Case study · Industrial AI agents

Agents that advise, engineers who decide: AI for maintenance planning at a Saudi industrial operator

A Saudi industrial operator had decades of equipment history, a work-order system, sensor data from its plants and a backlog of maintenance decisions waiting on scarce senior engineers. AI agents could read all of it faster than any team. The challenge was to let them help without letting them touch the plant, and to keep the data in the Kingdom.

Case studyIndustrial operations · Saudi ArabiaSumanta Mukhopadhyay9 min read
#ai#agents#knowledge-graph
CASE STUDY · CASE STUDY · INDUSTRIAL AI AGENTS3 Nov 2026 · 15:55 GST
At a glance
SectorIndustrial operations · Saudi Arabia
My roleFractional CTO and AI architect
EngagementAssessment, architecture and delivery leadership
ScopeAsset graph, event pipeline, read-only agent tools, recommendation workflow, OT/IT boundary, in-Kingdom hosting
What changed
  • One live view of assets, their history and their dependencies
  • Agents that draft maintenance recommendations with evidence attached
  • No agent write access to control systems; all actions through approved work orders
  • Engineers approve, edit or reject every recommendation, and the reasons are kept
  • Plant and personnel data processed in the Kingdom
Event pipeline from plant historiansDurable event logAsset knowledge graphMCP servers with read-only toolsLLM agents hosted in-KingdomWork-order system integrationEngineer review workbenchOpenTelemetry tracing

Anonymised composite. Client names, identifying details and confidential figures are withheld; public facts are cited in the references.

The situation

An industrial operator in Saudi Arabia ran several processing plants. Maintenance planning depended on a small group of senior engineers who knew the equipment's history, read sensor trends, checked past work orders and decided what to fix, when and with which spares. Their backlog grew every quarter. Data was everywhere: plant historians, a work-order system, inspection reports and spreadsheets of spares, but connecting it for one decision took days.

Why now. Large Gulf industrial companies are moving AI agents into core operations. On 1 November 2026, Aramco and the Public Investment Fund closed a deal giving Aramco 49% of HUMAIN, with Aramco planning to use HUMAIN's AI infrastructure for industrial applications1. A day later, ADNOC announced it would run AI agents on OpenAI's Frontier platform across its operations, hosted on UAE-based infrastructure with human oversight of consequential decisions2. The operator's board wanted the same benefits, with clear limits on what agents could do and where data would live, under Saudi Arabia's Personal Data Protection Law34.

What had to be true

  • Agents never touch the plant. No connection to control systems; read-only access to copies of data.
  • One connected view of assets: equipment, relationships, history and spares, current and as at any past date.
  • Every recommendation carries its evidence, so an engineer can check it quickly.
  • Engineers decide. Agents draft; approved changes become normal work orders.
  • Data in the Kingdom, including the personal data in work orders and shift logs.

Architecture

Plant (OT)
Control systemsno AI accessHistorianssensor time series
Boundary
One-way data exportOT to IT, never back
Data (IT)
Durable event logequipment and work eventsAsset knowledge graphrelationships and historyWork orders and sparesreplicated
Agents
MCP serversread-only toolsLLM agentshosted in-Kingdom
People
Review workbenchapprove, edit, rejectWork-order systemthe only path to action
Data flows one way out of the plant; recommendations flow to people; only people create work orders.

The data flow, end to end

  1. ExportHistorian data and equipment events leave the plant through a one-way export
  2. RecordEvents land in a durable log, so history can be replayed
  3. ConnectThe asset graph links equipment, failures, work orders and spares
  4. AnalyseAgents query the graph through read-only tools and draft recommendations
  5. DecideAn engineer reviews the recommendation and its evidence, then approves, edits or rejects
  6. ActApproved items become work orders through the normal system
The agent shortens the analysis; the engineer still owns the decision and the action.

The hard part: giving agents the plant's context, safely

A maintenance recommendation is only as good as its context: what this pump is connected to, how it has behaved, what failed last time and whether the spare is on site. That context was spread across systems that did not agree on names. The team built an asset knowledge graph from an event log rather than from periodic copies. The OpenTelemetry community describes the same pattern for infrastructure: producers emit entity events into a durable, event-sourced log, a live graph is rebuilt from it with full history, and both people and AI assistants query it, the latter through an MCP server5.

