GDS Technology — Built, Wired and Secured podcast banner
Watch on YouTube →
Episodes Built
Episode 85

Maintenance-as-Code: Lightweight Runbooks That Keep Building Tech Reliable

July 21, 2026
Key takeaways
  • One-page runbooks work better in crises than long closeout documents because they surface the exact trigger, steps, and acceptance criteria operators need.
  • Runbooks should include four blocks: trigger, prerequisites, steps, and measurable acceptance criteria.
  • Short smoke tests, named ownership, and rotating who runs them help spread knowledge and keep runbooks current.
  • Automation delivers the most value in deterministic detection like health checks, heartbeats, and alarm monitoring.
  • Small pilots create proof by showing measurable time saved on real incidents, making reliability improvements easier to justify.

Show Notes

Why maintenance knowledge fails when buildings need it most

This episode of Built, Wired & Secured focuses on a familiar operations problem: the fix technically exists, but nobody can find or use it when an outage is unfolding. The opening story sets the tone. A tenant outage drags on for hours because the breaker diagrams are buried in a closeout folder stored on a consultant’s laptop in another time zone. By the time the right step is found, an avoidable technical issue has already become a floor-wide business problem.

The conversation argues that many failures are not caused by equipment alone. They are caused by lost operational memory. Someone once knew the right sequence, the correct breaker, the safe reset path, or the vendor escalation order. Then that knowledge stayed in a PDF, in a handoff package, or in one person’s head. When that person leaves or is unavailable, recovery slows down fast.

The answer presented here is “Maintenance-as-Code”: short, practical, testable runbooks paired with lightweight automation. Instead of relying on large closeout binders or scattered tribal knowledge, teams create one-page operational plays that can be followed under pressure.

What a useful one-page runbook actually contains

The guests are direct about format. If a technician cannot follow the document at 2 a.m., it is not good enough. The recommended runbook is intentionally small and structured into four blocks:

  • Trigger
  • Prerequisites
  • Steps
  • Acceptance

The trigger defines when the runbook should be used. The example given is a networked chiller reporting a fault across two consecutive five-minute polls. That matters because teams need a clear threshold, not guesswork.

Prerequisites make sure the technician understands the operating context before taking action. In the example, that includes building occupied mode and verified vendor contact information.

The steps are short, specific, and sequential: check breaker A, cycle control power, and if the fault persists, switch to manual cooling and notify the vendor. No extra narrative. No buried detail. Just the operational path.

The acceptance criteria are equally important. “Seems okay” is not enough in a crisis. Instead, the runbook should define a measurable outcome, such as the chiller returning to auto mode and supply temperature stabilizing within 15 minutes. The episode also recommends including a rollback line and contact info, all kept to one page.

Why long documents fail during real incidents

One of the strongest themes in the episode is that having documentation is not the same as having usable documentation. A forty-page closeout PDF may contain the answer, but if the answer is buried, hard to access, or written for turnover rather than operations, it fails the people doing the work.

This is especially important in buildings, where systems are interdependent and delays quickly spill into tenant complaints, productivity loss, and sometimes financial penalties. When HVAC, controls, networking, or related building tech fails, the issue is rarely isolated. Response time depends on whether operators can find the right action immediately.

The practical takeaway is simple: store runbooks where operators actually look, and write them for the person performing the recovery, not for archival completeness.

How to keep runbooks from becoming checkbox theater

The episode also addresses a common objection: won’t teams reduce this to a compliance exercise? The answer is yes, if governance and feedback are missing.

The proposed countermeasures are straightforward:

  • Use short validation cadences
  • Require one observation note with each test
  • Assign a named owner by role, not just department
  • Rotate who runs the test so knowledge spreads

That observation note is a subtle but important detail. If a smoke test technically passes but a valve is slow to respond, that note becomes the improvement ticket. The runbook stays alive because each test creates a feedback loop.

The ownership model matters too. The discussion emphasizes role clarity over vague departmental responsibility. And by rotating execution among a lead tech, an apprentice, and an on-call resource, teams build redundancy in human memory instead of concentrating it in one person.

How often should teams test operational plays?

For cadence, quarterly is presented as a strong default for most systems, with monthly testing reserved for more critical environments. But the real design principle is duration. A smoke test should take no more than 10 minutes. If the exercise takes longer than that, busy operations teams will stop doing it.

