Why irrigation won't flood your room

It's the most carefully built part of the system, because it's the only one that can ruin a grow in twenty minutes. It's worth understanding what it's covering for you, even if you never touch it.

Four layers, independent of each other

1 · The hardware

Before opening, the system arms the plug's own auto-off. If it can't arm it, it doesn't open. An internet outage, a server crash or a hung cloud won't leave the pump running.

2 · The watchdog

It checks that the valve really is open when it should be, and closes it when the time runs out.

3 · Reconciliation

Every half minute it compares what the system believes is open against what the device actually says, and corrects it.

4 · The command filter

It stops out-of-range durations and commands before they reach the relay.

On top of that

• Sentinel for unexpected relays: every 30 seconds it checks whether an irrigation relay was left on that the system wasn't expecting. If it's a ghost of its own, it closes it. If you watered from the manufacturer's app, it warns you, cuts off at the limit and pauses the automatics for two hours so the water isn't doubled up.
• Dry-run pump guard: it learns the pump's normal power draw; if it drops below that twice in a row it cuts off, cancels the watering that was coming and warns you. It catches an empty tank, a disconnected hose or a jammed pump.
• Recovery after a crash: if the service restarts with a valve open, it closes it on startup and restores the day's counters — a restart doesn't hand out extra waterings.
• Closing always gets through: a turn-off command never sits waiting behind a retry.

The circuit's SAFETY SCORE

• A 0-100 score and an A-D letter per pump, recalculated every day over the last 30.
• It looks at how many times the close was confirmed, whether the hardware's auto-off has been tested, whether the device answers on the local network, relays that were left on by themselves, failed closes and dry starts.
• With no tested auto-off, your score stays at 55 — meaning you don't get past a C no matter how perfect everything else is.
• The score comes with one concrete tip for raising it, the most important one first.

The messages you'll see

"Irrigation is paused"

Failures in the manufacturer's cloud. The panel tells you the reason and how many retries are left.

"The plug is offline"

The engine can't water through something that isn't answering it.

"The valve didn't physically open"

The system looks at whether the valve actually opened, not at whether the command was sent.

"EMERGENCY: the pump didn't respond to the close"

The one case where the system asks you to go unplug it by hand. Go.