Attachment 1 Statement of Work.pdf

Attachment 1: Statement of Work Industrial inspection Robotics for the NIH Central Utility Plant (CUP)

1. Introduction:

The National Institutes of Health (NIH) is a Federal Government biomedical research institution located in Bethesda, Montgomery County, Maryland. It consists of a large research hospital, many research laboratory buildings, animal holding facilities, administrative facilities, support facilities, and a central utility plant. The NIH campus, located on 322 acres, consists of over 70 buildings. The laboratories on campus perform biomedical and related scientific research. The administrative areas support planning, administration, and coordination of NIH’s programs, including research, clinical trials, communicable disease control and a variety of other activities. NIH generates steam at its Central Utility Plant (CUP) using five primarily natural gas fired water-tube type boilers, designated as Boilers 1 through 5, that are housed in Building 11. The boilers fire distillate oil as backup fuel only. The steam is used to supply the space heating needs of NIH’s Bethesda, MD campus.

The CUP, located in Building 11, generates steam and chilled water for distribution to the buildings on the Bethesda Maryland campus. The continuous and efficient operation of the CUP is critical for the NIH mission.

The central utility boiler plant includes six (6) boilers, twelve (12) chillers, and one (1) 23 MWe cogeneration system (gas turbine with heat recovery steam generator) that supply the heating, cooling, and a significant portion of the electrical capacity of the NIH campus.

2. Objective:

The Contractor shall provide two (2) Quadruped Industrial Inspection robots, sensing equipment, support and command & control / data acquisition software, training, future support to provide continuous plant surveillance, data for machine learning data and CUP surveillance. This is a “turnkey package” installation.

3 . Background:

Historically CUP plant rounds were done using Operators and paper templates. Recently the paper component has been replaced with digital logs, standardizing the data taken and making it available for analysis with an added time component.

Log Rounds still rely on a human operator, and the inherent flaws, for several reasons.

a. The physical senses are used for data acquisition and

b. The human brain is used for machine learning, data analysis and translation to the asset management systems.

The human body is eclipsed by the abilities of modern instrumentation and computing except in one instance, mobility. All this human sensing can be reliably replicated using modern instrumentation, uploaded to analytical computer systems and provide actionable information far beyond the capabilities of a human being. The only limiting factor until recently has been the ability to get the instrumentation to the machine to be analyzed. Deploying instrumentation independently to every piece of equipment in a large facility such as the CUP is costly and adds exponentially to maintenance activities, because of this deployment is reserved for only the most essential equipment.

Using a human operator to bring their “suite” of sensors to each piece of equipment is, as stated above less efficient, even more costly and often unreliable. Modern industrial robotics has come of age and can now cost effectively / reliably do all the jobs above and more with good ROI. This project would provide two (2) highly mobile robot sensing platforms for this purpose.

4. Acronyms:

API - Application Programming Interface ATO - Authority to Operate CMMS - Computerized Maintenance

Management System IBM - International Business Machines IR - Infrared LiDAR - Light Detection and Ranging OEM - Original Equipment Manufacturer

OIIT - Office of Information Technology PTZ - Pan-tilt-zoom REST - Representational State Transfer ROS - Robot Operating System SDK - Software Development Kit SCADA - Supervisory Control and Data

Acquisition

5. Scope/Technical Requirements:

The contractor shall provide two (2) advanced inspection robots capable of reliable, manual and autonomous navigation of complex industrial environments (e.g., utility plants, mechanical rooms, research facilities) for routine monitoring, thermal inspections, acoustic anomaly detection, situational awareness in hazardous or confined areas.

i) The Prime Offeror must be the Original Equipment Manufacturer (OEM) of the quadruped base and the OEM-validated manipulator arm and must be the OEM that maintains the official SDK/API, firmware signing and update pipeline, and product security documentation (e.g.

encryption specifications, vulnerability/patch management).

ii) The OEM Prime shall submit binding, OEM-signed attestations and artifacts that:

a. the firmware signing and update pipeline for the robot and all OEM-validated payloads are under OEM control, with versioning and patch/vulnerability management documented

b. the API/SDK used for manipulation/elevator workflows and enterprise integrations is maintained and versioned by the OEM, with change control and security documentation

c. the offer includes OEM-signed ATO-suitable artifacts (e.g., encryption specifications, patch/vulnerability management plan, and network/data-flow diagrams).

