The orchestrator plans, the agents act
A run starts as a goal, becomes a plan, and executes as a graph of typed steps. The active path is always visible, always logged, always reversible.
Milkeon is an agent operating system for dairy processing. Nine agents control intake and separation, pasteurization, fermentation, evaporation and drying, inspection and CIP, watched by inline vision and composition sensing, rehearsed on an as-processed digital twin, and bounded by an autonomy policy you set per loop.
Illustrative scenario: Plant run · skim-milk-powder line + set-yogurt line · shared intake. Not a measured run.
Built for
Processor types, not customers. Milkeon has no plant connected yet and is recruiting its first design partners.
Every Milkeon run is an ordered, inspectable sequence. This is run_scn_01, an illustrative scenario: Plant run · skim-milk-powder line + set-yogurt line · shared intake. Scenario complete · both streams inside spec · one human approval at the dryer.
Plant Orchestrator · Pulled both product specs, the HACCP plan with its pasteurization critical control point, the antibiotic screen for the tanker lot and the standing CIP window from MES and the lab system; locked the target envelope for the run.
Plant Orchestrator · Simulated 24 candidate recipes across separation, pasteurization, evaporation and spray-drying on the Lactwin as-processed twin; ranked them on composition margin, pasteurization margin, energy per kilogram of powder and takt, and discarded every candidate that thinned the pasteurization margin.
Intake-and-Separate · Fused inline NIR and mid-IR with the latest lab calibration, then trimmed the cream-skim split and the standardization blend valve so skim solids and the yogurt-stream fat sat at target with the minimum safe margin rather than the usual over-standardization.
Pasteurize-and-Homogenize · Held HTST at or above 72 °C for 15 s through the holding tube with the flow-diversion valve armed; every critical control point reading was written to the audit log against the HACCP plan.
Ferment-and-Culture · Predicted the acidification curve for the culture lot from inline pH and the upstream composition, held the vat temperature profile and timed the hold so pH landed on the set-yogurt target curve; no abnormal acidification was flagged.
Evaporate-and-Dry · Ran the dryer against the twin's moisture and stickiness prediction; stepped inlet temperature and feed solids toward the minimum-energy setpoint while predicted outlet moisture stayed inside spec and fouling risk stayed low.
Defect-and-Inspect · 16 camera streams across the two packing lines at the plant edge: fill, seal, cap and label checks on every unit, foreign-body and contamination models on the powder stream; two rejects were attributed back to a seal-jaw temperature drift and the packing line was notified.
Hygiene-and-CIP · Placed the pasteurizer and dryer CIP into the cheapest energy window, sequenced wash phases against tank availability and set the release checks that must pass before the next product.
Plant Orchestrator · The twin's lowest-energy candidate wanted a dryer inlet temperature above the site's bounded envelope. Held for the shift dairy technologist, who approved the step with a tighter outlet-moisture alarm.
Quality-and-Conformance · Both batches released: composition, CCP records, culture lot and pH curve, drying setpoints, inspection rejects and every human decision written to the batch genealogy and checked against spec.
Every tool invocation, argument and result is written to an immutable, human-readable log, and every reasoning step is expandable. Nothing about a run is hidden from the plant. The log below is the scenario run, not a measured one.
Goal, plan, thought, action, observation, exactly as the orchestrator would record it.
Receive tanker lot T-0417, standardize it once, pasteurize once, and run a skim-milk-powder stream and a set-yogurt stream to spec with full genealogy.
Simulate the whole recipe on the twin first. Lead with composition so the dryer gets the right solids and the vat gets the right fat. Verify the pasteurization critical control point continuously. Let the dryer chase minimum energy only inside the bounded envelope; hold anything beyond it for a human.
The standing recipe over-standardizes both streams to protect against lab-sample lag. With continuous NIR and mid-IR estimates the blend can sit at the minimum safe margin. The saving is composition give-away, not safety margin: the pasteurization CCP is never a candidate for optimization.
twin.simulate(candidates=24) → recipe #9: minimum safe composition margin, pasteurization margin unchanged, lowest predicted energy per kilogram of powder.
