Runink FACE

Cold Chain and Yard Safety

A container drifts warm overnight and nobody opens the door until morning. What the yard camera already sees, read against the handover record and the paperwork the consignment travels with.

20 May 2024 · 8 min read

Runink FACE · Reactive logistics

This is a Runink FACE scenario, its yard-facing end. It is an illustration of the mechanism, not an account of a deployment. What the software reads here is the paperwork and the images a cold chain already produces — the consignment record, the handover, the photograph taken at the door — against the rule that governs the shipment. What FACE is.

In Short

  • There is no live sensor feed into FACE today, and we are not going to imply there is. The connectors for sensor, tag, warehouse, yard and transport systems are placeholders that fail on purpose, so the reasoning behind them can be exercised against a seeded file while the real path is built. A temperature excursion on your own units is not something this reads yet.
  • The yard camera is the part that is built. A frame arriving from a yard or infrared camera is checked to be an actual image before anything reads it, reduced to a size a model can take, and read by a vision model running on hardware you control. What comes back is a written observation tied to the frame it was read from.
  • A cue is a request, not a lock. FACE can broadcast a cue — slew that camera, hold those crane moves — to whatever is subscribed to the yard's event stream. It contacts no actuator, there is no crane controller on the other end of it, and the code says so in as many words so that a broadcast can never be read as a move having been stopped. If somebody has offered you a dangerous-goods interlock, this is not one.

The Reading Has To Arrive First.

The reading that condemns a load is recorded hours before anybody looks at it. The whole problem is the gap between the two — and closing it starts with a sensor path into the software, which is the piece we have not built.

Where It Goes Wrong

A cooling unit starts to fail on a Tuesday night. The sensor records it. Nobody is watching at that hour, and the data is not looked at until the container is opened at the far end.

By then the question has changed. It is no longer "can we save this load", it is "who pays for it". That is a much more expensive question, and it is the only one left.

The reading was there all along. Nobody was reading it.

The yard has the same shape of problem. Rules about which goods may sit near which are known, written down, and checked by a person who is also doing four other things.

What Happens Instead

Start with the part that is not finished, because it is the part the rest of this depends on. The reading has to reach FACE before any of it matters, and today it does not. The connector for a sensor, tag, warehouse or yard system is a placeholder that fails deliberately, so that the reasoning built on top of it runs against a seeded file instead. On an ordinary instance with nothing connected, the queue is empty. It used to be filled with those seeded examples, presented as though they were your operations, and that was removed rather than dressed up.

What is built is the camera side of the yard. A frame is validated as a real image before a model sees it, scaled down to something a model can take, and read by a vision model on your own hardware — so the reading of the yard happens where the footage already is, and the footage does not go out to anybody's API to be described. The observation comes back attached to the frame it came from, which is what makes it arguable rather than assertable.

On top of that, a cue can be broadcast to everything watching the yard's event stream. This is worth being exact about, because the category sells it as enforcement: the broadcast asks, it does not act. No actuator is contacted, there is no crane controller in the process to contact one with, and the code refuses to report a cue as a move having happened. That refusal is the feature. An interlock that cannot fire is worse than no interlock, because it answers "is this handled?" with a confident yes.

Where there is something to act on, it waits as a drafted move, and a named person approves, edits or rejects it with the sign-off kept on the record. Approving is what sends it. And where a step in that move has nothing behind it — a write into a yard or transport system, for instance — the response names the step that did not happen instead of reporting success, so "approved" and "done" stay two different words.

Who Owns This

Three desks, and what each of them is holding today.

  • The yard supervisor. Today the rules about which goods may sit near which are known, written down, and checked by a person who is also doing four other things. What changes is that the frames the yard cameras already record get read, and what comes back is a written observation attached to the frame it came from — a thing you can open and disagree with, rather than a line in a book.
  • Compliance and risk. Today a segregation finding exists if somebody happened to walk past. What changes is that a cue can be put on the yard event stream for whatever is watching it, and the move that follows is drafted and waits for a named person to approve, edit or reject it. The sign-off is kept with the frame that started it.
  • IT and information security. Today a camera product means asking whose service the yard footage is being sent to in order to be described. What changes is that the frame is validated as a real image and read by a vision model on hardware you control, so the review is about machines you already run.

How You Would Know It Worked

Every figure below is yours, not ours. Write down where you stand today, because the baseline is gone for good the moment anything changes.

  • What you write off on chilled and frozen stock. The write-off account in your ledger and the quality rejection log for the same period, with temperature cases separated from every other cause.
  • Hours from the first bad reading to somebody acting. Sample last quarter's temperature events. Note when each was recorded, and when a person first did something about it.
  • How many drifts were caught while the load could still be saved. Count them as a share of all drifts. This is the number the rest of it rests on.
  • Safety findings in the yard. Your own inspection and incident records, counted per quarter, split between rules about keeping goods apart and everything else.
  • What your cameras already record and nobody reads. Count the cameras in the yard, then count how many hours of what they record is ever looked at by a person. This is the gap the vision side of this works in, and it is usually the largest number on the list.

Bring your write-off account and a day of yard camera footage.

Questions A Yard Team Asks

What comes up before anybody talks about a contract.

What does the camera side actually read?
A frame from a yard or infrared camera. It is checked to be a real image before anything reads it, reduced to a size a model can take, and read by a vision model running on hardware you control. What comes back is a written observation tied to the frame it was read from.
Does the footage leave the site?
The reading happens where the footage already is. The frame is handled on your own hardware and described there, and the observation comes back attached to that frame. The yard is read by machines that are already in the yard.
If it sees something, does it stop the crane?
It broadcasts a cue — slew that camera, hold those moves — to whatever is subscribed to the yard event stream. The cue is a request, and the code will not report it as a move that was stopped. What turns a cue into a move is a named person approving the drafted action.
Who signs off an action it drafts?
A named person, whose approval, edit or rejection is kept on the record. Approving is what sends it. And where a step behind that approval has nothing implemented yet — a write into a yard or transport system is the honest example — the response names the step that did not happen, so approved and done stay two different words.
What happens when the reading is wrong?
Every observation comes back attached to the frame it was read from, so whoever reads it can open the picture and argue with it. Nothing moves on an observation by itself; the move is drafted and waits for a person.
What should we bring to a first conversation?
Your write-off account and a day of yard camera footage. Bring one more count with them: how many cameras are in the yard, and how many hours of what they record is ever looked at by a person. That gap is the space the camera side works in.

Runink: Data You Can Trust. Decisions You Can Defend.

Runink FACE reads the logistics records you already hold, compares them against the rules that govern them, and drafts an action for the person who owns the decision. It runs on infrastructure you control.