d. the OEM warrants the integrated robot-and-payload configuration and authorizes parts, repairs, training, and multi-year warranty service; and

e. the OEM accepts sovereign-control mitigations at award: U.S. data residency for logs/images/configuration, U.S.-persons-only remote support, no data flows to non-U.S.

entities, and OEM control of telemetry endpoints and firmware signing/updates.

iii) Concurrent Operations. All required payloads including any manipulator arm shall be installed and operate simultaneously from a single robot power source under a single coordinated software stack, with no manual payload swaps or reconfiguration during any single mission.

a. PTZ Camera: Provide a high-resolution pan-tilt-zoom (PTZ) color camera (optical zoom) capable of reading analog gauges, mounted on the robot (not handheld).

b. CMMS and Historian Integration: Integrate robot findings with IBM Maximo (CMMS) to create/update work orders automatically from flagged anomalies and write timestamped values to PI (historian) using SCADA/historian tag naming.

c. ATO Artifacts: Provide encrypted communications, a documented firmware update/patch and vulnerability-management posture, and ATO-suitable artifacts including encryption specifications, network/data-flow diagrams, and a patch/vulnerability management plan.

d. OEM Single-Point Accountability: The Prime shall submit OEM-signed attestations confirming:

1) the firmware signing/update pipeline for the robot and all OEM-validated payloads are under OEM control, with versioning and vulnerability/patch management documented

2) the API/SDK used for manipulation/elevator workflows and enterprise integrations is maintained/versioned by the OEM with change control and security documentation

3) the offer includes OEM-signed ATO artifacts (as above).

4) the OEM warrants the integrated robot-and-payload configuration and authorizes parts/repairs/training/multi-year warranty service; and

5) sovereign-control mitigations: U.S. data residency for logs/images/configuration, U.S.-persons-only for remote support, no data flows to non-U.S. entities, and OEM control of telemetry endpoints and firmware signing/updates.

iv) Future Capability — Elevator Routine. In a future phase, implement and validate a site-specific elevator routine via the OEM API/SDK using the manipulator (call button, entry/exit, floor selection, safe ride) to enable autonomous multi-floor operations.

v) Reliability Evidence & SLAs. Provide MTBF/MTTR evidence from comparable deployments and define repair SLAs including onsite response windows, depot turnaround times, and spare-parts lead times, plus a preventive-maintenance schedule and recommended spares list.

vi) Requirement/Specifications:

(a) Proven field performance in similar industrial environments

(b) Autonomy level and adaptive navigation capabilities.

(c) Payload integration flexibility (thermal, acoustic, LiDAR).

(d) Operator interface usability and remote access features.

(e) Support and analytical software.

(f) Vendor maturity, support availability, and cyber-hardening.

(g) Vendor field and after purchase support.

(h) Origin and foreign ownership risk, American company.

A. Proven Platform:

• Robot platform that has been deployed globally in industrial inspection roles by Fortune 500 companies and government agencies.

• Well tested and field-validated quadruped robots for autonomous inspection in real-world operational environments.

B. Autonomy and Mobility:

• Provides robust terrain-adaptive locomotion,

• dynamic obstacle avoidance,

• persistent SLAM-based navigation.

• Agility in industrial spaces o stairwells, o piping corridors, o confined utility tunnels o gravel and rough surfaces o Extreme temperatures environments

C. Interoperability and Scalability:

• Platform to offer seamless integration with our current infrastructure.

• Allows future expansion o Additional robots o Radio communications o Robotic arms

• The proprietary APIs and customization options allow for tailored workflows.

D. Sensor Integration:

• Supports modular payloads via I/O interface, allowing rapid integration.

o FLIR thermal cameras, o High resolution cameras w/zoom o Directional microphones, o Gas sensors, o Articulating “arm”, o Wi-Fi enabled, o Radio enabled o Custom payloads.

• Create a database and data tagging system consistent with existing plant SCADA and historian naming conventions.

o On-premises installation of database on virtual server, hosted by NIH’s OIIT.

o Ability to support 4k+ minimum inspection points.

