Program & Project Management: The Integrated Master Schedule & Critical Path

Part 1 decided what to build and whether the economics close. This chapter is where the abstraction ends and the calendar begins. An AI data center is a program with a deadline that is set not by the owner's ambition but by physics and supply chains: the day the cluster can take its first synchronous training step, or serve its first revenue token, under the workload’s acceptance conditions. Everything upstream of that day is a race, and everything about how you run the race is a sequence of decisions whose consequences are denominated in time. Because the asset may face the guide's contested 2–3-year bear-case economic clock, time converts directly into money. → the depreciation clock that prices every lost month is in Chapter 1.8.

This chapter applies that frame to schedule: the phase-gate lifecycle and the build reframed as a time-to-first-train race; the Integrated Master Schedule (IMS) and the critical path across three tracks that move at different speeds; schedule risk quantified with Monte Carlo and the P50/P90 dates the long poles force on you; the owner's project controls — earned value, milestone deposits, change orders and claims; the facility and cluster schedules bound by integration milestones; and the stage-gate governance and assumptions/decisions register that record what the program is actually betting. In a power-bound, allocation-constrained market, the schedule is the project, and the long poles are not the ones a traditional general contractor watches. Keep the cash-flow milestones distinct: utility energization can start utility billing, accepted facility service can start a landlord’s rent, and accepted compute service can precede billable use. Bind each to its own contract and signatories in the IMS.

A data-center program moves through a recognizable sequence — scope and design basis → site control and entitlement → interconnection and power → procurement → construction → commissioning → go-live → operations — and the mature way to govern it is a phase-gate (stage-gate) model: each phase ends in a gate where capital is released, assumptions are tested, and the program either advances, holds, or kills. The gate exists to make the irreversible commitments explicit and to put a named owner and a dated decision on each one before the money leaves. → the reversible-vs-irreversible discipline this inherits is set in Chapter 1.1.

What makes the AI build different from a 2018 enterprise data center is that the gates are no longer evenly spaced. In a power-bound market the early gates — interconnection and long-lead procurement — release the commitments that set the finish date, while the late gates (fit-out, commissioning) govern execution against the governing dependency path established by the current IMS. The construction industry's instinct is to gate on design maturity; the AI program's reality is that you must gate the time-critical packages on power-service evidence and allocation evidence before the whole design is mature, once each released package’s interfaces are stable, or you arrive at a finished building with no megawatts and no GPUs. The phase-gate model has to be re-weighted accordingly: front-load the gates that release time-critical deposits, and accept that you are committing capital against assumptions you have not yet fully retired. On a permit-controlled path, an earlier transformer deposit cannot recover the permit date. Require the package’s approved interfaces and the remaining risk owner alongside the schedule benefit before releasing it.

The Integrated Master Schedule is the single time-logic network that ties every deliverable, dependency, and milestone into one critical-path-method (CPM) model. The mistake that defines failed AI programs is running it as one undifferentiated Gantt. An AI data center is really three schedules braided together, each governed by a different physics and a different supplier ecosystem, each with its own critical path:

• The power track — interconnection studies and agreements, the utility's grid upgrades, the substation, load-serving HV/substation and medium-voltage transformers (plus GSUs only where generation/export is in scope), switchgear, and (increasingly) on-site or behind-the-meter generation as a bridge. This track is dominated by lead times the owner cannot compress: large power transformers at roughly 128 weeks and generator step-up units at ~144 weeks (Wood Mackenzie Q2 2025 survey), and the host utility's project-specific service studies, upgrades, agreements and energization milestones. It often governs, but the configured dependency network — not the track label — identifies the critical path to a common end milestone.
• The building track — entitlement and permits (the air permit is a recurring long pole where on-site gas is involved), earthworks, shell, mechanical/electrical/plumbing, and the cooling plant. A shell-and-core AI hall can be built in 18–24 months — with start/end events that differ from interconnection estimates; compare both to the same required milestone before assigning float.
• The IT / cluster track — the GPU allocation (a slot, not a purchase, negotiated quarters ahead), CoWoS/HBM-gated accelerator delivery, network fabric, storage, structured cabling, then rack-and-stack, fabric validation, burn-in, and the reference run. This track is gated by allocation, not by the owner's cash. → the allocation game lives in Chapter 2.3; the HBM constraint behind it in Chapter 7.6.

