Safety by design, not by inspection
Thermal propagation is the failure mode utilities lose sleep over. Design decisions at the cell and module level do more for safety than any procedural layer.
Battery safety headlines almost always trace back to thermal runaway propagating from one cell to the next, then module to module, until an entire container is involved.
The most effective mitigations are physical: cell chemistry choice, module-level thermal isolation, active liquid cooling, pressure relief paths, and a fire mitigation design that assumes an incident will start and focuses on preventing it from spreading.
Procedural controls, alarming and operator response matter, but they arrive too late if the design has not already contained the event.
Our AC block is built with integrated thermal management and a fire mitigation design intended to stop propagation between modules. That is the layer that keeps a bad day from becoming a project-ending day.