• Integrate rounds data with existing plant historian and AVEVA PI software, supplying timestamped values for data gathered from industrial rounds including, but not limited to:

o Average surface temperature o Low surface temperature o High surface temperature o Sight glass liquid level o Gauge value o Root-mean-square vibration magnitude o Round error / fault indications o Robot health metrics

• Integrate inspection and analysis data with existing plant historian and AVEVA PI software, supplying timestamped values and equipment analysis for data gathered from the central utility plant including, but not limited to:

o Thermal inspections and analysis o Acoustic inspections and analysis o Mechanical inspections and analysis o Electrical inspections and analysis o AI visual inspections and analysis o Gas, oil and refrigeration leaks detection.

o Industrial analog and digital gauge readings and analysis o Monitoring perimeters, detecting security breaches o Coordinate with NIH regarding the breakdown of inspection points.

• Data collection and analysis:

o Provide data analysis based on collected data o Evaluate equipment condition and identify potential issues o Provide an alert notification to CUP of any hazardous conditions detected during the inspection.

E. Operator Tooling and API Access:

• Provide a mature suite of SDKs and fleet management tools that integrate with existing operational dashboards.

• System supports REST, ROS, and secure remote access, which is critical for integrating into our existing ICS/SCADA network architectures.

• Provide the required information required for NIH Authority to Operate (ATO).

• Support set up hardware and connect to enterprise network.

• Provide and support configuration of control/analytic software.

• Ensure secure communication between robots, control software, and IT systems.

• Provide basic training for IT and operations teams to modify networking infrastructure.

• Deliver documentation on setup, usage, and support.

• Robot connected and operational within enterprise environment.

• Control software configured and integrated with enterprise systems.

• Security and access controls documented and validated.

• Handoff training session completed

• Technical documentation provided

F. Vendor Trust and Cybersecurity:

• Provides regular firmware security updates,

• Encrypted data channels,

• Document cyber risk management posture,

• Provide equivalent transparency or documentation.

G. Foreign Ownership and Supply Chain Security:

• U.S.-based company subject to:

o U.S. export control, o U.S. cybersecurity protocols, o Data protection laws.

• Foreign ownership or manufacturing links present unacceptable risks to supply chain integrity and data exfiltration. This is especially critical for systems operating within sensitive federal infrastructure.

H. Lifecycle Support:

• The vendor must maintain a robust support network.

o Parts supply, o Training pipeline, o Certified repair channels.

o The contractor shall provide a one (1) year warranty with full factory coverage and support for software licensing, engineering, training, maintenance, and repair.

• Ensure long-term maintainability over the technology lifecycle.

I. Safety, Compliance, and Risk Mitigation:

• Robots must have undergone extensive third-party testing and meet ISO safety standards for industrial collaborative robotics.

• The equipment must be already approved for use in regulated environments.

J. Installation and acceptance testing:

• Ensure the robots meet performance requirements and NIH expectations.

• Provide four (4) docking stations installation and coordinate with NIH regarding the locations.

• Coordinate with NIH regarding any electrical and network related installation/activation to ensure compliance with the applicable codes and safety.

6. Overview of Minimum Technical Specifications:

Quantity and scope (turnkey delivery). Provide two (2) quadruped industrial-inspection robots with advanced sensing equipment, engineering and installation support, command-and-control/data-acquisition software, training, and future engineering/technical support—delivered as a turnkey package.

Single power source and coordinated control (true concurrency; no swaps). Quadruped bases and attached accessories are powered from the same source and coordinated by the same software for unified operations, with all required payloads and any manipulator arm installed and operating simultaneously during a single mission (no manual payload swaps or reconfiguration).

Sensor suite (mounted devices). High-resolution pan-tilt-zoom (PTZ) color camera capable of reading analog gauges, infrared (IR)/thermal imagery, acoustic/vibration sensing, gas-leak detection, and Light Detection and Ranging (LiDAR) to support advanced autonomous mobility and industrial inspections.

Modular input/output (I/O) and payload flexibility. Supports modular payloads via I/O interfaces for rapid integration of cameras, microphones, gas sensors, or an articulating arm.

Enterprise data foundation. Create a database and data-tagging system consistent with Supervisory Control and Data Acquisition (SCADA) and historian naming conventions; on-premises installation on a virtual server hosted by NIH; support 4,000+ inspection points.

Systems integration and analytics. Integrate rounds data with International Business Machines (IBM) Maximo (Computerized Maintenance Management System) and AVEVA PI (historian), provide timestamped values, and support analytics across thermal, acoustic, mechanical, electrical, visual (artificial intelligence), and leak-detection modalities; provide alert notifications for hazardous conditions.

Operator tooling and security posture. Provide mature Software Development Kits (SDKs) and fleet tools; support Representational State Transfer (REST) and Robot Operating System (ROS); enable secure remote access suitable for Industrial Control System/SCADA architectures.

