Skip to content

Governance: Why your UNS won't fail at the first site but will at the second

by Anthony OlazabalSEP 23, 20268 min read
TL;DR

A unified namespace almost always works at the first site. Governance, not MQTT, is what decides whether it holds up at the second site and beyond.

  • UNS failure shows up at the second site, when naming, units, and payload structures start to diverge between sites.
  • In energy, governance has to live at the edge, in-stream, because by the time bad data reaches a warehouse, the operational window has passed.
  • Active governance, not a static standard document, is what catches deviations before they corrupt a forecast, a dispatch decision, or an AI recommendation.

Who this blog is for: CDOs, CTOs, VPs of digital, and transformation leaders deciding where to invest as their UNS program scales beyond a single site, and what to stop funding.

At the first site, it's easy to make a pilot work. A team connects a handful of assets, MQTT topics appear, data flows, a dashboard lights up and the use case delivers, so everyone is encouraged and the program has momentum.

But when the second site joins, the cracks start to show. Its topic names are slightly different. Its payloads are structured differently. One site publishes active power in kilowatts, the other in watts. One wind farm sends availability_state as a string, the other sends a numeric ratio. One uses UTC timestamps, the other local time. One pipeline sensor includes quality codes; the other doesn't. Nothing is broken, exactly, but the two sites no longer speak the same language, and the namespace that was supposed to unify them has started to mirror the old mess at a higher frame rate.

The core issue: When a UNS does fail, it is not because MQTT can't move the data, but when the namespace becomes an unmanaged topic tree. That failure rarely surfaces at the first site, and is only exposed at the second.

Governance separates "we can see data" from "we can trust data enough to operate, report and act on it." Governance has to live close to where the data is created because, in energy, by the time bad data reaches a warehouse, the operational window is already gone. The uncomfortable consequence, which I'll defend, is that a successful pilot is the most challenging moment in a UNS program because it tempts you to scale before you got solid governance in place.

This is the fourth post in the From fragmented data to agentic operations: A field guide for energy series. We've now made the case for a UNS, designed it and connected live data over MQTT. This post is about the thing that decides whether all of that holds together as you scale.

Why governance becomes critical when scaling a unified namespace

In manufacturing UNS work, governance is important. In energy, it is load-bearing because the data not only feeds dashboards, it can influence dispatch, balancing forecasts, maintenance priorities, warranty claims, emissions reporting, grid operations, trading positions and eventually AI recommendations. The blast radius of a wrong number is operational, financial and sometimes regulatory.

Make that concrete. A wind-speed value published as text instead of a decimal silently breaks a power-curve analysis. A solar inverter reporting watts where the consumer expects kilowatts triggers a false underperformance investigation and a wasted truck roll. A pipeline sensor publishing the wrong unit corrupts methane-event triage, a safety issue, not a reporting one. A BESS state-of-charge value arriving without a quality code leads a dispatch agent to trust a stale reading. None of these are exotic, they are the ordinary consequence of an ungoverned second site.

Governance in energy is production engineering, not documentation, and it should be resourced like it.

What the contract has to cover

A governed namespace is a contract between data producers and consumers. The contract should specify topic hierarchy, naming conventions, payload structure, data types, units of measure, timestamp format, quality-code conventions, metadata requirements, retained-message strategy, QoS and message-rate expectations, security and authorization boundaries, ownership, an approval workflow, change control, and a versioning approach for models and payloads.

The principle underneath all of it is simple. Every topic and every payload needs an owner, a purpose and a defined consumer contract. If nobody owns a topic, nobody can safely change it. If nobody defines the payload, every consumer has to guess, and guesses diverge. If nobody controls change, every downstream system is one upstream edit away from breaking.

Energy adds complexity manufacturing doesn't have

Manufacturing governance often starts and ends with ISA-95. Energy needs more, because there's no energy-specific UNS standard and the asset classes carry their own identity standards. Governance has to answer questions ISA-95 never raises:

  • Which standard applies to this asset class (KKS for the power plant, IEC 61850 logical nodes for the substation, well and pad and field identifiers for upstream)?
  • Which identifier is authoritative when two systems disagree?
  • Which system owns the asset registry?
  • Which KPIs are computed centrally versus published by the OEM?
  • Which values are cleared for operational decisions, which are informational only and which are approved for AI use?

Leave those unanswered and every site answers them differently, which is, again, the second-site failure, just one layer deeper. For more on structuring a Unified Namespace around energy-specific assets and identifiers, read our blog, A Wind Farm Is Not a Factory Line: Designing a Namespace for Energy Assets.

Why fixing the UNS downstream is too late

The instinct of most data organizations is to fix this in the analytics layer: ingest everything into a lake or warehouse, then clean, map and reconcile. For quarterly reporting, that's fine. For operations, it's structurally too late.

Energy events happen in real time and don't wait for a batch job. A grid disturbance, a turbine alarm, a compressor vibration shift, a methane anomaly, a BESS thermal event, if the data only becomes trustworthy after it lands in a warehouse, you've already missed the moment the data existed to inform. The validation has to move to where the data is born. This is the architectural argument for doing governance in-stream, at the edge, rather than as a downstream cleanup pass.

