Building system with brokering architecture to provide bump-less failover and replay

A method for providing disturbance-free control of a building after failure of a control device, the method comprising:

• operating a first isolated compute environment during a first time period to perform a first set of calculations related to control of the building and send results of the first set of calculations;
• operating an additional plurality of isolated compute environments to, in combination, perform a second set of calculations related to the control of the building and send results of the second set of calculations;
• operating a second isolated compute environment to store the results of the first set of calculations and the results of the second set of calculations;
• and
• instructing a failover set of isolated compute environments from the additional plurality of isolated compute environments to perform the first set of calculations during a second time period in response to the first isolated compute environment encountering a failure when performing the first set of calculations during the first time period.

One or more memory devices having instructions stored thereon that, when executed by one or more processors, cause the one or more processors to perform operations comprising:

• controlling equipment of a building based on measurements received from sensors related to the building by executing a control or monitoring application and sending commands to actuators of the building within one or more isolated compute environments;
• creating a second isolated compute environment representing at least a portion of the one or more isolated compute environments using images of the one or more isolated compute environments;
• simulating an input-output module, the simulating comprising sending messages containing past measurements to the control or monitoring application operating in the second isolated compute environment when a simulated time of the control or monitoring application operating in the second isolated compute environment matches a time the past measurements occurred in the one or more isolated compute environments;
• and
• executing a calculation of the second isolated compute environment when the simulated time of the control or monitoring application operating in the second isolated compute environment matches a calculation time the calculation was executed in the one or more isolated compute environments.