01

What the evidence says

On an aquaculture site, a useful flow can combine battery state, grid state, generator readiness, pond priority and dissolved-oxygen or timer inputs to stage aerators instead of treating the whole farm as one undifferentiated load. The safety and biological fallback must remain valid if a sensor, gateway or network link fails.

For irrigation and processing, automation can move flexible pumping, ice making, chilling or water treatment toward solar-rich or low-tariff windows while protecting minimum tank level, temperature, pressure and production deadlines. The economic claim should be calculated from timestamped before-and-after data, not from the existence of a dashboard.

Generator automation should be a documented state machine. Start threshold, warm-up, transfer, minimum loading, reverse-power protection, battery charge limit, cool-down, failed start, low fuel, maintenance lockout and restoration each need explicit handling and operator visibility.

Victron documents Node-RED as an extended Venus OS Large feature and notes that advanced custom solutions are not covered by ordinary product support. That boundary makes configuration backup, source documentation, credential control, local network protection, maintainable code and a named support owner essential project deliverables.

The operating reference changes by system stateControls, protection and responsibility must follow the transition.
  1. 01GRID PRESENT

    Follow the utility reference

  2. 02GRID LOST

    Establish a stable local reference

  3. 03RESTORATION

    Synchronize, transfer and recover safely

02

What a business should do next

  1. Begin with a state and consequence table, not a flow canvas. For every input and output, define valid range, stale-data timeout, loss behavior, interlock, manual authority, alarm, event log and recovery condition.
  2. Separate advisory, display and control flows. A dashboard may show recommendations without writing to equipment; lower-risk automation may control non-critical flexible loads; safety-critical or production-critical actions require stronger interlocks, review and regulated professional involvement where applicable.
  3. Store the exported flow, credentials backup procedure, device and firmware inventory, dependency list, change log, rollback version and operator instructions in the owner’s controlled repository. Test restore on a spare or controlled environment before relying on the backup.
  4. Witness normal operation and deliberate failures: sensor frozen, value out of range, gateway reboot, internet loss, generator failed start, low SOC, communication loss and manual takeover. Preserve synchronized logs and sign the accepted behavior for each state.