← Back to Autonomy
Reliability · Environmental RCARCA-2026-ENV-0188

Environmental Root Cause Report

Intermittent HV Isolation Faults

A transient high-voltage insulation warning, clustered in coastal climates and at dawn, traced past a convincing connector-lot Pareto to its true origin: overnight condensation bridging the HV creepage path — an environmental issue, not a component defect.

Prepared byM. Mazouchi — VHM & Diagnostics
SubsystemHV insulation monitoring (IMD)
Sample500 telematics events
StatusRoot cause confirmed
DispositionEnv hardening + firmware validated
Executive Summary

The fleet logs intermittent isolation-resistance faults: the Insulation Monitoring Device (IMD) reports HV-to-chassis isolation below the safety threshold, raising a DTC and occasionally blocking charge/drive. The faults are transient — they clear as the day warms — and concentrate in coastal, humid regions and at dawn. A 500-event telematics study isolated the cause to overnight condensation: when the connector surface cools below the dew point, a thin moisture film forms across the HV creepage path, and coastal salt makes it conductive, dropping isolation resistance below spec.

Defects clustered on connector lot Lc — but Lc was simply the lot allocated to coastal dealers. Holding the environment (dew-point margin, humidity, salt) constant, the lot association vanishes. The fix is environmental hardening (sealing/venting, hydrophobic coating, connector dry-out heating) plus a firmware debounce and active dry-out routine — not a connector recall. Coastal fault rate is versus inland.

Principal Finding

The cause is environmental — condensation on the HV connector creepage path, amplified by coastal salt — not a material (connector lot) or manufacturing defect. The lot Pareto that triggered the investigation is a dealer-allocation artifact; a supplier recall would have changed nothing.

1 — Symptom & Scope

A warning that comes and goes with the weather

Healthy isolation sits in the tens of megohms. A transient tail is dropping below the half-megohm threshold.

The IMD continuously measures isolation resistance between the HV bus and chassis. When it falls below the threshold (here, MΩ), the vehicle logs an isolation DTC and may inhibit charging. The defining feature is that the fault is intermittent and self-clearing: it appears on cool, humid mornings and disappears once the vehicle warms — behavior no permanent insulation defect would show. Reports skew heavily coastal and toward the pre-dawn hours.

Because the symptom appears only under specific weather and time-of-day conditions, several environmental and component variables move together. Full telematics — weather, surface temperature, location, connector genealogy — make a disciplined attribution possible.

2 — Data & Telematics

The instrumented events

500 morning measurement events were logged across the fleet, each pairing the IMD isolation reading with the local weather, the connector surface temperature, the coastal/inland location, salt exposure, and the connector supplier lot.

ChannelMeaningRole
dewpoint_margin_Csurface temp − dew point (<0 = condensation)Primary cause
RH_pct / salt_indexhumidity; coastal + road-salt loadingCo-cause
coastalcoastal vs inland locationEnvironmental driver
connector_lotconnector supplier lotConfounded proxy
time_of_day_hhour of measurementDiurnal evidence
Riso_Mohmmeasured isolation resistanceTarget variable

The dataset is synthetic, generated from a condensation-physics model with a known ground truth so the method can be graded. Dew-point margin and salt are the true drivers; the connector lot is built as a dealer-allocation proxy with no leakage pathway of its own.

3 — Candidate Hypotheses

The field of suspects

#HypothesisFamilyFalsifiable prediction
H1Condensation on creepage pathEnvironmentalRiso drops when surface < dew point; transient
H2Coastal salt contaminationEnvironmentalWorse at coast for same humidity
H3Connector supplier lotMaterialTracks lot; resistivity out of spec
H4Seal / housing batch (ingress)ManufacturingTracks build batch independent of weather
H5HV insulation degradationElectricalPersistent low Riso, dry conditions
H6IMD threshold / calibrationSoftwareReading offset independent of environment

H1 and H2 are the environmental chain; H3/H4 are the tempting non-environmental explanations; H5/H6 are the "is it even real?" checks. The data must distinguish a genuine, weather-driven leakage path from a component or sensor artifact.

4 — The Misleading Pareto

Where a hasty investigation ends

Figure 1 — Fault Pareto by connector lot
The tempting conclusion. Lot Lc carries the large majority of faults — an open-and-shut case for a supplier 8D and a containment hold. The catch: Lc is also the lot shipped to coastal dealers, and the coast is where the weather does the damage.

A Pareto ranks association. To reach causation we need the continuous environmental variables and the discipline of holding them constant.

