Prima — Demarcation Matrix · KOM Oman AI Factory

DRAFT

Draft

Part ofPetroCompute

Demarcation Matrix

KOM Oman AI Factory
who does what, at
every boundary

Provider and customer responsibility for space, power, cooling, network, hardware lifecycle, access and operations — element by element, with the physical boundary named in each case. Attaches to the Service Order Form.

Document

PRM-DEM-2026-001

Version

0.1 — Draft

Issued

July 2026

Owner

COO, with the CTO

Status

Issued for customer review

07

Disciplines
demarcated

30min

Smart-hands
response, 24×7

05

Controlled
access layers

1

Named boundary
per element

DRAFT

Demarcation MatrixKOM Oman AI Factory · 02 / 06

Contents6 pages · 9 sections

01Scope and how to read this matrix02 02Space, rack and cable pathway03 03Power03 04Cooling04 05Network, storage and platform04 06Hardware lifecycle and smart hands05 07Access, security and escort05 08Operations, monitoring and change06 09Exclusions, default rule and undefined boundaries06

01Scope and how to read this matrix

The Service Level Agreement states what Prima commits to and measures it at named points. This matrix states who physically does the work on either side of each of those points. It exists so that no element of the service is assumed by both parties or by neither.

Each row names one element, what Prima does, what the customer does, and the boundary point where responsibility transfers. Boundary points are the same points the SLA measures at — rack PDU input, CDU primary inlet, leaf-switch customer port, rack air inlet — so a service credit and a work instruction always refer to the same physical place.

Prima column — performed by resident Prima staff or by a supervised vendor under a Prima contract. No customer action required.

Customer column — performed by the customer or its nominated vendor. Prima will not act on this side without written instruction.

Em dash — no obligation on that party for this element. It is not a gap; it is deliberate.

Boundary point — the physical interface. Upstream is Prima, downstream is the customer, unless the row says otherwise.

Order of precedenceWhere documents differ

Service Order Form	Prevails over this matrix. A SOF may vary any row for the capacity it covers — for example where a customer supplies its own racks or brings its own carrier.
Master Services Agreement	Governs the legal relationship. Where the MSA and this matrix conflict on liability or remedy, the MSA prevails.
Service Level Agreement	Defines the commitments and the measurement points. This matrix does not create, alter or waive any service level.
This matrix	Governs operational responsibility. It is the working reference for day-to-day execution and for resolving who acts.

PurposeThis is an operational document, not a commercial one. It carries no pricing. Work in the Prima column is included in the recurring charge unless the row states otherwise; work in the customer column is at the customer's cost.

DRAFT

Demarcation MatrixKOM Oman AI Factory · 03 / 06

02Space, rack and cable pathwayBoundary: rack footprint

Prima delivers a rack, standing, earthed and labelled, on a floor rated for the delivered configuration. Everything mounted inside it is the customer's.

Element	Prima responsibility	Customer responsibility	Boundary point
Data hall shellEnvelope	Provides the hall, floor, hot and cold containment, fire detection and suppression, and the published floor-loading rating.	—	Hall envelope
Rack and cabinetStandard supply	Supplies, positions, levels, earths and labels the rack to the site naming standard. Fits blanking at handover.	Confirms elevation before delivery. Supplies own racks only where the SOF permits.	Rack footprint
Floor loadingStructural	Certifies the loading limit per tile and confirms the delivered configuration is within it.	Declares equipment weight and footprint before delivery.	Published loading limit
Cage or private suiteWhere contracted	Builds the cage, fits locks and readers, operates key management and the access record.	Nominates authorised holders and confirms them at recertification.	Cage mesh
Cable pathwayContainment	Provides overhead tray and sub-floor pathway, and enforces containment fill and separation discipline.	Requests pathway for its own cabling before installation.	Tray edge at the rack

03PowerBoundary: rack PDU outlet

Prima delivers power to the rack PDU outlet. The customer owns everything downstream of the outlet — cords, power supplies and in-rack distribution.

