Every control system must decide what to do when it stops receiving data. A disconnected cable, a device rebooting, a communication error: it happens.
We chose prudence. If for more than 60 seconds Barrel OS receives no battery data, it treats the site as “blind” and enters Reserve: only critical service stays on until data returns.
For the same reason, a more prudent mode is entered immediately; returning to a more generous one requires a minimum dwell time and a margin on state of charge. So the system does not oscillate back and forth with every cloud.
We tested it in simulation by interrupting battery readings for eight hours at night: Barrel OS entered Reserve at once, kept only critical service on, and returned to full service as soon as data resumed.
In a hospital or an isolated base, a slower AI for a few minutes is a nuisance. An AI that shuts down suddenly is a problem.