5 — Statistical Screen

What actually tracks the isolation drop

Figure 2 — Correlation with isolation resistance
Environment dominates. Dew-point margin (r = ) and humidity lead, with salt and coastal location close behind. Connector lot Lc (r = ) trails them — strong enough to mislead a Pareto, weak relative to the weather it rides on.

Dew-point margin is the standout. But lot, coastal, and humidity all correlate, and only the four-gate test — association, significance, materiality, mechanism — separates cause from proxy.

6 — Rejecting the Connector Lot (H3)

A dealer-allocation artifact

Lot Lc's correlation has a logistics explanation: Lc was allocated mostly to coastal dealerships. It labels "this vehicle lives by the sea," nothing more. Two tests confirm it.

Figure 3 — Raw vs partial correlation (control for environment)
Raw Partial (environment held constant)
The collapse. Holding dew-point margin, humidity and salt constant, connector lot Lc falls from r = to ≈ (p > 0.5) — pure confounding. Dew-point margin, controlled for lot, holds at . The mirror test settles direction.

Second, the mechanism gate: the connector's bulk resistivity and contact resistance for lot Lc are within material spec — there is no electrical pathway by which the lot itself could shed megohms of isolation. Strong correlation, no mechanism: a confounder. H3 is rejected, and the supplier hold is released.

7 — Abduction: Weather, Refined to the Dew Point

Not "it's humid" — "the surface is below the dew point"

The regression makes the structure explicit. Lot explains little; humidity helps a lot; adding the dew-point margin and salt dominates and drives the lot coefficient to zero:

ModelLot coef.
Riso ~ lot
Riso ~ lot + humidity
Riso ~ lot + humidity + dew-point margin + salt

This is the abductive refinement. "It's humid" is incomplete — many humid mornings show no fault. The pattern that fits is sharper: faults appear when the connector surface temperature falls below the dew point, so moisture actually condenses on the creepage path, and worsen where salt makes that film conductive. Humidity is necessary background; the dew-point margin is the trigger. That refined, testable claim — Riso collapses when margin < 0, and recovers when the surface warms — is what §8 confirms.

Why this matters operationally Reading the cause as "the connector lot" leads to a recall that fixes nothing. Reading it as "humid customers" leads to declaring the complaint unactionable. The truth — condensation across a creepage path — is actionable by design: seal, coat, heat, and debounce.
8 — Physical Confirmation

Where the data meets the dew point

8.1 — The diurnal signature

If condensation is the cause, faults must cluster when surfaces are coldest — the pre-dawn hours — and clear as the sun warms the connector. The fault rate by hour shows exactly this:

Figure 4 — Fault rate by time of day
The decisive signature. Faults spike near dawn (~04–06h), when radiative cooling drives the surface below the dew point, and fall to near zero by midday. No component, lot, or sensor defect produces a diurnal pattern — only condensation does.

8.2 — Isolation resistance vs dew-point margin

Plotting Riso against the dew-point margin reveals a sharp knee at zero — the onset of condensation — and a clear coastal/inland separation driven by salt:

Figure 5 — Riso vs dew-point margin
Coastal (salt) Inland
The mechanism, in one curve. Above the dew point (margin > 0) isolation is healthy; cross below zero and it collapses as the film forms. Coastal vehicles fall further for the same margin because salt makes the film conductive — confirming both environmental hypotheses (H1 condensation, H2 salt) as one chain.

8.3 — The fault map

Figure 6 — Margin vs isolation, by location
Two populations, one threshold. Faults (below the MΩ line) sit almost entirely at negative dew-point margin and on the coast. Inland points at positive margin stay safely high — the susceptibility is environmental, not built-in.
Root Cause Statement

Confirmed root cause

Intermittent HV isolation faults are caused by overnight condensation across the HV connector creepage path. When radiative cooling drops the connector surface below the dew point, a moisture film forms; coastal salt makes the film ionically conductive, bridging HV to chassis and pulling isolation resistance below the IMD threshold. The fault is transient because the film evaporates as the surface warms. Connector lot Lc and "coastal" are correlated proxies — Lc was allocated to coastal dealers — neither is causal once dew-point margin, humidity and salt are held constant.

Disposition: H1 (condensation) + H2 (salt) confirmed as one chain. H3, H4, H5, H6 rejected (Appendix A).

9 — Diagnostic Decision Tree

The triage, distilled

The recurring per-event decision compresses to three checks, evaluable from the IMD reading plus weather telematics. Each leaf names cause and action; thresholds come from the data (fault below MΩ; condensation at dew-point margin < 0).