Element	Prima responsibility	Customer responsibility	Boundary point
Rack power feedA and B	Dual independent feeds to the rack, N+1 UPS, N+1 standby generation, on-site fuel for 48 hours at full load.	—	Rack PDU input
Rack PDUMetered	Supplies, installs and commissions the PDU with per-outlet metering.	Confirms outlet type and count before delivery.	PDU outlet
Power cordsDownstream	—	Supplies and connects cords from the PDU outlet to equipment power supplies.	PDU outlet
Dual-cord disciplineResilience	Publishes the A/B assignment map for every outlet and verifies balance at handover.	Ensures every device is dual-corded across A and B. Single-corded equipment forfeits the power commitment for that device.	Equipment PSU
Contracted drawMetering	Meters actual draw, reports monthly, alerts on approach to the contracted limit.	Remains within the contracted draw per rack stated in the SOF.	Metered value at the PDU
OverdrawRemedy	Alerts on breach; throttles job admission at site level if the confirmed allocation is approached.	Remedies within the period agreed at alert, or agrees an uplift.	Contracted draw in the SOF

NoteSite draw is capped, not merely forecast — see the Capacity Reconciliation Statement. The cap is enforced at the scheduling layer above every customer allocation and applies before any individual rack limit.

DRAFT

Demarcation MatrixKOM Oman AI Factory · 04 / 06

04CoolingBoundary: rack manifold

The facility is direct-liquid-cooled. Prima owns the loop to the rack manifold; the customer owns cold plates, in-node tubing and node-level thermal control.

Element	Prima responsibility	Customer responsibility	Boundary point
Chiller plant and CDUN+1	Operates N+1 chiller plant and N+1 CDUs, holding coolant supply at W27 at the CDU primary inlet.	—	CDU primary inlet
Secondary loopDual path	Provides dual-path secondary loops to the rack manifold with leak detection on every run.	—	Rack manifold
In-node loopDownstream	—	Cold plates, in-node tubing, quick disconnects, node thermal control and fan curves.	Rack manifold
Coolant chemistryFacility loop	Quarterly assay, filtration and treatment of the facility loop; publishes the approved coolant specification.	Uses only approved coolant and materials in the node loop.	Rack manifold
Air-side envelopeAncillary	Holds ASHRAE Class A2 at the rack air inlet for air-cooled and ancillary equipment.	Maintains blanking and airflow discipline within the rack.	Rack air inlet
Leak responseP1	Detects, isolates the affected loop, and notifies on P1 timescales.	Powers down affected nodes on instruction from the NOC.	Rack manifold

05Network, storage and platformBoundary: leaf-switch customer port

Prima delivers the fabric to the leaf-switch customer port. The customer owns host adapters, drivers, fabric tuning and everything above layer 2.

Element	Prima responsibility	Customer responsibility	Boundary point
Compute fabricInfiniBand	Non-blocking spine-leaf fabric to the leaf-switch customer port, including switch configuration and subnet management.	Host adapters, drivers, fabric tuning, collectives and everything above layer 2.	Leaf-switch customer port
Fabric cablingInstalled	Supplies, dresses and labels cabling at both ends; verifies link state at handover.	—	Port face
Management networkOut-of-band	Provides out-of-band Ethernet to the management port, segmented from the compute fabric.	Consumes the out-of-band path; owns credentials on its own baseboard controllers.	OOB management port
StorageWhere contracted	Presents the parallel namespace to the compute nodes at the capacity and throughput stated in the SOF.	Mount, client tuning, quotas and data lifecycle within its own namespace.	Namespace mount point
External connectivitySeparate SLA	Where contracted, delivers to the meet-me room port under a separate connectivity service level agreement.	Carrier selection and contracting where bringing its own carrier.	Meet-me room port
Platform baselineBare metal	Firmware and BIOS baseline to the published standard; hands over verified bare metal.	Operating system, container runtime, scheduler and workload images.	Bare-metal handover
SchedulingAllocation	Enforces the site-level draw cap above all allocations.	Job admission, queueing and tenancy within its own allocation.	Allocation boundary

DRAFT

Demarcation MatrixKOM Oman AI Factory · 05 / 06

06Hardware lifecycle and smart hands30 min response, 24×7

Resident engineers act on written instruction. Prima performs the physical work; the customer decides what work is to be done and supplies the parts.

Element	Prima responsibility	Customer responsibility	Boundary point
Delivery and receiptInbound	Receives, inspects, stages and records serial numbers against the manifest.	Notifies inbound deliveries with a manifest five business days ahead.	Loading bay
Rack and stackInstallation	Installs, cables, powers and verifies link and thermal state.	Supplies the rack elevation and cabling schedule before installation.	Rack
AcceptanceHandover	Confirms power, environment and fabric reachability at the port.	Confirms acceptance at workload level.	Reachability at the port
Component replacementSmart hands	Performs the swap and handles media under the sanitisation procedure.	Supplies the spare, raises the ticket and owns the vendor return.	Chassis
Spares holdingOn site	Stores customer spares in a designated secure location with an access record.	Owns stock level and replenishment.	Spares cage
FirmwareChange-controlled	Applies the facility baseline, or a customer-approved version, under change control.	Approves the version and owns testing of its own stack.	Change record
DecommissioningExit	De-installs, sanitises or destroys media to NIST 800-88 and issues the certificate.	Instructs, nominates the method, and collects or authorises destruction.	Sanitisation certificate
Smart handsWithin SOF hours	Resident engineers 24×7, 30-minute response, for cabling, reseats, swaps, media handling and guided diagnostics.	Provides written instruction and remains reachable while work is in progress.	Ticket instruction

