Why this environment matters
The trust boundary for central HVAC plant controllers matters because the system manages chillers, boilers, pumps and air-handling systems for large facilities. The operational threat is specific: malicious setpoints or disabled alarms can affect occupant safety, damage equipment and drive extreme energy costs. A NØNOS-based design could reduce ambient authority and make the system easier to reset, inspect and attest.
The security challenge
Industrial software turns files, sensor readings and network messages into machinery movement, production settings and safety-relevant decisions. Containment has to extend to devices and actuators. For this system, the primary attack path is that malicious setpoints or disabled alarms can affect occupant safety, damage equipment and drive extreme energy costs. Conventional general-purpose hosts often place parsers, management tools, network services and privileged drivers in one broad trust domain, allowing a flaw in a low-value feature to reach a high-consequence function.
How the capsule model could help
NØNOS could be placed at the operator, gateway, edge or application-compute layer and configured to separate plant optimisation, operator control, sensor acquisition and remote maintenance while limiting high-impact commands. The most relevant controls are attested maintenance sessions, known-good recovery, driver and motion isolation and signed production recipes. This would make privileges explicit: a service that reads a sensor, displays data or contacts a cloud API would not automatically be able to issue a physical command or use a signing key.
Deployment requirements
Production deployment must maintain independent emergency stops, safety PLCs, certified interlocks and validated motion or process limits. NØNOS could reduce software trust but should not collapse independent safety layers.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Chiller and HVAC equipment makers integrating plant controllers
- Large facilities buying central heating and cooling upgrades
- Mechanical controls contractors delivering plant automation
Industry examples: Johnson Controls, Daikin. These are research prospects, not represented as NONOS customers, partners or endorsers.