Deployment
Appliance hardware spec, network requirements, IT onboarding checklist, and installation timeline.
Capped AI ships a pre-configured 1U appliance. Your IT team needs 4 hours and three inputs: power, a network port, and an OPC-UA endpoint URL. Capped AI handles the rest.
Appliance hardware
| Component | Specification |
|---|---|
| Form factor | 1U rack-mount server (Supermicro SYS-121H-TNR or equivalent) |
| CPU | Intel Xeon Gold 6438N (32-core, 2.0 GHz base) |
| GPU | 2× NVIDIA H100 80GB SXM5 (NVLink bridge) |
| RAM | 256 GB DDR5 ECC registered |
| Storage (data) | 8 TB NVMe RAID-1 (handover WORM log, historian cache, pgvector) |
| Storage (OS) | 2 TB NVMe SSD (Ubuntu 22.04 LTS, software) |
| Network | 2× 10GbE SFP+ (OPC-UA + operator tablets), 1× 1GbE IPMI out-of-band |
| Power | Dual 2200W PSU, 220V / 15A circuit required |
| Dimensions | 1U × 17.2″ × 28.0″ (H × W × D) |
| Weight | ~28 kg (62 lb) — standard pallet shipping |
| Operating temperature | 10–35°C (50–95°F) |
Network requirements
| Connection | Protocol | Port | Direction |
|---|---|---|---|
| DCS historian | OPC-UA | TCP 4840 | Appliance → DCS (inbound to DCS) |
| Operator tablets | HTTPS | TCP 443 | Tablets → Appliance |
| Capped AI Ops Cloud (heartbeat) | HTTPS | TCP 443 | Appliance → cloud (outbound only) |
| IT management (optional) | SSH over VPN | TCP 22 | IT → Appliance (on-demand only) |
No inbound connections from the internet are required or accepted. The appliance does not expose any public-facing services. All internet access is outbound-only (Capped AI Ops Cloud heartbeat). This outbound connection can be disabled entirely on request (fully air-gapped mode).
IT onboarding checklist
- Confirm 1U rack space availability in control room or server room
- Confirm dual 220V / 15A power circuits (redundant PSU)
- Confirm 10GbE switch port reserved for appliance
- Identify static IP address for appliance (or DHCP reservation)
- Identify OPC-UA endpoint URL for DCS historian
- Confirm OPC-UA credentials (username/password or certificate) for read-only session
- Firewall rule: allow TCP 4840 from Capped AI appliance IP to DCS historian IP
- Firewall rule: allow TCP 443 from operator tablet IPs to Capped AI appliance IP
- Firewall rule: allow TCP 443 outbound from appliance to
ops.capped.ai(heartbeat) - Coordinate IT contact for Capped AI field engineer visit (typically 1 day on-site)
On-site installation timeline
| Activity | Time | Who |
|---|---|---|
| Unbox and rack the appliance | 1 hour | Capped AI field engineer + IT team |
| Power-on and hardware verification | 30 minutes | Capped AI field engineer |
| Network configuration (static IP, VLANs) | 1 hour | IT team + Capped AI |
| OPC-UA historian connection and tag verification | 2 hours | Capped AI + DCS engineer |
| Operator tablet enrollment (HTTPS certificates) | 1 hour | IT team |
| Smoke test — end-to-end handover generation | 1 hour | Capped AI + shift supervisor |
| IT sign-off and documentation handover | 1 hour | All |
Software update process
Capped AI delivers software updates (LLM patches, UI updates, bug fixes) via a signed package delivered to the appliance management endpoint. Updates follow this process:
- Capped AI Ops Cloud notifies your IT contact of an available update with release notes
- Your IT admin approves the update via the Capped AI admin dashboard
- Appliance downloads and verifies the signed package (SHA-256 + ed25519 signature)
- Update is applied during the next maintenance window (configurable, default: 02:00–04:00 local time)
- Rollback to previous version available within 48 hours of any update
Hardware replacement
In the event of a hardware failure (GPU, disk, power supply), Capped AI ships a replacement component or full appliance within 5 business days (Standard tier) or 48 hours (Enterprise tier). Handover data is recoverable from the RAID-1 mirror or from the encrypted backup maintained on a secondary drive. Contact hello@capped.ai to report a hardware fault.