Mini-specs

The resilience requirements is a list of mini requirements.

Each mini requirement consists of:

A hazard, classified as any of: hardware fault, operator's slip, inter-unit mismatch, operator-machine mismatch or unpredictable situation.
A condition, defined in terms of proto-situation (a subset of machine states) and proto-scenario (a subset of operator's modes)
A protection layer ...: trigger prevention, hazard prevention (rebounding), recovery facilitation, escalation prevention, rescue facilitation, proactive testing and reactive assurance
The critical recovery time: the maximum time it should take to accomplish the specified stage in the protection from the specified hazard, in the specified condition