Control room shift handover with every earth, permit and changed setting on the brief — and twelve years of logs to ask
No abnormal condition lost at shift change.
See one case, screen by screen ↓At 07:00 and 19:00 a grid control room hands the network to a new crew. What the incoming operator must know — open faults, the parts of the network not in their normal state, permits and earths in force, protection or auto-reclose settings changed for work, what to watch this shift — sits in twelve hours of free-text log entries, hundreds of SCADA alarms, the permit system and the abnormal-network register. On Lumina Utilities' desk 2 at Halden, one night held 47 log entries in operators' shorthand, 312 alarms, 6 permits and sanctions, 3 sets of earths and a 9-line register.
The outgoing operator writes the handover from memory in the last half hour of a twelve-hour shift, and the incoming operator has to trust it. An earth left on, a section believed dead that is back-fed, auto-reclose switched out for live-line work and never restored: these are the items that hurt people when they are missed. Handover has been named as a cause in major accidents since Piper Alpha. And because the log is free text, nobody can ask how the last Buchholz trip on the same transformer was handled — that memory lives with operators who are retiring.
Estimated split for one 07:00 handover on a 33 kV and 11 kV desk, in minutes, by hand and with the solution. The last row applies only when a repeat event comes up.
Six specialist agents read the log, alarms, permits and register into a cited brief and find past events; the incoming operator reads it back and the supervisor countersigns.
Tuesday 13 October 2026, Network Control Centre, Halden, desk 2 — 33 kV and 11 kV. Owen Pryce has run the night shift: one transformer trip, one cable fault. Nadia Rahman takes the desk at 07:00 and Farid Haddad countersigns. Here is what happens, screen by screen, in the working solution.
Across the top, the night shift from 19:00 to 07:00 is one band: every trip, switching operation, permit, earth and changed setting is a tick, with alarms per half hour below — 44 in the half hour before midnight, 88 between 04:00 and 04:30. Below it sits the brief: 14 items in five sections — open faults, network not in its normal state, permits and earths in force, temporary settings and watch this shift — each with its log lines in the margin and an acknowledge box.
“Built from the shift log, SCADA alarms, the permit system and the abnormal-network register · every line cited”
The log reader read 47 entries and expanded the shorthand (AR, FPI, NOP, PSR). The alarm summariser turned 312 alarms into 9 events, 61 still standing. The handover writer wrote 14 items with 31 citations, then compared them with the note Owen typed at 06:31: it covers 12 of 14. Two were in the log but not in the note, and carry an amber mark — earths EA-26-3391 on at KW-7, and Ridgeway 132 kV line 2 auto-reclose still off at both ends.
“Switched out at 22:10 for PTW-26-1187 and left out when the work stopped at 22:50. Switch back in only when the permit is cancelled.”
Nine register lines, five raised tonight: the Marrow Hill 33 kV bus section closed, normal open point KW-9 closed so F22 feeds KW-7 to KW-12, KW-6 and KW-7 open, T3 out and isolated, auto-reclose out on Ridgeway line 2. Each one agrees with its log entry but one: R-0597, Harbour Road 33 kV circuit 1 on hand control. The log says it ended on 3 Oct; the register was never updated.
Farid Haddad owns the register; the network-state checker only flags where the two disagree.
Permits to work, a sanction for test, limitations of access and three sets of earths, each with its holder, dates, state and the log entries that recorded it. EA-26-3391 at KW-7 shows “On · not in the handover note”. Below, the permits cancelled in the last 7 days stay listed, because a precedent may need them: PTW-26-1162, Marrow Hill T3 cooler pump P1 replaced, cancelled Saturday 10 Oct at 16:40.
“The permit system stays the record; nothing here issues or cancels a permit.”
T3 tripped on its Buchholz relay at 04:12, 25 minutes after a stage 1 gas alarm. Nadia asks the history. Across 186,240 entries from 2014 to tonight the precedent finder finds 4 similar events and opens the best match, 94 %: 14 Aug 2019, Marrow Hill T3, the entry Rolf Lindqvist wrote at 05:52, as written. Then what the operator did, minute by minute — protection engineer called at 06:05, gas colourless and not flammable at 08:40, relay bled at 11:10, T3 back on load at 12:58: out 7 h 06 min, air trapped after the cooler-pump change.
