Prose:FTS Safety Doctrine

FTS SAFETY DOCTRINE

The Facility Termination System is designed to be armed for as little time as possible, i.e. only during an active bridge experiment, and disarmed immediately after. The arming state changes the security posture of the entire system, tampering with the system while it is disarmed will render the system inoperable to prevent use of it by an adversary while tampering when it is armed will potentially trigger the system. At its most extreme with the antimatter warheads, tamper during disarm results in the controlled annihilation system triggering to render them safely and permanently inert while tamper during arm results in the warheads detonating.

There is always a human in the loop. At no time does any party, including Raven possess remote arm, disarm, detonate, or abort authority over the system; everything is on-site, commanded from either the DMS bunkers or PALIS. For example, enable and disable commands from PALIS during bridge activations must be accepted by both officers agreeing. Only by physically turning the ENABLE/DISABLE switch is the full code from the switch’s Mechanical Code Unit completed and the data pathway opened for the enable/disable code to be transmitted to the WSC.