GRACE GRID CONTROL LAB

One bounded grid action. Two humans. One physical-effect record.

This reference run exercises the production verification and one-time state machine with synthetic COSA and meter adapters. Every cryptographic check is real. No physical grid event is claimed.

Reference simulation

Authorize

Pending

Verify

Pending

Dispatch

Pending

Measure

Pending

Record

Pending

Settle

Pending

Facility load

--.--- MW

Awaiting meter

Preparing signed meter evidence...

Ordered-- MW

Delivered-- MW

Compliance--

Evidence packet

Trust transitions

Building

Action: not available
Authorization: pending
COSA acknowledgment: pending
Meter statement: pending
Action State: pending
Settlement: pending

Hostile replay

The happy path is not the test. These are.

Each refusal is generated by the same implementation that produced the positive proof.

Pending

Replay

The exact authorization is presented a second time.

not_run

Pending

Action substitution

18 MW authorization is reused for a different target.

not_run

Pending

Meter rule smuggling

A meter tries to inject the settlement rule it is supposed to measure.

not_run

Honest boundary

COSA and meter integrations on this page are signed reference adapters, not production grid connections. GRACE proves authorization, adapter acknowledgment, evidence integrity, and one-time settlement. It does not prove sensor truth or that no bypass path exists.