Manufacturing Knowledge Graphs

ISA-95 Manufacturing Knowledge Graph for Operations Intelligence

How an anonymized manufacturing enterprise connected production, equipment, material, quality and maintenance data into an ISA-95 aligned knowledge graph for anomaly detection, root-cause analysis and recommended actions.

Anonymized Enterprise Case StudyManufacturingISA-95Knowledge Graph
ISA-95 Manufacturing Knowledge Graph for Operations, Anomaly Detection and Recommendations
Implementation viewManufacturing Knowledge Graphs
Reference architecture

System map

Production, equipment, material, quality and maintenance data become a connected layer for anomaly detection, root-cause analysis and recommended actions.

4Domains
12Components
13Flows
Interactive architecture
Expand architecture
ISA-95 Manufacturing Operations Knowledge GraphOperations dataISA-95 graph modelIntelligence layerOperational actionProduction ordersWork orders, schedules,batches and executionMES / operationseventsOperation start, stop,step, hold andQuality and NCRDeviations, inspections,test results and defectsMaintenance signalsEquipment alerts, workrequests and downtimeISA-95 modelSite, area, line, cell,equipment, material,Operational entitiesEquipment, material lots,work orders, processRelationship evidenceProduced by, consumed by,ran on, caused by,Anomaly detectionDetect abnormal equipment,process, material andRoot-cause traversalTrace anomaly paths acrossoperations, materials andRecommendation engineSuggest inspection,maintenance, processOperations viewAffected units, orders,equipment and processAction workflowQuality review,maintenance task, holdSourceAgentDataGovernanceHumanRisk

A large manufacturing enterprise had already invested in operational reporting, production dashboards and quality tracking. The challenge was not the absence of data. The challenge was that production events, equipment states, material lots, work orders, quality deviations, maintenance activity and process parameters were still analysed as separate fragments.

When a production anomaly occurred, teams could usually identify the immediate symptom: a yield drop, a quality deviation, an equipment alert, a repeated non-conformance or an abnormal process reading. What took far longer was understanding how that signal connected to the wider operation. Which work orders were affected? Which equipment hierarchy was involved? Which material lots passed through the same process segment? Which upstream operations showed similar behaviour? Which corrective action had worked in comparable situations before?

AgentFaktory designed and implemented an ISA-95 aligned manufacturing knowledge graph to turn operational data into a connected intelligence layer. The graph represented production, equipment, material, personnel, process, quality and maintenance entities as relationships rather than isolated rows. This allowed the client to move from dashboard-based observation to graph-based investigation, anomaly detection and recommended action.

Case study areaDetails
Client profileAnonymized multi-site manufacturing enterprise
Business functionProduction operations, quality, maintenance and plant performance
Primary challengeOperational anomalies were visible, but the connected causes and impacted entities were difficult to trace quickly
Model foundationISA-95 aligned concepts across equipment, process segments, work orders, material, personnel, quality and events
Delivery focusFull operations graph, anomaly detection, root-cause traversal, recommendation outputs and evidence-backed AI explanations

The challenge

The client’s existing environment could report production performance, quality exceptions and maintenance activity, but those views did not explain the connected operational story. A quality team could see NCRs. A production team could see work-order progress. A maintenance team could see equipment alerts. A plant manager could see throughput and downtime. The missing layer was the relationship model that connected all of these views.

This created friction during investigations. When an abnormal quality pattern appeared, analysts had to manually check the production order, equipment used, material lot history, process route, previous anomalies, inspection results and maintenance records. Each investigation required a new set of joins, assumptions and spreadsheet logic.

  • Anomalies were detected in separate systems but not connected across the full manufacturing operation.
  • Equipment, material, process and quality records did not share a single investigation model.
  • Teams could not quickly list all work orders, units, lots or operations affected by a suspected issue.
  • Recommendations were dependent on expert judgement and past experience rather than reusable evidence paths.
  • AI-assisted investigation needed structured operational context before it could produce trusted answers.

What was built

AgentFaktory built a manufacturing operations knowledge graph aligned to ISA-95 concepts. The graph connected the physical model of the plant with the execution model of production and the event model of operations. Equipment, process segments, material lots, work orders, personnel roles, quality events and maintenance activity became connected graph entities.

