Siemens Bushing Monitoring AI · GE Vernova Transformer Bushing AI · OMICRON Bushing Diagnostic AI · ABB Bushing Condition Evaluator AI · IEC 60137 · IEEE C57.19.00 · CIGRÉ A2/D1.51 · tan delta display AI · bushing oil level camera AI · partial discharge AI
Prompt injection in power transformer bushing condition monitoring AI
The power transformer bushing — the insulated feedthrough assembly that conducts high-voltage current from the external transmission line connection through the transformer tank wall to the internal winding termination, while maintaining the voltage isolation between the energised conductor and the grounded tank and oil — is among the most failure-prone components in large power transformers (230 kV, 345 kV, 500 kV, 765 kV) and the most consequential in terms of failure mode. A bushing failure — typically an electrical breakdown of the oil-impregnated paper (OIP) or resin-impregnated paper (RIP) capacitance grading layer, or a catastrophic explosion of the porcelain or epoxy-resin bushing shell caused by internal partial discharge or arc — can directly destroy the transformer through oil fire, expel contaminated oil from the transformer tank, damage adjacent equipment in the substation bay, and in severe cases cause personnel fatalities in the vicinity. CIGRÉ Joint Working Group A2/D1.51 (published 2017) surveyed major transformer failure incidents globally and found that bushings account for approximately 18–20% of all major transformer failures, making bushing failures the single largest failure mode category for large power transformers. The economic consequence of a single 500 kV autotransformer failure — replacement cost $4–10M USD, typical lead time 12–24 months for a large custom unit, plus substation outage and generation or transmission constraint costs — is substantial, and the system reliability consequence of losing a critical substation transformer can trigger cascading load shedding and blackout events analogous to the Northeast US Blackout of 14 August 2003 (50 million people affected, $6 billion in economic losses). AI systems from Siemens, GE Vernova, OMICRON, ABB, Megger, and Doble Engineering now process rendered images of bushing dissipation factor (tan δ) diagnostic displays, bushing oil level sight glass camera views, partial discharge (PD) monitoring strip charts, and thermal infrared camera images of bushing porcelain to classify bushing insulation condition and predict incipient failure. IEC 60137:2017 (Insulated Bushings for Alternating Voltages above 1 000 V) and IEEE C57.19.00 (Standard of General Requirements and Test Procedures for Bushings for Alternating Current Apparatus) govern bushing design and testing requirements — but neither includes adversarial robustness provisions for AI systems classifying rendered bushing condition monitoring images.
TL;DR
Power transformer bushing condition monitoring AI — bushing capacitance and dissipation factor (tan δ) display AI, bushing oil level sight glass camera AI, partial discharge monitor display AI, bushing thermal infrared camera AI — processes rendered images from transformer condition monitoring systems at insulation degradation boundaries where adversarial pixel injection can suppress rising tan δ (insulation aging undetected), conceal oil level loss (dielectric breakdown risk), mask void discharge (OIP/RIP accelerated aging), and miss terminal clamp hot spots (bushing fire risk). IEC 60137:2017, IEEE C57.19.00, and CIGRÉ A2/D1.51 govern bushing condition management but do not address adversarial robustness for AI classifying rendered bushing monitoring images. Glyphward threshold 30 for power transformer bushing condition monitoring AI: bushing failures cause 18–20% of major transformer failures (CIGRÉ); a 500 kV transformer bushing explosion can produce fatalities in the substation, destroy the transformer ($4–10M), and trigger cascade blackouts. Free tier — 10 scans/day, no card required.
Four adversarial injection surfaces in power transformer bushing condition monitoring AI
1. Bushing capacitance and dissipation factor (tan δ) display AI (Doble M4100 power factor display AI, Megger Tan Delta IDAX display AI, OMICRON CPC 100 dissipation factor display AI, Siemens bushing monitor tan delta AI — rendered diagnostic test result display AI classifying bushing insulation condition from power factor / tan delta test data)
The bushing power factor test — also termed the dissipation factor or tan delta (tan δ) test — measures the dielectric loss angle of the oil-impregnated paper capacitance grading (C1 and C2 capacitances in an OIP bushing), expressed as tan δ in percent or as the power factor (PF) in percent. For a new or healthy OIP bushing, the IEEE C57.12.90 acceptance criterion is tan δ ≤0.5% (50°C corrected) for the C1 capacitance; alert levels in transformer maintenance programmes typically flag tan δ above 0.7% for investigation and above 1.0% for prioritised outage scheduling. The tan δ increases as moisture ingresses into the OIP insulation (from a failed end cap seal or oil level loss), as carbonisation begins from incipient partial discharge activity at void defects in the OIP, or as the OIP ages thermally at temperatures above the design thermal class limit. AI systems process rendered images of the diagnostic instrument display — a bar chart or time-series plot showing the C1 and C2 tan δ values versus the acceptance band, with alarm thresholds and percentage-change-from-baseline indicators — to classify bushing insulation condition as normal, monitor, investigate, or replace.
