L1 · PLC-5/40, RTUsModbus TCP · DNP3 · EtherNet/IP
L2 · Legacy HMIIntellution FIX 6.15 / RSView32 / ClearSCADA — untouched
L3.5 · NowRetro gatewayreads tags read-only, runs detectors, writes graph memory
Edge SLMexplains detections using recalled incidents; never in the control loop
ServiceNowEvent → Incident on cmdb_ci; Flow approval → allow-listed action back to gateway
PLC interlocksfinal authority: gateway only sets request bits inside PLC-enforced bands
Action tiers: T0 record T1 auto + notify T2 approval in ServiceNow T3 advisory only. Comms faults are routed to Telemetry, never to maintenance.