Then and now: “Cooler pump P2 changed 2 days before” in 2019 · “Cooler pump P1 changed 3 days before” tonight.
The precedent finder always shows the closest match that ended differently. On 21 Nov 2017 Marrow Hill T2 tripped on Buchholz and differential, with no work before it and no stage 1 alarm. The gas was flammable, the oil showed acetylene at 48 ppm — a winding fault — and T2 was out for 113 days and replaced. So the precedent changes the watch list, not the decision.
“It does not say what to do tonight. Returning T3 to service is Grace Okafor’s release under OP-TX-07, after the gas result.”
Nadia adds it to the brief as W3: “T3: gas test result before any re-energising” — 2019 was air after cooler-pump work and T3 was back in 7 h 06 min; 2017 (T2) was flammable gas, a winding fault; T3's cooler pump P1 was replaced on Saturday under PTW-26-1162. It is cited to both old entries and the permit, and marked as added by her. The brief goes to 15 items.
“Added to the brief as W3 · 15 items”
Owen reads each item and Nadia confirms it. Every acknowledgement is stamped with her name and the time, from 06:52 to 06:55, on all 15 items — the two amber ones and her own W3 included. The incoming operator cannot accept the shift until every item is acknowledged.
“The incoming operator cannot sign until every item is acknowledged”
Owen signs as outgoing operator at 06:57. Nadia accepts the shift at 06:58 with 15 items acknowledged. Farid countersigns at 07:01. The handover is filed read-only and the shift's entries join the searchable log history.
“Farid Haddad countersigned · handover filed and searchable”
The handover record shows every signed handover since the brief went live on 18 August: 112 shifts on a calendar, each coloured by how many items the brief added that the outgoing note had left out. 41 items were added; 15 of them were earths, permits or temporary settings. The median time to acknowledge a brief is 7 minutes.
“15 of the 41 were earths, permits or changed settings: the items that hurt people when they are missed.”
The same handover, seen by the five people who write it, take it, countersign it, act on it and answer for it — what their shift looked like, and what it looks like now.
Six specialist agents read the log, alarms, permits and register into a cited brief and find past events; the incoming operator reads it back and the supervisor countersigns.
Reads every free-text log entry as it is written, expands operators' shorthand from the desk glossary, tags it — fault, switching, permit, earths, setting, alarm, load, customers, note, handover — and links it to the event it belongs to.
Turns the shift's SCADA alarm list into events — 312 alarms into 9 tonight — each with its first and last alarm and whether it is still standing, linked to the log entries that mention it.
Lists every permit to work, sanction for test, limitation of access and set of earths in force, finds the log entry that recorded each, flags any the outgoing note does not mention, and looks back 7 days for work on any plant that tripped.
Compares the abnormal-network register with the log in both directions: a line the log says has ended, and a log change with no register line.
Writes the one-page brief in five sections — open faults, network not normal, permits and earths, temporary settings, watch this shift — one item per condition with its citations, and marks what the outgoing note left out.
Answers “has this happened before?”: matches on asset, protection, the work done just before and the alarm sequence, quotes the old entry as written, rebuilds what the operator did that day with times, and lays then beside now.
Read back, sign, countersign. The agents propose; a named person decides.
Ask about tonight's shift or twelve years of logs, or say what to add to the brief. It only answers with a source.
Last time T3 tripped on Buchholz?
Three Buchholz trips on Marrow Hill transformers since 2014. The closest is T3 on 14 Aug 2019: it tripped two days after a cooler-pump change, the gas was air, and T3 was back on load in 7 h 06 min. But T2 on 21 Nov 2017 tripped the same way and had a winding fault. T3's cooler pump P1 was changed on Saturday under PTW-26-1162. The gas result decides; Grace Okafor releases T3 under OP-TX-07.
Which earths are on the network right now?
Three sets. EA-26-3391 at KW-7, cable side, under PTW-26-1190: applied at 02:30 and not in Owen's note. EA-26-3386 and EA-26-3387 either side of Brook Street breaker 4, under PTW-26-1179.
What did Owen's note leave out?