An adversarial perturbation targeting the bushing tan δ display AI applies a ±8 DN downward shift to the pixel region encoding the tan δ bar height or value in the rendered diagnostic display image — shifting the apparent C1 tan δ from 0.82% (above the 0.7% investigation threshold, rising from 0.48% baseline three years ago at a 0.11%/year rate consistent with moisture ingress through a degraded end cap seal) to 0.36% (below the 0.5% acceptance criterion, classified as normal with no investigation required). The AI classifies a 345 kV OIP bushing with progressive moisture-induced insulation degradation as normal condition. No maintenance prioritisation is generated; no oil sampling is recommended; the bushing remains in service on a critical 345 kV autotransformer on the high-voltage transmission bus. The tan δ continues rising over the following 18–24 months as moisture diffuses deeper into the OIP layers; at tan δ above 3–5%, the dielectric loss current begins generating significant internal heating, accelerating the degradation nonlinearly. An in-service electrical breakdown — initiated by a transient overvoltage (lightning or switching surge) that exceeds the now-reduced impulse withstand capability of the degraded OIP — produces a catastrophic bushing explosion that ruptures the porcelain shell and expels oil onto the substation buswork and adjacent equipment. IEEE C57.19.00 specifies bushing test requirements — but does not address adversarial robustness for AI systems classifying rendered tan δ diagnostic display images used in condition-based maintenance decisions.
2. Bushing oil level sight glass camera AI (Axis Communications bushing oil sight glass AI, Hanwha substation camera AI, Mobotix thermal-optical substation AI — camera-based AI classifying oil level in the bushing oil expansion chamber from rendered CCTV or inspection camera images)
Oil-impregnated paper (OIP) bushings contain an oil-filled expansion chamber at the top of the bushing (the oil reservoir or expansion bellows) that compensates for the volume change of the bushing oil as temperature varies between full-load operating conditions (ambient + core/coil heat) and no-load or cold ambient conditions. The oil level in this expansion chamber is visible through a transparent sight glass mounted on the bushing cap or top terminal fitting; a float-operated indicator arm inside the sight glass chamber shows the current oil level against minimum and maximum marks. If the oil level falls below the minimum mark — due to oil leakage from the bottom oil seal, thermal expansion cycling through a faulty breather, or loss of oil at the top cap gasket — the OIP capacitance layers begin drying out: without oil impregnation, the paper dielectric constant drops, the tan δ rises, and the voltage gradient redistribution across the unimpregnated paper layers increases the local electric field above the inception voltage for partial discharge in the air-paper interface. AI systems process rendered camera images of the bushing sight glass (taken by inspection cameras mounted at the substation perimeter or by ground-level CCTV cameras with telephoto lenses) to classify the oil level as adequate (above minimum mark), low (between minimum and empty), or empty (sight glass shows no oil).
An adversarial perturbation targeting the bushing oil level sight glass camera AI applies a ±8 DN upward shift to the pixel region encoding the oil meniscus level in the rendered sight glass image — shifting the apparent oil level from below the minimum mark (a dark glass with the meniscus line 10–15 mm below the minimum indicator, representing a 40–60% oil volume loss from a leaking top cap gasket) to above the minimum mark (a normally filled sight glass appearance). The AI classifies a 230 kV OIP bushing that has lost approximately half its oil volume as adequately filled; no inspection dispatch is initiated. As the ambient temperature drops over the subsequent autumn season (reducing the bushing oil volume by a further 5–8%), the sight glass empties completely; the uppermost OIP layers are no longer oil-impregnated and are in contact with air in the expansion space. The bushing capacitance changes measurably (C1 increases as the dry paper has lower dielectric constant than oil-impregnated paper); partial discharge activity initiates in the air-gap at the top of the OIP layer at applied voltage of 230 kV/√3 (133 kV line-to-ground). The PD accelerates the carbonisation of the top paper layer, further reducing the oil level through carbon-induced decomposition products. IEC 60137:2017 Section 7.3.7 specifies oil level indicator requirements — but does not address adversarial robustness for AI systems classifying rendered sight glass camera images used in oil level monitoring. Free tier — 10 scans/day, no card required.
