Compliance Is Not Safety: A Demonstrable Safety Argument for Energy Storage Systems and the Control Architecture That Sustains It

On 13 August 2026, a 150 MW battery storage project in England was refused planning permission despite full compliance with applicable fire safety guidance. The inspector found no breach of any standard, only insufficient evidence that the controls would be effective. That distinction defines the binding constraint on Brazilian projects contracted from the December 2026 capacity auctions: the capacity to sustain a safety argument is a property of the control architecture, not the equipment. Drawing on four forensic investigations, Brazil's 2026 regulatory framework, and an operating 30 MW/60 MWh asset, the paper proposes a four-layer architecture and eight specification items.