Why this environment matters
The platform for stormwater pumping stations removes runoff from low-lying areas during heavy rainfall and flood events. The operational risk is specific: remote compromise or disabled pumps can rapidly turn a cyber incident into property damage and road closures. NØNOS could provide a smaller, memory-safe base for dividing that workflow into signed, least-privilege components and restoring it from a known state after each sensitive session or incident.
The security challenge
The threat model should assume that one component will eventually fail or be exploited. In this case, remote compromise or disabled pumps can rapidly turn a cyber incident into property damage and road closures. Water and environmental systems mix remote field devices, long asset lifecycles and processes whose failure can affect public health, property and ecosystems. The aim is to prevent that single failure from automatically gaining the keys, devices, records and network paths of the whole platform.
How the capsule model could help
A candidate NØNOS architecture would keep level sensing, pump sequencing, remote telemetry and maintenance access separate, allowing emergency operation from a known-good state. The design would prioritise isolated OT applications and signed engineering tools, supported by restricted actuator capabilities and authenticated sensor paths. Each capsule would carry a declared policy for files, networks, devices and secrets, and unknown or altered software would not receive the same authority as an approved component.
Deployment requirements
Implementation must preserve local manual control, safe fallback states, independent process protection and the utility's tested emergency procedures. The operating system is one control layer, not a substitute for process safety.
Current public-beta limitations, hardware support and application availability must be assessed before any pilot. Neither this use case nor an industry source establishes NONOS certification or a current customer deployment.
Who could buy or integrate it?
- Municipal drainage authorities fund pumping-station controls and resilient operations.
- Pump-system OEMs integrate local controllers and remote monitoring packages.
- Public-works engineering contractors deliver upgrades; drainage operators supervise pumps during storms.
Industry examples: Xylem, Sewerage & Water Board of New Orleans. These are research prospects, not represented as NONOS customers, partners or endorsers.