Group autonomy policy
One policy model for the group with per-site override and approval chains. Tag allow-lists, operating envelopes and limits reviewed and versioned like code.
Enterprise
One policy. Every circuit. Every concentrator.
Multi-site mining groups standardise on Orebex for the governance as much as the control: one autonomy policy with per-site override, one audit trail, fleet-managed plant-edge nodes, and ore, mineralogy and recovery models that stay private to each plant.
Illustrative scenario: Line 1 · SAG and ball circuit, rougher bank 2 · copper porphyry blend, one shift, one approval gate
Enterprise features
What the Enterprise tier adds
Items marked planned follow the 6 to 12 month roadmap.
SSO, SCIM and tag-level RBAC
Named approvers, role-based access down to the tag. Planned for the 6 to 12 month release.
Plant-edge fleet management
Model versions promoted by circuit with canary rollout and automatic fallback across every concentrator. On-prem options for remote sites.
Custom ore, mineralogy and recovery models
Per-site process models built on the plant's own ore body, blends and circuits and kept private to that tenant.
Cross-plant benchmarks
Recovery, grade, energy, water and reagents compared across concentrators without moving ore-body data or schemes across tenant boundaries. Data-network tiers are planned.
Dedicated engineer, SLAs
A dedicated deployment engineer, quarterly model review per concentrator and SLA terms set per agreement.
Deployment
Where it runs
The plant edge is always local. The control plane can be cloud, on-prem or absent.
| Option | Plant edge | Control plane | For |
|---|---|---|---|
| Cloud control plane | Jetson nodes at the bank and mill | Orebex cloud, per-tenant isolation | Most concentrators; cloud training optional |
| On-prem control plane | Jetson nodes at the bank and mill | In the site's data centre | IP-sensitive miners, strict controls |
| Edge-first remote site | Jetson nodes, fail-safe through outages | Intermittent link to cloud or on-prem | Remote concentrators with poor connectivity |
| Edge-only degradation | Returns to APC or DCS last known-good | Unreachable | What happens on any control-plane loss |
Enterprise
Standardise autonomy across the group
One policy model, one audit trail, one benchmark across every circuit in every concentrator, with the ore, mineralogy and recovery models kept private to each site.
- SSO and role-based access down to the tag level, planned for the 6 to 12 month release
- Group-wide autonomy policy with per-site override and approval chains
- Cross-plant benchmarking on recovery, grade, energy, water and reagents
- On-prem and plant-edge deployment for remote and IP-sensitive sites
- Edge autonomy that survives control-plane loss by returning to the DCS last known-good state
- Dedicated deployment engineer and quarterly model review per concentrator
Run timeline · scenario
One scenario run, step by step
Every Orebex run is an ordered, inspectable sequence. This is run_4b9e27 on Line 1 · SAG and ball circuit, rougher bank 2 · copper porphyry blend. Scenario completes in 10 steps with one approval gate. P80 held at 148 µm as the blend hardened, froth stability recovered on rougher bank 2 after an air trim, a collector-dose change was approved by the shift metallurgist, predicted recovery held inside the plan, lot C-20931 released with full genealogy.
run_4b9e27
Line 1 · SAG and ball circuit, rougher bank 2 · copper porphyry blend
illustrative scenario
SUCCEEDED
-
01
ingest.shift
SUCCEEDED
0.7 s
Concentrator Orchestrator · Pulled the shift plan from the concentrator MES: copper porphyry blend B-14, P80 target 150 µm, concentrate grade at or above 25% Cu, recovery target per the geometallurgy model, energy and water budgets. Locked the operating envelope for the blend.
-
02
twin.simulate
SUCCEEDED
58 s
Concentrator Twin · Simulated 32 candidate grind, air and reagent schemes on the as-run twin for the hardening blend, ranked on predicted recovery, concentrate grade, kWh per tonne and water per tonne. Two candidates breached the thickener bed limit and were discarded.
-
03
grind.setpoint
SUCCEEDED
3 m 40 s
Crush-and-Grind · SAG-1 feed trimmed 3% and cyclone water raised as load and power signatures read a harder feed. P80 from the particle-size analyzer held at 148 µm against the 150 µm target; mill power stayed inside the energy budget.
