Every alarm governed. Every trip accounted for.
Moonshot Lagrange evaluates trips in under 5 ms on the PC in every cell, enforces who can reset, shelve or retire an alarm, and carries every event across your DMZ to Maximo and the enterprise, even when the network is down.
Alarms are raised everywhere. Almost none are governed.
A breaker trips and thirty machines alarm at once. A press trip clears the moment pressure drops, and someone resets it without inspecting the die. A shelved alarm stays shelved for a week. A remote site loses its link and the record goes with it. Your SCADA raises alarms; nothing enforces what happens next.
One stack on both sides of your DMZ.
Alarms are evaluated and governed in every cell below your DMZ, and seen across the enterprise above it. Between them, the only Moonshot component in your DMZ is a thin, outbound-only relay, so no inbound port ever opens into the plant.
Industrial AI at both ends. Edge AI scores anomalies on the industrial PC in every cell, even offline, and an industrial AI copilot on a plant server answers by voice from your own procedures. Both are advisory: people decide and act. Performance figures are on reference hardware.
What Moonshot Lagrange governs.
Eight core baseline states per ANSI/ISA-18.2 plus four governance extensions, evaluated in every cell.
Latched safety-trip alarms
A high-consequence trip stays latched until a supervisor resets it with an inspection comment.
Shelving with limits
Time-bounded with a 4-hour default, auto-expiring, and capped plant-wide: governance beyond the IEC 62682 baseline.
Out of service under MOC
Retiring an alarm needs the right role, an MOC ticket and an engineering rationale.
Floods into incidents
Suppressed by design on equipment state. Cascades that still happen collapse into one incident within 5 seconds.
Transients on the record
Excursions that clear before acknowledgment stay visible until someone signs off.
Alarms into work
Priority alarms open IBM Maximo work orders automatically, queued safely through outages.
Two industries. One governed record.
Discrete manufacturing
Stop one trip from becoming a lost shift. Flood correlation, latched press trips, transient forensics and Maximo work orders for automotive, EV and assembly lines.
Process and energy
ISA-18.2 governance where the alarms actually happen. Governed shelving, out-of-service under MOC and remote-site autonomy for utilities, midstream and chemicals.
One line. Thirty days. Read-only.
Start with a paid pilot on one production line. Moonshot Lagrange runs on a single industrial PC that you own, or one we supply preloaded. We set it up against your alarm philosophy and tag list and leave it governing alarms for thirty days, with engineering support through the window.
It reads your control network and writes nothing to it. No setpoints, no commands, no change to what your equipment does.
- One gateway, one line, one PLC protocol, an agreed tag count
- Setup against your alarm philosophy and tag list, with engineering support
- Thirty days governing alarms in production
- You keep the benchmark, the sizing recommendation and the decision
No changes to your control logic or alarm configuration. No rip-and-replace, no data lake, no IT project to stand up first. Read-only from day one.
What's your challenge?
Bring us your noisiest line or your most remote site. Our showroom runs eight live scenarios in 30 minutes, from an EV welder thermal runaway to a reactor safe-operating-limit breach.
Moonshot by Timbergrove
Software for industrial operations, built in Houston, Texas.
Designed to adhere to ANSI/ISA-18.2 and IEC 62682. Network architecture aligned to IEC 62443 zone and conduit principles.