Two items, both in the log: the earths at KW-7 and Ridgeway line 2 auto-reclose still off after the work stopped. With thunderstorms forecast from 15:00, a fault on line 2 would not reclose. Both are marked amber on the brief.
Auto-reclose left off after a permit was cancelled
Twice since 2014 auto-reclose stayed off after the work it was switched out for had finished. In February 2021 Ridgeway line 1 ran 26 hours without auto-reclose, and a lightning fault the next evening did not reclose: 2,140 customers off for 41 minutes. The handover gained a section for temporary settings after that; tonight's brief carries Ridgeway line 2 there (T1).
13 screens from the working solution, on its sample data. Pick one to see it large.
What the brief reads, what it holds, how far back the history goes and who signs are settings, chosen by the control room.
| Setting | Default | Choose from |
|---|---|---|
| Brief ready before handover | 30 min | 15 min · 30 min · 45 min before 07:00 and 19:00 |
| Mark what the note left out | On | On · Off — amber “Added from the log” on items missing from the outgoing note |
| Removing an item | Outgoing operator | Outgoing operator · Supervisor — always with a reason |
| Years searched | 12 | 5 · 12 · All |
| Minimum match | 60 % | 50 % · 60 % · 70 % — matches below the score are hidden |
| Always show a different ending | On | On · Off — the closest match that ended differently |
| Work before the event | 7 days | 3 · 7 · 14 days of the permit system checked |
| Signatures | 2 + countersign | 2 + countersign · 2 — every item acknowledged before the incoming operator signs |
Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.
“demo” = seen in the working solution, on its sample control-room data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures: Lord Cullen, The Public Inquiry into the Piper Alpha Disaster (1990) — 167 deaths, a permit's status not handed over at shift change; AWWA 2025 benchmarking — 21 % of water-utility staff eligible to retire within five years. Context: UK HSE and Energy Institute guidance on safety-critical communication and shift handover; NERC COM-002-4 (three-part communication for operating instructions). Lumina Utilities, its control centre, substations, circuits, permits, records and the people named on this page are fictional — characters and sample data in the working solution.
Software that turns a control room's free-text operator log into a structured shift handover and a searchable history. Control Room Shift Log reads the night's log, SCADA alarms, permits, earths and the abnormal-network register into a one-page brief with every line cited, marks what the outgoing note left out, and answers questions over years of past logs.
Thirty minutes before 07:00 and 19:00, the agents read the shift's sources and the handover writer builds the brief in five sections: open faults, network not in its normal state, permits and earths in force, temporary settings and watch this shift. The outgoing operator reads it back, the incoming operator acknowledges each item, both sign and the shift supervisor countersigns.
The precedent finder matches on the asset, the protection that operated, the work done just before and the alarm sequence, across the log history — 186,240 entries since 2014 in the working solution. It quotes the old entry as written, replays what the operator did then with times, lays then beside now, and always shows the closest match that ended differently.
No. No agent recommends switching, isolating, earthing or re-energising. It shows what was done before and how it ended, and names the approved procedure and the person who decides — after a Buchholz trip, the protection engineer's release under OP-TX-07.
No. It reads them. The permit system stays the record and nothing here issues, changes or cancels a permit; the register is flagged, never changed; and log entries are quoted as written, never edited.
Yes. The incoming operator cannot accept the shift until every item is acknowledged. Only the outgoing operator can remove an item, with a reason. Every acknowledgement, signature, search and agent run is on the audit trail, and signed handovers are kept read-only for 7 years.
Yes. Which sources the brief reads, how long before handover it is ready, whether missing items are marked, who may remove an item, how many years of logs are searched, the minimum match, the look-back for work before an event, the signatures and how long handovers are kept are all settings.
The Agentic Solution Engine builds and deploys it from your requirements and documents — your handover template, desk glossary, permit and register extracts and a sample of past logs — and it goes live once every quality gate has passed. We will walk you through it on your own shift logs first.
Every switching step checked before anyone touches the network.
1-min demoGrid Operating Procedures SearchEvery answer as numbered steps, with the exceptions beside them, not pages later.
1-min demoPlanned Outage ManagementNo outage approved while its backup feed is out, and every customer told in time.
1-min demoWe'll run Control Room Shift Log on a sample of your own logs, alarms, permits and register.