Solutions · Energy & infrastructure

Software that can move equipment needs a boundary it cannot argue with.

Grid and building systems increasingly act on their own. ExecLayer evaluates a proposed action against its operating envelope before it reaches equipment, refuses what falls outside, and records both outcomes.

What goes wrong

The command that should never have reached the equipment

An automated system issues a setpoint or a switching command outside its authorized envelope. On a grid the consequence is not a bad output, it is physical, and it propagates faster than anyone can intervene. A control that flags this after the fact has already missed.

ENV · ENERGY & INFRASTRUCTURE
Watch one decision

Commands stop at the edge of the envelope.

An automated system may step this feeder by up to 5 MW at a time. Watch a routine adjustment settle inside that band, and a 120 MW swing get cut at the boundary before it reaches equipment.

Feeder setpoint · authorized band 0 to +5 MW

0+5 MW bound+120 MW

+4 MW · routine adjustment

Within envelope

+120 MW · commanded swing

Refused at the boundary

The hatched region never executed. The command stopped at the bound, and the refusal was recorded.

The setpoints are illustrative; the envelope check runs the way the kernel bounds a real command. Watch the kernel refuse a live intent.

What we build for it

The products built for this work.

GridGuard

What it is

A deterministic enforcement kernel for grid operations, with cryptographically verifiable decision receipts.

The problem it solves

Grid actions are consequential and effectively irreversible in the moment. GridGuard evaluates each command against its authorized envelope before it is issued and refuses the ones outside it, then emits a signed receipt that a third party can verify independently.

Retrofit Guard

What it is

Offline-first compliance enforcement for California electrification programs, including EBD, TECH, HEEHRA, and SoCalREN.

The problem it solves

Program compliance is usually reconstructed by a consultant long after the work is finished, which is when errors become expensive. Retrofit Guard evaluates program rules at the point of work, in the field, without a network connection, so compliance is established when the decision is made rather than argued about later.

The evidence it leaves

A decision is only settled if someone else can check it.

Infrastructure evidence outlives the people and the vendors involved. The record has to be fixed at the time of the decision and checkable without the cooperation of whoever produced it.

Put an authority boundary in front of your energy & infrastructure systems.