Modules2 heavy AI modules (navigation & fleet station-keeping; perception & acoustics) + 2 certified safety controllers; combat systems are separate
CPU32 cores (2 × 16) + 4 lockstep real-time cores per module
AI throughput10,000 TOPS (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6, 600 GB/s per module
Power draw0.2 kW compute; ≈ 0.85 kW with 16 cameras, 2 lidars, 2 radars and the acoustic array — 0.007% of the 12 MW plant
Process node2 nm-class SoCs; safety controllers on a mature 16 nm node, 15-year supply; compute is a line-replaceable unit, swapped at mid-life
RedundancyEvery sensor is wired to both modules. Each module is primary for its zone and hot standby for the other. A software fault can never drive the vessel outside its certified safe envelope.
Safety channel2 × SIL 3 controllers with their own sensors: shaft encoders, rudder-angle sensors, generator overspeed and oil-pressure switches, fire and flood detectors, and a safety-rated collision radar
Sensors16 cameras (10 visible 4K, 6 thermal) on automotive Ethernet through camera aggregation switches; 2 lidars, 2 navigation radars, AIS, passive acoustic array, 800 plant sensors
DrivesMotor drives close their own current loop at 1 kHz; the modules send speed and rudder set-points at 10 Hz
LinkLine-of-sight mesh to the controlling ship, satellite to shore; the plan is aboard, so a lost link changes nothing