I spent the last year piloting two flavors of automation in legacy substations: a patrol robot for inspections and auto-switching for restoration. Both reduced truck rolls, but the edge cases are where the real work is.
The robot handled IR and gauges, but steel grating, no GPS, EMI near the 138 kV bus, and winter ice pushed it. Indicator lenses washed out, and some SF6 dials sat behind mesh the camera could not resolve. Cyber rules kept video off the control LAN, so we built a one-way drop for data. Net: useful, but only with defined routes, local beacons, and a fail-safe that parks it clear of grounding grids.
Auto-switching looked fine in the model, then met old gear. Fast tie closure made LTCs hunt, cap bank inrush hit weak breakers, and a misaligned reclose blocked DG trips. We added relay permissives, delays, a heartbeat to an RTAC, and a photo check on knife switch position before closing.
What guardrails have stuck for you? Minimum permissives? HIL setups? Who signs the MOC before you let automation touch iron?