Recipe #9's dryer inlet temperature sits above the site's bounded envelope. The policy engine routes that single write to the shift dairy technologist and permits the other seven.
Execute recipe #9 at the bounded stage: separation and standardization writes, CCP verification, culture dosing and the vat profile proceed; the dryer inlet write waits.
Approval granted at 05:16:00 with a tighter outlet-moisture alarm. Two seal rejects on the yogurt packing line were attributed to seal-jaw temperature drift and corrected by the packing line.
Scenario complete. Both batches released with composition, CCP records, culture lot, drying setpoints, inspection events and the human decision in the genealogy. No measured plant result is claimed; this is the run the platform is designed to execute.
Nothing about a Milkeon run is implicit. The goal is declared, the plan is rehearsed on the twin, each step is typed, and the outcome is written to the batch genealogy.
A run starts as a goal, becomes a plan, and executes as a graph of typed steps. The active path is always visible, always logged, always reversible.
Shadow, assist, bounded, exceptions. Each plant sets the stage per loop, and anything above the threshold, every critical control point and every release decision waits for a named person.
Each agent owns a stage of the plant, a bounded tool set and a measured outcome. They negotiate for shared actuators through the orchestrator, never directly. Five ship as products; the rest arrive with the Plant tier.
Milk intake, clarification, separation, standardization
Fuses inline NIR and mid-IR analyzers, separator telemetry and lab results into a continuous fat, protein and solids estimate, then holds the cream-skim split and the standardization blend at target with the minimum safe margin instead of defensive over-standardization.
Design scope: give-away toward zero, every batch inside spec
Ships in: Sepion
HTST and UHT time-temperature, homogenization
Holds pasteurization time-temperature and homogenization pressure for safety and shelf life without over-processing, writes every critical control point reading to the audit log and never touches the flow-diversion interlock.
Design scope: CCP margin held, over-processing avoided
Ships in: Plant tier
Fermentation, culture activity, pH and texture
Predicts the acidification and texture trajectory per product and culture lot from inline pH, temperature and the upstream composition, then holds the temperature profile, culture dosing and cut and cook windows so pH and texture land on target.
Design scope: consistent set and flavor, early phage alerts
Ships in: Culvex
Evaporation, spray-drying, moisture, solubility, fouling
Fuses inline moisture, temperature, humidity, feed solids and pressure with a GPU process twin of the evaporator and dryer to predict outlet moisture, solubility, particle size and fouling risk, and runs the dryer at the minimum energy that still holds powder spec.
Design scope: powder spec at minimum energy and water
Ships in: Aridyn
Contamination, foreign-body, fill, seal, cap and label faults
Runs multi-camera vision and inline sensing at the plant edge to detect and predict contamination, foreign bodies, fill, seal, cap and label faults at line speed, rejects off-spec units and attributes each defect back to the upstream agent that caused it.
Design target: 50 to 150 ms reject and alert decisions
Ships in: Vizra
Fat, protein, moisture, texture and shelf-life optimization
Predicts shelf life and finished-product quality from composition, pasteurization margin, culture outcome and drying state, and proposes the recipe moves that protect both before product is released.
Design scope: quality and shelf life predicted before release
Ships in: Plant tier
Yield, loss, energy, water and line balancing
Prices every candidate move in liters, kilograms, kilowatt-hours and cubic meters of water, sequences products and tanks, and balances the line so takt is met without starving the dryer or the packing hall.
Design scope: yield up, loss, energy and water down
Ships in: Plant tier
CIP, hygiene and food-safety assurance
Schedules clean-in-place around production and energy windows, tunes wash duration, chemical concentration and water reuse within the validated program, and holds the release checks that must pass before the next product runs.
Design scope: CIP release checks enforced, water reused
Ships in: Plant tier
Right-first-time, non-conformance, batch genealogy, traceability
Builds the batch genealogy record, composition, CCP readings, culture lot, drying setpoints, inspection events and every human decision, and gates release against product spec and the plant's food-safety procedures.