NoteSmart hands within the hours committed in the SOF are included. Work beyond those hours is performed on the same response target and charged at the rate in the SOF.

07Access, security and escortFive controlled layers

Prima owns all five physical layers. The customer owns the list of people — who should hold access, and the duty to tell us when that changes.

Element	Prima responsibility	Customer responsibility	Boundary point
Perimeter to hallAll layers	Operates the five controlled layers, 24×7 officer coverage, surveillance and intrusion detection.	—	Site boundary
EntitlementProvisioning	Provisions on request from a named approver; recertifies quarterly; revokes on notice.	Nominates holders, confirms at recertification, and notifies leavers the same day.	Access platform record
EscortVisitors	Provides an escort where the visitor holds no entitlement for the layer.	Requests the escort and accompanies its own vendors.	Interior zone
Customer vendorsSponsored	Vets, badges and escorts sponsored vendors.	Sponsors and submits details two business days ahead.	Badge issue
Surveillance footage90+ days	Retains for the committed period and releases under the disclosure procedure.	Requests footage in writing, identifying time and location.	Disclosure request
Law-enforcement demandNotification	Verifies, resists overbroad demands, and notifies the customer unless legally prohibited.	—	Customer notification

DRAFT

Demarcation MatrixKOM Oman AI Factory · 06 / 06

08Operations, monitoring and changeBoundary: allocation

Prima monitors and reports to the rack. The customer owns everything inside its allocation, and tells us when a change there alters draw or thermal profile.

Element	Prima responsibility	Customer responsibility	Boundary point
Monitoring30-second	Monitors power, environment, fabric and rack reachability continuously.	Workload and application-level monitoring.	Rack reachability
Incident detectionNOC	Detects, raises and escalates on the published response targets.	Raises customer-observed incidents through the NOC.	Ticket
AvailabilityMonthly	Measures, reports and applies service credits without a claim.	Reviews and queries the reported figure within 30 days.	Monthly service report
Planned maintenanceNotice	Notifies by class and executes within the agreed window.	Consents to work outside the window and nominates freeze periods.	Maintenance notice
Change — critical pathFacility	Approves through Facilities and Operations with a documented rollback plan.	Notified where service-affecting; may object before the window opens.	Change record
Change — allocationCustomer side	—	Owns entirely; notifies Prima where the change alters power draw or thermal profile.	Allocation boundary
Capacity increaseExpansion	Offers adjacent capacity under the right of first refusal in the Contract Schedules.	Exercises or declines within the notice period.	Written notice

09Exclusions, default rule and undefined boundaries

Outside this matrix

Logical security of customer workloads — network segmentation above layer 2, identity for compute resources, encryption at rest and in transit.
Data content and lawfulness — what the customer processes, and its compliance with applicable law and export control.
Software licensing — operating system, scheduler, application and model licensing on the customer side of the platform boundary. External connectivity beyond the meet-me room port is likewise excluded, under its own service level agreement.

Default ruleWhere a row is silent

Where an element is not listed, responsibility follows the nearest boundary point: upstream is Prima's, downstream is the customer's. Where no boundary is apparent, the element is Prima's if shared with any other customer, and the customer's if it serves that customer alone.

Resolving an undefined boundaryFive business days

Either party raises the question through the NOC, naming the element and the work in dispute.
Prima acts first where the element is safety-critical or service-affecting, and settles responsibility afterwards. Nothing waits on a demarcation question.
The Operations Manager and the customer's nominated manager agree the boundary within five business days and record it.
Agreed additions are issued as a revision to this matrix at the next quarterly service review, so the position is captured rather than remembered.

PrincipleAn unclear boundary is Prima's problem to solve and the customer's right to have settled. Work is never delayed while responsibility is established.

Office of the COO

For questions on this matrix, to raise an undefined boundary, or to record a variation agreed under a Service Order Form.

info@primasecurity.ai
primacompute.com