Water utilities
Connect asset evidence, readings, work management, and people. Begin with decision support and reviewed work requests before considering any change to physical operations.
Opportunities
Each opportunity uses one proposed agent. The autonomy and learning levels and the zones are proposals, not observed deployments.
- Agent
- Network anomaly agent
- What it does
- Gathers telemetry, work orders and asset history for an unusual pressure or flow reading. Weighs a faulty sensor, planned work and a real network issue. Prepares a work request for a person to review
- Autonomy and learning
- Delegated tasks (A2), curated learning (L1)
- Zone or rule it touches
- Safety actuation, as a boundary. It never operates valves or pumps, changes treatment, or writes to SCADA
- Evidence status (D017)
- Supported for advice only: named utilities run machine learning that alerts staff. No precedent for a language-model agent doing this triage
- Agent
- Compliance evidence agent
- What it does
- Asks the owning team for a specific record. Checks issuer, date and scope. Prepares a traceable package for the reviewer
- Autonomy and learning
- Delegated tasks (A2), curated learning (L1)
- Zone or rule it touches
- Formal regulatory records. A named person attests
- Evidence status (D017)
- Design proposal. No published precedent at a named utility
SCADA (supervisory control and data acquisition) is the control-room system that monitors and remotely operates pumps, valves and treatment plant. Delegated tasks (A2) means a person reviews every output. Curated learning (L1) means people update what the agent knows, offline, and review each change before release. Both scales are on the autonomy contract. The zones are set out on the deterministic zones page.
The estate
A metropolitan water and wastewater utility runs systems in all fourteen layers. The table names the main ones. Vendors in brackets are examples, not a claim about any named utility. The table is industry knowledge, not a survey.
A water utility bills households directly, usually every quarter. Most meters are still mechanical and read by a person, and digital meters are being rolled out. There is no wholesale market like electricity's. The utility answers to an economic regulator, a health regulator and an environment regulator.
- Main systems at a water utility
- Data centres plus public cloud. A separate OT network. Telemetry radio or cellular to pumps, reservoirs and treatment plants. Low-power networks (LoRaWAN, NB-IoT) for sensors and digital meters
- Standards and interfaces
- IEC 62443 zones and conduits. Security of Critical Infrastructure Act 2018
- Layer
- Data platform (R02)
- Main systems at a water utility
- Warehouse or lakehouse. A historian copy. BI. Water quality lab data and hydraulic model outputs
- Standards and interfaces
- Regulator reporting templates
- Main systems at a water utility
- Integration bus or platform. API gateway. File transfer. An IoT platform for sensors. A one-way OT to IT path through a DMZ. No energy market gateway
- Standards and interfaces
- OPC UA. MQTT
- Main systems at a water utility
- Customer billing system, the CIS (SAP, Hansen, Oracle, TechnologyOne). Asset system (IBM Maximo, SAP PM). GIS (Esri). ERP. Records. Lab system, LIMS (LabWare, Thermo SampleManager)
- Standards and interfaces
- ISO 55001. WSAA ISO 55001 guidelines for the water industry
- Main systems at a water utility
- SCADA (Schneider Geo SCADA Expert, AVEVA, Citect). RTUs and PLCs. Treatment plant control. Historian (AVEVA PI). Network event analytics (TaKaDu, StormHarvester, Xylem). Hydraulic models (InfoWorks WS Pro, WaterGEMS). Leak sensors. Digital meter head-end (Itron Temetra, Taggle). Field mobility. Contact centre
- Standards and interfaces
- DNP3. Modbus. OPC UA. ISA-18.2 alarm management. ISA-95
- Main systems at a water utility
- Data science platforms. Models inside packages. Anomaly detection on telemetry. Acoustic leak models
- Standards and interfaces
- ISO/IEC 42001. NIST AI RMF
- Layer
- Agent platform (R07)
- Main systems at a water utility
- Mostly new. Robotic process automation and rule engines. Customer chatbots. New agent builders and tool servers
- Standards and interfaces
- Model Context Protocol
- Main systems at a water utility
- Microsoft 365. Shift logs, email and Teams. A paper logbook in some control rooms
- Standards and interfaces
- None specific
- Main systems at a water utility
- Customer portal and app for paying, moving and reading. Contact centre. SMS and web notices for outages and restrictions
- Standards and interfaces
- WCAG 2.2. PCI DSS for payments
- Main systems at a water utility
- Workforce identity. Customer identity (Okta CIC, Azure AD B2C). Privileged access. Security monitoring. OT monitoring
- Standards and interfaces
- SOCI Act rules. Essential Eight. IEC 62443
- Main systems at a water utility
- Risk and compliance tool and obligations register. Reports to the economic regulator (ESC in Victoria, IPART in NSW), the health regulator and the environment regulator. Taumata Arowai in New Zealand
- Standards and interfaces
- ISO 31000. AS/NZS 10002:2022 complaints. ISO/IEC 42001
- Main systems at a water utility
- Application and interface monitoring. Cloud cost tools. Almost no tracing of model calls
- Standards and interfaces
- OpenTelemetry
- Main systems at a water utility
- Control room shifts with authorisation levels. Treatment plant operators. Billing team leads and QA sampling. Contact centre QA
- Standards and interfaces
- ITIL 4. ISA-18.2 alarm roles
- Main systems at a water utility
- Mostly new. Data catalogs. Contact centre knowledge bases. Asset information standards work (WSAA with BIM4Water)
- Standards and interfaces
- ISO 19650 for asset information
In water, the CIS, the asset system and GIS must agree on the property, the meter and the main. The historian is the safe copy of OT data for an agent to read. The utilities page draws this estate as a building.
