Skip to content

PAN Lab example

Predictive maintenance on a high-speed rail fleet

The contract that prices every miss

A high-speed rail fleet is maintained by the manufacturer as a service, against a promise that refunds the full fare if a journey runs more than fifteen minutes late. Modeled on a documented deployment: 300 sensors per train read every five minutes, joined to the failure reports crews write, with discovered signatures like an engine-temperature pattern preceding failure by three days - and only one journey in 2,300 noticeably delayed. The party tuning the analytics is the party paying for misses. Watch the two quiet dependencies: a failing sensor looks exactly like a failing train from inside the stream, and the discovery loop runs on reports people have to keep writing.

Stylized model of a documented deploymentIndustrial QA & operations AI

Open this example in PAN Lab v0.1 to apply pressures and levers and watch what the system does.

What this models

This example runs on the Fleet-maintenance-class whose contract prices the miss network: 6 components and 13 pathways between them. Every context in the Lab is a stylized model, never a reconstruction of any actual deployment, and each assumption behind it carries a provenance label.

Evidence base: 3 assumed · 1 published baseline. In the Lab, the shaded evidence band behind each headline readout draws its width from the least-established class below.

  • assumed

    The governance shape is uptime-as-contract: the service provider operates and tunes the analytics and pays for misses under the operator's fifteen-minute refund promise, so the accountability seam the domain's other deployments watch - vendor tunes, deployer suffers - is closed by contract here. The refund-promise accounting is drawn present, at a low level, because it demonstrably runs: the one-noticeably-delayed-journey-in-2,300 figure is its output. A modest workload against ample capacity, the catalogue's rare over-resourced case, because the contract prices every miss into the organization that can prevent it - the response side is resourced by construction.

  • assumed

    The two latent checks are the dependencies the record names. The sensor-vs-machine discrimination is the empty model-side check: the telemetry stream is the analytics' only view of the machine, so a failing sensor and a failing train arrive identically until a person goes and looks. The discovery loop's dependence on human documentation is carried on the record pathways: the failure signatures were found by joining sensor streams to failure reports crews write for their own purposes, so what the analytics can learn is bounded by what people keep writing down - a quiet input nobody prices.

  • baseline

    Honesty caveat carried on the diagram: the record is a vendor-side trade case study. The fleet outcome (one journey in 2,300 noticeably delayed, by five minutes) and the discovered signatures are documented; the analytics' own precision is not published, so no model-level figure appears here and none may be invented.

  • assumed

    No passenger outcome is modeled here. This Lab reads institutional propagation only, and passengers are boundary-only. The delay figures, the refund-promise terms, and the discovered signatures live in the case file, and are never computed from anything in this diagram.

What this example does not show

  • No passenger outcome is modeled. The Lab reads institutional propagation only; passengers are boundary-only, and the delay figures, promise terms, and discovered signatures live in the case file, never computed on this diagram.
  • The record is a vendor-side trade case study: the fleet outcome is documented, the analytics' own precision is not published, and no model-level figure is invented here.

Sources and evidence

What this example rests on, claim by claim. Every entry resolves to the same ledger the Evidence Registry publishes.

  • A rail service provider operates sensor-based predictive maintenance on a high-speed fleet under a priced availability contract: roughly 300 sensors per train read at five-minute intervals (on the order of a million readings per train-year), overlaid with human-written failure reports, maintained against a promise that refunds the full fare if a journey is delayed more than fifteen minutes. The documented results are only one noticeably delayed journey in 2,300 (by five minutes) and discovered failure signatures such as an engine-temperature pattern preceding failure by three days. The fleet outcome is documented in a vendor-side trade case study; the analytics' own precision is not published, so the model-level figures remain unstated while the operational outcome is on the record.

    empirical
    • Trade press RCR Wireless News (2016, September 12). Case study: Siemens reduces train failures with Teradata Aster (Renfe Velaro E predictive maintenance). https://www.rcrwireless.com/20160912/big-data-analytics/siemens-train-teradata-tag31-tag99
  • The governance shape of this deployment is uptime-as-contract: the party that operates and tunes the analytics is the service provider who pays for misses under the refund promise, so the incentive to prevent a delay is priced into the same organization that holds the model levers - an alignment the domain's other deployments lack. Two documented dependencies temper it: the failure signatures were discovered by joining sensor streams to human-written failure reports, so the discovery loop runs on documentation crews write for their own purposes; and a continuous sensor stream is the analytics' only view of the machine, so a failing sensor and a failing train arrive looking the same until someone goes and looks.

    empirical
    • Trade press RCR Wireless News (2016, September 12). Case study: Siemens reduces train failures with Teradata Aster (Renfe Velaro E predictive maintenance). https://www.rcrwireless.com/20160912/big-data-analytics/siemens-train-teradata-tag31-tag99

Where this connects

Institutional pressures in this domain

  • Reviewer bottleneck — One fixed-capacity checking stage sits between AI output and consequence; everything queues behind it.
  • Austerity & recovery incentives — Cost-cutting and overpayment-recovery targets tilt the system toward denial and enforcement errors.
  • Data & policy drift — The world, the intake process, and the rules change under a system trained on how things used to be — two mechanisms with different remedies: the statistical properties of what the system processes move (concept drift), or the mixture of inputs arriving in deployment differs from the mixture it was trained on (covariate shift).
  • Vendor opacity — The deploying institution cannot inspect the model, data, or update pipeline it is accountable for.
  • Compliance over substance — Paper controls (sign-offs, checklists) satisfy audits while the behavior they describe erodes.

All of them in context on the Industrial QA & operations AI domain page.

Levers available here and the patterns behind them

Documented case histories