Modules2 light AI modules per line site + 1 certified safety controller (SIL 3); one line site every 32 km
CPU16 cores (2 × 8), plus 2 lockstep real-time cores per module
AI throughput3,000 TOPS per site (2 × 1,500, INT8 / FP4 sparse)
Memory2 × 64 GB LPDDR6, 300 GB/s per module
Power draw82 W compute; ≈ 0.37 kW with the fibre interrogator, cameras, gas detectors and radio, inside the 0.6 kW site
Process node2 nm-class SoCs; safety controller on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life.
RedundancyEvery sensor is wired to both modules. Each module is primary for its zone (16 km of fibre upstream or downstream) and hot standby for the other. A software fault can never drive the line outside its certified safe envelope.
Safety channelThe SIL 3 controller closes the valve on its own sensors: two-out-of-three pressure transmitters each side of the valve, valve limit switches and actuator pressure switches
SensorsDAS and DTS on 32 km of fibre (32,000 channels at 1 m), 6 pressure and temperature transmitters, gas detectors, valve position; 2 mast cameras on automotive Ethernet through a camera aggregation switch
LinkFibre in the same cable to the next site and The Brain, 10 Gbit/s; satellite backup. The pump drive closes its own current loop at 1 kHz.