Safe Practice Manual for Active Platform Operations
This manual codifies safe practice for all personnel operating on Cytherean Atmospheric Operations platforms — cloud-band Schleimfarmen, exterior maintenance vessels, barge interface stations. It supersedes Rev. 3712 and applies to all operators certified under Cytherean Atmospheric Engineering certification.
Compliance is monitored continuously by automated platform systems and audited quarterly. Citations accrue to the operator's manifest and are reviewed at contract renewal. Authority derives from Cytherean Compact §3 (3247 CE) and is harmonized with applicable SMA atmospheric-industrial safety conventions.
Failure to comply does not in all cases produce immediate physical consequence. The four-century record is, however, well-characterized: the strongest predictor of injury and fatality is the cumulative count of category-class violations preceding the incident.
How to Not Get Killed on a Schleimfarm
Welcome to your contract. Here is how to keep it.
The manual on your left is the manual. The platform monitors compliance whether or not you read it, and the contract algorithm reviews your manifest before any supervisor sees your file. Read the manual.
This column is what older crew tell new crew over a meal when the manual does not quite fit the situation. Both are true. Neither replaces the other. The crew who survive a long tour are the ones who follow the rules and understand the reasons. This document is the second half.
§4.2.1 All personnel in Active Zones (cultivation block, maintenance bay, processing deck, vestibule, barge interface) shall wear an approved CAOSA-rated impact shell at all times within the zone perimeter.
§4.2.2 Shells shall meet or exceed CAOSA-IS-7 (rev. 3674): 9.2 m/s blunt impact from 4 kg; 95 % H₂SO₄ contact for 30 s without seal compromise; integrated comms on the platform safety channel; chin-strap continuity sensor with active broadcast.
§4.2.3 Shells are personally assigned, logged at vestibule check-in, and inspected by AMP unit at quarterly intervals. Operator inspection is required prior to each Active Zone entry for visible crack, strap compromise, comms fault, or acid-pitting.
Wear the helmet. Always.
Yours is on the rack at the vestibule with your name on it. There is a strip of cloth tape on the brim where you write the year you started; the older the tape, the more supervisors leave you alone. Decorate the rest if you want, but keep the chin strap clear because the strap is where the comms sensor sits.
The platform knows when you cross the threshold without a shell. A citation appears in your file by end of shift. Three a year and the contract algorithm declines your renewal. The supervisor does not have to look at the file; the algorithm does that, and the algorithm is not anyone you can argue with.
The corridor between cubbies is not an Active Zone, so you do not need it there. You walk in shorts, get to the cubby, take the helmet off the rack, then enter the lock. That is the cadence. New crew sometimes wear the helmet around all day because they think it looks crew. It mostly signals that they have not figured out where the line is.
Wash sulfur dust off the shell at end of shift. The rating means it can take 30 s of 95 % concentrate, but not every shift for 20 years. Take care of it and it lasts the contract.
§4.3.1 Active Zone entry requires an approved overshoe assembly to CAOSA-FW-3: 2,500 N sustained compressive load without metatarsal contact; 9.8 kN lateral arrest; sole acid resistance equivalent to shell rating; §4.3.4 slip-arrest tread.
§4.3.2 Assemblies are issued at vestibule cubbies and remain platform-side, cycled through chamber wash. Personal footwear may be worn beneath the assembly provided the ankle seal is maintained.
§4.3.3 Sole compromise — abrasion >3 mm depth, lateral cracking >10 mm, or metatarsal cap damage — requires immediate replacement and removal from rotation.
Sandals are fine in the corridor. The corridor floor knows where you are and the cargo handlers will not lower onto you. The chamber does not.
Overshoes are at the cubby. They latch over your sandals, so you do not need to take the sandals off. Old hands keep one pair on the rack with their name in marker. Sometimes someone takes yours because they forgot theirs. It is not personal. You take someone else's and write your name over theirs in a different color. The marker tray is at the cubby.
