A CT/MRI study has to travel from the modality, through the hospital PACS, and out to the radiologist — either by remote access into the hospital, or by replication to the reading practice's PACS. Connectivity can break at three different points. Pick one and watch what happens without PortGarrison versus with the OCL.
Normal operation — studies flow from the modality through the hospital PACS and on to the radiologist. Pick a break above to see what happens.
In every case the unprotected modality had no fallback — its data stopped at the break, and no one could immediately tell where it broke. The OCL runs a continuous control loop at the device edge: it detects the failure, classifies where it is, keeps enforcing from cached policy, and arbitrates across transport paths — mesh for a local break, cellular for an upstream one — without touching or reconfiguring the device.
Device-perspective telemetry classifies the failure at the boundary.
Six-cause classification pins down which link failed — device, last meter, infrastructure, or inter-site.
The appliance keeps enforcing as the device's network endpoint.
Mesh for a local break; per-device cellular, out-of-band, for an upstream one.
The failover and its root cause are recorded as active compliance evidence.
Device-edge resilience isn't about preventing failures — it's about maintaining care delivery through them, with the evidence to prove it.
