Energy Intelligence · Cluster 1GridOS — module mapexistsmerging / specified / researchmissing
Target architecture
GridOS is the one product. Nine modules, each with a reason to be separate. Shared primitives only where they remove duplication a named consumer actually has.
Dashed edge = probabilistic module; it has no path to an actuator. Solid edge = deterministic or data/integration.
Target tree
GRIDOS ├── DERIM — DER integration ├── Energie Teilen ├── Asset / SCADA integrations ├── Digital twin ├── Forecasting ├── Optimization ├── Physics engine ├── AI planning └── NeuralBridge safety runtime
Modules
| Module | From | Purpose | Separate because | Kind | State |
|---|---|---|---|---|---|
| GridOS kernel | GridOS | Telemetry ingestion, asset identity, time-series storage, API surface, tenant boundary. | It is the product. Everything else plugs in here through versioned contracts. | data | exists |
| DERIM — DER integration | derim-middleware, GridOS (OPC UA adapter) | Protocol adapters (OPC UA, Modbus, IEC 61850, EEBus/SunSpec) and device onboarding. | Adapters touch OT networks. Their blast radius is isolated from the analytics and from the planner. | integration | merging |
| Energie Teilen | energie-teilen | §42b EnWG energy-community economics, tariff logic, reports and paid pilot intake. | A different buyer (Vermieter, WEG, Stadtwerke) and a regulatory surface that changes on its own clock. | data | exists |
| Asset / SCADA integrations | Advanced Asset Insight*, Advanced Mobile SCADA Suite*, BatteryTrack* | Read paths into existing SCADA / asset systems and asset-health features for the anomaly module. | Read-only OT access needs IEC 62443 zoning independent of any write path. Nothing here may write. | integration | missing |
| Digital twin | GridOS, physics-informed (schemas) | Network model, asset parameters and state — the single schema the simulator, optimizer and agents read. | CIM-derived schemas outlive any solver or model; they are a contract, not a feature. | data | specified |
| Forecasting | GridOS (MPC loop), gridforge (feeds) | Probabilistic load, PV, price and constraint forecasts with tracked error. | Models are swapped and re-trained on their own cadence; the optimizer only sees a distribution interface. | probabilistic | exists |
| Optimization | GridOS (MILP dispatch) | Dispatch, flexibility and curtailment optimization against explicit constraints; MILP first, learned surrogates only with benchmarks. | Deterministic, auditable, reproducible — it is the last stage before the policy engine that may propose an action. | deterministic | exists |
| Physics engine | physics-informed, Renewables_Migration_*_Proof_Engine | Power flow (Newton baseline), contingency, inertia / RoCoF checks; PINN surrogates when they beat the baseline. | The constraint check must be independent of the model that proposed the action. | deterministic | research |
| AI planning | gridforge (analyst), GridOS (agent tools) | LLM / agent planner: reads state, proposes candidate actions and explanations through the tool interface only. | Probabilistic intelligence is isolated from deterministic safety enforcement. It never touches an actuator. | probabilistic | specified |
| NeuralBridge safety runtime | NeuralBridge (unlocated), mcp-foundry (governance kernel) | Policy engine, risk evaluation, authorization, actuator gateway, hash-chained audit. | The only component allowed to talk to an actuator. Certifiable in isolation; no ML dependency; own release cadence. | deterministic | missing |
Hard separation triggers
Components stay isolated when coupling would create any of these:
cybersecurity riskOT riskcertification riskdeployment riskvendor lock-inunnecessary dependenciesexcessive blast radiusunclear ownership
Shared primitives
Each primitive answers the five questions. One without answers does not get built.
| Primitive | Who uses it | Eliminates | Reduces cost | Security benefit | Unlocks | From | State |
|---|---|---|---|---|---|---|---|
| Authorization & audit (governance kernel) | AI planning, NeuralBridge, API | Three separate permission checks and two log formats | One audit format to review, one place to revoke | HMAC token gate, hash-chained append-only log | AI-Act traceability, certifiable authorization path | mcp-foundry | extract |
| Asset identity & digital-twin schema | kernel, DERIM, simulator, optimizer, agents | Per-module asset tables | One migration when a device type changes | One place to scope tenant access to assets | Contingency analysis, hosting-capacity products | GridOS + CIM (RWTH thesis lineage) | specified |
| Telemetry ingestion & time-series abstraction | kernel, forecasting, anomaly | Two backends (Timescale, Influx) addressed twice | Backend swap without touching models | One ingress to rate-limit and authenticate | MW/assets-connected KPI becomes measurable | GridOS | exists |
| Event & candidate-action schemas | planner, simulator, policy, NeuralBridge | Ad-hoc JSON between stages | Contract tests replace integration debugging | Signed, versioned, replayable | Cross-cluster events (GridOS anomaly → work order) without coupling | new, small | specified |
| Simulation & policy interfaces | optimizer, physics, agents | Solver-specific call sites | Newton vs PINN swap is one adapter | Constraint check independent of proposer | Benchmarks with identical harness | physics-informed | specified |
| Experiment tracking & model registry | forecasting, physics, research | Notebook-only results | Reproducible runs, no re-derivation | Provenance of every deployed model | Honest "state of the art" claims | new (MLflow or equivalent) | specified |