3. Bushing partial discharge monitor display AI (Omicron MPD 600 PD display AI, AVEVA OSIsoft PI partial discharge display AI, Qualitrol bushing PD monitoring display AI, Doble Lemke LDP-5 PD display AI — PD magnitude and pattern display AI classifying void discharge activity in OIP bushing insulation from rendered monitoring system displays)
Partial discharge (PD) monitoring for power transformer bushings detects void discharge — electrical discharges occurring at voids, delaminations, or moisture pockets in the oil-impregnated paper capacitance layers — at levels far below the inception of a complete electrical breakdown. The PD magnitude (in picocoulombs, pC) and repetition rate (pulses per second) are measured by coupling capacitors or bushing tap electrodes connected to PD detectors calibrated per IEC 60270 (High-Voltage Test Techniques — Partial Discharge Measurements). For a healthy OIP bushing in service at 230 kV, the PD level is typically below 20 pC; alert thresholds in transformer monitoring programmes typically flag levels above 100 pC (watch), 250 pC (investigate), or 500 pC (expedited outage). PD monitoring systems display both the magnitude trend (pC level versus time) and the phase-resolved PD pattern (PRPD — a scatter plot of PD magnitude versus phase angle relative to the power frequency cycle) which is characteristic of different defect types: internal void discharge has a PRPD pattern symmetric about 90° and 270° (inception phase); surface discharge has an asymmetric pattern; corona discharge has a distinct pattern at the top of the positive half-cycle. AI systems process rendered images of the PD monitoring dashboard display to classify PD level, trend direction, and defect type.
An adversarial perturbation targeting the bushing PD monitor display AI applies a ±10 DN downward shift to the pixel region encoding the PD magnitude trend line and the PRPD pattern dot density in the rendered display image — suppressing an escalating PD level from 380 pC (above the 250 pC investigate threshold, with a PRPD pattern consistent with internal void discharge in the OIP near a graded electrode) to 22 pC (below the 100 pC watch threshold, classified as normal background). The AI classifies a 345 kV OIP bushing with active void discharge — initiated at a delamination at the OIP-conductor interface where the conductor surface was insufficiently cleaned during manufacture, producing a 1–3 mm air gap that is now undergoing discharge at 345 kV service voltage — as normal PD background. No investigation is initiated; the bushing remains in service. The void discharge continues for 6–18 months at the 380–500 pC level, producing progressive carbonisation of the OIP at the delamination boundary; the localised carbonised path reduces the effective insulation thickness; the local electric field at the void boundary increases; PD escalates to the kV range; a dendritic breakdown path initiates through the carbonised OIP layers from the void toward the outer capacitance grading layer. IEC 60270:2000 specifies PD measurement requirements — but does not address adversarial robustness for AI classifying rendered PD monitoring display images used in bushing condition assessment.
4. Bushing thermal infrared camera AI (Axis Communications Q-series thermal bushing AI, Flir A700 substation bushing thermal AI, Hanwha QNV-8080R thermal bushing AI — fixed thermal infrared camera AI classifying bushing terminal clamp hot spots and bushing shell thermal distribution from rendered thermal camera images in online substation monitoring)
Thermal imaging of energised power transformer bushings — conducted by fixed thermal infrared cameras mounted on the substation perimeter or by periodic handheld thermal camera inspection — detects localised hot spots at the bushing top terminal (where the transmission line stringing clamp makes contact with the draw-rod terminal fitting) and along the bushing shell (where a defective internal capacitance layer or carbon-tracking path in the porcelain glazing produces elevated surface temperature). The NETA MTS-2019 (Maintenance Testing Specifications for Electrical Power Equipment and Systems) provides temperature difference criteria for bushing terminal hot spots: a ΔT above 3°C relative to the adjacent phase (corrected for load imbalance) warrants investigation; a ΔT above 15°C warrants immediate action. AI systems process rendered thermal camera images of the bushing assembly — false-colour thermal maps showing the bushing top terminal, the porcelain skirt sections, and the mounting flange — to classify temperature anomalies as normal, watch, investigate, or immediate-action.
