Skip to content
NEXUS
MODULES / CONTROL ROOM

The live picture of the plant
no instrument can see

Your own drawing is the board — and the whole platform meets on it: Lockout/Tagout paints what's cleared, Work Control hangs what's coming, the watch records what's real, and Corrective Action picks up what doesn't match. Every status says how it knows — or stays honestly unknown.

NEXUS PROPOSES.  QUALIFIED PEOPLE APPROVE.
1 · CLEARANCE — LOTO2 · DIRECTED — WORK CONTROL3 · OPERATED — THE WATCH4 · CONDITION — CAPA5 · TURNOVER — THE RECORD
MAIN STEAM — UNIT 2 · sheet M-204 rev 1R. Chen · on watch 07:00–19:00 · sup. D. Okafor
COVERAGEPLACED 4/4 · CURRENT 2 OF 4PLACED 4/4 · CURRENT 3 OF 4
07:02LOTOV-101 rendered ISOLATED from clearance CLR-2026-0412 — painted from the record, nobody typed it. DANGER tag drawn as a tag.
09:40WORK CONTROLDirected: V-102 → OPEN under authorized 2026-ACM-MWO-00412 — the work card hangs on the sheet before a hand touches the valve.
09:58THE WATCHV-102 OPEN — operated & recorded by R. Chen, confirmed by sup. D. Okafor (two-person) · directed work satisfied · +1 cycle → asset record.
14:31CAPAP-140 lineup not as records expected → condition CR-2026-0347 raised to Corrective Action. Position put in front of the watch and verified in real time; the why gets its investigation in CAPA — held provisional, never shown confirmed.
19:00TURNOVERHandover generated from this log — everything operated, attributed, work-order-linked; coverage 3 of 4, earned. The oncoming watch signs what the record already knows.
THE PROBLEM WE BUILT FOR

Between the instrumented systems lies the hand-operated plant — valves thrown by hand, breakers racked by people. Mimic displays can't show it: an indicator needs a signal. So its state lives in radio calls, whiteboards, and the memory of whoever last walked the line.

Control Room gives that plant a live, honest picture — on the drawings your people already trust. The watch records what it sees; a supervisor confirms; and the safety record stays exactly where it belongs — Lockout/Tagout stays authoritative, and Control Room reads it, renders it, and never writes it.

WHAT IT COVERS

Status you can act on — because it says how it knows

01

Your drawing is the board

Status anchors to confirmed positions on the sheet your people already trust — and what hangs on equipment is drawn as itself: DANGER and CAUTION tags as tags, work as work cards. Never an ambiguous glyph.

Sheet on glassTags drawn as tagsWork cards
02

Three answers on every component

Position, confidence, and provenance — kept separate, because a confirmed OPEN and an unknown OPEN are completely different facts. And position speaks each component's language: a relief valve is Set or Lifted, never just "open."

PositionConfidenceIoT · visual · clearance
03

The watch owns the pen — two-person, always

Entries come from qualified people currently on watch, and every status is confirmed by the on-watch supervisor — nobody confirms their own. Off watch, the pen simply isn't there. And drills are partitioned by construction, never a checkbox.

On-watch entrySupervisor confirmDrill-partitioned
04

Honest about how well it knows

Unknown renders as unknown — never as fine. Observations age on screen with decay set per component class, so a stale claim never wears a fresh face.

Unknown renderedAgeing visibleDecay by class
05

Disagreement, in front of the right person

A contradiction becomes a discrepancy with both claims visible until the supervisor resolves it. The position question is put in front of the watch in real time; the why gets its full investigation in Corrective Action — and a provisional never reads as confirmed.

No silent overwriteProvisional ≠ confirmedReal-time decisions
06

The board answers why, not just what

Authorized work orders overlay as directed operations — directed, in process, satisfied, overdue — so an impending change is visible before a hand touches the valve, and planned work never pollutes the needs-attention list.

Directed operationsIn process nowExceptions stay short
07

Turnover writes itself

The handover sheet is generated from the record — everything operated, attributed, work-order-linked; standing provisionals carried forward — and the narrative is the running watch log assembled, not memory at hour twelve. Both signatures, attributed.

Generated turnoverRunning watch logTwo signatures
08

Every manipulation counts

Recorded operations emit counted cycles to the asset record — usage data on components that have none, as a byproduct of operations — feeding preventive maintenance with reality.

Cycle countsFeeds PM intervals
THE QUIET DIFFERENCE

The window, never the hand on the valve

NEVER THE SAFETY RECORD

Who holds a lock or tag is authoritative in Lockout/Tagout — Control Room reads it and can never write it. Its own record is the watch's observations: attributed, timestamped, decaying.

COVERAGE HAS TWO AXES

Placed and current are different questions, reported separately against the set each view is responsible for — never rolled into one flattering number.

DAY ONE IS BLANK — ON PURPOSE

No seeding, no inference. Coverage is earned as the watch records and supervisors confirm — a board that faked day-one fullness would be the false confidence this module exists to remove.

Built around the conduct-of-operations expectations assessors actually check — status control, independent verification, logkeeping, and turnover (DOE O 422.1 among them) — as design targets.

NEXUS · CONTROL ROOM

Bring the system nobody can see

The hand-operated one — the valves in the pipe rack, the breakers in the far building. We'll show you what a live, honest picture of it looks like.

Request a walkthrough

Founder-led. A working session, not a demo reel.

Request a Walkthrough