| id | Failure mode / actions | effect | S | O | D | RPN | status |
|---|---|---|---|---|---|---|---|
| DF01 | Capture door: Door rebounds after entry | Mouse escapes; repeated handling increases bite exposure | 7 | 5 | 6 | 210 | open — first-pass proposed |
| DF01-M | Add positive over-center latch and keyed hinge pin | Mouse escapes; repeated handling increases bite exposure | 7 | 3 | 4 | 84 | open — projected mitigation, not accepted |
| DF02 | Ventilation ribs: Air paths blocked by nesting material | Confined mouse distress or death | 9 | 4 | 7 | 252 | open — first-pass proposed |
| DF02-M | Raise vents on opposing walls; add no-bedding instructions | Confined mouse distress or death | 9 | 2 | 5 | 90 | open — projected mitigation, not accepted |
| DF03 | Release slider: Finger enters closing-door path | Pinch or bite during release | 8 | 4 | 6 | 192 | open — first-pass proposed |
| DF03-M | Extend external slider and add hold-open detent | Pinch or bite during release | 8 | 2 | 4 | 64 | open — projected mitigation, not accepted |
| DF04 | Washable shell: Soiled corners retain contamination | User exposure to rodent waste | 8 | 5 | 6 | 240 | open — first-pass proposed |
| DF04-M | Round internal corners; detach door cassette; hygiene instructions | User exposure to rodent waste | 8 | 3 | 4 | 96 | open — projected mitigation, not accepted |
| DF05 | Bait pocket: Bait holder detaches | Small-part ingestion by child or pet | 9 | 3 | 6 | 162 | open — first-pass proposed |
| DF05-M | Integrate pocket into shell; no loose insert | Small-part ingestion by child or pet | 9 | 1 | 4 | 36 | open — projected mitigation, not accepted |
| DF06 | Occupancy inspection: User leaves occupied trap unchecked | Animal dehydration and distress | 9 | 6 | 8 | 432 | open — first-pass proposed |
| DF06-M | Transparent inspection window; explicit do-not-leave-unattended warning | Animal dehydration and distress | 9 | 4 | 6 | 216 | open — projected mitigation, not accepted |
| DF07 | Entry baffle: Second mouse opens occupied chamber | Escape or animal injury | 8 | 5 | 7 | 280 | open — first-pass proposed |
| DF07-M | Separate entry vestibule with anti-backdrive stop | Escape or animal injury | 8 | 3 | 5 | 120 | open — projected mitigation, not accepted |
| DF08 | Occupancy sensor: False empty status | User neglects occupied enclosure | 9 | 5 | 8 | 360 | open — first-pass proposed |
| DF08-M | Use independent beam and weight checks; show uncertain as occupied | User neglects occupied enclosure | 9 | 3 | 6 | 162 | open — projected mitigation, not accepted |
| DF09 | Wi-Fi alert queue: Alert never arrives | Delayed inspection harms captured animal | 9 | 6 | 8 | 432 | open — first-pass proposed |
| DF09-M | Offline local indicator; queued alerts and no-cloud-needed manual checks | Delayed inspection harms captured animal | 9 | 4 | 6 | 216 | open — projected mitigation, not accepted |
| DF10 | BLE provisioning: Nearby stranger pairs to trap | Unauthorized control and household occupancy disclosure | 8 | 5 | 8 | 320 | open — first-pass proposed |
| DF10-M | Authenticated pairing; expiring setup window; no shared password | Unauthorized control and household occupancy disclosure | 8 | 3 | 6 | 144 | open — projected mitigation, not accepted |
| DF11 | Firmware updater: Corrupt update disables occupancy indication | Occupied trap appears inactive | 9 | 4 | 8 | 288 | open — first-pass proposed |
| DF11-M | Signed dual-bank firmware with rollback and independent indicator | Occupied trap appears inactive | 9 | 2 | 6 | 108 | open — projected mitigation, not accepted |
| DF12 | Rechargeable pack: Battery overheats during charging | Burn or fire | 10 | 4 | 8 | 320 | open — first-pass proposed |
| DF12-M | Protected replaceable pack; keyed certified-candidate charger; thermal cutoff | Burn or fire | 10 | 2 | 6 | 120 | open — projected mitigation, not accepted |
| DF13 | Electronics cassette: Wash water reaches PCB | Shock from faulty adapter or overheating | 9 | 5 | 7 | 315 | open — first-pass proposed |
| DF13-M | Separate dry cassette with keyed seal and wash label | Shock from faulty adapter or overheating | 9 | 3 | 5 | 135 | open — projected mitigation, not accepted |
| DF14 | Account and cloud: Household presence patterns retained | Privacy loss after breach | 7 | 5 | 8 | 280 | open — first-pass proposed |
| DF14-M | Local-first alerts; minimal pseudonymous event data; documented deletion | Privacy loss after breach | 7 | 3 | 6 | 126 | open — projected mitigation, not accepted |
| DF15 | Radio module integration: Host changes invalidate RF assumptions | Blocked market access or interference | 9 | 5 | 8 | 360 | open — first-pass proposed |
| DF15-M | Freeze antenna/layout; RF lab review before launch | Blocked market access or interference | 9 | 3 | 6 | 162 | open — projected mitigation, not accepted |
| DF16 | Crowded chamber: Animals compete or overheat | Injury to trapped animals | 9 | 5 | 8 | 360 | open — first-pass proposed |
