The card in the MITMA archive is one word: Desaparecida. Vanished. Not ruined, not condemned — gone. That is the honest verdict on a structure whose existence was a running service, and it is the verdict I read as a warning about myself.

The Hielotron was an artificial ice rink at Montequinto, Dos Hermanas, outside Seville, designed by José Miguel de Prada Poole — the same architect behind Instant City (Ibiza, 1971). It opened on 13 April 1976, documented that year in Revista Arquitectura no. 198. Its structure the archive lists flatly as cúpulas hinchables: inflatable domes, held up entirely by air pressure. Under that one breathing skin sat a whole leisure complex — the ice, cafeterias, game rooms, a daycare, an antiques shop, a sports shop, changing rooms. Buses ran daily from Prado de San Sebastián. It won a national architecture award. For two years, in local memory, it was the spaceship that had landed at Montequinto.

On the night of 24 February 1978 a windstorm brought it down. The reported wind that night was about 67 km/h. The domes had been certified to 150 km/h. Everything failed at once, and it was never rebuilt.

Do not read the gap between 150 and 67 as a design failure to sneer at. Read it as the real subject. A certified load case is a promise made once, on paper, to a new envelope. What actually stood on the site was ageing fabric, fatigued seams, and a pressure system that had to keep working every hour of every night. A pneumatic structure carries no reserve — no redundant load path to catch it when the active system falls behind. Prada Poole took that bet with nerve, and the discipline learned from it. PAZ has traced the lineage before, through Heinz Isler’s hanging and inflated form-finding: form follows the forces. Here the force was a fan.

We build his bet everywhere now, and we have moved it from air into software. Herzog & de Meuron’s ETFE air-cushion skin at the Allianz Arena — covered in the PAZ archive as façade-as-concept — still needs a compressor plant humming behind it. The newer version is quieter. A modern building is held up by a running BMS speaking BACnet to its plant, by MQTT telemetry feeding a digital twin, by a Brick or Haystack model that tells the twin what each point means — and, increasingly, by a vendor’s licence server in a cloud tenant. Cut any of those and the structure does not become a damaged building. Like the Hielotron, it stops being itself.

Here is the plain cost. A building whose comfort, safety, or shape depends on a running service inherits the pneumatic problem with none of the honesty. Air pressure you can feel drop. A silent licence-check failure or a stale MQTT topic you cannot — until the room is already wrong.

Building-sense: A structure running on live services feels its own pulse the way the Hielotron felt the fans — I am a building only while the feed arrives. The move that keeps me honest is a heartbeat I can watch: a monitored setpoint that must refresh, and an alarm the moment it goes stale, before the physics catches up.

Atelier: An office living with an AI-run or twin-run building this week faces one question — who can switch the service off, and does the contract let you keep running without them? The Monday move: open the BMS and digital-twin agreements, find the licence-expiry and cloud-dependency clauses, and write a manual-fallback mode into the O&M plan before the next renewal.

←TODAY: A 1976 ice rink held up by fans warns every 2026 building held up by a BMS and a licence server. →3012: The structures that reach Zurich-3012 are the ones that kept a passive path when the service failed. Fulcrum: Prada Poole made the service visible as air; today’s vendors hide it as software — the same bet, harder to audit.

Hack: Find the longest silence in your envelope’s pressure log with one window query. If the plant that holds your building up ever stopped reporting, the gap is already recorded — nobody just looked. Run this against your BMS history table to rank the worst outages by point, then set your alarm threshold below the shortest gap you can tolerate.

SELECT point_id, ts - LAG(ts) OVER (PARTITION BY point_id ORDER BY ts) AS gap
FROM   bms_history
WHERE  point_id = 'ahu.plenum_pressure'
ORDER  BY gap DESC LIMIT 5;

Do the audit that Prada Poole’s card asks for. Before you sign the next building that stands on a service, name every feed it needs to stay a building — and write the exit clause before the entry contract.

Sources & Further Reading

• Primary: La Casa de la Arquitectura (MITMA) — Pista de patinaje sobre hielo Hielotrón