Product · Alarm
One alarm. The whole context.
One alarm shown with its consequence, who is affected, the work planned this week, the rehearsed response and the prepared steps. One approval. A person decides. It starts on exported alarm logs, before any console connection.
In designDesigned from existing building blocks. Not built.
1
Floods found in exported alarm logs (10 or more alarms in 10 minutes per operator)
2
Monthly off-scan, inhibited, forced review
3
Consequence first; prepared steps; one approval
Needs
- Alarm-log exports to start
- Later: a read-only journal replica
- Impact and Program for the context
Is not
- Not a detector
- Not a rationalisation suite
- Never writes to SCADA or DCS
Where it stops
Not Explain, not Decide. Wavepin Explain names the physical cause of one pipeline alarm where a line model exists; otherwise the alarm text stands. Wavepin Decide simulates line responses. Alarm joins any alarm to consequence, planned work and the rehearsed response.
Built from
What exists, what does not
The incident twin and its one-alarm-with-the-whole-context flow (telecom harness, separate codebase), recorded from real MCP calls: read, what-if, refuse, dry run. The harness session over MCP. Structural-break detection for floods. Wavepin's hypothesis engine, typed decision and deterministic safety validator; the read-only adapter framework; per-step receipts for the shift view. Not built: alarm-journal and historian adapters, the consequence and planned-work inputs, the oil and gas drill library. The shift-handover view (the 192.631(b)(4) / 195.446(b)(4) shift-change record assembled from receipts plus one SCADA export) follows on the same code; the live overlay beside the SCADA display needs a replica and an on-premises bench.
First proof
The experiment
Replay one month of an anonymised alarm-log export through the flood finder (count, duration, peak rate, decay after rationalisation) and the monthly point review; compare flood counts and peak rates with the operator's own KPI report. No connection, no write access. In parallel, the public-data demo on the simulated 20 km line (one straight line, one product, no branches, no batches, no gas; 12,800 simulated scenarios): pressure drop at 02:14, pump trip at 02:31, delivery at risk by 03:01, decided with context, receipts and a dry-run dispatch. The reel on the site today is the telecom session; the oil re-cut is pending.
Methods
- Structural-break detection for flood events
- Alarm-flood early prediction with ranked operator support (neighbouring research, not ours)
- Hypothesis engine with a typed decision and a deterministic safety validator
Rules and standards
- CSB notation item 2025-41 (13 May 2025): recommendation to ISA for per-flood performance targets in ISA-18.2 after the 2022 refinery fire; status Open – Acceptable Response
- 49 CFR 192.631: controller authority, shift-change record, alarm management (195.446 for hazardous liquids)
- PHMSA notice of amendment, March 2026 (49 CFR 195.446): shift-handover gap when relief is late; alarm-plan effectiveness review without KPIs or data sources; controller-workload review
Also
See Alarm on your asset.
Designed from existing building blocks. Not built. A conversation first; a data pilot when it is ready.