format_version: "0.1"
properties:
  - id: P1
    kind: invariant
    expression: "!(breaker_closed && fault)"
    justification: "The breaker must never be closed into an active fault (protection interlock)."