Riso below threshold (isolation fault) ?
NO ↓
Isolation healthy — no action
YES ↓
transient & dew-point margin < 0 (condensation) ?
YES ↓
coastal / high salt exposure ?
YES ↓
ROOT CAUSE — condensation + salt across creepage. Environmental hardening (seal/vent, hydrophobic coating, connector dry-out heater) + firmware debounce & active dry-out. NOT a component fault.
NO ↓
Condensation only — firmware dry-out + hydrophobic coating
NO (persistent, dry) ↓
Genuine HV insulation degradation — inspect/replace HV harness or component
10 — Containment & Corrective Action

Hardening against the weather

The mechanism chain and its confounder, side by side:

Figure 7 — Root-cause chain & the lot confounder
One chain, one red herring. Humid/coastal night → surface below dew point → condensation film → salt bridges HV to chassis → Riso drops → IMD fault. The dashed branch is lot Lc: allocated to the coast, correlated with the fault, electrically inert.

The fix attacks the film and the nuisance trip without touching the (sound) connector:

Figure 8 — Mitigation & monitoring
Where the fixes act. Sealing/venting, a hydrophobic conformal coating, and a small dry-out heater suppress the moisture film; the IMD logic adds a debounce and an active dry-out cycle so a transient dew event no longer trips a hard fault. Environmental hardening upstream, firmware tolerance downstream.
ActionTypeEffect
Hydrophobic conformal coatingCorrective (design)Suppresses film; annual fault-days
Improved sealing / ventingCorrective (design)Limits ingress & condensation
Connector dry-out heaterRobustnessHolds surface above dew point
IMD debounce + active dry-outContainment (SW)Eliminates nuisance trips now
11 — Prognosis

Forecasting susceptibility and field exposure

Because the cause is environmental and mechanistic, both the per-event susceptibility and the seasonal field exposure can be forecast. The susceptibility curve maps the trigger directly:

Figure 9 — Fault probability vs dew-point margin
The trigger, quantified. Fault probability switches sharply around margin = 0 — the condensation onset. This curve is the screen the firmware uses to anticipate a dew event and pre-empt it with a dry-out cycle rather than a hard fault.

Across a full year, the field exposure for a worst-case coastal vehicle — and the effect of the coating — is stark:

Figure 10 — Cumulative fault-days over a year (coastal vehicle)
Unmitigated Hydrophobic coating
The hardening payoff. Unmitigated, a worst-case coastal vehicle accumulates fault-days across the year — condensation roughly half the mornings. The coating drops that to , and the firmware debounce removes the residual nuisance trips.
12 — Recommendations

Field & design action

Immediate containment: deploy the IMD firmware debounce and active dry-out cycle fleet-wide so transient dew events no longer raise hard faults or block charging. Corrective action: add a hydrophobic conformal coating and improved sealing/venting at the HV connector in the next build, and qualify a small dry-out heater for high-exposure climates. Release the supplier hold on connector lot Lc — it was never causal. Verify by confirming the dawn fault peak disappears and Riso stays above threshold through condensation events in coastal validation vehicles, and track nuisance-fault rate by climate zone rather than by lot.

Appendix A — Hypothesis Disposition

Kept or dropped

#HypothesisDispositionDecisive evidence
H1Condensation on creepageConfirmedDiurnal peak; Riso knee at margin = 0; transient
H2Coastal saltConfirmedCoastal Riso lower at equal margin (salt)
H3Connector lotRejectedCollapses under env control; resistivity in spec
H4Seal/housing batchRejectedNo build-batch split once weather controlled
H5HV insulation degradationRejectedFaults transient, not persistent/dry
H6IMD threshold / calibrationRejectedReading tracks weather, not a fixed offset
Appendix B — Code & Data

Reproducibility

The dataset and full analysis ship alongside as isolation_fault_rca.py (condensation-physics generator + diagnostic pipeline) and isolation_events.csv (500-event mockup). The core of the generator:

# condensation film bridges the HV creepage path
dewpoint_margin = surface_C - dewpoint_C        # < 0 => condensation
film = 1/(1+exp(dewpoint_margin/1.5)) + 0.15*max((RH-70)/30,0)
Riso = RCLEAN / (1 + 60*film*(1 + 1.5*salt_index))   # Mohm
fault = Riso < 0.5                                # isolation threshold

# confounder: lot Lc allocated mostly to coastal dealers
p_Lc = where(coastal==1, 0.75, 0.18)             # proxy, resistivity in spec

The pipeline reproduces every figure: the Pareto, correlation screen, partial-correlation confounder test (lot → r ≈ ), staged regression (R² ), the diurnal signature, the Riso–margin knee, and the prognosis.