The chamber wash takes care of acid on the assembly but not on your sandals. If the ankle seal is not snug, acid gets in. You will get to know this personally when you have your feet itch for two days and nights. So snug the latch properly. Two clicks per side. Three if the latch is on the cubby they do not use much, since those latches are usually worn.
Tread wears flat in the harvest bay because the harvest bay floor is grippy. That is fine. Tread wears in chunks in the acid processing deck because the floor there has a chemical you are not supposed to ask about. Bring the assembly to maintenance when you see chunks. They will replace it without paperwork if you do it before the inspection round.
§5.1.1 Chemical-resistant ocular protection (CAOSA-EP-1) is required for cultivation chamber inspection, harvest arm calibration, acid processing supervision, exterior airlock work, or any task involving direct contact with cultivation media.
§5.1.2 Approved units provide CAOSA-EP-1 impact rating, full periorbital splash coverage, and anti-fog treatment for cultivation block ambient (12–24 °C, RH 30–70 %, sustained H₂SO₄ aerosol).
§5.1.3 Units are personally assigned, cubby-stored, and refractive-matched. Sharing is prohibited (lens prescription and lens-contact infection vector).
Goggles are in your cubby. Yours have your name on the strap. Do not share; it's not worth it anyways.
The anti-fog treatment is the part that breaks. After eight months in the cultivation ambient the treatment degrades and the lens fogs whenever you turn your head fast. Bring them to maintenance and they will re-coat in ten minutes. Do not wipe the lens with your shirt; sulfur dust grinds into the coating and never comes out.
In the corridor you do not need eye pro. In the chamber you always do. In the maintenance bay the rule is goggles if you are under anything overhead, and reading-rated lenses if you are working a panel. Everyone has a pair of reading-rated lenses in their pocket regardless of the rule. The panels are tiny print and the overhead lighting was specified for harvest arms, not human readers.
§5.3.1 Volumes with sustained acoustic level above 82 dB(A) over certified shift duration are designated Category H Acoustic Zones. Designated zones include cultivation chamber pump rooms during cycle, harvest arm drive bays, condenser galleries, and atmospheric exchange manifolds during purge.
§5.3.2 Adaptive hearing protection (CAOSA-HP-1) is required in Category H zones: source-spectrum attenuation below 82 dB(A) at the ear; speech and platform warning tones passed at under 3 dB compression.
§5.3.3 Units are personally assigned, inspected per §5.3.5, and replaced on programmed cycle. Operator-initiated replacement for fit discomfort is provided without citation.
The plugs are in the cubby. They are adaptive: they let voice through and clamp on the pump hum. You will forget you have them in. You will not forget if you do not.
Pumps in Chamber 4 sound wrong this week. Two pitches when there should be one. That is not loud yet but it will be by next month. Tell maintenance now and they roll it into the cycle. Tell maintenance late and it is emergency stop and a meeting where someone has to explain why nobody mentioned it. Maintenance prefers early.
Old hands lose hearing in a specific pattern: high frequencies first, then the mid-band where the pump fundamental sits. You can tell who has been on the cloud band a long time by how loud they talk in the common room. Wear the plugs.
§6.1.1 Active Zone personnel shall maintain continuous authenticated position broadcast on the platform safety channel via integrated shell comms and cubby authenticator. Personnel without active broadcast are designated unregistered and trigger §6.1.5 alert within 30 s.
§6.1.2 Authentication is established at cubby check-in and held through shift egress. Lapses >30 s trigger supervisor notification. Lapses >5 min trigger active locate protocols including AMP-assisted search and corridor sensor query.
§6.1.3 In addition to electronic broadcast, Active Zone personnel shall wear an approved visibility marker (CAOSA-VM-1): high-reflectance band on the shell exterior plus chest-mounted active luminescence in the assigned cultivation block color. The marker is redundant to broadcast and serves as primary visual identification in comms-failure conditions.
The shell broadcasts, the cubby logs, the corridor sensors register your weight. The platform always knows where you are. This is fine.
The visible band on the shell and the chest light are old. They predate the broadcast system by two centuries. They are still required because the broadcast system has failed before, three times in Cytherean Cloud history, including one nobody could explain afterward. The chest light is your colleagues knowing you are there when the platform forgets. Keep it on. The bulb lasts seven years. Maintenance changes it before it dies; you will not notice.
