Bounded authority for energy and utilities.
Constrain grid, field and distributed-energy automation by asset, operating state and human oversight.
May this actor change this asset in its current operating state?
Authority architectureDomain execution and independent safety rules remain with the operating system.
Operational decisions are not interchangeable
A grid-optimization agent may recommend a dispatch change; a field automation system may schedule maintenance; a distributed-energy controller may request a set-point adjustment. These are distinct authorities. The right to read telemetry or optimize a model does not imply permission to issue a control command.
The authority grant should identify the asset, operating area, task, duration and permissible change. It should also state when a human operator must approve a request. Safety and protective systems remain in the operational technology environment and retain their own independent authority.
- Asset and feeder or site scope
- Permitted control operation
- Operating-state policy
- Maintenance window
- Human escalation
- Safety-system boundary
Policy follows operating state
A maintenance agent may have authority to adjust a device during a planned outage but not during live operation. An optimization agent may change a noncritical schedule while demand remains within limits, yet lose that authority when an abnormal grid state appears. Static role membership cannot describe that change.
Trust inputs may include device posture, operator instruction, network condition and upstream task status. An action-time decision should use current facts rather than the credential’s validity alone.
Field and distributed coordination
Field crews, maintenance systems and distributed-energy assets create handoffs between people, machines and software. A parent workflow may delegate inspection to a field agent without delegating switching authority. A child controller should receive a narrower, expiring grant for a specific device.
Evidence should connect the original work order or operator authorization to the final decision and observed equipment state. This supports incident review without claiming that ProofGrid controls the grid or substitutes for OT safety engineering.
Separate optimization from control
Grid optimization software may produce recommendations from broad telemetry, but actual control authority should be attached to the equipment, command, operating state and approved workflow. A recommendation can be evaluated by an operator or local control system without granting the optimizer standing command privilege.
Distributed-energy systems add many independently operated assets. A grant for one site should not be assumed valid across another owner, feeder or jurisdiction. The authority chain should preserve which organization permitted the action and where the boundary ends.
Industries / Next Step