| ID | Item/function | Requirement ID | Failure mode | Effect | Severity | Cause | Prevention control | Occurrence | Detection control | Detection | RPN | Rating basis | Recommended action | Owner | Target date | Result | Projected S | Projected O | Projected D | Projected RPN | Residual status |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| DF01 | Capture door | R01 | Door rebounds after entry | Mouse escapes; repeated handling increases bite exposure | 7 | Hinge rebound and latch misalignment | Add positive over-center latch and keyed hinge pin | 5 | Cycle rig then 5 N outward retention pull | 6 | 210 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Add positive over-center latch and keyed hinge pin | Jordan Vale | 2027-06-15 | Not implemented or tested | 7 | 3 | 4 | 84 | Projected residual only; open pending evidence |
| DF02 | Ventilation ribs | R02 | Air paths blocked by nesting material | Confined mouse distress or death | 9 | Vents all located on floor near bait | Raise vents on opposing walls; add no-bedding instructions | 4 | Occlude either vent bank with paper surrogate; inspect remaining airflow path | 7 | 252 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Raise vents on opposing walls; add no-bedding instructions | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 2 | 5 | 90 | Projected residual only; open pending evidence |
| DF03 | Release slider | R03 | Finger enters closing-door path | Pinch or bite during release | 8 | Grip next to opening and no positive open detent | Extend external slider and add hold-open detent | 4 | Video-record unloaded representative-user task | 6 | 192 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Extend external slider and add hold-open detent | Jordan Vale | 2027-06-15 | Not implemented or tested | 8 | 2 | 4 | 64 | Projected residual only; open pending evidence |
| DF04 | Washable shell | R04 | Soiled corners retain contamination | User exposure to rodent waste | 8 | Blind corners and poor disassembly | Round internal corners; detach door cassette; hygiene instructions | 5 | Fluorescent soil inspection after hand wash; biological efficacy not claimed | 6 | 240 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Round internal corners; detach door cassette; hygiene instructions | Jordan Vale | 2027-06-15 | Not implemented or tested | 8 | 3 | 4 | 96 | Projected residual only; open pending evidence |
| DF05 | Bait pocket | R05 | Bait holder detaches | Small-part ingestion by child or pet | 9 | Uncaptured insert fits through entrance | Integrate pocket into shell; no loose insert | 3 | Force gauge pull and foreseeable misuse inspection | 6 | 162 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Integrate pocket into shell; no loose insert | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 1 | 4 | 36 | Projected residual only; open pending evidence |
| DF06 | Occupancy inspection | R06 | User leaves occupied trap unchecked | Animal dehydration and distress | 9 | Trap hidden and no inspection habit | Transparent inspection window; explicit do-not-leave-unattended warning | 6 | 10-user visibility/teach-back study; no live animals before ethical review | 8 | 432 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Transparent inspection window; explicit do-not-leave-unattended warning | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 4 | 6 | 216 | Projected residual only; open pending evidence |
| DF07 | Entry baffle | R07 | Second mouse opens occupied chamber | Escape or animal injury | 8 | One-way baffle back-driven from inside | Separate entry vestibule with anti-backdrive stop | 5 | Probe each chamber loaded with surrogates in 50 cycles | 7 | 280 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Separate entry vestibule with anti-backdrive stop | Jordan Vale | 2027-06-15 | Not implemented or tested | 8 | 3 | 5 | 120 | Projected residual only; open pending evidence |
| DF08 | Occupancy sensor | R08 | False empty status | User neglects occupied enclosure | 9 | Dust fouls optical beam | Use independent beam and weight checks; show uncertain as occupied | 5 | Injected beam blockage, drift and stuck-value cases | 8 | 360 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Use independent beam and weight checks; show uncertain as occupied | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 3 | 6 | 162 | Projected residual only; open pending evidence |
| DF09 | Wi-Fi alert queue | R09 | Alert never arrives | Delayed inspection harms captured animal | 9 | Router outage or mobile notification disabled | Offline local indicator; queued alerts and no-cloud-needed manual checks | 6 | Router loss/reconnect and phone permission fault injection | 8 | 432 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Offline local indicator; queued alerts and no-cloud-needed manual checks | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 4 | 6 | 216 | Projected residual only; open pending evidence |
| DF10 | BLE provisioning | R10 | Nearby stranger pairs to trap | Unauthorized control and household occupancy disclosure | 8 | Shared default credentials and insecure pairing | Authenticated pairing; expiring setup window; no shared password | 5 | Threat-model-led unauthorized pairing attempts on test build | 8 | 320 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Authenticated pairing; expiring setup window; no shared password | Jordan Vale | 2027-06-15 | Not implemented or tested | 8 | 3 | 6 | 144 | Projected residual only; open pending evidence |