Design scope: complete, immutable release records
Ships in: Plant tier
Planning, arbitration, human approval, twin rehearsal
Plans the run, rehearses high-impact moves on the Lactwin twin, arbitrates between agents that want the same actuator, enforces the autonomy stage per loop and routes anything above the site threshold to a named human. Grounds its reasoning in the plant's recipes, HACCP plan and CIP procedures through cited retrieval.
Design rule: every write policy-checked, every output cited
Ships in: Every tier
Milkeon is not a dashboard. Each agent closes a loop that a plant already measures in liters, kilograms, kilowatt-hours and escapes. No result is claimed here; the baseline is what a pilot measures first.
The highest-volume step in the plant, run on lab-sample lag. Continuous composition estimation lets the blend sit at the minimum safe margin.
| What is measured | Where the number comes from |
|---|---|
| Liters and dollars of fat and protein recovered per shift | Your lab, meters and QA records |
| Baseline period | Shadow mode, before any write |
| Result | Measured when the pilot runs |
The largest energy and water consumer in the plant, run with conservative margin. The twin finds the quality-safe frontier and the agent holds it.
| What is measured | Where the number comes from |
|---|---|
| Energy per kilogram | Your lab, meters and QA records |
| Baseline period | Shadow mode, before any write |
| Result | Measured when the pilot runs |
Time-temperature verified continuously and logged against the HACCP plan; the interlock stays yours.
| What is measured | Where the number comes from |
|---|---|
| CCP margin held | Your lab, meters and QA records |
| Baseline period | Shadow mode, before any write |
| Result | Measured when the pilot runs |
Living biology watched by hand today. The trajectory is predicted and held; the craft is captured as a model.
| What is measured | Where the number comes from |
|---|---|
| First-pass quality | Your lab, meters and QA records |
| Baseline period | Shadow mode, before any write |
| Result | Measured when the pilot runs |
Two agents will want the same actuator. The orchestrator arbitrates on the run goal, with food safety above everything, and the handoff is logged like any other step.
Yield-and-Takt wants more flow through the pasteurizer so the powder stream starts earlier and the dryer is not left waiting.
Pasteurize-and-Homogenize requires the flow that keeps holding time at or above 15 s at 72 °C. That is the HACCP critical control point.
Food safety outranks takt under every run goal. The critical control point wins the actuator; the request for more flow is logged with its score and the reason it lost.
Yield-and-Takt recovers the schedule by starting the evaporator on the first standardized skim instead of waiting for the full tank. Takt is met without touching the CCP.
A plant does not go from manual to bounded control in one step. Milkeon makes the stage explicit per loop, auditable and reversible at any time, and some decisions never leave the person.
| Stage | What the agent does | What the person does | When |
|---|---|---|---|
| Shadow | Predicts composition, contamination, moisture and takt; writes nothing | Runs the plant as today; compares predictions to lab results | First phase with every design partner |
| Assist | Recommends separation, pasteurization, culture and drying moves with the evidence | A dairy technologist or process engineer approves or corrects each one | After accuracy is proven against the baseline |
| Bounded | Writes low-risk separation, drying and inspection setpoints inside explicit limits | Approves anything above the limits; reviews the shift record | After the food-safety and ROI gates agreed up front |
| Exceptions | Escalates anything outside its envelope, CCP-adjacent moves and release decisions | Always decides these; the agent never does | Permanent |
The numbers Milkeon is engineered against, from the GPU utilization plan.
Design targets from the GPU utilization plan. Nothing on this page is a measured plant result; measurements start when the first design-partner line runs in shadow mode.
Milkeon is recruiting three to five design partners for the first cohort. These are the processor types the products were designed around and where each would start.
Separation and standardization at the highest volume in the industry. Starting wedge: Sepion, with Vizra on filling and capping.
Standardization feeding living fermentation. Starting wedge: Culvex on the vats, Sepion on the make-milk.
Cream-skim split and fat targets set the margin. Starting wedge: Sepion, with Vizra on packaging.
pH and texture on a curve, batch after batch. Starting wedge: Culvex, with the pasteurization agent on the make-up.