The graph was designed as an operational intelligence layer, not a diagramming exercise. Each node and relationship was created to support a business question: where did the issue occur, what was running at that time, which material was consumed, which equipment was involved, which quality event followed, what similar cases happened before, and what action should be taken next.

ISA-95 aligned graph model

Graph areaExample entitiesWhy it mattered
Physical operations modelSite, area, production line, work cell, equipment, toolLocated anomalies inside the plant hierarchy instead of leaving them as isolated events
Production execution modelWork order, operation, process segment, batch, unit, routeConnected production activity to the exact operational context in which it happened
Material modelRaw material, component, lot, batch, consumed material, produced materialTraced potential quality impact across material genealogy and downstream units
Quality modelInspection, test result, NCR, deviation, defect code, quality holdConnected quality outcomes to the operations and inputs that preceded them
Maintenance modelEquipment alert, maintenance order, downtime event, failure codeLinked equipment health and maintenance history to production and quality patterns
Recommendation modelAction, rule, evidence path, priority, owner, statusConverted graph findings into operational follow-up rather than another passive report

Relationship-first operations intelligence

The important shift was treating relationships as first-class operational data. A work order ran on a line. A process segment used a piece of equipment. A material lot was consumed by an operation. A unit was produced through a sequence of steps. A quality deviation occurred after a specific operation. A maintenance event affected equipment that was later used in production. These relationships are where root-cause investigation becomes possible.

Each relationship retained evidence: source table, source field, timestamp, matching rule, confidence and lineage. This allowed users to distinguish direct operational facts from inferred relationships. The graph could therefore support both automated traversal and human review.

Representative graph relationships

RelationshipMeaning
WORK_ORDER_RUNS_ON_EQUIPMENTConnects production execution to the physical asset used
OPERATION_CONSUMED_MATERIAL_LOTConnects an operation to the material lot used during execution
UNIT_PRODUCED_BY_OPERATIONLinks produced units or batches to the operation that created them
QUALITY_EVENT_OCCURRED_AFTER_OPERATIONConnects defects, deviations or NCRs to the preceding operation
EQUIPMENT_ALERT_PRECEDED_QUALITY_EVENTShows whether equipment behaviour may be related to a later quality issue
MATERIAL_LOT_SHARED_BY_AFFECTED_UNITSIdentifies common material exposure across impacted production outputs
SIMILAR_ANOMALY_OCCURRED_IN_PROCESS_SEGMENTLinks current anomalies to historically similar operational patterns
RECOMMENDATION_SUPPORTED_BY_EVIDENCE_PATHConnects proposed action to the graph path that justifies it

Full-operation view

The knowledge graph was not limited to one dashboard or one plant function. It was built to represent the full operational flow: planning, execution, production events, equipment usage, material consumption, quality checks, deviations, maintenance actions and recommendations. This made it possible to move from a local symptom to a broader operational context.

For example, a yield anomaly could be traced from the production order to the process segment, from the process segment to equipment usage, from equipment usage to maintenance events, from the operation to material lots, and from material lots to other impacted work orders. That path is difficult to represent cleanly in a normal BI model, but it is natural in a knowledge graph.

Anomaly detection layer

The anomaly detection layer used the graph as operational context. Instead of flagging only a metric breach, the system could enrich the anomaly with connected entities: equipment, process segment, material lot, work order, quality event, maintenance history and similar prior cases.

This made alerts more useful. A production variance was no longer just a number outside a threshold. It became an evidence-backed operational event: where it happened, what it touched, what changed before it, what quality signals followed it and which other units may be impacted.

  • Equipment-level anomaly: abnormal behaviour around a specific line, cell, tool or asset.
  • Process-level anomaly: unusual cycle time, rework, yield or deviation pattern within a process segment.
  • Material-level anomaly: abnormal quality or performance pattern linked to a material lot or supplier batch.
  • Quality-level anomaly: repeated defect or NCR pattern connected to a common operation or equipment path.
  • Operational-sequence anomaly: a pattern that appears only when events are evaluated as a connected path rather than standalone records.