| DF11 | Firmware updater | R11 | Corrupt update disables occupancy indication | Occupied trap appears inactive | 9 | Power loss during single-bank flashing | Signed dual-bank firmware with rollback and independent indicator | 4 | Interrupt update at 20 points; confirm last known good boot | 8 | 288 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Signed dual-bank firmware with rollback and independent indicator | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 2 | 6 | 108 | Projected residual only; open pending evidence |
| DF12 | Rechargeable pack | R12 | Battery overheats during charging | Burn or fire | 10 | Unprotected cell, wet connector, charger fault | Protected replaceable pack; keyed certified-candidate charger; thermal cutoff | 4 | Specialist battery fault evaluation; no destructive tests by unqualified users | 8 | 320 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Protected replaceable pack; keyed certified-candidate charger; thermal cutoff | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 2 | 6 | 120 | Projected residual only; open pending evidence |
| DF13 | Electronics cassette | R13 | Wash water reaches PCB | Shock from faulty adapter or overheating | 9 | Electronics not removed before wash | Separate dry cassette with keyed seal and wash label | 5 | Assembly interlock test and controlled splash screen; no IP rating claimed | 7 | 315 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Separate dry cassette with keyed seal and wash label | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 3 | 5 | 135 | Projected residual only; open pending evidence |
| DF14 | Account and cloud | R14 | Household presence patterns retained | Privacy loss after breach | 7 | Unbounded timestamp retention | Local-first alerts; minimal pseudonymous event data; documented deletion | 5 | Review data flows and test account deletion across backups | 8 | 280 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Local-first alerts; minimal pseudonymous event data; documented deletion | Jordan Vale | 2027-06-15 | Not implemented or tested | 7 | 3 | 6 | 126 | Projected residual only; open pending evidence |
| DF15 | Radio module integration | R15 | Host changes invalidate RF assumptions | Blocked market access or interference | 9 | Antenna/layout differs from module conditions | Freeze antenna/layout; RF lab review before launch | 5 | Host pre-scan and authorization-path review; results not performed | 8 | 360 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Freeze antenna/layout; RF lab review before launch | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 3 | 6 | 162 | Projected residual only; open pending evidence |
| DF16 | Crowded chamber | R16 | Animals compete or overheat | Injury to trapped animals | 9 | Capacity inferred from volume without welfare evidence | Independent compartments and ventilation; inhibit further entry if full | 5 | Surrogate occupancy/thermal analysis first; ethical live study only if approved | 8 | 360 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Independent compartments and ventilation; inhibit further entry if full | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 3 | 6 | 162 | Projected residual only; open pending evidence |
| DF17 | Wall-side deployment carriage | R17 | Carriage crushes hand or pet | Crush/pinch injury | 9 | Uncommanded extension from base | Guard pinch points and torque-limit drive; positive travel stops | 5 | Test 20 surrogate obstruction positions with power isolated emergency stop | 8 | 360 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Guard pinch points and torque-limit drive; positive travel stops | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 3 | 6 | 162 | Projected residual only; open pending evidence |
| DF18 | Payload coupler | R18 | Trap falls from drone | Impact injury and animal escape | 10 | Latch incompletely seated or sensor stuck | Captive redundant latch and diverse seated sensors | 5 | Static 5x proposed payload proof test plus single-fault latch injection | 8 | 400 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Captive redundant latch and diverse seated sensors | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 3 | 6 | 180 | Projected residual only; open pending evidence |
| DF19 | Propeller guards | R19 | Person reaches rotor | Laceration | 10 | Accessible rotor at wall dock | Full guards; hardware arm inhibit; emergency motor stop | 5 | Articulated probe and arm-inhibit single-fault tests | 7 | 350 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Full guards; hardware arm inhibit; emergency motor stop | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 3 | 5 | 150 | Projected residual only; open pending evidence |
| DF20 | Navigation estimator | R20 | GNSS error causes flyaway | Collision or loss of live payload | 10 | Multipath near building and stale map | Independent supervisor; no public flight in sample phase | 5 | Hardware-in-loop injected 20 m position jumps and stale fixes | 9 | 450 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Independent supervisor; no public flight in sample phase | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 3 | 7 | 210 | Projected residual only; open pending evidence |
