The Kiln Problem
A clinker kiln is a 60-meter thermal reactor where combustion quality determines both fuel cost and refractory life. Operators balance fuel feeder rates, draft speeds, and raw-meal feed against temperature curves that lag the actual process by tens of minutes — so corrections arrive late, and overshoots burn money.
Prior attempts at model-based control failed for a predictable reason: they replaced operator judgment with opaque black boxes, and the plant engineers rightfully refused to trust them at 1,400°C.
Edge Placement & Protocol Bridge
We placed ruggedized edge nodes directly in the plant control room, bridged to the distributed control system over OPC-UA, and read every relevant signal: kiln inlet and outlet temperatures, secondary air, fuel flow by burner, draft pressures, and raw-meal composition. Nothing left the plant; the entire reasoning loop ran on-prem.
Recommend, Then Verify
The frontier model recommends feeder and draft adjustments. A separate safety layer — ordinary arithmetic, no probability — validates every adjustment against hard bounds: maximum burner delta per cycle, minimum draft safety margin, and rate-of-change limits derived from the plant's own engineering tolerances. Any proposal outside bounds is rejected and surfaced to the operator with the offending values.
Results
Why It Stuck
The system succeeded because it never overrode a safety boundary and never hid its reasoning. Every adjustment is logged with the process context that produced it, so plant engineers audit the same trace the model used. Trust, in industrial control, is earned one explainable decision at a time.