Modules2 heavy AI modules + 2 certified safety controllers (SIL 3) in the control building
CPU32 cores (2 × 16), plus 4 lockstep real-time cores per module
AI throughput10,000 TOPS total (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6, 600 GB/s per module
Power draw200 W compute; ≈ 0.6 kW with 32 cameras, vibration and gas sensing — 0.002% of the 30 MW station
Process node2 nm-class SoCs; safety controllers on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life.
RedundancyEvery sensor is wired to both modules. Module A is primary for the train and module B for the yard, traps and perimeter; each is hot standby for the other. A software fault can never drive the station outside its certified safe envelope.
Safety channelThe SIL 3 controllers hold emergency shutdown, blowdown, turbine overspeed trip, fire and gas, and anti-surge on their own sensors: speed pickups, suction and discharge pressure transmitters, flow venturi, bearing proximity probes, gas and flame detectors
Sensors24 visible and 8 thermal cameras on automotive Ethernet through camera aggregation switches, 2 acoustic leak cameras, 64 vibration channels, 40 gas detectors, 300 process transmitters
LinkLine fibre to The Brain, 10 Gbit/s; satellite backup. The VFD and the fuel valve close their own inner loops at 1 kHz.