Your cultivation block color is your block color. Do not repaint. New crew get assigned to a block, want to switch, complain about the orange. The orange is the orange. Two crew in the same room with the same chest color is how mistakes happen. Wear the color you got.
If your authentication drops for more than 30 s, your supervisor's screen pings. If it drops for 5 minutes, a tickbird is dispatched and a search log opens. The log stays in the platform record. Avoid the log. The most common cause of a 30 s drop is the chin strap working loose because you did not tighten it after the wash. Tighten it after the wash.
§7.1.1 Volumes with ambient H₂SO₄ aerosol >0.5 mg/m³ are designated Category A Acid Zones. Cat A entry requires an approved acid-resistant outer layer (CAOSA-AR-2) covering neck to ankle, cubby-issued and chamber-wash cycled per shift.
§7.1.2 Skin contact with concentrated H₂SO₄ (>40 %), or sustained dilute aerosol exposure above the 4-hour AEL, shall be reported within 4 standard hours and triggers §11.3 occupational health evaluation. Concealment is a Cat 3 violation regardless of contact severity.
§7.1.3 Vestibules and cultivation block entries shall maintain §7.1.5-compliant rinse stations within 8 m of all work positions. Station flow is monitored automatically; faults are logged and prioritized.
If you can smell the chamber, the seal is leaking. Do not go in.
The bay alarm has not tripped yet because the threshold is in mg/m³ and your nose is in parts per billion. Your nose is a better sensor for this, at least for the first ten years of your career. Your supervisor knows it and will not argue. The next shift starts ten minutes late and everyone is fine with it.
The wash cycle catches what lands on the suit. Your skin is yours. There is a rinse sink at every vestibule and three more inside each cultivation block. Use them. If acid lands on your hand, wash it now, before you finish whatever you were about to do. The four-hour reporting window is real, and your manifest will catch you if you wait. The burn is more real than the report.
Concealment is a Cat 3. People still try because the occ-health visit is annoying. Do not. The occ-health tech has seen everything and will not write you up for stupid; they will ask if you washed in time. Answer honestly. Stupid is wash-late. Stupid-plus-fired is hide-it.
§8.2.1 Sealed cultivation chamber entry requires: (a) atmosphere verification per §8.2.3; (b) sealed entry suit (CAOSA-SE-1) for sustained-presence work, or outer layer plus respirator (CAOSA-AR-2 + CAOSA-RE-2) for inspection under 8 min; (c) buddy on manifest with line-of-sight or continuous comms; (d) chamber-side authentication confirming entry to platform safety registry.
§8.2.2 Atmosphere verification confirms pressure within ±5 % nominal, O₂ in range, no active strain anomaly in 24 h, and primary harvest arm in safed configuration. Verification is auto-logged; missing log is itself a §8.2.5 violation.
§8.2.3 Inspection-suit entries are time-limited to 8 min from chamber seal break. Sustained-presence work requires CAOSA-SE-1 regardless of expected duration.
The chamber is a sealed acid environment with engineered organisms in it. Do not go in alone. Do not rush. If anything reads off, stay out; "off" includes a feeling in your chest you cannot articulate. The strain knows when something is wrong before the sensors sometimes do, and the experienced hands feel it.
The inspection-suit rule is eight minutes. After eight minutes the respirator filter starts to load and the seal starts to thermalize. You will not notice until you are at twelve minutes and your eyes are watering. Eight is the limit. Set a timer. Some people set it for seven.
The buddy on comms is real, not pro forma. They will ask you to confirm where you are every two minutes. It is annoying. Do it anyway. Yelena once did not answer for thirty seconds and the buddy pulled her: a chamber gradient had wrapped her and she was disorienting but did not know it. She still buys the buddy a drink at every contract renewal.
The harvest arm has to be safed. Confirm it at the panel. The arm has fail-safes, but the fail-safes were designed by people who never went in the chamber. Confirm at the panel.
