Keep digital-twin models, point mappings and interfaces in the same release

A model loading successfully does not prove correct state binding. Record compatible model, mapping, interface and rule versions, and reject mismatches before they display misleading states.

On this page5 sections

A digital twin update should not consist only of replacing the latest model file. Model nodes, equipment mappings, interface fields and state rules need a documented compatible release. If one part does not match, reject the affected binding explicitly rather than guessing from similar names and continuing to paint equipment as operating.

Record the compatible parts of a release

ComponentRecordMismatch risk
Model assetsFile version, checksum and node inventoryDeleted or changed object identity
Equipment and point mappingMapping version and valid scopeState attached to the wrong model
Interface contractFields, types, units and enumeration versionThe same field interpreted differently
Display and linkage rulesRule version and compatible interfaceAn unknown state treated as normal

The components do not need identical version numbers, but supported combinations must be explicit. A filename containing “final” does not establish what was delivered or loaded. A checksum helps confirm identical bytes; it does not establish correct business meaning or equipment association.

Separate format compatibility from business compatibility

The glTF 2.0 specification uses asset.version, minVersion and required extensions to describe loading requirements. Meeting those requirements does not establish that equipment nodes still correspond to the previous release. The project also needs records of identity changes, renaming and removal.

For example, re-exporting a model can change node order. A mapping based on array position could then associate state with a different object. Check agreed stable identifiers instead, and distinguish new geometry that needs no business data from retired equipment nodes. Rendering successfully is not an adequate test of the complete release relationship.

Make incorrect combinations fail before deployment

In a test environment, deliberately combine the new model with an old mapping and an old model with new interface fields. Verify that incompatibility is detected. The application may limit the affected area or show an unavailable state, but it should not infer equipment identity without evidence. Missing required fields, changed units and unknown enumerations need intelligible diagnostic records.

Also simulate a browser retaining old cached resources, a partial download and a rolling service update. A release identifier should help clients obtain a consistent set. Updating only the entry page while permitting old models and new configuration to mix can still produce incorrect bindings. Keep the checks focused on actual compatibility boundaries rather than adding version labels that are never enforced.

Validate one complete area before expanding

Choose a sample area containing unchanged objects, additions, removals and state changes. Check location, names, state, details and historical entry points together. Expand through the agreed deployment procedure only after that sample passes. A test that changes only a floor material does not exercise the equipment-data relationships elsewhere in the scene.

Retain the operator, deployment time, component versions, sample evidence and unresolved issues. Operational checks should count unmatched objects, field parsing failures and resource-load failures, not merely whether a page responds successfully. These records make a later regression distinguishable from a data-source change that occurred at the same time.

Check data compatibility before rolling back

Restoring older files does not necessarily restore the old business environment. If an interface removed a field or changed its meaning, an older page may no longer interpret current data correctly. A data migration may require separate recovery or a forward correction. Document supported rollback combinations, stop conditions and steps needing human confirmation in advance.

How to Accept a Digital Twin Project covers overall project acceptance, while How to Agree on Software Project Changes and Source-Code Handover covers source-code and change handover. This article concerns compatible components at runtime. Include a mismatch test and a rollback rehearsal in digital twin development services (Chinese), retaining the original model and configuration. Future maintainers should be able to establish which components formed one tested release, rather than merely locate several archives with plausible names.