Case File 01 — Validation
Pakistan National Blackout
23 January 2023 · 07:34:14.895 → 07:34:43.800
A single commutation failure at one HVDC converter station took an entire national grid dark in twenty-nine seconds. Sentinel maps that event as a node network — and the map shows that the decisive edges were never electrical.
- Cascade Duration
- 29 s
- Load Lost
- 14,301 MW
- Nodes Modelled
- 87
- Restoration
- 21 h 34 m
Source: NEPRA Inquiry Report, 14 March 2023. Mapped to the ASR doctrine as an Aquarian Vulnerability Map.
Induce a shock. Watch where it stops — and where it doesn't.
Every circle is a node from the AVM workbook: converters, grid stations, generation, protection devices, operators, and the cross-domain authorities that gate them. Click any node to inject a failure. The pulse walks the graph along its couplings — solid lines are electrical, dashed lines are protection signals, and the fine dotted lines are contractual, regulatory, and dispatch edges. Defenders either absorb the shock or fall through, depending on the severity you select.
Illustrative interface demonstration. The map animates propagation across the mapped graph; it does not run the Sentinel solver, and no figures are computed live.
The grid entered 23 January already degraded — in four different domains.
Reset the map and four nodes are already amber. None of them were broken by the cascade; all four were broken before it started, and not one of them by an electrical fault.
Financial
Guddu 747 — 747 MW, forced outage
Out of service for want of insurance cover, through the highest-stress weeks of the winter. A procurement failure that presented as a transmission-corridor weakness.
Seasonal
Guddu–Muzaffargarh — open five days
Isolated on 18 January for fog. A 2016 recommendation to hold minimum hydel generation through fog season was never implemented.
Contractual
KAPCO — PPA expired 91 days earlier
Black-start obligation became ambiguous when the contract lapsed on 24 October 2022. Ministerial direction could not resolve what the paperwork no longer covered.
Eight stages, twenty-nine seconds.
Aggravation
Wind curtailment lifted (+500 MW into the South) and Ghazi Barotha Unit 5 de-synchronised. Matiari's AC bus is already sitting at 478 kV.
Trigger
Commutation failure at Lahore Converter with the AC bus at 391 kV. The HVDC link sheds 304 MW onto the HVAC corridor.
Splitting failure
Three 500kV circuits trip on power swing. Out-of-step protection — installed, inactive — does not block a single one. North and South separate.
Karachi isolated
NKI's overvoltage protection opens at 640 kV on a 100 ms delay. Locally correct, systemically destructive: 521 MW of import gone.
Over-frequency cascade
Port Qasim runs back instead of tripping and holds the over-frequency. K-2 and K-3 split-trip together — 1,940 MW in one step.
South generation collapse
Lucky, Shanghai SECL, Engro Thar, TEL and SNPC drop out on under-frequency as the South loses its floor.
HVDC block, North collapse
Both poles block as Matiari's AC voltage falls. Tarbela goes 50 → 0 Hz. Automatic shedding rejects 3,834 MW and the North still goes dark.
Total national blackout
Export from Jhimpir-II reaches zero at 07:34:43.800. The last coupling to K-Electric is severed.
The pivot domino was observability, not any single asset.
Pivot Domino
SCADA / NPCC
Major stations without SCADA and no millisecond event recorder. The system operator could not see the state it was defending — and the inquiry could not fully reconstruct the order of events afterwards.
Defender Silence
Out-of-step protection
The device designed to split the grid into survivable islands was installed and did nothing. Three distance relays then performed exactly to specification — and became the cascade's topology.
Institutional Persistence
18.2% fully implemented
Of 22 recommendations reviewed across the 2016, 2018, 2021 and 2022 inquiries, four were fully implemented. Diagnostic capacity comfortably exceeds corrective capacity.
Your network, mapped the same way — before the event.
Sentinel builds this map for live infrastructure: every node scored, every cross-domain edge drawn, every defender tested against the shock that would actually arrive.