That rule makes the concept practical. Maintenance-as-Code is not about creating an idealized program that only works on paper. It is about fitting disciplined operational checks into the reality of live facilities work.

Where automation helps and where it becomes risky

The conversation draws a clear line between useful automation and brittle automation. Deterministic checks are a great fit for automation: heartbeats, alarm counts, point reads, and daily health checks. Corrective actions are different. An automated reset at the wrong time can make a situation worse.

The recommendation is to automate detection first, not judgment. Attach the runbook to the alert or ticket, then keep human verification in the loop before corrective steps happen.

A starter automation example is intentionally simple: every day, read five critical points such as power status, supply temperature, pump run status, controller heartbeat, and alarm count. If any point falls outside range, open a ticket and attach the relevant runbook. That gives teams low-risk, high-value visibility without introducing fragile recovery logic.

Three next steps teams can take this week

The closing guidance is actionable and refreshingly small in scope. Start with one system. Write one one-page runbook. Assign a named owner. Run a 10-minute smoke test. Capture one observation sentence. Then add a basic daily health check automation that opens a ticket and links the runbook.

The final point is measurement. If one runbook saves an hour during the next incident, that time saving becomes evidence leadership can understand. Small pilots beat broad promises because they create proof.

The episode’s core message is that reliability often looks quiet. The best day in operations is the one nobody notices. Short runbooks, measurable acceptance criteria, named ownership, and simple detection automation make failures shorter, calmer, and easier to recover from. That is the promise of Maintenance-as-Code.

Deeper dive

Maintenance-as-Code: How Short Runbooks and Simple Automation Make Building Tech More Reliable

When a building system fails, the technical problem is only part of the story. The bigger issue is often operational: who knows the right sequence, where the documentation lives, and whether the team can act quickly under pressure.

That is the problem explored in this episode of Built, Wired & Secured. The conversation centers on what the guests call Maintenance-as-Code: translating tacit operational knowledge into short, testable runbooks supported by lightweight automation. The goal is not to create another binder full of documentation. The goal is to reduce downtime, cut handoff friction, and make routine recovery steps usable by the people who actually have to respond.

The opening example makes the issue tangible. A tenant outage stretches into hours because the breaker diagrams are sitting in a closeout folder on a consultant’s laptop in another time zone. The fix exists, but it is trapped in the wrong format, the wrong place, and the wrong workflow. By the time someone finds the right step, the incident has already escalated into a broader tenant problem.

That is the core lesson: reliability is not just about equipment. It is about whether operational knowledge is accessible when time matters.

The real risk is lost memory, not just failed hardware

One of the most useful points in the episode is the reminder that technology rarely fails in isolation. In building operations, systems are interdependent and people are, too. Recovery often depends on tacit knowledge: the sequence one experienced technician remembers, the vendor escalation path someone kept in their phone, or the exception that was never clearly written down after project handoff.

When that memory stays inside a person instead of inside an operational process, reliability becomes fragile. If the key person is unavailable, off shift, or no longer with the organization, the building inherits a hidden weakness.

This is why the discussion treats runbooks as shared memory. A good runbook does not just describe a system. It preserves a usable response path. That distinction matters. Many teams technically have documentation, but they do not have documentation that works during an incident.

Why traditional handoff documents fail operations teams

The episode is especially sharp on post-project handoff failures. Large closeout packages can satisfy a project requirement and still fail operators completely. A forty-page PDF may contain everything needed, but if the critical fix is buried inside it, the artifact has limited operational value.

During a live event, nobody wants to search a long document full of commissioning detail, design context, and turnover material just to locate a reset step. That is not a people problem. It is a format problem.

The guests argue that documentation has to be designed for use under stress. That means making it short, direct, and easy to retrieve. In practice, that leads to the one-page operational play.

The structure of a one-page operational play

The recommended format is intentionally strict. A useful runbook should fit on one page and contain four blocks:

  • Trigger
  • Prerequisites
  • Steps
  • Acceptance

Each block has a job.

The trigger tells the operator exactly when the runbook applies. In the example shared in the episode, the trigger is a networked chiller reporting fault X for two consecutive five-minute polls. That threshold removes ambiguity.