| DF16-M | Independent compartments and ventilation; inhibit further entry if full | Injury to trapped animals | 9 | 3 | 6 | 162 | open — projected mitigation, not accepted |
| DF17 | Wall-side deployment carriage: Carriage crushes hand or pet | Crush/pinch injury | 9 | 5 | 8 | 360 | open — first-pass proposed |
| DF17-M | Guard pinch points and torque-limit drive; positive travel stops | Crush/pinch injury | 9 | 3 | 6 | 162 | open — projected mitigation, not accepted |
| DF18 | Payload coupler: Trap falls from drone | Impact injury and animal escape | 10 | 5 | 8 | 400 | open — first-pass proposed |
| DF18-M | Captive redundant latch and diverse seated sensors | Impact injury and animal escape | 10 | 3 | 6 | 180 | open — projected mitigation, not accepted |
| DF19 | Propeller guards: Person reaches rotor | Laceration | 10 | 5 | 7 | 350 | open — first-pass proposed |
| DF19-M | Full guards; hardware arm inhibit; emergency motor stop | Laceration | 10 | 3 | 5 | 150 | open — projected mitigation, not accepted |
| DF20 | Navigation estimator: GNSS error causes flyaway | Collision or loss of live payload | 10 | 5 | 9 | 450 | open — first-pass proposed |
| DF20-M | Independent supervisor; no public flight in sample phase | Collision or loss of live payload | 10 | 3 | 7 | 210 | open — projected mitigation, not accepted |
| DF21 | Mission battery: Energy exhausted on return | Crash and stranded animal | 10 | 6 | 8 | 480 | open — first-pass proposed |
| DF21-M | Energy budget check before takeoff; abort to safe landing | Crash and stranded animal | 10 | 4 | 6 | 240 | open — projected mitigation, not accepted |
| DF22 | Command link: Bluetooth/phone loss leaves uncontrolled mission | Collision or unsafe release | 10 | 5 | 9 | 450 | open — first-pass proposed |
| DF22-M | Independent flight controller and local abort plan | Collision or unsafe release | 10 | 3 | 7 | 210 | open — projected mitigation, not accepted |
| DF23 | Field release door: Door opens in flight | Falling animal and loss of containment | 10 | 4 | 8 | 320 | open — first-pass proposed |
| DF23-M | Hardware ground/motor interlock plus software sequence checks | Falling animal and loss of containment | 10 | 2 | 6 | 120 | open — projected mitigation, not accepted |
| DF24 | Release destination: Release occurs on unsuitable land | Animal harm, trespass or rule violation | 9 | 7 | 9 | 567 | open — first-pass proposed |
| DF24-M | Approved destination registry; human review before mission enable | Animal harm, trespass or rule violation | 9 | 5 | 7 | 315 | open — projected mitigation, not accepted |
| DF25 | Aircraft operation scope: Unattended route exceeds permitted operation | Injury exposure and regulatory violation | 10 | 7 | 9 | 630 | open — first-pass proposed |
| DF25-M | Research-only simulation; human-supervised feasibility path with trained operator | Injury exposure and regulatory violation | 10 | 5 | 7 | 350 | open — projected mitigation, not accepted |
| DF26 | Remote ID equipment: Aircraft identity function absent or invalid | Operation not ready for intended regime | 9 | 5 | 8 | 360 | open — first-pass proposed |
| DF26-M | Qualified aircraft/Remote ID integration review; do not infer exemption | Operation not ready for intended regime | 9 | 3 | 6 | 162 | open — projected mitigation, not accepted |
| DF27 | Charging dock contacts: Dock charges misaligned or damaged pack | Thermal runaway/fire near wall | 10 | 5 | 8 | 400 | open — first-pass proposed |
| DF27-M | Enclosed contacts; current limiting and sensor disagreement shutdown | Thermal runaway/fire near wall | 10 | 3 | 6 | 180 | open — projected mitigation, not accepted |
| DF28 | Weather monitor: Launch in rain or strong gust | Loss of control and wet animal | 10 | 6 | 8 | 480 | open — first-pass proposed |
| DF28-M | Local weather interlock; fail closed on missing/stale reading | Loss of control and wet animal | 10 | 4 | 6 | 240 | open — projected mitigation, not accepted |
| DF29 | Autonomy cybersecurity: Malicious command changes destination | Unsafe flight or household surveillance | 10 | 5 | 9 | 450 | open — first-pass proposed |
| DF29-M | Secure boot; signed missions; least-privilege command channels | Unsafe flight or household surveillance | 10 | 3 | 7 | 210 | open — projected mitigation, not accepted |
| DF30 | Return docking: Drone misses wall dock and retries near person | Rotor collision or trapped animal delay | 10 | 6 | 8 | 480 | open — first-pass proposed |
| DF30-M | Independent dock fiducial check; keep-out zone and supervised abort | Rotor collision or trapped animal delay | 10 | 4 | 6 | 240 | open — projected mitigation, not accepted |
Sample — fictitious company. All numbers and people are invented scenario assumptions. This is draft concept paperwork; no physical testing, customer evidence, certification, filing or sign-off has occurred.