[Tech Story] Why ENERBOT «stops when it doesn’t know»

An ESS handles a lot of power, so every decision an EMS makes is tied directly to safety. The first principle we set when building ENERBOT is simple: if it cannot be confirmed, stop.

«Unknown» must never be read as «nothing wrong»

In the field, moments when «no value arrives» happen more often than you might think. A communication line wobbles, a device fails to answer for a moment, or the link to the server drops. If the EMS keeps trusting the last value, or reads silence as «no problem», it ends up charging and discharging while the plant is actually in a dangerous state.

ENERBOT keeps these two strictly apart. No answer means «unknown», and when it doesn’t know, it halts charging and discharging. The screen says so honestly, too — «disconnected» or «not collected», never «normal».

Even stopping has an order

An emergency stop does not cut everything at once. ENERBOT follows the sequence PCS output 0 kW → confirm the current has dropped → open the battery relays, because opening relays while current is flowing damages the equipment. When the field PC shuts down, it first puts the PCS on standby before going down.

And yet generation goes on

A plant that is only good at stopping does not earn money. At a plant with several PCS units, if one fails, ENERBOT takes only the faulty PCS out and shares the command among the rest so operation continues. The whole plant is stopped only in truly dangerous cases, such as an emergency stop.

People are told right away

If it stops, a person needs to know. When charging or discharging stops abnormally, an alert goes straight to the operator’s phone. Conversely, normal pauses — standby by schedule or a full charge — do not trigger alerts, so only the alerts that really matter remain.

The balance between safety and generation revenue — ENERBOT finds it in the values real field equipment actually sends. If you’d like to know more, please contact us.