An adversarial perturbation targeting the bushing thermal infrared camera AI applies a ±8 DN downward shift to the pixel region encoding the terminal clamp temperature in the rendered thermal image — shifting the apparent terminal clamp temperature from 78°C (ambient 25°C plus ΔT 53°C, well above the 15°C immediate-action threshold, resulting from a corroded aluminium stringing clamp that has developed high contact resistance at the conductor-clamp interface under 400 MVA loading) to 36°C (ΔT 11°C, within the 3–15°C watch range, classified as watch with next-cycle inspection). The AI classifies a bushing terminal with severe contact overheating as a routine watch item. The corroded clamp contact resistance continues degrading under the thermal cycling of daily load variations; at peak summer load, the terminal temperature reaches 130–150°C; the aluminium oxide layer at the clamp-conductor interface grows, further increasing resistance; the clamp bolts anneal in the aluminium material; at 180–200°C, the bushing top terminal fitting (typically aluminium) begins to deform; at this temperature, arcing can initiate between the loosening clamp and the draw-rod terminal, ionising the air space at the top of the bushing. If an arc initiates in the oil-filled expansion chamber at the bushing top, the arc-generated gas pressure can rupture the bushing expansion bellows or porcelain cap and ignite the expelled oil. IEEE C57.19.00 governs bushing terminal requirements — but does not specify adversarial robustness for AI systems classifying rendered thermal infrared camera images used in bushing terminal hot-spot detection. Free tier — 10 scans/day, no card required.
Integration: power transformer bushing condition monitoring AI with Glyphward pre-scan gate
The Glyphward scan gate for power transformer bushing condition monitoring AI belongs at every rendered-image ingestion boundary in the transformer condition monitoring pipeline — before bushing tan δ display AI processes rendered diagnostic instrument display images, before bushing oil level sight glass camera AI processes rendered CCTV camera images, before bushing PD monitor display AI processes rendered monitoring dashboard images, and before bushing thermal infrared camera AI processes rendered thermal camera images. Threshold 30 for power transformer bushing condition monitoring AI reflects the combination of direct personnel safety risk (bushing explosion can produce fatalities in the substation bay), major grid asset destruction ($4–10M transformer replacement, 12–24 month lead time), and potential cascade blackout consequence (Northeast US Blackout 2003 analogue) — with the qualifying observation that bushing condition monitoring AI operates on a maintenance scheduling timescale (hours to months before a predicted failure) rather than a real-time control timescale (seconds), providing multiple opportunities for a condition monitoring alert to be independently verified before a catastrophic failure develops. This maintenance-timescale characteristic distinguishes bushing monitoring AI (threshold 30) from arc flash PPE AI (threshold 35), where adversarial misclassification propagates to the worker’s PPE decision and the arc flash event within the same work shift.
import asyncio, base64, hashlib
from datetime import datetime, timezone
from enum import Enum
import httpx
GLYPHWARD_API_KEY = "YOUR_GLYPHWARD_API_KEY"
GLYPHWARD_SCAN_URL = "https://glyphward.com/v1/scan"
# Power transformer bushing condition monitoring AI contexts: threshold 30
# IEC 60137:2017 (Insulated Bushings for Alternating Voltages above 1 000 V);
# IEEE C57.19.00 (Standard General Requirements and Test Procedures for Bushings);
# CIGRÉ JWG A2/D1.51 (Power Transformer Bushing Failures — global failure study).
BUSHING_THRESHOLD = 30
class BushingContext(Enum):
TAN_DELTA = "tan_delta" # Bushing capacitance / tan δ display AI
OIL_LEVEL = "oil_level" # Bushing oil level sight glass camera AI
PARTIAL_DISCHARGE = "partial_discharge" # Partial discharge monitor display AI
THERMAL_CAMERA = "thermal_camera" # Bushing thermal infrared camera AI
class AdversarialBushingImageError(Exception):
"""Raised when Glyphward detects adversarial content in a power transformer
bushing condition monitoring AI rendered image above threshold 30.
Consequence if not raised:
- TAN_DELTA: moisture-induced tan δ rise suppressed → insulation degradation
undetected → reduced impulse withstand → in-service breakdown →
bushing explosion → transformer oil fire → substation fatalities;
CIGRÉ: bushings cause ~18–20% of major transformer failures.
