Platform module

Closed-loop control & safety

Recipe-driven setpoints executed against real actuators, inside a safety envelope the control logic cannot widen.

2Autonomous control
Overview

What this module does

Automated control turns recipe targets into commands for connected equipment. Fixed platform limits constrain those commands, operators can override setpoints, and PID safety refusals are logged with their reason. Physical interlocks and controller safeguards still need to be specified and tested for the installation.

  • Safety limits are enforced below the automation, not inside it
  • PID safety refusals are written to the control log with their reason
  • Commissioned read-only first, with control enabled zone by zone
  • Nutrient changes fall due on the recipe schedule and are confirmed by an operator
Capabilities

In detail

Recipe execution

The active recipe and growth stage produce the target setpoints for the zone. Stage progression moves the targets without anybody remembering to change them by hand.

PID control loops

Proportional-integral-derivative loops adjust supported heating, cooling, humidity, CO₂, water and dosing actuators towards configured targets. Lighting is handled through its schedules and control channels.

Safety envelope

Bounds on temperature, pH, EC, water level, dose duration, dose interval and doses per hour sit outside the control loop as fixed platform values that no recipe, schedule or model output can raise. The PID and actuator-test paths apply duration, intensity and frequency checks. Environmental checks use the zone’s cached readings and depend on the corresponding reading being available. Over-long doses and over-intense HVAC commands are capped to the limit rather than refused outright.

Emergency stop and overrides

A zone stop switches off automation and sends stop commands to the zone’s configured dosing, water, CO₂ and HVAC actuators, with ventilation commanded to full. Lights are left as they are, and humidifiers are not part of the sequence. Delivery still depends on the command reaching the controller. Manual setpoint overrides record who made them and the duration intended.

Actuator health

Track configured actuator status and reported health. A status or acknowledgement does not replace flow, position or other physical feedback when that is needed to detect a failure.

Fail-safe behaviour

A circuit breaker halts automated control for an individual actuator in a zone once it starts failing, so one broken doser does not take the rest of the zone down with it. Only one instance holds control leadership for a zone at a time.

Next step

Press us on the safety envelope

A 30-minute walkthrough against your zones, crops and sensors. No slides unless you ask for them.

  • Walkthrough led by someone who has built the system
  • We map your zones, crops and sensors before the call
  • Straight answers on what fits and what does not