What active governance looks like in UNS

There's a real difference between static governance, a PDF that describes the standard, and active governance, a system that continuously checks whether live data conforms to the model. Active governance means auto-discovering streams from connected sites; cataloging topics, payload fields, data types and origin; mapping discovered data into the governed namespace; applying reusable models across sites; validating types and structures; detecting deviations the moment live data stops matching the model; normalizing or computing missing values; and publishing governed outputs back into the namespace.

The key move is in-stream transformation and validation close to the source, so bad data is caught at the edge before it corrupts a forecast, a trading position, a warranty claim or a model. This is the capability gap between a topic tree and a trusted foundation. A topic tree tells you what was published. Active governance tells you whether to believe it.

A worked example: acquiring an offshore wind farm

Picture an operator acquiring an offshore wind farm. The asset produces, SCADA is stable, OEM data exists. The asset manager wants it on the same portfolio scoreboard as the existing solar, hydro and BESS by next quarter.

The ungoverned path is depressingly predictable: export the OEM tag list, map tags by hand, argue about KPI definitions, write custom scripts, rebuild dashboard logic, reconcile conflicting numbers, then repeat the whole exercise for the next acquisition. Every acquisition is a project.

The governed path turns it into a rollout:

  • Connect the site through the edge and MQTT backbone.
  • Use discovery to observe topics, payloads, and types. Approve the relevant streams into the namespace.
  • Apply a standard renewable asset model.
  • Normalize the OEM-specific fields, the string-based availability state being the classic one.
  • Compute the missing KPIs, capacity factor and the rest.
  • Validate live data against the model.
  • Publish governed metrics back into the namespace.

The outcome isn't just faster integration; it's that the new farm reports trustworthy, comparable numbers from day one instead of after a quarter of reconciliation.

Governance is the path to AI

There's a tension worth naming honestly: governance feels like friction and AI teams often experience it as the thing slowing them down. The reframe is that ungoverned data is what actually kills AI in production, quietly, after a successful pilot, exactly like the second-site failure. A model that recommends a maintenance action, a dispatch change or a leak response has to know whether its inputs are valid, current, contextualized and approved for that use.

A governed namespace tells the model what asset produced the data, which unit and type apply, whether it passed validation, what metadata describes the asset, what consumes it and which actions are allowed, advisory, or prohibited. Whilst it’s often framed as bureaucracy, the reality is it’s the precondition for letting software act on your operations.

Governance: Moving from pilot to production

Don't celebrate the pilot, pressure-test it. The moment your first use case works, the right next question is not "what's the second use case?", it's "if I connect a second, differently-configured site to this namespace tomorrow, what breaks?"

Before scaling this should be run as a deliberate exercise: assign a namespace owner, define the top-level hierarchy, pick the domain identifiers per asset class, lock down standard payloads, units, timestamps and quality codes for the first use case, and put validation at the edge before consumers ever see the data.

It doesn't need to be perfect on day one. It needs to be intentional from day one, because the second site is coming whether you're ready or not.

With governance in place, the namespace finally produces something the business has been fighting over for years: a single, trusted number.

The next post in this series is about the most contested of those numbers (KPIs) and why the answer is to stop settling them in meetings and start engineering them into the data.

FAQs

UNS governance is the set of rules that define how data is named, structured, and validated inside a unified namespace: topic hierarchy, payload structure, units of measure, timestamps, and ownership. Without it, a unified namespace is just a topic tree. With it, data becomes something operators can trust enough to report on and act on.

The first site is built by one team, so its conventions stay consistent by default. The second site introduces a different team, different naming, and different units, exposing gaps the first site never revealed. The namespace doesn't break technically; it stops meaning the same thing across sites, which is a governance failure, not an MQTT failure.

A governance contract should define topic hierarchy, naming conventions, payload structure, data types, units of measure, timestamp format, quality codes, ownership, an approval workflow, change control, and versioning for models and payloads. Every topic and payload needs an owner and a defined consumer contract, or every downstream system ends up guessing.

Energy events, grid disturbances, turbine alarms, methane anomalies, happen in real time and don't wait for a batch job. If data only becomes trustworthy after it lands in a warehouse, the operational window to act on it has already closed. Validation has to happen in-stream, at the edge, where the data is created.

An AI model acting on operational data needs to know what asset produced it, which unit and type apply, whether it passed validation, and which actions are allowed or prohibited. A governed namespace provides that context. Ungoverned data is what quietly breaks AI in production, often right after a successful pilot.

Share this on social media

Anthony Olazabal

Anthony Olazabal

Anthony is the Director of Solution Engineering at HiveMQ, leading the Solutions Engineering organization and helping customers and partners design and adopt scalable, enterprise-grade solutions around MQTT, IoT, and cloud technologies. With extensive experience across software development, cloud architecture, and infrastructure, he combines deep technical expertise with a strong focus on business and customer outcomes. His experience spans IaaS, PaaS, and SaaS, with a particular focus on cloud-native architectures, distributed systems, and connected technologies. Anthony is passionate about helping organizations turn complex technology challenges into practical, scalable solutions and about driving the adoption of MQTT and IoT architectures across the enterprise. He regularly shares his insights and experience on MQTT, IoT, cloud technologies, and the evolution of connected systems.