Zero-Export Fail-Safe Behaviour: Evidence to Request

Specify what happens when control information disappears

A zero-export setting describes an operating objective. Fail-safe behaviour describes what the installation does when the information or equipment needed to maintain that objective becomes unavailable. For a commercial operator, the purchasing question is therefore specific: which failures are detected, what response follows, how quickly the response occurs, and what must happen before normal generation resumes?

Begin with the actual connection conditions and an agreed measurement boundary. Establish whether the requirement concerns the combined three-phase power, each phase separately, a stated averaging period, or another defined quantity. Do not infer these details from a product label. A proposal cannot demonstrate compliance with an unspecified requirement, and a successful demonstration under steady load does not establish the behaviour during a meter fault, controller restart or sudden loss of site demand.

Trace the complete measurement and control chain

Ask each bidder for a diagram identifying the measurement point, meter or current transformers, communications links, controller, controlled inverters and any independent protective equipment. Include other generators and storage that can affect the same connection. If an existing inverter is outside the controller's authority, its output must still be accounted for in the design rather than omitted from the diagram.

The Fronius Smart Meter TS instructions provide a concrete example of this chain: the meter measures energy flow and communicates with the inverter or Datamanager through Modbus RTU/RS485. The manual distinguishes the primary meter's control role from secondary metering. That illustrates why a working dashboard does not, by itself, prove the correct meter controls the complete plant. It is an equipment example, not a specification for every commercial installation. Fronius Smart Meter TS instructions.

Distinguish documented fallback modes

Possible design responses include reducing output to a defined fallback level, stopping the affected inverters, or operating a separate disconnection arrangement. These approaches need different evidence. A fallback generation limit is not automatically a connection-point export limit when site consumption changes. Likewise, stopping one inverter is insufficient if another uncontrolled source can continue exporting.

Fronius documents a particular Solar Net fail-safe arrangement for Symo Advanced systems. With the specified configuration, loss of the Datamanager or interruption of the Solar Net connection causes devices to switch off with status 710. The instructions require Permanent fail-safe mode, Disconnect behaviour and a specified position for the inverter containing the data manager. This is valuable because it connects a claimed outcome to configuration conditions; it does not establish that every Fronius product or mixed-inverter system behaves identically. Fronius Symo Advanced operating instructions.

Compare offers against the same failure matrix

Put the following comparison into the enquiry, then require bidders to replace general assurances with product-specific answers. A response marked unknown is an open design item, not evidence of failure, but it should remain visible before selection.

Compare the evidence behind each answer as well as the answer itself. Manufacturer documentation, configuration records and witnessed test traces serve different purposes and should not be treated as interchangeable.

Commission faults and transitions under an approved method

The commissioning specialist should prepare a controlled test plan with the operator and any relevant connection authority. The plan needs initial operating conditions, the permitted intervention, expected response, measurement arrangements and acceptance criteria. Fault simulation must follow a safe approved method; facilities staff should not disconnect live metering circuits or improvise current-transformer tests to see what happens.

Measure at the agreed connection boundary with sufficient time resolution to assess the specified response. A cloud portal's averaged graph may be useful for routine monitoring while being unsuitable for judging a brief export excursion. Record what actually happened, including the initial generation and demand, event timing, measured power, inverter states and recovery sequence. A statement that the system passed should point to those records. If a failure mode cannot safely be demonstrated, identify the alternative evidence and the remaining limitation.

A hypothetical load-loss comparison

Consider a hypothetical workshop using 60 kW while its PV system produces 50 kW. The connection imports 10 kW under this simplified balance. A process then stops and demand falls to 15 kW. Before generation adjusts, the arithmetic permits 35 kW to flow towards the grid. These figures illustrate the control challenge; they are not an allowable excursion, a response-time specification or a prediction for a particular product.

Supplier A demonstrates normal load tracking but offers no evidence for meter loss. Supplier B provides a documented communications-loss response but has not addressed the existing battery inverter. Neither submission is complete against a whole-site requirement. The procurement owner should request the missing evidence rather than select the more reassuring description. An intentional import margin may form part of an engineered strategy, but its value and limitations must be justified against measurement uncertainty, changing loads and the actual connection conditions.

Make recovery and subsequent changes part of acceptance

A system that stops appropriately can still restart inappropriately. Require a description of the conditions for recovery: valid meter information, controller availability, communications health, required delays and any manual authorisation. Ask what happens when components power up in different sequences. The commissioning report should establish the tested recovery path rather than assume that restoration of one network cable makes the entire plant ready.

Assign ownership of the configuration after handover. Inverter replacement, firmware updates, meter changes, network alterations and added storage can affect the accepted arrangement. The operator needs a change record and a decision on whether documentation review or repeat testing is necessary. Also agree how alarms reach the responsible person and how a prolonged fallback state is identified. Silent curtailment may protect the connection objective while leaving an avoidable production loss unnoticed.

Keep control evidence separate from financial assumptions

The existing guide to modelling export and curtailment risk addresses how constrained generation affects a commercial case. This article supplies a different input: evidence about the control system's operating states. Any assumption about production lost during fallback should be identifiable in the financial model, with a reason for the assumed frequency and duration.

Before contract award, obtain the control diagram, failure matrix, applicable manufacturer documents, commissioning plan and proposed handover records. State which party resolves each remaining issue and whether it prevents acceptance. Use Solar Panels Cyprus to submit that technical scope for comparison by relevant contractors. The service introduces commercial enquiries to suppliers; the selected specialist must assess the installation and demonstrate the agreed behaviour. A clear brief makes the resulting proposals meaningfully comparable.

Frequently asked questions

Does zero export mean no momentary export can ever occur?

The label alone does not define transient performance. The connection requirement and tested control response must establish the relevant boundary, timescale and acceptance criteria.

Is losing the internet the same as losing export control?

Not necessarily. A local controller may operate independently of cloud monitoring. Ask the supplier to identify the actual dependencies and demonstrate the relevant failure responses.

Can a battery guarantee zero export during a fault?

Its presence is insufficient. The design must account for charge-power limits, available capacity, operating state, control availability and any other sources behind the connection.

What evidence should remain after commissioning?

Retain the accepted diagram, equipment and firmware identifiers, settings, failure-test records, connection-point measurements, recovery results and unresolved limitations.

Discuss the complete export-control scope with a qualified solar specialist.