment stages → drainage and condensate handling → distribution exposure → measurement point → alarm/action limit → maintenance and verification method. Merely naming a dryer type or filter grade does not demonstrate that the air arriving at the instrument is acceptable.
Locate the defined purity requirement: compressor discharge, post-treatment header, remote instrument header or point of use. A class without a measurement location is incomplete.
Check the lowest expected pipe and enclosure temperature along the route when setting water-vapour performance so that downstream condensation risk is controlled.
Account for filter and dryer pressure drop in the station pressure budget, including fouled or end-of-service conditions permitted by the maintenance strategy.
Provide drain reliability suitable for the consequence of liquid carryover. A failed drain can defeat otherwise adequate separation and drying.
If a service-air cross-connection can feed the instrument header, verify its air quality and install controls that prevent uncontrolled reverse flow or depletion of protected storage.
Use actual measurement and trending where air quality is critical; do not infer delivered quality solely from installed equipment names.
8. Resilient Station Architecture
A resilient station normally removes single points of failure across the complete air path, not only the compressor count. Two compressors feeding one nonredundant dryer, one isolation valve, one electrical board or one undersized header do not create two independent instrument-air paths. The resilience review should therefore follow the air from electrical supply to the last critical actuator.
Architecture question | Engineering test |
|---|---|
Generation redundancy | Can required critical demand be met with the defined source out of service, at the actual ambient and pressure condition? |
Treatment redundancy | Can the required quality be maintained during maintenance or failure of a treatment train? |
Electrical independence | Are supposedly redundant compressors, dryers, drains and controls exposed to one common electrical failure? |
Header segregation | Can service-air peaks depress the protected instrument-air header? Is automatic or procedural load shedding available? |
Storage placement | Will an upstream isolation or line failure cut critical users off from the receiver intended to protect them? |
Isolation maintainability | Can filters, dryers, receivers, instruments and sections be serviced without defeating critical continuity? |
Control-system dependence | Does a compressor start permissive, remote command or master controller become a single failure point? |
Backfeed governance | If alternate air sources exist, are pressure, quality, nonreturn protection and operating authority defined? |
9. Pressure Management and Critical User Margin
The correct pressure target is the minimum pressure needed at the most demanding critical user plus the verified pressure losses between that point and the controlled source, plus only the justified control margin. Raising the entire station header to compensate for local restrictions is usually poor engineering because it increases compressor work, leakage flow and artificial demand while masking the real restriction.
1. Establish the minimum operating pressure for each critical end user from approved equipment data or station design documentation.
2. Identify the hydraulically remote or most restrictive protected route for each relevant demand state.
3. Measure or calculate distribution, treatment, regulator, valve and connection losses at the expected peak flow.
4. Add a controlled operating margin that is justified by measurement uncertainty, transient response and control band — not by habit.
5. Confirm the compressor discharge/control target from the resulting system requirement.
6. Check the design again at fouled-filter limits, alternate treatment configuration and defined ambient conditions.
7. Protect the minimum critical-user pressure with alarms, load-shedding logic and recovery actions before raising setpoints.
10. Station Interface Register
The compressed-air package is coupled to electrical, control, mechanical, civil, environmental and operating systems. These interfaces must be owned explicitly.
Interface | Minimum information to control |
|---|---|
Electrical | Voltage/frequency, motor starting method, essential/nonessential board, restart after voltage recovery, protection trips, heater/drain/control supplies. |
DCS / PLC / SCADA | Run, available, loaded/unloaded, pressure, temperature, dew point where measured, differential pressure, common alarm, shutdown, remote start permissives and command authority. |
Mechanical piping | Design pressure/temperature, materials, corrosion allowance where required, isolation, nonreturn valves, flexible connections, drains, supports and expansion interfaces. |
Treatment / condensate | Dryer duty, filters, drains, condensate route, disposal interface, sampling points and bypass restrictions. |
Civil / room | Foundation, access, lifting/removal route, ventilation, heat rejection, drainage, weather/dust exposure and maintenance clearances. |
Operations | Normal lineup, standby lineup, service-air restrictions, manual backup actions, alarm response and recovery priority. |
Maintenance | Isolation boundaries, spares, bypass controls, test points, inspection access, instrument calibration and return-to-service evidence. |
11. Recovery Priorities After an Air-System Disturbance
The station should not wait for header pressure to collapse before deciding what to protect. Recovery logic should be prepared and tested in advance. A typical sequence is below, but the final order must follow the plant’s approved operating philosophy.