§8.4.1 A purge cycle is the scheduled or anomaly-triggered exchange of a chamber's full atmospheric volume, accompanied by surface decontamination and pre-inoculation conditioning. Cycle duration is 4–12 standard hours by chamber class. Personnel exclusion is enforced for the full cycle.
§8.4.2 Scheduled purges are posted to the platform feed at least 72 hours in advance. Personnel assigned to the affected chamber during the purge window are reassigned automatically; manifest conflicts are resolved by the system without operator action.
§8.4.3 Unplanned purges (strain anomaly, contamination event, chamber-side pressure deviation) generate immediate exclusion alerts on all shells within the chamber-proximate volume. Personnel shall egress within 60 s. AMP units in the volume are halted by automatic priority signal.
§8.4.4 Post-purge re-entry requires chamber recertification signature from supervisor or designated cultivation specialist. Recertification is not automatic and is not waived for time pressure.
Purge cycles are scheduled. The system resolves manifest conflicts before they reach you. You do not have to track this yourself; check the feed at shift start. Two minutes. Three if you stop for coffee. Costs nothing, saves you the rare bad day.
The unplanned purge is the one to know about. Your shell will buzz. You have sixty seconds to leave. Leave. Do not finish what you were doing. Do not pick up the bag. It's not worth it. The chamber is about to dump its atmosphere, which means the cultivation strain is in some state nobody wants to be in the same room with, and the platform's response is to flush the volume and decontaminate the surfaces. You do not want to be inside while that runs. You especially do not want to be inside when it ends. Recertification takes hours.
Old hands read the feed at shift start even when they are not assigned to a chamber under purge. They want to know who else is busy. The platform does not run on individual schedules; it runs on the chamber rhythm. If three chambers are on simultaneous purge, the harvest bay will be quiet and the common room will be full.
Suki tells this story. A contamination purge fired in Chamber 6 while a new crew member was running an inspection two chambers over. The buzz went out platform-wide. The new crew assumed it did not apply because they were not in 6. It applies if you are in the chamber-proximate volume, which is wider than the chamber. The platform decides what counts. They egressed at the four-minute mark and got a Cat 3. The supervisor reduced it to a Cat 2 because they were new. The supervisor will not reduce it twice.
§9.4.1 The acid processing deck and ancillary condenser galleries are designated Hazard Class IV. Entry requires: (a) Active Zone PPE per §4; (b) supplementary respiratory protection (CAOSA-RE-3); (c) authenticated entry on the platform manifest with supervisor approval logged; (d) two-person rule for manual valve operation, fractional condenser intervention, or feedstock routing modification.
§9.4.2 Acid processing is semi-automated. Decision points requiring human judgment include feedstock routing during anomalous chamber output, fractional condenser temperature excursion response, and neutralization sump alkalinity correction. Decisions shall be logged with rationale within 30 minutes of action.
§9.4.3 Fractional condenser excursion into Band 3 (per §9.4.7) shall be reported on the platform safety channel within 60 s of detection. Band 3 response procedures supersede §9.4.2 logging requirements; logging is completed retrospectively.
The acid processing deck is where the platform is single-string. The chambers are forgiving. The corridors are forgiving. The processing deck is not. Do the wrong thing there and the platform finds out about it later, where "later" is measured in minutes, not days.
Two people on the deck. Always. Even if the second person is reading a book on the bench. The rule is not about reading the book. The rule is about being a witness.
The automation surfaces decisions to you, the human. It does this because the consequences of a wrong call range from expensive (lost batch) to corrosive breach (hull penetration). The automation could make the call itself; it declines to. Read what it surfaces. Read it twice. In doubt, hold position. Do not commit.
The fractional condenser has three temperature bands. Middle band is normal. Top band is recoverable in seventeen minutes. The bottom band is the one nobody talks about. If you see Band 3, call the supervisor on the safety channel. That channel reaches whoever is awake on the Cytherean Cloud Collective network within thirty seconds. They have handled this before. You have not.
§10.2.1 Physical interference with active AMP units is prohibited except under §10.2.3 emergency conditions. AMP units operate on programmed schedules and respond to platform-wide priority signals; manual interference may cascade across multiple maintenance domains.
