hardware-in-loop

Fault injection step: ```text // REQ-HIL-FAULT-02; TEST-HIL-120 At t=500 ms, drop comms line; expect safe state within 200 ms. ```