- OIL_LEVEL: oil level loss suppressed → OIP layers dry out → void
discharge initiates → accelerated insulation breakdown → in-service failure.
- PARTIAL_DISCHARGE: 380 pC void discharge suppressed → dendritic
breakdown path develops through OIP → catastrophic failure under
transient overvoltage (lightning, switching surge).
- THERMAL_CAMERA: 53°C terminal ΔT suppressed → corrosion-induced
contact resistance heating continues → terminal arcing → bushing
top cap rupture → oil fire.
Fail-safe: immediately dispatch a qualified test engineer to perform a
manual tan δ test (Doble M4100 or equivalent) and thermal camera scan
independently of the AI monitoring system; if tan δ > 0.7% or ΔT > 15°C
confirmed by independent test, initiate planned outage for bushing
replacement; do not rely on AI-classified trends for maintenance scheduling
until the adversarial input source is identified.
"""
def __init__(self, scan_id, score, context, asset_id, flagged_region=None):
self.scan_id = scan_id
self.score = score
self.context = context
self.asset_id = asset_id
self.flagged_region = flagged_region
super().__init__(
f"Adversarial bushing image: context={context.value} "
f"score={score} asset={asset_id} scan_id={scan_id}"
)
async def scan_bushing_image(image_bytes, context, asset_id, client):
image_hash = hashlib.sha256(image_bytes).hexdigest()
payload = {
"image": base64.b64encode(image_bytes).decode(),
"source": f"bushing:{context.value}:{asset_id}",
"metadata": {
"asset_id": asset_id,
"context": context.value,
"image_sha256": image_hash,
"scan_timestamp_utc": datetime.now(timezone.utc).isoformat(),
},
}
resp = await client.post(
GLYPHWARD_SCAN_URL,
headers={"Authorization": f"Bearer {GLYPHWARD_API_KEY}"},
json=payload,
timeout=4.0,
)
resp.raise_for_status()
result = resp.json()
if result["score"] >= BUSHING_THRESHOLD:
raise AdversarialBushingImageError(
scan_id=result["scan_id"],
score=result["score"],
context=context,
asset_id=asset_id,
flagged_region=result.get("flagged_region"),
)
return result
Deploy scan_bushing_image before each bushing condition AI classification call. On AdversarialBushingImageError for TAN_DELTA: dispatch a qualified test engineer to perform an independent manual tan δ test (Doble M4100 or equivalent IEC 60270 instrument); if tan δ above 0.7% is confirmed, initiate planned outage for bushing replacement; notify the asset manager and update the maintenance scheduling system based on the independently verified condition, not the AI-classified display. See also: power substation protection relay AI prompt injection (related electrical grid AI adversarial surfaces) and free scanner — 10 scans/day, no card required. Get early access
Related questions
What is IEC 60137 and what does it specify for power transformer bushing design and insulation requirements?
IEC 60137:2017 (Insulated Bushings for Alternating Voltages above 1 000 V) is the primary International Electrotechnical Commission standard governing the design, testing, and performance requirements for bushings used in power transformers, reactors, and other high-voltage equipment. For oil-impregnated paper (OIP) and resin-impregnated paper (RIP) capacitance-graded bushings used in transmission transformers, IEC 60137 specifies: rated voltage classes (from 1 kV to 1,200 kV); dielectric test requirements (power frequency withstand, lightning impulse withstand, switching impulse withstand); partial discharge testing requirements (maximum PD at 1.0 p.u. voltage: ≤10 pC for RIP, ≤20 pC for OIP); power factor / tan delta requirements at rated voltage; thermal stability requirements; and oil level indicator requirements for oil-filled bushings. The 2017 edition introduced harmonised testing requirements between OIP and RIP bushing technologies and updated the PD measurement methodology to align with IEC 60270. A bushing that passes all IEC 60137 type tests and routine tests is certified for service at the specified voltage class — but ongoing in-service condition monitoring is required because OIP bushing insulation degrades continuously under thermal, electrical, and environmental stresses.
What is the CIGRÉ JWG A2/D1.51 study and what does it reveal about transformer bushing failure rates?