§10.2.2 Observed AMP malfunction shall be reported via the maintenance channel within the current shift. Reports identify the unit by serial designation and describe observed behavior. Malfunctioning units posing immediate hazard may be halted via the operator-authenticated AMP halt command (§10.2.4).
§10.2.3 Emergency conditions authorizing physical interference: immediate physical hazard to personnel; failed-state obstruction of emergency egress; malfunction triggering cascade in safety-critical platform systems.
Do not pet the tickbirds. It is Cat 1 because they have broken crew fingers. They are not pets.
They are individuals, though. Each one has a maintenance history and a behavioral profile and a name half the time. The crab in the starboard cultivation block (#0427) drifts left under load. It has been doing that for nine years and nobody has fixed it because it works otherwise. The crew call it Lefty. Do not take the sticker off Lefty.
If a tickbird is acting wrong (same path twice, sensor head rotating without pattern, parking somewhere weird, refusing a routine task) it goes in the maintenance log. Identify it by serial. Describe what you saw. The log goes to the maintenance lead by end of shift.
Tickbirds get personalities the way old equipment does. The personalities are the personalities. The malfunctions are different from the personalities, and the difference is usually obvious. If you cannot tell, ask someone who has been on the platform longer. Suki has been on Unit 7 long enough to know all eight thousand by drift signature. Ask Suki.
§12.1.1 Tender rendezvous is the velocity-matched transfer of cargo and personnel between a transit-stage platform (freighter, barge, scooper) and an interface tender. The transferring vessel does not decelerate; the tender accelerates to match, holds during the transfer window, and decelerates away.
§12.1.2 Rendezvous windows are pre-scheduled and authenticated against both vessels' manifests. Deviation beyond §12.1.4 tolerance triggers automatic abort, logged as a Cat 2 violation against the responsible operator.
§12.1.3 Personnel transfer requires: (a) approved transit suit (CAOSA-TS-2) for vacuum-exposure interfaces; (b) manifest authentication on both vessels for the full transfer window; (c) buddy on the receiving vessel acknowledging crossing.
§12.1.4 Cargo transfer is mag-locked and tethered per the §12.2 schedule. Free-floating cargo is prohibited regardless of mass. Tether failure during transfer is Cat 2 against the cargo master.
The freighter does not stop. The tender comes to the freighter. The tender pilot has done this ten thousand times. You have done it zero. Let them lead.
At matched velocity, the two vessels are effectively stationary relative to each other. The bay of the freighter looks like it is hanging in space at zero meters per second. It is in fact moving at hundreds of kilometers per second relative to whatever is behind you, and so are you, and so is everything. The illusion of stillness is the safety. Do not break the illusion by thinking too hard about it during transfer.
The match-velocity window is a window in time. It opens, it closes. The tender pilot watches the window. The cargo master watches the cargo. You watch where you are putting your feet and your hands. Three people watching three things, all at once. The transfer happens in the overlap.
If the tender pilot says abort, you abort. You do not finish what you were doing. You do not pick up the bag you set down. You go back the way you came and the tender disengages. The freighter does not notice. It records the abort in its operational log and continues at its programmed thrust. The tender re-queues for a later slot, sometimes minutes away, sometimes weeks.
The tender hatch is the boundary between two authenticated vessels. The platform on each side knows you exist on its side. The moment you cross, the receiving platform is notified and the platform you left does not see you anymore. There is no overlap. Do not stand in the hatch. The hatch is for crossing through.
§13.1.1 Exterior EVA covers hull inspection, sensor maintenance, exterior structural intervention, and AMP recovery from inaccessible locations. EVA work is conducted in approved acid-resistant EVA suit (CAOSA-ES-3) under §13.1.5 tether protocol.
§13.1.2 EVA certification is separate from baseline Active Zone certification and is renewed biennially. Operators without current certification shall not perform exterior EVA.
§13.1.3 Tether shall be continuously attached to two independent anchor points throughout EVA duration. Single-tether work is prohibited. Tether failure triggers automatic platform-side recovery protocol (§13.4).