Cybersecurity and Authority to Operate (ATO) artifacts. Provide encrypted communications, a documented firmware update/patch and vulnerability-management posture, network/data-flow diagrams, and Authority to Operate (ATO)-suitable artifacts (for example, Software Bill of Materials, encryption specifications, and patch/vulnerability management plan) to support NIH security review.

Single-point accountability with OEM-signed attestations (prime may be OEM or reseller). The prime offeror shall submit binding, Original Equipment Manufacturer (OEM)-signed attestations and artifacts that:

1. the firmware signing and update pipeline for the robot and all OEM-validated payloads are under OEM control, with versioning and patch/vulnerability management documented

2. the Application Programming Interface (API)/Software Development Kit (SDK) used for manipulation/elevator workflows and enterprise integrations is maintained and versioned by the OEM, with change control and security documentation

3. the offer includes OEM-signed ATO artifacts (as listed above), suitable for federal ATO packages

4. the OEM warrants the integrated robot-and-payload configuration and authorizes the prime to provide parts, repairs, training, and multi-year warranty service on the OEM’s behalf

5. the OEM accepts sovereign-control mitigations at award: United States data residency for robot logs/images/configuration, United States-persons-only for remote support, no data flows to non- United States entities, and OEM control of telemetry endpoints and firmware signing/updates.

Failure to provide any OEM-signed attestation or artifact above is a Fail on the Minimum Requirements.

Enterprise readiness at handoff (turnkey). Robots must be connected and operational within the enterprise; control software configured and integrated; security/access controls validated;

documentation delivered; and onsite handoff training completed.

Future Capability — Elevator Routine. This capability is deferred and not part of initial commissioning.

When directed by NIH, the Contractor shall implement and validate a site-specific elevator routine via the OEM API/SDK using the manipulator (call button, entry/exit, floor selection, safe ride) to enable autonomous multi-floor operations.

Proven platform and autonomy/mobility. Field-validated platform used by Fortune 500 companies and government; robust terrain-adaptive locomotion, dynamic obstacle avoidance, persistent simultaneous localization and mapping, and agility in stairwells, piping corridors, confined tunnels, rough/dirty/wet locations, and extreme temperatures.

Lifecycle support and warranty; program management; qualifications. Robust support/parts/training/repairs and multi-year warranty options; bi-weekly project reviews; contractor must show five (5) facilities of similar scale/complexity in the prior five years. The prime offeror must provide preventive-maintenance guidance, spare-parts lead times, service-level agreements (SLAs) for repairs, and Mean Time Between Failure (MTBF)/Mean Time to Repair (MTTR) evidence.

7. Project Management:

The contractor shall be responsible for Project Management, including appointing a Project Manager (PM), who shall be the Government's single point of contact, and provide all necessary project representation for the successful accomplishment of the work. The project manager shall be thoroughly familiar with all requirements and schedules and shall be identified in the proposal prior to contract award.

8. Meetings:

Meetings shall be held bi-weekly at the COR’s discretion to review project progress. The contractor shall discuss the status of the project and action plan will be updated as well as any pertinent schedule information fabrication issue that will delay shipment.

9. Government Furnished Items:

a. NIH will provide virtual servers for control software installation.

b. NIH CUP team will coordinate with OIIT/CIT.

c. Infrastructure, physical, electrical and network for two (2) CUP in-house charging stations.

10. Qualifications/Relevant Experience:

To be deemed qualified, the contractor shall demonstrate full working knowledge of performing similar projects, as detailed in the solicitation package. The contractor must have completed a minimum of five

(5) facilities of similar scale, complexity, and regulatory requirements within the prior five (5) years. The contractor shall provide for NIH approval, résumés of the control engineering team, team lead and senior manager.

1 1 . Schedule:

a. Project Schedule: The contract shall begin at Notice to Proceed (NTP) issuance and will include a base year with four (4), one (1) year options which may be renewed at the Government’s discretion.

b. NTP: The work shall proceed only after the NTP issuance by the CO for the activities indicated.

1. Installation shall be completed within four (4) months from Notice of Proceed (NTP) issuance.

2. Performance Time: The project shall be completed in accordance with the above schedule, which indicates performance time for support, maintenance, and training services.

12. Government Points of Contact:

a. Contracting Officer

TBD

b. Contracting Officer Technical Representative

TBD