1. Detect and classify the event: source trip, treatment failure, excessive demand, distribution rupture, electrical loss, low pressure or quality excursion.
2. Protect personnel and process safety using the station’s approved operating and protection procedures.
3. Isolate nonessential or high-consumption service-air users that are not required for immediate plant stabilisation.
4. Preserve protected receiver/header pressure for Class A critical users and prevent uncontrolled service-air backflow.
5. Start or transfer to the approved standby air source and verify that it is delivering acceptable pressure and treatment performance.
6. Confirm critical-user pressure, treatment status and control-system health before reconnecting deferred loads.
7. Restore Class B users required for generation recovery, then progressively restore service-air loads as reserve is rebuilt.
8. Log the event, minimum pressure, response time, compressor states, treatment alarms and operator actions for reliability review.
12. Monitoring, Alarms and Data Required for Trustworthy Operation
Measurement / state | Purpose |
|---|---|
Header pressure at source | Shows compressor control response but cannot prove remote user pressure. |
Remote protected-header pressure | Confirms actual delivery margin at the critical network. |
Receiver pressure | Supports reserve trending and recovery timing. |
Compressor running / loaded / available | Distinguishes installed capacity from capacity actually available. |
Dryer status and dew-point measurement where required | Shows whether pressure availability is accompanied by acceptable moisture performance. |
Filter differential pressure | Identifies pressure loss and service condition. |
Automatic drain health / high liquid indication where provided | Detects a failure mode that can compromise treatment. |
Flow measurement at station/header or strategic branches | Supports demand profiling, leak detection and event reconstruction. |
Service-air branch pressure/flow | Identifies noncritical demand that may threaten protected reserve. |
Alarm/event historian timestamps | Enables root-cause reconstruction and response-time validation. |
Alarms should be actionable. A low-pressure alarm that gives operators no remaining reserve estimate, no critical threshold and no load-shedding action is less useful than a tiered response tied to the dependency map. Alarm setpoints and delays should be based on measured station dynamics and approved control philosophy rather than arbitrary round numbers.
13. Power-Station Air Failure Modes and Controls
Failure mode | System consequence | |
|---|---|---|
Compressor trip | Capacity loss; header decay if remaining supply is insufficient. | Verified remaining capacity, automatic standby logic, protected storage and event test. |
Dryer trip or poor regeneration | Pressure may remain acceptable while moisture performance degrades. | Quality monitoring, redundant treatment where required, controlled bypass policy. |
Filter blockage | Hidden pressure loss increases; remote users see lower pressure than compressor room. | Differential-pressure monitoring and remote pressure verification. |
Drain failure | Liquid carryover or excessive air loss. | Drain health checks, isolation/maintenance access and condensate alarms where justified. |
Service-air misuse | Critical reserve consumed by cleaning/tools or temporary connections. | Segregation, pressure control, lockable isolation and operating rules. |
Distribution rupture | Rapid pressure loss and possible loss of multiple users. | Sectional isolation, dependency-aware valve locations and tested emergency response. |
Common electrical failure | Multiple “redundant” packages become unavailable together. | Electrical dependency review and essential-supply strategy as required by station design. |
Controller/network failure | Compressors cannot sequence or restart as assumed. | Local fallback, defined command authority and failure-mode test. |
Unverified cross-connection | Contamination, reverse flow or loss of protected reserve. | Nonreturn protection, quality verification, pressure control and formal operating authority. |
14. Commissioning and Acceptance Evidence
The station must demonstrate that the system performs across the defined dependency chain. The acceptance plan should use calibrated or otherwise verified instruments suitable for the measurements being made and should retain the test boundary, conditions and uncertainty relevant to the decision.
