EnglishDeutsch/api/energyGitHub · iceccarelli
Grimaldi EngineeringCluster control · Frankfurt
Send a SKU list
Energy Intelligence · Cluster 1

Safety boundary

The LLM / agent never controls a physical system. Ten stages sit between a proposal and a setpoint; the first three are probabilistic, the last seven deterministic. No stage may be skipped, merged or short-circuited — in code, in a demo, or in a pilot.

Safety chain — ten stages, one boundaryprobabilistic — proposesdata — typed, signeddeterministic — enforces
SAFETY BOUNDARY1. LLM / Agent — Reads state through tools. Proposes.01 LLM / AgentprobabilisticReads state through tools. Proposes.2. Planner — Turns intent into candidate action sets with assumptions.02 PlannerprobabilisticTurns intent into candidate action sets with assumptions.3. Candidate actions — Typed, versioned, signed by the proposer. Nothing executes here.03 Candidate actionsdataTyped, versioned, signed by the proposer. Nothing executes here.4. Simulator — Runs the twin forward under each candidate.04 SimulatordeterministicRuns the twin forward under each candidate.5. Physics constraints — Voltage, thermal, frequency, RoCoF, SoC bounds — pass / fail with margins.05 Physics constraintsdeterministicVoltage, thermal, frequency, RoCoF, SoC bounds — pass / fail with…6. Policy engine — Tenant rules, market rules, grid-code rules, operator vetoes.06 Policy enginedeterministicTenant rules, market rules, grid-code rules, operator vetoes.7. Risk evaluation — Quantifies downside, reversibility, blast radius.07 Risk evaluationdeterministicQuantifies downside, reversibility, blast radius.8. Authorization — Human or pre-approved envelope. Signed. Time-boxed.08 AuthorizationdeterministicHuman or pre-approved envelope. Signed. Time-boxed.9. NeuralBridge — Validates signature, envelope, freshness. Writes audit record.09 NeuralBridgedeterministicValidates signature, envelope, freshness. Writes audit record.10. Actuator — The setpoint. Nothing upstream may reach it directly.10 ActuatordeterministicThe setpoint. Nothing upstream may reach it directly.No other path exists.

Only NeuralBridge talks to the actuator. Every arrow is a versioned contract; none skips a stage.

Progression — what may run todayrunsbeing built (wedge A)locked (D-007)
OBSERVE — GridOS ingestion, OPC UA adapterOBSERVEPREDICT — MPC forecast loop — error not yet measuredPREDICTSIMULATE — Newton baseline; PINN surrogate in researchSIMULATEOPTIMIZE — MILP dispatch schedulerOPTIMIZERECOMMEND — Wedge A: explanation + € gap reportRECOMMENDsafety boundaryAUTHORIZE — D-007 — no safety runtime existsAUTHORIZEEXECUTE — D-007 — never before NeuralBridgeEXECUTE
OBSERVE
GridOS ingestion, OPC UA adapter
PREDICT
MPC forecast loop — error not yet measured
SIMULATE
Newton baseline; PINN surrogate in research
OPTIMIZE
MILP dispatch scheduler
RECOMMEND
Wedge A: explanation + € gap report
AUTHORIZE
D-007 — no safety runtime exists
EXECUTE
D-007 — never before NeuralBridge

AUTHORIZE and EXECUTE are locked by decision until a NeuralBridge repository exists and passes its own tests.

The chain

  1. 01LLM / AgentprobabilisticReads state through tools. Proposes.
  2. 02PlannerprobabilisticTurns intent into candidate action sets with assumptions.
  3. 03Candidate actionsdataTyped, versioned, signed by the proposer. Nothing executes here.
  4. 04SimulatordeterministicRuns the twin forward under each candidate.
  5. 05Physics constraintsdeterministicVoltage, thermal, frequency, RoCoF, SoC bounds — pass / fail with margins.
  6. 06Policy enginedeterministicTenant rules, market rules, grid-code rules, operator vetoes.
  7. 07Risk evaluationdeterministicQuantifies downside, reversibility, blast radius.
  8. 08AuthorizationdeterministicHuman or pre-approved envelope. Signed. Time-boxed.
  9. 09NeuralBridgedeterministicValidates signature, envelope, freshness. Writes audit record.
  10. 10ActuatordeterministicThe setpoint. Nothing upstream may reach it directly.

Rules in force

  1. Probabilistic components (agent, planner, forecasting) have no network path to any actuator, gateway or OT segment.
  2. Candidate actions are typed, versioned and signed by the proposer; a simulation cites the exact candidate hash it evaluated.
  3. validate_constraints fails closed: an evaluation error is a failure.
  4. request_authorization is the only tool that leaves the sandbox, and it produces a request, not a command.
  5. Authorization is signed, time-boxed and revocable; pre-approved envelopes are narrow, explicit and logged.
  6. NeuralBridge is the only component allowed to talk to an actuator. It has no ML dependency and its own release cadence.
  7. Every stage writes to the hash-chained audit log; a chain break halts request tools.
  8. Until a NeuralBridge repository exists and passes its own tests, the cluster stops at RECOMMEND (decision D-007).

Status

Specified. NeuralBridge is unlocated in the live inventory; the governance kernel of mcp-foundry (HMAC token gate, hash-chained audit) is the candidate foundation for stages 8–9. No EXECUTE-stage code exists in the cluster, by decision.

As of 2026-09-05All resources: /api/energy/index

Written and maintained by Vincenzo Ceccarelli Grimaldi, Frankfurt am Main.