The most energy- and water-intensive lines in the plant. Starting wedge: Aridyn on one dryer.
Tight moisture and solubility windows, high value per batch. Starting wedge: Aridyn and Vizra together.
Milk is perishable and the lines are continuous, so perception has to be local and fast. Milkeon runs GPU inference at the plant edge and keeps training, simulation and optimization in the cloud, in a private cloud or on-prem. Items marked planned are on the roadmap, not running.
8 to 24 camera and inline-analyzer streams per line. Design target: 50 to 150 ms reject and alert decisions, 250 to 1,000 ms composition estimates, all at the plant edge.
Defect, composition, shelf-life, process-state and dairy-reasoning models behind one orchestrator, with version routing by product, line and sensor package. Design target: 10 to 40 concurrent models per plant.
Vision, spectral, time-series and dairy-reasoning models fine-tuned from labeled batch outcomes, operator corrections, lab results and validated deviations. Initial design target: 2k to 10k GPU-hours.
GPU-accelerated CFD and process simulation of separation, heat exchange, fermentation, evaporation and spray-drying, run as-processed before the batch to find safe, low-energy recipes.
Rare contamination, foreign-body, fouling, seal, fill and drying-upset scenarios generated with domain randomization and always validated against real plant events before use.
Product sequencing, tank allocation, dryer scheduling, CIP timing, energy and water constraints and line balancing, recomputed on the GPU when the plant is disrupted.
Packaging, palletizing and material handling for product, packs and pallets, with perception and motion policies built in simulation before they touch the packing hall.
There is no SDK to download yet. What design partners get is the integration surface: connectors, an autonomy policy declared per loop, and an audit record for every reading, recommendation, write and approval. This is the shape of one record, illustrative.
// one write, as the audit log would hold it
{
"run": "run_scn_01",
"step": "separate.standardize",
"agent": "agent.intake_separate",
"stage": "bounded",
"action": { "tool": "plc.write_setpoint", "tag": "SEP1.BLEND_VALVE" },
"limits": { "max_step": "declared per tag", "per": "declared per tag" },
"evidence": ["nir.read_composition", "lab.read_results"],
"citation": "spec:SMP-standardization v4 §2",
"policy": "permitted",
"models": { "composition": "versioned", "policy": "versioned" },
"human": null,
"outcome": "inside spec · minimum safe margin"
}
Land on one workflow with a measured baseline. Expand by line, module, site and autonomy stage. Outcome components available on yield, loss, energy and water.
Separation, pasteurization or drying control, or inspection AI, for one line. For processors validating ROI on the wedge.
The whole plant: intake and separation, pasteurization and homogenization, fermentation, evaporation and drying, inspection, quality and shelf life, yield and takt, hygiene and CIP, and the Lactwin twin.
Dairy groups standardizing on Milkeon across sites, with custom product, composition and tolerance models.
A 15 to 20% discount for annual prepayment.
Enterprise agreements with usage ramps.
A share of measured yield, loss, energy or water improvement on the highest-value workflows.
Per-batch, per-line or per-action metering above plan limits.
The three people in a dairy plant whose week changes when the process runs itself, and what each of them needs from Milkeon.
Owns production rate, quality, loss and yield, energy and water, and food safety. Wants a plant that holds spec at higher rate with fewer interventions, and a number that justifies the spend.
Owns separation and standardization, pasteurization, culture and drying recipes, process windows and yield. Approves and corrects the agents in assist mode; those corrections train the models.
Owns HACCP, FSMA, ISO 22000 and FSSC conformance, composition and contamination conformance, and batch genealogy. Needs every action grounded, cited and written to an immutable record.
IT/OT and sustainability leads approve the deployment. There are no customer quotes on this site yet; design partners will speak for themselves when they choose to.
Milkeon reads and writes through the systems already on the floor. No parallel historian, no new HMI, no rip-and-replace. Connectors are built against each design partner's stack first; long-tail integrations are out of scope for the first release.
