> Completed synthetic counterpart: `virtual-validation.html`, regenerated by `python run.py`. `completion.json` records the executed cases. The physical procedure below is retained for a real installation; it is not presented as unfinished computational work or as an executed physical test.

# Hardware acceptance procedure (not executed)

This document is a procedure for a qualified controls team, not a record of site tests. Use a safe simulator or disconnected motor-command indicators until the electrical and process design has been approved.

1. Record controller/firmware revision, scan period, input filter times, timers, and the I/O cross-reference. Confirm that independent motor and emergency protections can remove run permission without relying on this software.
2. Boot with each valid level combination. Verify that neither output starts before the defined quiet reset. Repeat after a supply interruption while idle, starting, running one pump, running two pumps, and faulted.
3. With simulated wet/start levels, prove the selected lead output and feedback timeout. Add assist. Remove assist and verify the minimum-run hold. Remove the wet-low input and verify immediate command removal within the accepted scan/filter delay.
4. Suppress lead feedback until timeout while asserting assist at the same scan. Record both outputs and alarms. Repeat with input arrival order reversed within the same scan snapshot.
5. Remove run feedback for less than and longer than the debounce time. Test restored feedback, latched fault, alternative-pump selection, unavailable inputs, and both pumps unavailable.
6. Assert each invalid level order. Confirm the sensor-fault latch, command removal, and reset permissives. Simulate uncommanded feedback and verify the affected pump cannot be commanded.
7. Complete two normal automatic cycles and verify lead alternation. Repeat manual starts and confirm they do not count as automatic cycles.
8. Record every measured delay, output state, unexpected event, and pass/fail against site-specific limits. The limits must include scan timing and the independent electrical protections. Do not approve operation from simulation results alone.