Voice-activated AI fluid control with a non-bypassable deterministic Safety Engine. Operators give orders in plain English. No command — spoken or digital — bypasses pressure, H2S, temperature, flow, differential pressure, or water cut limits. Not one.
A traditional HIPPS does one thing on dedicated proprietary hardware at $500K–$2M per installation. OllieAI delivers non-bypassable pressure enforcement plus five additional parameter categories, voice-activated command, and a continuous OSHA PSM audit trail — on the Siemens and Rockwell safety PLC platforms your facility already owns.
Every PLC scan cycle — every 10 milliseconds — the Safety Engine's first instruction sets ALL actuator permits to FALSE unconditionally. A permit can only reach TRUE by surviving the full validation sequence. There is no software command, no voice command, no network instruction, and no maintenance key that sets a permit TRUE through any other path. This is the architecture the patent protects. [PATENT PENDING]
The Safety Engine monitors all six parameters continuously during operation — not only at command time. A deviation that develops during an active process is caught within one scan cycle regardless of whether a command is in progress.
HIPPS-equivalent non-bypassable pressure enforcement. ESDV closure within one scan cycle of MAOP breach. Configurable to PHMSA requirements.
HIPPS EQUIVALENT — ESDV CONTROLFull-system ESD on H2S threshold breach. Stuck-value sensor detection — a frozen detector is treated as a fault, not a safe reading.
FULL ESD — SENSOR FAULT DETECTIONHeater treater and thermal process enforcement within operating range. Temperature exceedance removes heater permit independently.
HEATER TREATER CONTROLTransfer pump cavitation prevention and minimum flow interlocking. Flow below minimum before pump startup is rejected at the command gate.
TRANSFER PUMP PROTECTIONAcross-choke differential pressure monitoring. Exceedance removes choke valve permit and logs ISA-18.2 alarm priority record.
CHOKE VALVE CONTROLProduced water fraction from analyzer input. High water cut removes transfer permits and triggers operator alert. Protects custody transfer thresholds.
CUSTODY TRANSFER PROTECTIONOllieAI is the only safety instrumented system with a native AI voice command interface. Operators speak commands — the on-device AI processes them — the Safety Engine decides. Voice commands cannot bypass safety any more than digital commands can. The Safety Engine is source-agnostic: it enforces limits the same way regardless of where the command originated.
Converts spoken operator commands to structured parameter requests using Vosk offline speech-to-text with a custom OllieAI grammar. Runs entirely on the industrial voice module — no cloud, no network dependency at the wellhead.
Receives the structured parameter request from Layer 1 and validates it through the same deterministic Block 0/2/3 logic that validates every other command source. The Safety Engine has no knowledge of whether a command was spoken or typed.
Operator presses and holds the ATEX-rated PTT button on HMI-02. Blue LED activates. Vosk begins recording.
Operator speaks the command clearly while holding PTT. Audio captured by Zone 1 microphone, routed via IS barriers.
PTT released. HMI-04 runs Vosk STT. Grammar matches command to vocabulary. Parameter values extracted. Amber LED flashes.
Command written to Modbus TCP registers. Safety Engine evaluates against all active process limits. Decision in <1 scan cycle.
"Command accepted" (green) or "Command rejected — [reason]" (red). Audit record written. Total latency ≤1.5 seconds.
Zenitel INCA-2 or equivalent. Zone 1 rated (Ex ia IIC T5 Ga), IP66, panel mount. Push-to-talk button with RGB status LED. Audio output to safe-area voice processor via IS barriers.
ATEX ZONE 1 · EX IA IIC T5Pepperl+Fuchs KFD2-SR2-Ex2.W or MTL 5020 Zener barrier pair. IEC 60079-11 certified. Passes audio signal from Zone 1 field station to safe-area voice processing module. DIN-rail mount inside safe-area panel.
IEC 60079-11 · ZONE 1/2Advantech UNO-2271G in Ex d enclosure (Zone 1 installation) or Raspberry Pi CM4 industrial equivalent. Runs Vosk + OllieAI grammar on Linux. Connects to Safety Engine PLC via Modbus TCP on port 502. Safe-area mounted.
