Proof Before Autonomy
GridNinja begins read-only and keeps authority where operators, CISOs, and utilities expect it. If evidence is stale, incomplete, or outside policy, the correct answer is no-proof.
Every accepted MW must point to a proof row.
The autonomy ladder
Control authority expands only after operators can inspect the recommendation path, the remaining margin, and the rollback posture.
Generate recommendations, safety outcomes, and proof artifacts without write credentials or actuation.
unlock: read-only tape
Operators review action bundles, no-proof gaps, and Load Passport outputs with real decision context.
unlock: operator review
Enable a narrow actuator set only inside declared dispatch envelopes and runtime assurance checks.
unlock: dispatch envelope
Add coordinated multi-asset control as evidence and confidence accumulate.
unlock: evidence gate
Authority boundary
GridNinja can propose and verify candidate actions, but live authority stays inside declared site policy, deterministic checks, runtime assurance, and operator review.
Runtime Assurance
Deterministic verification checks the active dispatch envelope before a receipt and replayable proof record are produced.
Proof chain
proof_root: 8f4c...91a
Can do
Rank candidate workload, cooling, and bridge-power bundles.
Cannot do
Cannot approve site actions or mutate authority.
Same tape, same proof root
Tape
URI_STRESS_2021_02_15
Topology
ATL1_v0.3
Policy
SHADOW_READ_ONLY
Run 1
T+00:18
Run 2
T+00:42
same tape + same topology + same policy = proof_root 8f4c...91a
AI Data Center Load Passport
The Load Passport binds accepted capacity to ramp limits, reserve floors, freshness, no-proof gaps, and accepted-headroom evidence.
Constraint braid
The proof chain stays legible by showing which power, cooling, storage, workload, or telemetry trust constraint produced allow, repair, reject, or no-proof.
Constraint braid
Binding constraint
Transformer T2 ramp envelope
Proof object
Capacity Waterfall row 002
Accepted posture
Repair to declared ramp limit before acceptance
source
EPMS-A + PCC telemetry
constraint
T2_RAMP_LIMIT
proof_row
waterfall.power.row_002
Fleet evidence
This view is read-only evidence aggregation. Local site policy, operator review, and runtime assurance remain the authority boundary.
Fleet evidence
FleetOS aggregates signed site envelopes, proof roots, accepted headroom, and no-proof gaps while local policy remains the authority boundary.
Artifact gallery
GridNinja produces the Load Passports, ledgers, reports, registers, and packets needed to evaluate virtual capacity before bounded autonomy.
Operators, hyperscalers, investors
A site-specific capacity identity that summarizes proof-adjusted virtual capacity, binding constraints, freshness posture, and declared operating policy.
Illustrative sample · evidence chain completeExecutives, operators, reviewers
A transparent reduction from nominal headroom to safe, usable, auditable capacity after electrical, reserve, thermal, workload, and telemetry checks.
Illustrative sample · evidence chain completeOperators, auditors, fleet teams
A time-indexed record of accepted capacity states, rejected actions, no-proof intervals, and the proof root behind each decision.
Illustrative sample · evidence chain completeFacilities, BESS/UPS partners
A resilience-first view of UPS, BESS, and bridge-power margins so flexibility does not spend emergency posture silently.
Operators, CISOs, program owners
A remediation list for missing telemetry, incomplete topology, stale policy, or weak evidence that prevents safe approval.
Utilities, EMCs, partners
A planning-facing summary of flexible MW, ramp limits, reconnection envelope, confidence posture, and exceptions.
No-proof register
Telemetry freshness
High severity
Open
-1.2 MW proof discount
Confirm 15-second freshness across feeder, reserve, thermal, and workload nodes.
Topology mapping
High severity
In review
no-proof for thermal envelope
Bind rack groups, feeders, cooling zones, UPS strings, and bridge assets to one proof graph.
Policy declaration
Medium severity
Required
no reserve-safe dispatch
Declare reserve floors, SLA exclusions, allowed repair bands, and rollback posture.
0 of 3 gaps marked verified in this illustrative register. Sample recovered capacity: +0.0 MW.
Utility evidence packet
GridNinja translates local proof into evidence utilities and energy market coordinators can inspect. It does not replace interconnection studies, tariff requirements, or operator authority.
Audit log example
Every repair or rejection is logged in plain operator language, with the relevant envelope and predicted impact attached.
Safety and rollback
GridNinja can operate in monitoring-only Shadow Mode, advisory mode, or bounded autonomy. The first deployment posture is read-only: no write credentials, no command VLAN, no hidden actuation path, and no approval authority delegated to ML, LLMs, frontend state, or fleet-level software.
Operator FAQ
No. The first posture is Shadow Mode evidence generation with read-only telemetry and no hidden actuation path.
The result is no-proof until freshness, topology, or policy evidence is strong enough to support a safe answer.
No. Fleet views can aggregate proof objects, but local site policy and operator authority remain the approval boundary.
CISO FAQ
The intended first deployment uses read-only data paths scoped to explicit telemetry sources and logging boundaries.
Proof artifacts should be gated, redacted where needed, and traceable to a source, policy, and export event.
If trust assumptions break, GridNinja fails closed into no-proof instead of presenting unsafe capacity as accepted.
Sample proof pack
Open the full proof-pack surface or download the sample bundle to inspect logs, envelopes, and Shadow Mode artifacts before a live demo.
Related operator resources
Capacity Audit
Use Capacity Audit and Shadow Mode outputs to establish the business case, the active constraints, and the operating guardrails before bounded autonomy.
