Register the meter, run predictions in observe mode, trigger each failure path to verify rollback and alarms, and enable writes only after all of them pass.
Turn on write-back verification
Write-back verification is off by default. Add a rollback section when you create the prediction run in the console:
{
"schema_version": "prediction-run.v3",
"interval_seconds": 60,
"rollback": { "enabled": true, "settle_seconds": 2.5 }
}
settle_seconds (0–30, default 1.0) must be longer than the source's collection interval, or readback reports a false mismatch. Only Modbus points are verified; BACnet outputs are not.
Next Steps
Quick verification
docker inspect -f '{{.Config.Image}}' missionpack_knn returns the version you intend to run.- All ten SDM630 points read, and voltage, frequency and imported energy agree with the meter's own display.
- Imported active energy only increases, and survives a restart of the source.
- A full occupancy cycle of predictions has run in observe mode and the recommendations have been reviewed by the plant operator.
- The safety limits carry an approver's name; the baseline no longer reports as unapproved.
- One write inside the limits produced a command receipt, a readback within tolerance, and a point quality of good.
- Source-offline, readback-mismatch and stale-sample faults each produced the expected alarm, and the first two each triggered a rollback.
- If northbound publishing is enabled,
northbound.spool.queued in GET /system/runtime-metrics is 0 with dropped unchanged.
Evidence to export
For the handover record: the image version; the meter template id and confirmed word order; the approved safety limits and approver; the command audit trail for the verified write; the rollback journal entries from the fault injection; the alarm history. Container logs (docker logs missionpack_knn) rotate, so copy what you need promptly.
Next steps
- Enable writes on one zone only, and watch it for a full cycle before widening.
- Set up notifications for the critical compensation-failed alarm.
- Re-approve the safety limits whenever the plant is rebalanced.