-
04
froth.read
SUCCEEDED
continuous
Grade-and-Froth · Twelve froth cameras and the online XRF on rougher bank 2 fused at the edge. Froth stability on cells 3 and 4 fell as the blend hardened; predicted recovery drifted 0.4 points below plan. Early warning published to the control agents.
-
05
approve.human
APPROVAL
1 m 12 s
Concentrator Orchestrator · Scheme #7 raises collector dose 6% on rougher bank 2, above the standing reagent scheme. Reagent-scheme changes stay supervised on this blend, so the step was held for the shift metallurgist and approved at 07:19:44.
-
06
float.dose
SUCCEEDED
2 m 05 s
Float-and-Reagent · Approved collector dose applied with an air trim of 4% down on cells 3 and 4 inside the envelope. Froth stability recovered within eight minutes; predicted recovery returned to plan with concentrate grade read at 25.6% Cu.
-
07
classify.cyclone
SUCCEEDED
42 s
Separate-and-Classify · One cyclone brought online in cluster 1 as feed density rose with the hardness change, holding overflow size and circulating load inside the plan.
-
08
dewater.thickener
SUCCEEDED
continuous
Thicken-and-Dewater · Tailings thickener TH-2 flocculant dose trimmed as bed pressure rose; underflow density held and overflow clarity stayed inside the water-recovery target.
-
09
optimise.targets
SUCCEEDED
18 s
Throughput-and-Recovery · Whole-plant targets recomputed for the hardened blend: feed rate, P80, air and reagent targets handed to the control agents with recovery, grade, energy and water inside the budget. The losing candidates and their scores are in the run record.
-
10
lot.release
SUCCEEDED
1 m 30 s
Quality-and-Conformance · Concentrate lot C-20931 released: genealogy written (blend, grind record, reagent and air moves, froth and grade reads, approvals, dewatering record, assays as they land) and dispositioned against the concentrate spec with cited evidence for the metallurgist's sign-off.
Guardrails
An agent that can move a reagent pump needs a leash
Orebex writes to production equipment. Every capability is scoped, every write is policy-checked against the operating envelope, and every action is written to an append-only audit log the plant owns.
- Bounded action space. Each agent writes only to an explicit tag allow-list, inside per-tag rate and magnitude limits and the operating envelope for the blend.
- Policy engine before every write. Autonomy level, shift, ore type, interlock state, water and tailings constraints and metallurgist policy are evaluated before a setpoint moves.
- Human-in-the-loop gates. Reagent-scheme changes and lot release wait for a named approver. Robotics stays assistive until the site safety case is proven.
- Immutable audit log. Append-only and exportable. Every action records source evidence, the envelope applied, confidence, estimated recovery, grade, energy, water and reagent impact, rollback path, approver and lot scope.
- Hard fallback. Loss of the edge node, the network or a model returns control to the APC or DCS last known-good state. Interlocks are never in Orebex's path, and the edge runs fail-safe through a network outage.
- Tenant and ore-body isolation. Ore-body data, geometallurgy models, reagent schemes and recovery records never cross a customer boundary. On-prem and edge deployment is available for remote sites.
Compliance posture
| Item | Scope | Status |
|---|---|---|
| SOC 2 Type I | Cloud control plane | QUEUED Planned, first 6 months |
| SOC 2 Type II | Cloud control plane | QUEUED Planned, 6 to 12 months |
| SSO and RBAC | Console and approvals | QUEUED Planned, 6 to 12 months |
| Environmental and water assurance packages | Recovery, energy, water and tailings evidence | QUEUED Planned, 6 to 12 months; not a certification claim |
| Standards-cited reasoning | ISO, ICMM, tailings and water governance documents | RUNNING In the design, every answer cites its source |
| Per-tenant and ore-body isolation | Ore data, schemes, models, memory | RUNNING In the design from day one |
| On-prem and plant-edge deployment | Remote and IP-sensitive sites | RUNNING Design option |
Autonomy
Four levels, set per agent and per tag
A concentrator does not go from manual to unattended in one step. Orebex makes the level explicit, auditable and reversible at any time. The first release runs shadow mode, then assist mode, then bounded autonomy on low-risk grinding and flotation loops. Reagent-scheme changes stay supervised until the ore type is characterised.
