Roadmap

Sense, Shield, Shift, Map.

One ladder, one record. What is live, what is in trial, what is planned, and — in plain words — what is not built. Dates are plans. Readiness levels are our own assessment against the standard TRL scale.

Rung 1

live today

Sense

Compliance monitoring

What it is: LoRaWAN sensors, an append-only record, alerts that escalate until acknowledged, HACCP and medicines-storage reports with a fingerprint, datalog recovery after outages.
Readiness today: TRL 7 — system demonstrated in an operational-style environment (our assessment): the product runs end to end on a simulated estate; the first real sites are the pilot programme.
The evidence that moves it up: Pilot sites running for a full inspection cycle; an inspector accepting the record; sensor uptime and alert time-to-acknowledge measured on real estates.
When (a plan, not a promise): Pilots open now.

Rung 2

in trial

Shield

Verified Survivable Hours and verified backup

What it is: A thermal model per cabinet, time to excursion, the outage board, the protected-load map, the resilience register and the evidence pack; Verified Survivable Hours as the one number.
Readiness today: TRL 5–6 — thermal models, the outage board, the backup register and the evidence pack exist in the product and are exercised on simulated data; the drill results on real cabinets are what the trial measures (our assessment).
The evidence that moves it up: The 16-week resilience trial: prediction error during statutory generator drills, the share of critical cold assets above the estate’s own threshold, loads found unprotected or mis-mapped.
When (a plan, not a promise): Trial with NHS and Centrica-facing estates planned for 2027; the protected circuit and the generator readiness ledger join the trial the same year.

Rung 3

planned

Shift

Flexibility inside the measured envelope

What it is: Half-hourly prices and signals, a flexibility envelope per cabinet read off the same curve as the runway, a probe-emulation controller that lets the cabinet’s own thermostat do the switching, and later battery dispatch on protected circuits.
Readiness today: TRL 3 — the data model, the price feeds and the safety limits are designed; no control hardware exists and nothing is actuated (our assessment).
The evidence that moves it up: A working controller prototype on a bench; a cabinet held inside its envelope through a dispatch window with no excursion; a route to market where a 0.1 MW aggregate qualifies.
When (a plan, not a promise): Controller prototype planned for the second half of 2027; any revenue share after that. No flexibility revenue exists today.

Rung 4

planned

Map

Demand-side criticality for networks and the system operator

What it is: Aggregated, consented data on where critical cold and clinical loads sit, how long they can last and what protects them, so networks and NESO can see demand-side criticality rather than guess at it.
Readiness today: TRL 2 — a concept with a data model behind it (our assessment).
The evidence that moves it up: Enough Shield estates to aggregate; a network control room willing to receive a ranked list during a fault; the live risk feed pilot.
When (a plan, not a promise): Later; a live risk feed pilot is planned for 2027 at the earliest.

The seven offers

Each one lands on the same record.

Statuses as of 3 November 2026. The resilience page describes each in full, with the parts and prices on the evidence page.

Offer	Status	What it does
Protected circuit	trial 2027	Off-the-shelf LiFePO4 battery UPS on the fridge circuit; runway reported as Verified Survivable Hours.
Storm mode	in build	Met Office warnings and live network faults trigger pre-cooling advice, backup checks, the runway to the named contact and an incident.
Generator readiness ledger	trial 2027	Run detection, tank level and starter-battery voltage; automatic test records against HTM 06-01.
Outage playbook	in build	Keep/shed order, protected circuits, fuel and battery allocation, who to call — printable and live.
Digital drill	in build	A weekly simulated power cut on the models and the register; a one-page readiness statement with a trend.
Live risk feed	planned, pilot 2027	Sites inside a fault ranked by time to harm, shared with the control room and the ICB.
Compressor health	planned 2027	Start-current trend, short-cycling and duty creep; needs a year of data.

Not built

So nobody has to guess.

Controller hardware of any kind: the probe-emulation controller is a design, not a device.
Any actuation: Tempa does not switch, set, pre-cool or dispatch anything today. Storm-mode actions are advice to staff.
The aggregation layer (Map): no data is shared with any network or system operator.
Battery dispatch, flexibility bidding or any flexibility revenue.
Native mobile apps in the stores: the Expo app exists in the repository and has not been run on a device.
UPS and generator telemetry adapters: readings for those channels exist in the data model; integrations are manual logging or planned.

The market context behind the plan — storms, the redesigned Demand Flexibility Service, the North Hyde response — is on the evidence page.