Process maps
Each worked example maps the work on this estate, step by step. It shows the process today across these systems, then the same work with an agent. It names who approves, where, and what the agent reads and writes.
- Investigate a water-network anomaly: an alarm, a sensor fault or a real issue. SCADA and the historian copy, event analytics, the asset system, the CRM and the LIMS. The agent writes advice and drafts only.
- Resolve billing exceptions without deciding hardship: written for an energy retailer, with a water variant. A suspect read becomes a re-read order to the reading contractor.
- Prioritize vegetation inspections: the electricity version of image-led asset work. The same write path test applies to water asset work.
- Build an AI use inventory a regulator can read: one row per AI use, drawn from the agent registry.
Enterprise capabilities
Use verified asset identity, dated observations, governed access to records, and reliable work-order interfaces. Preserve measurement uncertainty and field evidence. An agent can gather and explain evidence; the responsible operating process controls physical actions and formal assurance.
Start and measure
Choose one site, zone, or process with a clear owner and representative historical cases. Compare with existing alarms, rules, and expert review. Measure confirmed outcomes, false conclusions, review time, and total cost. Test interrupted work and conflicting information before expanding.
People and controls
Assign an operational owner, an engineering reviewer, data owners, and a support route. Do not count generated work items as completed field work. Use the same access boundaries during evaluation as during production.
Score each agent on the risk profile and register it with a named sponsor through the agent lifecycle. An agent that reads control-system data is Tier 3 (strict).
Explore the design
Evidence and limits
These are proposed applications. Their value and safety require evaluation on local data and within the organization's operating procedures. The linked cases distinguish practitioner experience from external evidence and proposed extensions.
Named, dated evidence, reviewed 14 October 2026. Outcomes are as reported by the party named. None is independently audited.
- Watercare in Auckland is rolling out 5,000 wastewater sensors. An AI layer learns normal behaviour and alerts staff to inflow, blockages and pump problems. Staff decide on maintenance. Reported by Watercare, 18 August 2025 (Watercare).
- Sydney Water built an acoustic leak AI with the University of Technology Sydney (UTS). It located likely failures within 200 metres with 80 percent accuracy. This was reported by its developers, February 2023 (Trenchless Australasia, 22 February 2023).
- Both systems advise staff. Neither source says the AI can change anything in the network.
- No language-model triage of SCADA alarms was found anywhere in the October 2026 research.
- No agent with autonomous control authority was found at any named water utility (R05 findings, August 2026).
- No compliance verification agent was found at any named utility (R05 Pattern B). An agent that reads protected system information may itself fall inside the critical-infrastructure rules it checks. Confirm that before building.
- Ofwat, the UK water regulator, describes agentic AI in UK water as largely experimental. This comes from a trade summary, not the plan itself (Kurrant, 18 June 2026).
Cite this page
Written by Murali Sid, Founder and AI Systems Architect, last updated 15 October 2026. Licensed CC BY-SA 4.0, so quote it freely with attribution.
Murali Sid (2026). Water utilities. Agentic Architecture Skills. https://www.agenticarchitectureskills.com/library/blueprints/verticals/water-utilitiesMachine-readable version of this page: /library/blueprints/verticals/water-utilities.md
Power utilities and energy
A proposed workflow for power utilities and energy. Revised 15 October 2026. The roles below are design options, not claims that these agents are deployed or that multiple agents are necessary.
Healthcare
A proposed design for a public hospital network in Australia or New Zealand. Four agents carry referrals, follow-up, meeting preparation and accreditation evidence around the patient. Clinicians keep every clinical de...