| Level | What the agent does | What the human does | Where it sits in a pilot |
|---|---|---|---|
| L1 · Shadow | Reads froth, analyzer, particle, mill, flotation, dewatering, robot and MES signals; predicts and recommends; writes nothing | Runs the circuit as today; compares predictions to assays and metallurgist outcomes | Shadow mode, baseline measured first |
| L2 · Assist | Proposes grind, reagent, air, froth and dewatering moves with evidence, confidence, envelope and rollback path | Approves each action in the review console | Assist mode, the remainder of a 90 to 120 day pilot |
| L3 · Bounded | Executes pre-approved low-risk grinding and flotation loop moves: feed, water, air, level, flocculant, cyclones online, inside APC, DCS and envelope limits | Approves reagent-scheme changes and lot release | Graduated autonomy, after audited accuracy and ROI |
| L4 · Constrained auto-control | Supervised reagent-scheme adaptation for characterised ore types, across circuits and sites | Sets the envelope; reviews the shift record and the evaluation results | Planned; after golden-dataset evaluation, twin validation and metallurgist sign-off |
Integrations
It speaks concentrator, not cloud
Orebex reads and writes through the systems already in the plant. No rip and replace, no parallel historian, no new HMI to learn. Vendor names are examples of systems found in concentrators, not certified integrations; connector availability is confirmed per site.
Mill control and APC (Metso, FLSmidth, ABB, Weir class systems)
Load, power, feed and water reads, guarded writes
Flotation APC and expert optimisers (ABB Expert Optimizer, Metso ACT, Honeywell, Andritz class systems)
Air, level and reagent reads; supervised reagent writes
Froth cameras and froth-vision systems (Metso VisioFroth, Stone Three, JKTech class tools)
Camera streams fused by Frothix
Online XRF and particle-size analyzers (Malvern Panalytical, Thermo Fisher and CIDRA, Metso, FLSmidth PSI class systems)
Grade and P80 reads per stream
Collector, frother, depressant and flocculant dosing systems
Dose reads; supervised and bounded writes
Cyclone clusters, separators, thickeners, filters
Pressure, density, bed and cycle reads, guarded writes
Plant DCS tags and time-series historians
Backfill, replay, time alignment
LIMS and assay results
Delayed labels for every prediction
FAQ
Straight answers
The questions processing managers, metallurgists and sustainability leads ask in the first meeting.
Yes, but only within an explicit tag allow-list with per-tag rate and magnitude limits, inside the operating envelope for the blend, and only at the autonomy level your plant has set. Design partners start in shadow mode, where Orebex writes nothing. Reagent-scheme changes stay supervised by a named metallurgist until the ore type is characterised.
Control returns to the APC or DCS last known-good state. Orebex is a supervisory layer on top of the control systems and interlocks you already run, never a replacement for them, so an outage degrades the circuit to its current way of running, not to a stop. The edge is designed to run fail-safe through a network outage.
Advisory recommendations start from the twin and the shift plan in the first weeks. Froth, grade, recovery and grind-response prediction improve as circuit history and assay-labelled outcomes accumulate per ore type. The compute plan sizes training at 2,000 to 8,000 GPU-hours per commodity model family once partner data exists, a design target.
Only if you choose cloud training. Ore-body data, geometallurgy models, reagent schemes, process models and recovery records are isolated per tenant and never used to train another customer's models. A fully on-prem deployment at the plant edge is available for remote and IP-sensitive sites, and federated learning across sites is planned and waits on data-rights agreements.
You are, the same as with any control strategy, which is why every write is policy-checked, bounded, logged and reversible, and why anything above your risk threshold waits for a named approver. The audit log records the request, the evidence, the envelope applied and the human decision.
A paid pilot of 90 to 120 days on one grinding or flotation circuit, scoped to a single wedge with a success metric written into the order form: recovery gain, energy per tonne saved, water reduction or reagent per tonne. The first weeks baseline recovery, energy and water in shadow mode from your own assays and meters.
Get started
Standardise the group
Start with one grinding or flotation circuit and one measurable baseline. A paid pilot on froth-vision recovery control, grind-size energy or reagent dosing shows the number before you commit further.