The prerequisites define what must be true before action is taken. In the example, the building is in occupied mode and vendor contact is verified.

The steps then move quickly and clearly: check breaker A, cycle control power, and if the fault persists, switch to manual cooling and notify the vendor.

Finally, the acceptance criteria answer the question that often creates confusion during recovery: how do we know this worked? The episode stresses measurable criteria, not vague impressions. The example is that the chiller returns to auto mode and supply temperature stabilizes within 15 minutes.

That measurable standard is what makes the runbook operational instead of theoretical. It also reduces arguments during a crisis because success is defined in advance.

How to prevent runbooks from becoming shelfware

Even a good runbook can become stale if nobody uses, tests, or updates it. The guests address this directly by warning against checkbox behavior. If teams only run a test to mark it complete, the process becomes a paper exercise.

The fix is governance with feedback. They recommend requiring one observation note during each smoke test. That sounds minor, but it changes the purpose of the exercise. If the test passes and someone notes that a valve was slow to respond, that sentence becomes the seed for the next improvement ticket. The runbook stays alive because the system keeps producing better information.

Ownership is another key point. The owner should be a named role, not just a department. Saying who is responsible creates accountability. Rotating execution across a lead technician, an apprentice, and an on-call resource spreads knowledge instead of concentrating it. That makes the team more resilient because more than one person can execute the play correctly.

Test cadence has to fit reality

The episode offers practical guidance on cadence. Quarterly is presented as the default for most systems, while more critical systems may justify monthly checks. But the more important constraint is time. A smoke test should take 10 minutes or less.

That limit is operationally important. If testing is too heavy, it competes with the rest of the workload and quietly disappears. A shorter cadence-friendly check is far more likely to survive in the real world.

This reflects the broader theme of the episode: keep the process light enough that it actually gets used.

Where automation adds value without adding brittleness

The conversation makes a strong distinction between detection automation and corrective automation. Deterministic checks are ideal for automation. Teams can reliably automate heartbeats, point reads, alarm counts, and daily health checks. Those are low-risk tasks that produce consistent visibility.

Corrective actions are different. Automatically issuing resets or recovery actions without human review can create cascading problems if the timing or context is wrong. The guests clearly caution against that kind of brittle automation.

The better pattern is to automate detection, attach the runbook, and keep human judgment in the loop for the fix.

The starter example they give is a daily health check reading five critical points: power status, supply temperature, pump run status, controller heartbeat, and alarm count. If any value is out of range, a ticket is generated and the relevant one-page runbook is attached. That delivers fast operational value without overengineering the response path.

Why measurable acceptance matters in both runbooks and automation

Another important thread in the episode is clarity around acceptance criteria. Whether the team is writing a runbook or building a simple automation, the standard should be measurable. “System seems okay” does not help in the middle of an outage. “Supply air within two degrees of set point and no active faults for 10 minutes” does.

That level of precision reduces confusion, speeds decision-making, and makes after-action review far more useful. It also creates a better bridge between operators, vendors, and leadership because everyone is measuring the same outcome.

Start with one system, not a full program

The closing advice is intentionally modest: pilot one system. Write one runbook. Assign one owner. Run one 10-minute smoke test. Capture one observation sentence. Then add one simple daily health check that opens a ticket and links the runbook.

This approach works because it produces evidence quickly. If that single runbook saves an hour during the next incident, the team now has a real metric. That is what gets leadership attention. Small pilots create trust because they prove value without requiring a major transformation project up front.

Quiet reliability is the goal

The most memorable line in the episode may be that the best day in operations is the one nobody notices. That is what Maintenance-as-Code is really about. Not dramatic technology. Not giant documentation sets. Not automating everything. Just reducing the number of preventable surprises and making recoveries shorter, calmer, and more repeatable.

For building operators, facilities teams, and anyone responsible for keeping interdependent systems running, the lesson is simple: write the runbook so a new technician can follow it at 2 a.m., store it where operators already look, keep the test short, and make the acceptance criteria measurable.

If teams do that consistently, they are not just documenting maintenance. They are building a more reliable operating model.

If this topic resonates, listen to the full episode of Built, Wired & Secured and use it as a practical prompt for your next runbook pilot.