LINUX SBC · VOSK AI · MODBUS TCPFixed command set. Every command maps unambiguously to one Safety Engine action. Values in [brackets] are spoken numerically — e.g. "set pressure to eight hundred PSI".
Vosk is an open-source offline speech recognition toolkit that runs directly on the HMI-04 Linux SBC. A custom JSGF grammar file constrains the recognizer to the OllieAI O&G vocabulary — the AI only "hears" commands that are in scope, which dramatically improves field accuracy.
The current fixed-command vocabulary is intentional — it makes IQ/OQ validation straightforward for licensees. Each command maps unambiguously to one action. Free-form natural language is designated OAI-VOICE-002.
A voice command that fails Safety Engine validation is rejected identically to a digital command that fails. The Safety Engine receives a structured parameter request from HMI-04 via Modbus TCP. It does not know — and does not care — whether a human typed it, a SCADA system sent it, or an operator spoke it. Every command from every source goes through the same non-bypassable Block 0/2/3 validation sequence. [PATENT PENDING — PROPRIETARY]
OllieAI's automatic audit trail is continuous — every parameter decision, permitted or rejected, from every command source including voice, is logged with timestamp, user identity, parameter values, and configured limits. PSM and PHMSA documentation is generated in real time.
Deploys on IEC 61508-certified F-CPUs with HFT ≥ 1 by platform design. IEC 61511 safety lifecycle-aligned — not self-certified. SRS pre-populated, 21-case FAT and SAT protocols included. Proof test interval tracking automatic.
Every voice command — including rejected ones — generates an automatic audit record with timestamp, UserID, parameter values, and alarm code. Management of Change and Mechanical Integrity documentation is generated continuously.
SAFE chart logic implemented in continuous monitoring blocks. Each parameter maps to specific actuator de-energization response. ATEX/IECEx rated field instruments per OAI-BOM-002. Applicable to offshore and hazardous area onshore installations.
The automatic audit trail addresses Control Room Management (§192.631) requirements for documented monitoring of SCADA alarms and pressure deviations. Continuous parameter monitoring creates a real-time record of every condition and response.
The Safety Engine executes six architectural blocks in fixed sequence every PLC scan. Voice commands enter at Block 3 via Modbus TCP — the same gate as all other command sources. The specific mechanism that makes the system non-bypassable is disclosed only under executed mutual NDA.
All actuator permits FALSE at every scan start. No permit persists. No voice command, software instruction, or network message can pre-set a permit. [PATENT PENDING]
IS_VALID() check on all 6 sensors before any limit comparison. NaN or ±Infinity from a faulted analog channel is caught here — it cannot slip through < and > comparisons.
A frozen H2S detector returning a constant valid reading is detected and treated as a sensor fault — not a safe condition.
If any sensor fails validity or freeze checks, all permits for that sensor's parameters remain FALSE. Execution does not proceed to limit checks for a faulted sensor.
All 6 parameters compared against configured limits every scan — unconditionally, whether or not a command is active. Drift during an active operation is caught in one scan cycle.
UTIL-002 watchdog FB detects sensors returning constant valid readings. A frozen pressure transmitter inside limits is detected and flagged before it allows unsafe conditions.
When a command is issued — from digital HMI, SCADA, or voice — every parameter is validated against configured limits before any permit is set. Voice commands receive identical validation. First-fault chain logs the specific violation. [PATENT PENDING]
Dual-authorization required — two distinct UserIDs including voice-initiated inhibit requests. Time-limited with auto-expiry. Full audit record including both UserIDs, duration, and target actuator.
IEC 61511 Clause 16 automatic interval tracking. Dual-auth acknowledgment via voice (O11) or digital. AlarmCode 210 at each acknowledgment. Configurable interval.
OllieAI Systems Corp. is seeking OEM and operator licensing partners in the oil and gas sector. Source code, configuration data, and architecture detail are shared only after mutual NDA execution. A full technical package — including IEC 61511-aligned validation documentation, bill of materials, source code, and 16-week deployment playbook — is ready.
OLLIEAISYSTEMS.COM · OLLIEAI SYSTEMS CORP. — DELAWARE C-CORP · PATENT PENDING