Manufacturing
Night shift, contractor traffic, and plants where a coat and heavy rain would break a strict boolean. Fusion is a weighted score, and policy can demand gait after twenty hundred hours.
A plant does not fail because the policy was too weak. It fails because the policy was too brittle to survive weather, shift patterns, and contractors.
Brittle policy is a production problem.
A rule that requires two factors to both succeed absolutely will deny legitimate workers on a wet night shift, and it will be switched off within a fortnight.
Corroboration is a weighted composite score, not a chain of boolean tests. Protective clothing degrades a face score without nullifying it, gait carries more weight where the approach is long, and the composite is compared against a threshold tuned for that portal.
Shift patterns are policy inputs. A plant portal can require gait after twenty hundred hours and accept asynchronous corroboration during the day, because the risk genuinely differs and the rules should say so rather than splitting the difference permanently.
Contractors are an attribute rather than a separate system. Their access can narrow to escorted zones at an elevated threat class and be withdrawn entirely at the highest, without a firmware change and without anybody editing a reader configuration on site.
- Location model
- Site, building, plant, with portals beneath
- Day shift portals
- Credential plus asynchronous corroboration
- Night shift portals
- Gait corroboration required
- Contractor access
- Attribute driven, narrowed by threat class
- Vehicle barrier
- Approved movement read as a decision attribute
- Tailgate detection
- Overhead coverage on busy lines
- Offline survival
- 72 hours on the last verified policy
- Power loss
- Strike de-energizes unless fire code forces open
The same portal, three contexts.
One rule set, evaluated against the clock and the current threat class.
| Context | Required corroboration | Contractors |
|---|---|---|
| Day shift, normal | Credential, corroboration attaches behind | Normal access by group |
| Night shift, normal | Credential plus gait within two strides | Escorted zones only |
| Any shift, elevated threat | Credential plus gait and face | Access can be denied outright |
Moving equipment off a plant.
The approval chain is the control
Equipment leaving a plant is a real approval chain: the asset owner, then a senior approver, then the dock. Most sites run it on paper or email, which means the gate has nothing to check against.
A gate pass names the carrier, the assets from the register, the destination, and the window. The dock has something authoritative to verify, and the asset history records the movement.
The barrier reads it as an attribute
At a vehicle barrier, inside the window, the decision context carries an approved-movement flag for that carrier. The rules decide what it permits.
It does not drop the barrier to credential-only and it does not authorise a legacy reader. The corroboration floor still applies, because a pass is an exception with a scope, not a bypass.
Where regulation requires a route to fail open, the node fails open and records that it did. Security software that quietly defeats life-safety requirements is not a stricter product; it is an unlawful one. Every portal carries its fail mode explicitly so an inspector can be shown it rather than told about it.
Field realities.
Weather
Fusion weights degrade gracefully instead of denying a legitimate worker.
Protective equipment
A helmet or mask lowers a face score. Gait carries the corroboration.
Long approaches
More stride data means gait resolves before the person reaches the barrier.
Local card issuance
Plant badges can be printed and encoded on your own equipment.
Connectivity
Sites are designed to run isolated for days, not minutes.
Fire code
Where regulation requires fail-open, the node obeys it and records the state.
The same control plane. A different floor.
Bring the door onto the same epoch as the laptop.
We will walk you through a live portal, a compiled policy pack, and a revocation that closes the turnstile and locks the screen while you watch.