ops-ai · the DC1 operations assistant
An assistant that runs inside the data center and works for the operators, the facility team and the account managers
This is a concept for DC1, the investor's first data center in Sikhio, Nakhon Ratchasima. Staff ask in Thai or English, and the assistant answers from telemetry, NetBox, tickets, runbooks and the study notes, showing every tool call and its numbered sources. It sees only what the asker's Kanidm groups allow, drafts change requests instead of carrying them out, and quotes safety procedures word for word. It runs on GPUs in DC1 with an open-weights model that handles Thai, served by vLLM, so nothing leaves the building.
Two figures from the study show why it is worth having: 85% of outages caused by human error come from procedures that were flawed or not followed, and keeping one seat staffed around the clock takes about five people (facility systems, business hosting). Pick a role, then a question.
Runs on DC1, hall B
Model OpenThai 2.0 27B, Apache 2.0
Served by vLLM
Sign-in through Kanidm
Internet not used
Every answer lists its sources
Each figure comes from a query, a record or a document listed under the answer. When the assistant finds no source, it does not answer.
It sees only what the asker may see
Every tool call runs with the asker's Kanidm groups. One tenant's data never reaches another tenant, and the assistant cannot read tenants' prompts or files at all.
It writes drafts and changes nothing itself
It drafts change requests, incident notes and quotations for a person to review. It has no write path to servers, switches or the facility controllers, so the plant stays under its certified controllers.
It quotes safety procedures word for word and never makes one up
Each safety step is copied from the approved procedure and labeled with its version, and safety alarms go to the duty engineer.
Passwords and keys stay in OpenBao, out of its reach
The assistant cannot read them. When someone needs one, it explains the break-glass procedure: that person signs in, a second person approves, and every read is logged.