| DF21 | Mission battery | R21 | Energy exhausted on return | Crash and stranded animal | 10 | Payload/wind underestimated | Energy budget check before takeoff; abort to safe landing | 6 | Simulate doubled return energy and degraded pack capacity | 8 | 480 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Energy budget check before takeoff; abort to safe landing | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 4 | 6 | 240 | Projected residual only; open pending evidence |
| DF22 | Command link | R22 | Bluetooth/phone loss leaves uncontrolled mission | Collision or unsafe release | 10 | Phone assumed to be safety controller | Independent flight controller and local abort plan | 5 | Disconnect phone, radio and cloud separately in simulation | 9 | 450 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Independent flight controller and local abort plan | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 3 | 7 | 210 | Projected residual only; open pending evidence |
| DF23 | Field release door | R23 | Door opens in flight | Falling animal and loss of containment | 10 | Software release request at wrong phase | Hardware ground/motor interlock plus software sequence checks | 4 | Inject release command in every mission phase; verify inhibited | 8 | 320 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Hardware ground/motor interlock plus software sequence checks | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 2 | 6 | 120 | Projected residual only; open pending evidence |
| DF24 | Release destination | R24 | Release occurs on unsuitable land | Animal harm, trespass or rule violation | 9 | User selects arbitrary field | Approved destination registry; human review before mission enable | 7 | Review jurisdiction and destination documents; no destination approved | 9 | 567 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Approved destination registry; human review before mission enable | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 5 | 7 | 315 | Projected residual only; open pending evidence |
| DF25 | Aircraft operation scope | R25 | Unattended route exceeds permitted operation | Injury exposure and regulatory violation | 10 | Autonomy marketed as unrestricted household convenience | Research-only simulation; human-supervised feasibility path with trained operator | 7 | FAA operational applicability review including line-of-sight and authorization questions | 9 | 630 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Research-only simulation; human-supervised feasibility path with trained operator | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 5 | 7 | 350 | Projected residual only; open pending evidence |
| DF26 | Remote ID equipment | R26 | Aircraft identity function absent or invalid | Operation not ready for intended regime | 9 | Carrier integration changes identity configuration | Qualified aircraft/Remote ID integration review; do not infer exemption | 5 | Bench configuration and record review; no registration asserted | 8 | 360 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Qualified aircraft/Remote ID integration review; do not infer exemption | Jordan Vale | 2027-06-15 | Not implemented or tested | 9 | 3 | 6 | 162 | Projected residual only; open pending evidence |
| DF27 | Charging dock contacts | R27 | Dock charges misaligned or damaged pack | Thermal runaway/fire near wall | 10 | Contact debris and failed temperature sensor | Enclosed contacts; current limiting and sensor disagreement shutdown | 5 | Specialist fault injection of short, misalignment and sensor open | 8 | 400 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Enclosed contacts; current limiting and sensor disagreement shutdown | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 3 | 6 | 180 | Projected residual only; open pending evidence |
| DF28 | Weather monitor | R28 | Launch in rain or strong gust | Loss of control and wet animal | 10 | No environmental gate and stale weather input | Local weather interlock; fail closed on missing/stale reading | 6 | Hardware-in-loop gust and missing-sensor scenarios | 8 | 480 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Local weather interlock; fail closed on missing/stale reading | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 4 | 6 | 240 | Projected residual only; open pending evidence |
| DF29 | Autonomy cybersecurity | R29 | Malicious command changes destination | Unsafe flight or household surveillance | 10 | Unsigned mission and permissive remote control | Secure boot; signed missions; least-privilege command channels | 5 | Replay, tamper and privilege escalation tests in isolated rig | 9 | 450 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Secure boot; signed missions; least-privilege command channels | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 3 | 7 | 210 | Projected residual only; open pending evidence |
| DF30 | Return docking | R30 | Drone misses wall dock and retries near person | Rotor collision or trapped animal delay | 10 | Visual marker occluded or dock moved | Independent dock fiducial check; keep-out zone and supervised abort | 6 | Simulate moved dock, marker occlusion and blocked return path | 8 | 480 | Proposed ratings: severity based on effect; occurrence uncertain concept exposure; detection weak without physical evidence | Independent dock fiducial check; keep-out zone and supervised abort | Jordan Vale | 2027-06-15 | Not implemented or tested | 10 | 4 | 6 | 240 | Projected residual only; open pending evidence |
Sample — fictitious company. All numbers and people are invented scenario assumptions. This is draft concept paperwork; no physical testing, customer evidence, certification, filing or sign-off has occurred.