ALFTECH :: TWINSAFE
RANGE / LUX-01 READY
UTC 00:00:00

PROOF 03 / PHYSICAL AI ASSURANCE

Break the controller
before reality does.

TwinSafe generates hostile operating conditions around a digital twin, evaluates explicit safety invariants and preserves the exact seed of every failure. The result is an engineering argument—not a confidence score.

YOUR MISSION, IN PLAIN WORDS

Find where a controller fails.

A controller decides how equipment responds. Give two versions the same difficult conditions and check which one handles them better.

Read the 5-slide pitchDownload PowerPointa@alftech.space
How to try it in 60 seconds
  1. Press Compare both controllers. Each version faces the same 600 scenarios with the default settings.
  2. Read the pass rates. A breach means a scenario crossed at least one of the four declared operating limits.
  3. Scroll to the selected failure and press Replay exact seed. The demo reruns the original conditions. Export the JSON to keep the comparison and trace.

The asset, controller rules and limits are simplified examples. A higher pass rate here does not certify real equipment.

02 ADVERSARIAL SCENARIO FIELD

Awaiting campaign

PASS BREACH SELECTED
Each cell = one deterministic 60-step simulationClick a cell to replay its scenario

04 / DETERMINISTIC REPLAY

Select a scenario from the field.

SCENARIO SEED——————
TRUE DEMAND COMMAND GRID VOLTAGE SAFETY BOUND

06 / MACHINE-CHECKED CONTRACT

Safety is written down before the test starts.

INV-01

Voltage envelope

0.92 ≤ V(t) ≤ 1.06 pu

Grid voltage remains inside the distribution operating envelope at every step.

NOT TESTED
INV-02

Service continuity

unmet(t) ≤ 18% for ≤ 3 steps

The controller may degrade service briefly, but not sustain a material shortfall.

NOT TESTED
INV-03

Thermal ceiling

T_asset(t) < 80°C

Transformer thermal state remains below the accelerated-aging boundary.

NOT TESTED
INV-04

Fail-safe response

sensor_loss ⇒ safe_mode ≤ 3 steps

A missing or implausible sensor stream must cause bounded control behavior.

NOT TESTED

PROTOTYPE BOUNDARY

The assurance workflow is active. The asset twin is reduced-order.

This proof executes hundreds of stateful controller simulations in the browser and retains deterministic replays. Fault distributions, operating limits and controller rules are illustrative, not certified standards. A field pilot needs a domain-validated simulator, measured operating envelopes and versioned controller builds. The exported dossier is an unsigned research record, not a safety certificate.