Read-only boundary
No writeback, no control changes, no equipment command pathway.
Governance
LIMIS is designed for executive, IT, OT, security, and engineering review. It reads approved plant context into workflows while keeping control systems outside the product boundary.
For the sponsor, this rigor has a practical payoff: a security and OT review with less ambiguity, clearer approval paths, and a pilot that stays focused instead of becoming an IT project.
System boundary
The historian or approved integration endpoint remains the operational source. LIMIS makes approved readings useful inside the work context where operators and leaders use them.
SCADA, DCS, PLCs, MES, control networks, and plant-floor systems stay inside their existing boundary.
Historians or integration services expose reviewed data through the customer's approved path and scoped account.
Operators, supervisors, and leaders see approved context inside rounds, checks, exceptions, handoffs, and records.
Governed by design
Governance should reduce ambiguity before launch. LIMIS keeps the operating model plain enough for site teams to inspect and specific enough for technical review.
No writeback, no control changes, no equipment command pathway.
Role-based access across IT, OT, operations, quality, and leadership users.
Encryption in transit and at rest, with customer ownership preserved.
Completion records, comments, timestamps, exceptions, and review status.
Plain language review
Governance review should answer four questions: what can LIMIS read, who approved the access, who owns the record, and what LIMIS can never change.
Plant teams define review path, change expectations, source systems, readiness gates, and launch ownership.
Access is scoped through an approved service account or equivalent reviewed integration pattern.
The customer owns the data. LIMIS presents approved context inside the workflow layer under the agreed model.
Auditability comes from submitted records, review history, user roles, exceptions, and timestamps.