Recommendation engine

The recommendation layer converted graph findings into practical operational follow-up. It did not simply rank alerts. It used the connected evidence path to suggest the most appropriate next action: inspect affected units, review a process segment, check a material lot, raise a maintenance task, hold downstream production, or compare the issue with similar historical cases.

Recommendations were designed with traceability. A user could see the anomaly, the graph path, the impacted entities and the evidence behind the suggested action. This helped business teams understand why a recommendation was made and decide whether to act, escalate or monitor.

Recommendation examples

Detected patternRecommended action
Quality deviation connected to a specific equipment pathInspect equipment state, review recent maintenance history and check affected work orders
Multiple NCRs connected to the same material lotQuarantine or review downstream units that consumed the lot
Repeated anomaly in a process segment after a parameter shiftReview process settings and compare with stable historical runs
Similar issue found in past production pathSurface the prior corrective action and supporting evidence
Defect cluster connected to operation sequence rather than one assetReview handoff points, sequencing and operator/process steps

AI explanation layer

The AI explanation layer sat above the graph. It did not invent root causes from a prompt. It retrieved graph paths, anomaly context, evidence records and recommendation outputs, then translated them into a clear operational explanation for engineers, quality teams and plant leadership.

This gave users a more useful answer than a dashboard alert. A production leader could ask why an anomaly was flagged and receive a structured explanation: the affected operation, equipment path, material exposure, related quality events, similar historical cases, confidence level and suggested next action.

Example investigation path

  1. An abnormal quality signal is detected for a set of produced units.
  2. The graph identifies the related work orders and operations.
  3. The affected operations are connected to a common process segment and equipment path.
  4. The graph finds that the same equipment had a maintenance alert before the affected run.
  5. Material genealogy shows which other units consumed the same lot during the same window.
  6. Historical graph traversal finds similar anomaly patterns and prior corrective actions.
  7. The system recommends inspection of affected units, equipment review and targeted quality follow-up.
  8. The AI layer summarizes the evidence path for operations and quality teams.

Outputs delivered

  • ISA-95 aligned operations entity model covering equipment, process segments, work orders, materials, personnel roles, quality events and maintenance signals
  • Graph-ready entity and relationship tables with evidence, confidence and lineage
  • Anomaly context views linking abnormal signals to affected operations, equipment, materials and quality outcomes
  • Root-cause traversal outputs for production, quality and maintenance investigations
  • Recommendation outputs with action type, priority, owner, evidence path and status
  • AI-ready graph explanation views for operational Q&A and case summaries
  • Operations dashboard and API layer for impacted entity analysis and follow-up tracking

Governance and controls

The graph was built with controls for operational trust. Recommendations were separated from automated execution. Low-confidence relationships were not used for high-impact recommendations without review. Sensitive operational identifiers were controlled through role-based views. Every recommendation retained the graph path and source evidence used to generate it.

  • Source lineage for nodes, relationships, anomalies and recommendations
  • Confidence scoring for inferred relationships and similar-pattern matches
  • Separate investigation, recommendation and AI context views
  • Human approval for production-impacting actions
  • Auditability of recommendation evidence and user follow-up status

How success was measured

The client measured the value of the graph through operational usefulness. The key questions were whether teams could trace an anomaly faster, identify impacted entities more reliably, reuse prior investigation paths, generate better recommendations and explain decisions with evidence. The graph became valuable because it reduced the number of manual joins and assumptions required during real production investigations.

Outcome

The client gained a connected operations intelligence layer across production, equipment, material, quality and maintenance data. Instead of treating anomaly detection, root-cause analysis and recommendations as separate capabilities, the knowledge graph connected them into one repeatable operating model.

The largest impact was the ability to move from isolated operational signals to evidence-backed action. Teams could start with an anomaly, traverse the affected operation, understand the connected entities, compare with similar historical cases and trigger a recommended follow-up workflow.

AgentFaktory role

  • Defined the ISA-95 aligned graph model and operational entity hierarchy
  • Mapped production, quality, material and maintenance data into graph-ready structures
  • Designed relationship evidence, confidence and lineage rules
  • Built anomaly context outputs and root-cause traversal patterns
  • Designed recommendation structures for operations, maintenance and quality follow-up
  • Created AI-ready graph explanation views for business-readable investigation summaries