Pipeline diagram: OpenTelemetry producers send entity events to a durable event-sourced log, which is replayed into a live bi-temporal entity graph, queried through a GraphQL API by humans and dashboards and through an MCP server by an AI assistant
Events into a durable log, a live graph with history, and an MCP server for AI assistants: the same shape the asset graph followed. Source: OpenTelemetry blog, Matthieu Noirbusson · CC BY 4.0

Because the graph records when facts were true, an agent can ask what the plant looked like before a past failure, not only what it looks like now. And because agents reach the graph only through read-only MCP tools, with no route back into the plant, the worst a misbehaving agent can do is draft a poor recommendation that an engineer rejects. See entity resolution for knowledge graphs and securing MCP servers.

In industrial settings, the safest agent is one that cannot act. Give it rich context and no levers; let engineers pull the levers.

How it ran

Reliability engineering
  1. Asset model
  2. Recommendation review
  3. Feedback on quality
OT and security
  1. One-way export
  2. Boundary testing
  3. No-write guarantees
Data and AI
  1. Event log and graph
  2. MCP tools and agents
  3. Evaluations
Engineers defined good recommendations; OT security defined the boundary; the AI team worked inside both.
Phase 1Boundary
  • One-way export
  • In-Kingdom hosting
  • Data classification
Phase 2Graph
  • Event log
  • Asset model
  • History back-filled
Phase 3Shadow
  • Agents draft silently
  • Compare with engineers
  • Refine tools
Phase 4Assist
  • Recommendations in workbench
  • Reasons recorded
  • More asset classes
Shadow mode first: agents' drafts were compared with engineers' own decisions before anyone relied on them.

Key decisions and trade-offs

DecisionAlternativeWhy
One-way export from OTAgents query plant systems directlyNo path from AI back into control systems
Event log feeding a graphNightly copies into a warehouseCurrent state and full history in one model
Read-only MCP toolsAgents with write accessBad drafts get rejected; no bad actions happen
Recommendations, not actionsAgents raise work ordersEngineers stay accountable for the plant
In-Kingdom hostingOverseas model endpointsSimpler PDPL position and board comfort

What I'd do again, and differently

Again: record why engineers rejected or edited recommendations. Those reasons were the best training material for better tools and prompts. Differently: start the asset model with the reliability engineers on day one; naming and relationships were the slowest part to agree. Related: an energy asset knowledge graph, when agents become the user, the 3 November tech news and the Saudi Arabia page.

If you are bringing AI agents into industrial operations in Saudi Arabia or the wider Gulf, see my knowledge graph work, or analyse your challenge and bring the result to a call.

References
  1. 1
  2. 2
  3. 3
  4. 4
  5. 5
    What can you do with OpenTelemetry entity events?OpenTelemetry blog · 14 Aug 2026
FAQ

Common questions

Can AI agents safely work with industrial plant data?

Yes, if they only read data and draft recommendations. In this design, agents have read-only tools, never connect to control systems, and every action becomes a work order that an engineer approves.

Why use an asset knowledge graph?

Maintenance decisions depend on relationships: which pump feeds which unit, what failed last time and which spares are in stock. A graph gives agents and engineers the same connected view, with history.

Does Saudi data protection law apply to plant data?

Plant telemetry is mostly not personal data, but work orders, shift logs and inspection notes often name people. The PDPL applies to that personal data, including its rules on transfers outside the Kingdom.

Keep reading

Related

Open to advisory, fractional CTO & select builds

Let's talk about what you're building.

The fastest route is a free 30-minute call. Prefer to write? Send a message and I'll reply personally within two business days.

Start a conversation

How would you like to reach me?

Book a 30-min callFastest. Pick any open slot on my calendar.→ Write in GmailOpens a pre-filled draft in your browser.→ Use my email appOutlook, Apple Mail or your default client.→

I reply personally within two business days. Time zones from the Americas and Europe to the Middle East and Asia-Pacific.