PLC and SCADA of separators, pasteurizers, homogenizers, culture vats, evaporators, spray dryers and CIP skids
Setpoint reads, guarded writes, interlocks untouched
NIR and mid-IR composition, inline pH, moisture, temperature and humidity
Continuous composition and process state
LIMS results, calibrations, antibiotic and micro screens
Calibration and release evidence
Orders, recipes, product specs, batch genealogy
Targets in, release records out
Multi-camera stations on filling, sealing, capping, labeling and powder lines
Frames, defect events, reject commands
Plant and asset-level meters
Hard constraints for the dryer and CIP schedule
Isaac-driven packaging, palletizing and handling cells
Perception and motion for packs and pallets
SSO and role-based access; SOC 2 on the roadmap
Named approvers, scoped roles
Milkeon writes to production equipment in a food plant. Every capability is scoped, every write is policy-checked, every output is cited, and every action is written to an append-only audit log the plant owns.
| Item | Scope | Status |
|---|---|---|
| SOC 2 Type I | Cloud control plane | QUEUED Roadmap, first 6 months |
| SOC 2 Type II | Cloud control plane | QUEUED Roadmap, 6 to 12 months |
| HACCP · FSMA · ISO 22000 · FSSC · Codex | Grounding and record-keeping | RUNNING Design basis for retrieval and the audit log |
| Per-tenant isolation | Data, memory, models | RUNNING Design rule |
| On-prem deployment | Recipe-sensitive producers | RUNNING Design option |
Milkeon supports your food-safety records. It is not a certification and it does not replace your HACCP plan.
One policy model, one audit trail and one set of yield, loss, energy and water benchmarks across every plant in the group, with each site's recipes and tolerance models kept private to that site.
The questions plant directors, technologists and quality managers ask in the first meeting.
Only at the autonomy stage your plant has set, and only to an explicit allow-list of low-risk loops inside explicit limits. Every design partner starts in shadow mode, where Milkeon predicts and writes nothing. Assist mode follows, where a technologist approves each recommendation. Bounded autonomy on separation, drying and inspection loops comes after the food-safety and ROI gates agreed up front.
Critical control points are not optimization variables. The pasteurization CCP, the flow-diversion interlock and release decisions stay with your HACCP plan and your people. Milkeon verifies readings, writes them to an immutable audit log and attaches them to the batch genealogy. It supports HACCP, FSMA, ISO 22000 and FSSC records; it is not a certification and does not replace your plan.
Milkeon sits above your existing automation as a supervisory layer. If it stops, the plant keeps running on its current PLC and SCADA control and the interlocks it already has. A Milkeon outage degrades the plant to the way it runs today, not to a stop.
The first phase is shadow mode on one line: Milkeon reads your analyzers, PLC history, lab results and MES while you run the plant as usual, and we measure its predictions against your lab. Recommendations start when accuracy is proven against that baseline, and improve as plant-specific history and technologist corrections accumulate.
Recipes, product specs, tolerance models and supplier data are tenant-scoped and never used to train another customer's models. Retrieval is multi-tenant isolated and permission-aware. On-prem deployment is available for processors protecting sensitive recipes.
You are, the same as with any control strategy. That is why every write is policy-checked, bounded, logged and reversible, every output carries a citation to the recipe or procedure it relied on, and anything above your threshold waits for a named approver. The audit log records the request, the reasoning, the limits applied and the human decision.
As a design partner, on one line, with one hard metric: fat or protein give-away, energy per kilogram of powder, moisture or composition variance, or contamination escapes. We instrument the line in shadow mode, measure the baseline, move to assist mode when accuracy is proven, and expand only when the number holds.
Full multi-module autonomy across the whole plant, long-tail integrations beyond the design partners' stacks, and self-serve onboarding. The first release is one wedge workflow, its connectors, the agent loop with human checkpoints, the review console and the food-safety audit log.
Start with one processing or drying line and one measured baseline: give-away, energy per kilogram, variance or escapes. Shadow mode shows the number before anything is written.
↑↓ navigate↵ openesc close