But integration in production is never serene. One night, a malformed DDS packet from a development node caused stale status values to propagate into the translator. An edge node retried a fatal sequence three times. The watchdog triggered, CODESYS locked the arm, and the plant went into a protected safe state—lights pulsed, alarms whispered. Operators rushed in. In the postmortem, they found the flaw not in CODESYS nor ROS 2, but in the assumptions between them: who owns authority, what counts as truth, and which failures require graceful recovery versus immediate shutdown.

Months later, with the system matured, the plant ran like a team moving with purpose. A line change that used to require half a day and two technicians now took minutes: engineers edited a ROS 2 behavior tree, CODESYS loaded the motion parameters, and the translator negotiated the transition. Mobile robots, once cautious, now flowed through aisles with CODESYS-supervised maneuvers and ROS 2-aware intentions—human workers felt safer, and throughput rose.

The first test was simple: let a ROS 2 node tell a conveyor to pause if a vision node detected a misaligned board. CODESYS, always wary, demanded unequivocal safety: a hardware interlock and a watchdog that would seize control if messages failed. They implemented a heartbeat over DDS, wrapped it in a CODESYS library, and made the conveyor a cautious partner: it would accept ROS 2 commands only while the heartbeat remained steady. The result was poetry—the vision node shouted “misaligned” and the PLC’s ladder logic honored the command, the belt stilled, and a red LED blinked like a heartbeat finding a rhythm.