The IMS exists to expose the float between these tracks and the integration milestones where they must meet. Float is the schedule's shock absorber: each track's float is calculated from the project dependency network and selected supply/permitting path, and the discipline is to spend that float deliberately — sequencing the fit-out to land just-in-time against energization — rather than letting it evaporate into early-but-idle completion. What kills programs is the current zero- or least-float path consuming all the float silently while the team celebrates the building track finishing early — on a slab that has no power.

Read the table as a sequencing problem. The power track sets the date; the building track must finish into that date with just enough float to absorb a slipped transformer; the cluster track cannot start meaningful integration until the powered-shell handoff, and then carries a bring-up tail that the inexperienced owner forgets to schedule. Making those three truths visible at once is what the IMS is for — so that effort and capital flow to whichever track is currently binding, which in 2026 is almost always power.

A deterministic CPM schedule produces a single finish date, and that date is a fiction — it is the result you get only if every activity lands on its point estimate, which collectively never happens. The mature program runs a quantitative schedule risk analysis (QSRA): assign a duration distribution (typically three-point — optimistic/most-likely/pessimistic) to each activity, model the correlations (a transformer delay and a switchgear delay are not independent — they share a strained supply chain), and run a Monte Carlo over the network a few thousand times. The output is not a date but a distribution, and the two numbers that matter are the P50 (the date you have a coin-flip chance of beating) and the P90 (the date you are 90% confident of beating).

The gap between P50 and P90 is dominated by a handful of long poles with long right-tails: the load-serving HV/substation transformer (and a GSU only where generation/export is in scope), the grid interconnection energization date, the air permit where on-site generation is in scope, and the GPU/HBM allocation. These are not normally distributed — they are long-right-tailed, because the failure modes (a transformer factory slot slips a quarter, a required utility study or upgrade milestone slips, an air-permit challenge adds eighteen months) move the date a lot, not a little. A schedule whose P50–P90 spread is six months is telling you that one of these poles can eat two quarters of revenue, and the deposit on that pole goes out the door before the design is frozen.

Cedar’s critical path is a dependency calculation. In weeks, dock = release + manufacture + common delay + shipping; building = baseline readiness + permit delay; installation finish = max(dock, building) + install duration. Facility acceptance = max(utility readiness + common delay, installation finish) + acceptance duration. Racking = max(IT delivery, building) + rack duration; productive date = max(facility acceptance, racking) + validation duration. Multiply independent event weights, then accumulate the completion distribution. The first date that reaches the selected cumulative probability is its percentile.

Release the package by the date in the result and retain the permit branch in the promise. The no-disruption path runs through manufacture, shipping, installation, facility acceptance and cluster validation; utility float is measured to installation finish, so adding another contingency for the same supply event double-counts it. The crossover shown for the original calendar release differs from the selected later release. If building readiness becomes later than dock delivery, accelerating the transformer cannot recover the building path.

The GAO Schedule Assessment Guide supplies the dependency and risk method. This chapter owns the IMS; 2.3 receives the package release, 2.4 assigns custody/remedies, and 13.10 accepts the cluster. Rent commencement retains its own contract gate.

A schedule you cannot measure against is a wish. Project controls is the owner-side discipline that turns the IMS into a steering instrument: a cost-and-schedule baseline, periodic measurement of progress against it, and a forecast that updates honestly. The backbone is earned value management (EVM) — comparing the budgeted cost of work performed (BCWP/EV) against the budgeted cost of work scheduled (BCWS/PV) and the actual cost (ACWP/AC), to derive a schedule performance index (SPI) and cost performance index (CPI). The value of EVM on an AI build is that it forces physical-percent-complete discipline and produces an estimate-at-completion early enough to act on, instead of a surprise at the end.

But EVM was built for labor-and-materials projects, and an AI data center's cost is dominated by a few enormous milestone-deposit equipment orders — the transformer, the switchgear, the turbines, the GPU allocation — paid against vendor manufacturing milestones, not against installed progress. This breaks naive EVM: booking the full PO value as "earned" on deposit overstates progress; booking nothing until delivery understates it for two years. The owner's controls function has to track a commitment/cash curve alongside the EVM curve — when each deposit is contractually due, what it secures (a factory slot, a queue position), and what its forfeiture costs if the program pivots. On AI builds the deposit schedule, not the construction draw, is the dominant near-term cash event. → deposit and slot-reservation instruments in Chapter 2.3; the contract that governs them in Chapter 2.4.

