Task IV · i5.4.2 · Strength Summary & Operating Restrictions · Appendix A
The flagship instruments of ๐SIP: the placard set — your boundaries written as certified operating limits instead of negotiable preferences — and the two forms that make the placards survivable for a person who fully intends, sometimes, to exceed them.
The most common misreading of an operating limit is that it marks the edge of the possible. It does not. Limit load is the maximum expected in service — below it, the structure springs back with no permanent deformation. Ultimate load is conventionally 1.5× limit — below it, the structure does not rupture. That factor is not timidity. It exists because the structure is expected to be overloaded, and it is designed so that overload costs something short of destruction.
Which means there are three zones, not two — and if you have spent your life choosing between "forbidden" and "free," the middle zone is the one you have been missing:
| Zone | Structurally | In a life | What you owe |
|---|---|---|---|
| Within limit | Elastic. Returns to shape. Unlimited cycles. | Sustainable operation | Nothing. Log it. |
| Limit → ultimate | Permanent set. It holds, but does not fully return. Life is consumed. | Deliberate overreach — the sprint, the launch, the season that costs you | Written authorization before. Mandatory inspection after. (Form A-1) |
| Beyond ultimate | Rupture. | Breakdown | Not authorizable. No form covers this. |
The middle zone is available, and it is billed. Every excursion spends margin, margin is finite, and the only real failure is spending it without recording the transaction. Integrity, by this page's standard, is not staying inside the envelope. Integrity is the paperwork matching the flight.
One card per limit. Each states the limit, what it traces to, and what exceeding it costs. Every placard ships with a status: PROVISIONAL — stated by you, honest about being underived — or CERTIFIED — traced through the derivation chain (i5.2.1 allowables → i5.2.4 stress concentrations → i5.4.2 limits). A person operating under provisional placards is still far better protected than a person with none, and the upgrade path is itself the product.
Aviation has a formal instrument for "this aircraft does not currently meet requirements and we need to fly it anyway" — the special flight permit: a specific flight, a stated purpose, stated limitations. Not a denial, not a loophole. Permission, written down, with conditions attached — because a blanket prohibition would simply be ignored by people who needed to move the aircraft. ๐SIP adopts it directly. The default answer is yes, with paperwork.
| # | Placard exceeded | Purpose | Expires | Ceiling | Abort criteria | Inspection | Countersigned | State |
|---|
Granted, not denied — removes the choice between compliance and honesty. An expiry, not a goal — milestones move; dates do not. Inspection scheduled before the flight — recovery decided in advance is recovery that happens. Countersigned — not for permission, for witness. Concealment is the integrity failure, and a countersignature makes concealment structurally impossible.
Form A-1 covers limits that are yours to set — discretionary load, commitments, hours, ambition. It does not apply to limits set by a medical authority. An operator may waive a self-imposed restriction; an operator may not waive the type certificate. No form in this standard covers those limits — see the referral restriction below.
Test pilots exceed limits professionally, and they are the most disciplined people on the airfield — because the method inverts everything about how overreach usually happens. It is called the build-up approach: approach the boundary incrementally; stop at each increment and review the data; brief the abort criteria before takeoff; instrument everything; and fly with a chase — someone whose only job is to see what you cannot see from inside the cockpit. Run that way, exceedance stops being damage and becomes envelope expansion — and validated expansion means the placard formally moves (results feed i5.5.3, and the certified envelope grows). You are not asked to stop. You are asked to qualify.
| Step | Load level (increment โ never one jump) | Data to collect | Review gate before next step |
|---|
A-0 without A-1 produces concealment. A-1 without A-2 produces a person who only ever spends margin and never grows the envelope. Issuing only the prohibition is the failure mode this page exists to prevent. Emit the full set into your record:
This instrument is exploratory, not diagnostic. It borrows the discipline of a structural-integrity program to help you inventory, declare, and inspect — it does not measure a clinical condition, and it issues no clinical conclusion. Its reflective moves are informed by practices with strong evidence bases in structured psychology — self-monitoring and written records as used in cognitive behavioral therapy, values clarification as used in acceptance-and-commitment approaches — but working a worksheet is not a course of therapy and does not substitute for one.
Some findings route outside this program, and routing them out is a completed task, not a failed one. Persistent depression, anxiety that does not respond to load reduction, trauma symptoms, crisis, or anything involving harm to yourself or others are outside this program’s certification basis. They belong with a qualified medical or psychological authority — a physician, a licensed therapist (including trauma-specific modalities such as EMDR, which only a trained clinician can deliver), or emergency services. Operating outside the certification basis is prohibited. And stated once more, where it matters most: Form A-1 never applies to a limit set by a medical or psychological authority โ medication, treatment plans, activity restrictions after illness or injury. Those are the type certificate, not the operator's placards, and no form on this page touches them.