Human Oversight and the Control Room
Automation runs the fast loops, but humans set intent, supervise, and hold authority to intervene from the control room.
Division of labor
The fast control loops run far faster than any human can react, so they are fully automated. Humans work at a higher level: they define the scenario, set the goals, approve the pulse schedule, watch the discharge unfold, and decide between shots what to change. The control room is where this supervisory work happens.
Roles
- Session leader, who owns the plan for the run
- Engineer-in-charge, responsible for machine safety
- Diagnostic and system specialists monitoring their subsystems
- The control system itself as the fast-acting operator
Information design
A control room must present the right information without overwhelming. During a discharge, operators cannot read raw traces fast enough, so displays summarize state, highlight deviations, and surface off-normal flags. Good information design reduces the chance that a developing problem is missed among normal signals.
Authority and intervention
Humans retain the authority to stop a discharge. Because a shot lasts seconds, most in-shot faults are handled by automation faster than a person could act, so the human role in-shot is mainly to authorize automated responses and to trigger a manual stop if something outside the model's scope appears. Between shots, human judgment dominates.
In the Kronos program
Kronos designs its control room around this layered authority: automation owns the millisecond loops of the Hyperion breeder and the burner generators, while operators own intent and oversight. Training for these roles uses the flight simulator, so operators rehearse both routine runs and rare fault sequences before the machines exist in hardware.