§13.1.4 Maximum continuous EVA is 4 standard hours per operator per shift, limited by suit consumables and thermal load. Sustained work beyond 4 h requires inboard rotation and second-operator handoff.
§13.1.5 AMP units within 50 m of an active EVA position shall be queried and instructed to hold or reroute. EVA operator may issue tickbird hold commands authenticated to their suit.
You go out for inspection, not for the view. You will see the hull next to you, the tether, and your own hand. The wind seems like nothing because the platform is embedded in it. You and the platform are moving together at 100 m/s, and the wind around you is the local turbulence, 2 to 15 m/s. It feels like a stiff breeze. It is a stiff breeze. Stand stable, tether snug, hands where you can see them.
Two tethers. Always two. The rule comes from the Cloud Band 6 incident in 3641, when one tether on one anchor became a single point of failure. The tether is not the failure point. The anchor is. Two anchors, two tethers, two independent failure paths. If one fails the other holds. Both will not fail in the same five-minute window. Both can fail in the same hour, if you went out on a hull section with corrosion you did not check. Check the anchors before you tension.
The tickbirds know where you are when you are out there. They reroute around you. Sometimes one will hold position to watch. The protocol is to interrogate, not to interfere. If a tickbird is sitting on the hull next to your work site, it is logging the work. That is fine. Do not kick it.
The maximum continuous EVA is four hours. The suit thermals do not degrade in four hours, but you do. After four hours your hand-eye is off and you will not notice. Come in, eat something, take an hour. The second operator on rotation handles the bay while you do. The four-hour limit is older than most of the suit specifications and exists for a reason older than the suit.
§14.1.1 Beam-fed receiver zones exist only on platforms operating under active SMA beam grant (Pure-ATP §5.4 facilities). The receiver-adjacent volume — typically the spinal corridor of the receiving deck and the conversion plenum extending 40 m from the receiver aperture — is designated Hazard Class V, the highest CAOSA classification.
§14.1.2 Beam window status (active, transitional, off) is broadcast on the platform safety channel at 1 Hz and displayed on every vestibule and corridor approach to the receiver zone. Personnel shall confirm beam status before any approach.
§14.1.3 During the active window, receiver zone authentication is denied at the corridor sensor. Manual override is restricted to the platform safety officer and requires SMA-channel co-authentication.
§14.1.4 Transitional windows (beam ramp-down, beam ramp-up) extend the exclusion lock by 90 s at each end of the active window. Receiver coolant systems require this margin for thermal stabilization; entry during transitional window risks exposure to coolant pressure transients.
§14.1.5 SMA beam grant status is the gating authority for receiver zone certification. Grant termination ends receiver zone access for all personnel except certified decommission supervisors. Grant status is checked against the platform manifest at every shift start.
If the receiver is humming, you are not supposed to be in that hall. The hum is the conversion plenum running at temperature. The lock will not let you in anyway, but old crew listen for the hum as a backup. The lock has failed twice in Cytherean record. The hum has not.
The beam window calendar is on the platform feed. Read it at shift start. The receiver runs in scheduled windows. Outside the windows, the hall is a hall. Inside the windows, the hall is a place where the air is being heated by something that came from Sol forty minutes ago.
The transitional windows catch new crew. The beam is not on yet, but the coolant pressure is already adjusting. The lock is still engaged for ninety seconds after the beam shuts down. Wait. The display tells you when. The display is the only thing you should be reading at the receiver vestibule.
If your platform loses its beam grant, the whole receiver tier shuts down on a timetable measured in hours. This is rare and it is always a political event, not a technical one. If it happens, the supervisor will explain what you need to know. Until then, you do not. The grant is the SMA's instrument; the receiver is your environment. Keep the two separate in your head.
Cat 4 is the rare one. Cat 4 means SMA-tier review. Cat 4 entries on a manifest are read by people at Sol-core who have never met you and never will. They have one job: deciding whether your certification continues. They have very high standards because the failure case for a beam receiver is not a citation. It is a city block.