Change-order and claims management is the other half. AI programs change scope mid-flight more than any other large construction class — a GPU-generation jump (NVL72 to a denser successor) mid-design re-rates the cooling plant, the floor loading, and the busway; an interconnection re-study moves the energization date and cascades into the fit-out sequence. Each change is a fork with a schedule and cost consequence, and the owner who has not stood up a disciplined change-control board on day one ends up litigating those consequences as claims at the end. The cheap move is a tight baseline plus a fast, well-documented change process; the expensive move is a loose baseline that turns every density surprise into a dispute.

The chronically under-managed seam in an AI build is the boundary between the facility (the powered, cooled shell, delivered by the construction and MEP world) and the cluster (the GPUs, fabric, and software, delivered by the IT and platform world). These are two organizations, two cultures, two schedules, and two definitions of "done" — and the project lives or dies in how cleanly they are bound. The right structure is an explicit two-track schedule with a small set of named integration milestones where the tracks hand off, each with an unambiguous entry/exit gate and an owner. → the powered-shell delivery model that creates this seam is in Chapter 2.2.

The integration milestones that bind the two tracks, in order:

• Powered-shell handoff. The facility delivers a hall with conditioned space, structural floor capacity, and the power and cooling distribution stubbed to the white space — but not yet energized to the rack. This is the contractual seam between base-building and IT fit-out, and the cleanest place to split scope and risk.
• Energization (power-on). Medium-voltage power live to the in-row PDUs/busway, UPS and any on-site generation commissioned (L3/L4). Until this gate the cluster track cannot draw load; it is the most common place for the power track's slip to surface as a cluster-track delay. → electrical acceptance in Chapter 13.3.
• Water-on / cooling-ready. The facility cooling loop and CDUs flushed, leak-checked, balanced, and proven to spec — non-negotiable before energizing liquid-cooled racks, because coolant temperature and flow must remain inside each installed rack's OEM operating envelope. → CDU commissioning in Chapter 13.5.
• Integrated systems test (L5 IST). The facility proves it holds load and rides through faults under simulated full IT load. For a liquid-cooled AI hall, set the Level-5 duration from the approved test scripts, phasing, witness plan, defect-correction allowance, and retest scope. → IST in Chapter 13.6.
• Cluster burn-in and the reference run. Now the IT track owns the clock: node diagnostics, fabric BER validation, a burn-in campaign selected by the signed test plan and measured defect-discovery rule, and a reference training/inference run at goodput. This is first-train. → burn-in in Chapter 13.8; cluster-scale validation in Chapter 13.9.

The reason to make these milestones explicit rather than implicit is that the seam is where finger-pointing lives. When the building is "done" but the cluster is not earning, the question is always whose milestone slipped — and a program with named integration gates and per-gate owners answers it in a stand-up, while a program with one Gantt answers it in a claim.

The phase-gate model only protects the program if the gates actually gate something irreversible. The governance question is therefore concrete: at which board approval is each one-way-door commitment released? The interconnection-study deposit is committed before any building exists (under PJM's Expedited Interconnection Track, accepted by FERC on June 9, 2026 and effective July 31, 2026, a $500k study deposit that turns non-refundable once the generation request is valid, plus a $15k/MW readiness deposit; for the campus load itself, the host utility's own study fees and the security behind its service agreement); the HV transformer PO commits a factory slot 128–208 weeks out; the GPU allocation reservation commits a slot quarters ahead of silicon that is itself CoWoS/HBM-gated. Each of these is capital released against assumptions that have not been fully retired — which is exactly why the gate exists: to force the board to look at the assumption, name its owner, and accept the bet on the record.

The artifact that makes this auditable is the assumptions-and-decisions register — the schedule-and-commercial analogue of the design-basis document from scoping. It records, for every load-bearing assumption (the energization date, the transformer delivery date, the GPU-generation the cooling plant is sized for, the contracted-vs-merchant power split the financing assumes), what was assumed, who owns it, when it must be confirmed or it becomes a risk, and which downstream commitments depend on it. When a long pole's tail fires — a transformer slips a quarter — the register is what tells you, in minutes, which downstream dates and deposits move and who has to be told. Without it, the same event becomes a forensic reconstruction conducted under deposition.