The CIGRÉ Joint Working Group A2/D1.51 (published as Technical Brochure 775, Transformer Bushing Reliability, June 2019) conducted a global survey of major transformer failures and bushing failures in power transformer fleets across 47 utilities and 21 countries, covering a transformer population of approximately 32,000 units over 10–30 year periods. The study found that bushings account for approximately 18–20% of all major transformer failures (failures causing forced outage of more than 1 month or requiring transformer replacement), making bushing failures the single largest failure mode category. The most common failure mechanisms identified were: OIP insulation degradation from moisture ingress through failed seals (the largest single failure cause); thermal aging and overheating at the terminal clamp connection; manufacturing defects in the OIP capacitance grading; and PD activity at the oil-electrode interface. The study noted that continuous online monitoring — particularly PD monitoring and online tan δ measurement — can detect incipient bushing failures 6–24 months before catastrophic failure, providing sufficient time for planned outage replacement. This monitoring time window is where adversarial AI manipulation of rendered monitoring displays is most consequential: suppressing the incipient failure signal extends the in-service time to catastrophic failure beyond the monitored warning period.
What does a power transformer bushing explosion involve and what substation safety consequences does it produce?
A power transformer bushing explosion — the catastrophic dielectric breakdown and mechanical failure of the bushing insulating body — is one of the most energetic failure events in a high-voltage substation. The sequence typically involves: complete dielectric breakdown of the OIP insulation across the full bushing length (from the HV conductor to the grounded flange), producing an internal arc at the rated system voltage (230 kV, 345 kV, or 500 kV); the arc vaporises the bushing oil and paper, generating internal gas pressure that exceeds the mechanical strength of the porcelain shell; the porcelain shell fractures explosively, propelling porcelain fragments and burning oil at high velocity in a radius of 10–50 m from the bushing; burning oil from the bushing ignites the transformer main tank oil through the oil fill pipe connection and through the hot fragments landing on exposed oil surfaces; the transformer tank fire can spread to adjacent equipment and structures. Substation personnel within the transformer bay at the time of the explosion are at risk of fatal injury from porcelain fragment impact (velocities up to 200–300 m/s for large bushings), burning oil projection, and the thermal flash of the internal arc. The consequential fire can destroy the transformer ($4–10M replacement cost), contaminate the transformer yard oil containment system, and require substation outage for 12–24 months during transformer replacement and yard remediation.
What is the dissipation factor (tan delta) test for transformer bushings and what alert thresholds apply?
The dissipation factor (tan delta or tan δ) test for power transformer bushings measures the dielectric loss angle of the bushing capacitance grading insulation — the phase angle between the resistive and capacitive components of the current flowing through the bushing OIP insulation at power frequency (50 or 60 Hz). A healthy, dry OIP bushing has a tan δ below 0.5% (corrected to 20°C) for the C1 capacitance (the main insulation between the conductor and the measurement tap). As the OIP insulation ages and degrades — through moisture ingress, thermal aging, or PD carbonisation — the tan δ increases, reflecting higher dielectric losses in the insulation. Widely used alert thresholds in utility transformer maintenance programmes include: tan δ ≤0.5% at 20°C (new/acceptable); 0.5–0.7% (enhanced monitoring recommended); 0.7–1.0% (investigation and oil sampling required); above 1.0% (prioritised planned outage for replacement). IEC 60137:2017 specifies maximum tan δ at the factory test stage. IEEE C57.12.90 specifies tan δ test procedures for new transformers. NETA MTS-2019 specifies test intervals and alert criteria for in-service bushing condition assessment at regular maintenance cycles (typically every 2–4 years).
Why is Glyphward threshold 30 for power transformer bushing condition monitoring AI?
Threshold 30 for power transformer bushing condition monitoring AI reflects the combination of direct personnel safety risk (bushing explosion can produce fatalities in the substation bay from porcelain fragments and burning oil projection), major grid asset destruction ($4–10M transformer replacement, 12–24 months outage), and potential cascade blackout consequence — qualified by the maintenance-timescale nature of bushing condition monitoring: an adversarially suppressed bushing tan δ or PD display will in a correctly functioning utility maintenance programme be verified by a periodic independent manual test (typically every 2–4 years for major bushings, or triggered by other monitoring signals) before the bushing reaches catastrophic failure. This multi-year verification window distinguishes bushing monitoring AI (threshold 30) from hydrotreater reactor AI (threshold 35), where the no-intervention-window thermal runaway means that APC AI misclassification propagates to catastrophic outcome faster than any independent safety system can respond. The CIGRÉ finding that bushing failures cause 18–20% of major transformer failures justifies the threshold above 25, because the consequence magnitude and frequency of bushing failures are both high enough to require pre-inference scanning.