Compressor capacity and control sequence confirmed at the required station pressure range.
Standby start/transfer demonstrated under the approved test condition.
Treatment performance verified at the declared measurement location and operating condition.
Critical remote pressures measured during representative peak or simulated transient demand.
Usable receiver/storage reserve checked against the defined minimum critical-user pressure.
Service-air load shedding or isolation tested where it is part of the resilience strategy.
Loss of a treatment train, critical valve or control path reviewed against the redundancy claim.
DCS/SCADA signals, alarms, permissives and command authority functionally tested.
Drainage and condensate handling proven without uncontrolled discharge or excessive compressed-air loss.
As-built P&IDs, line-up procedures, setpoints, equipment data, test records and recovery procedures handed over.
15. Reliability and Maintenance Strategy
A critical-air system can degrade gradually long before it fails dramatically. Filters foul, leakage increases, dryer performance drifts, cooling degrades, drains malfunction, isolation valves pass, check valves leak back, and compressor controls lose the response assumed in the original design.
Trend remote pressure margin, not only compressor discharge pressure.
Review loaded/unloaded hours, starts, standby availability and abnormal cycling to expose control or capacity problems.
Trend dew point or other required quality parameters at a meaningful station location where the design basis requires it.
Maintain a leak register and distinguish normal instrument consumption from uncontrolled loss.
Test nonreturn and isolation functions that protect critical storage or prevent header interaction.
Review receiver condition, drains, relief devices and inspection obligations under the applicable pressure-equipment regime.
After major maintenance or control changes, recommission the dependency chain rather than assuming the original resilience remains intact.
16. Worked Engineering Scenario — Critical Reserve and Load Shedding
The following scenario is illustrative and must not be presented as a Reddy Compressors project result.
Scenario item | Illustrative condition |
|---|---|
Normal station demand | 24 m³/min total: 9 m³/min protected instrument/control demand + 15 m³/min service/other air. |
Available compressors | 2 × 18 m³/min at the required pressure; one running, one standby. |
Event | Running compressor trips; standby needs 90 seconds to start, stabilise and load. |
Protected receiver | 8 m³ operating from 8.0 to 5.5 bar(g) usable band. |
Action A | No load shedding: all 24 m³/min continues during the 90-second gap. |
Action B | Immediate service-air isolation: protected demand falls to 9 m³/min during the gap. |
For an 8 m³ receiver and a 2.5 bar usable differential, the idealised free-air reserve is about 19.7 m³ at a 1.013 bar reference pressure. With no remaining compressor supply, that reserve would theoretically support 24 m³/min for only about 49 seconds — shorter than the 90-second standby recovery time. If service-air demand is shed and only 9 m³/min remains, the same idealised reserve supports about 131 seconds. The example shows why dependency-based load shedding can be more effective than adding receiver volume without understanding demand. A real design would also include line pack, compressor coast-down or alternate source contribution, actuator bursts, pressure regulator behaviour, temperature effects and a margin for uncertainty.
17. Minimum Design / Audit Data Sheet
Data group | Required inputs before engineering recommendation |
|---|---|
Plant basis | Station type, unit status, operating modes, ambient range, criticality philosophy and applicable owner standards. |
Compressor sources | Make/model where relevant, rated/verified FAD, pressure range, control method, cooling, electrical source and availability state. |
Treatment | Dryer type, rated condition, verified dew-point/quality performance, filters, drains, pressure loss and bypass arrangement. |
Storage | Receiver volumes, pressure ratings, actual operating band, locations, isolation and inspection status. |
Distribution | P&IDs, pipe sizes/materials, critical routes, branch regulators, restrictions, cross-connections and remote pressure data. |
Critical users | Tag, function, minimum pressure, normal/actuation demand, fail position, consequence of loss and recovery priority. |
Service users | Major tools/processes, peak demand, temporary connections, ability to isolate and whether required during recovery. |
Controls | Sequence logic, standby start, alarms, permissives, DCS interface, local fallback and loss-of-communications behaviour. |
Measurements | Pressure, flow, dew point/quality data, filter DP, electrical input where relevant, timestamps and instrument details. |
Event history | Low-pressure events, compressor trips, dryer failures, nuisance cycling, unexplained demand peaks and operator interventions. |
18. Decision Rules for Selection and Improvement
If critical demand cannot be maintained with the defined source unavailable, fix capacity/redundancy before optimising energy performance.
If pressure is adequate in the compressor room but inadequate remotely, investigate distribution/treatment loss before raising the header setpoint.
If service demand threatens critical reserve, segregate, regulate, store locally or shed the service load instead of treating the entire station as one header.
If quality is not measured at an appropriate point, treat the quality claim as unverified even when high-grade treatment equipment is installed.
If redundant compressors share a single treatment, electrical or control dependency, do not describe the complete instrument-air system as fully redundant without qualification.
If standby recovery time exceeds available critical reserve, reduce the start/recovery time, increase protected storage, maintain alternate supply, reduce critical demand or implement faster noncritical load shedding.
If pressure setpoints are elevated only to overcome local restrictions, correct the restrictions and re-establish the pressure budget before accepting the higher energy penalty.
19. Frequently Asked Engineering Questions
Can service air and instrument air use the same compressors?
They can in some plant architectures, but only when the treatment, pressure, storage, controls and segregation strategy protect the instrument-air requirement under all defined operating and failure states. Shared generation does not mean the headers should be operationally unmanaged.
Why not simply keep the station pressure high?
Higher pressure can conceal distribution restrictions while increasing compressor work, leakage and artificial demand. The engineering target is adequate pressure at the critical user with a verified pressure budget and justified margin.
Is a large receiver enough to guarantee instrument-air continuity?
No. Continuity depends on usable pressure range, critical demand, remaining compressor supply, distribution isolation and recovery time. Receiver volume alone is not a resilience measure.
Should service air be disconnected during a compressor trip?
If the dependency analysis shows service demand can endanger critical reserve, load shedding or isolation should be part of the approved response. Some service loads may themselves be needed for recovery, so classification must be plant-specific.
What air quality should a power station specify?
Specify the quality required by the actual instruments, actuators and station design basis, expressed at a defined measurement point. ISO 8573-1 provides a framework for particles, water and oil classes; do not copy a purity class without confirming end-use requirements.
Where should dew point be measured?
At a location that demonstrates the required system performance. The correct point depends on the design boundary and where condensation risk or instrument quality must be verified. A dryer outlet measurement may not represent a remote header under all conditions.
What is the most important redundancy check?
Follow every dependency from electrical supply and compressor through treatment, storage, distribution, control logic and the final critical user. The weakest common dependency defines the actual resilience.
How should temporary compressors be connected during an emergency?
Through a pre-engineered connection with verified capacity, pressure, air quality, nonreturn protection, isolation, hose/piping suitability, electrical/fuel logistics, control authority and an operating procedure. An improvised connection can introduce contamination or unstable pressure.
What data should be collected after a low-pressure event?
At minimum: event timestamps, header and remote pressures, compressor states, treatment alarms, service-air demand/isolations, receiver pressure decay, standby start time, DCS actions and operator interventions.
When the station has a verified dependency map, documented critical and deferrable loads, defined air-quality and pressure requirements, tested source/treatment/storage/distribution resilience, an approved recovery sequence and traceable commissioning evidence.