Modules4 AI modules (navigation; perception forward; perception aft; cargo & plant — boil-off, tank pressure, turbines) + 2 certified safety controllers
CPU64 cores (4 × 16) + 4 lockstep real-time cores per module
AI throughput20,000 TOPS total (4 × 5,000, INT8 / FP4 sparse)
Memory4 × 128 GB LPDDR6, 600 GB/s per module; 8 TB solid-state voyage log
Power draw400 W compute; ≈ 1.2 kW with 24 cameras, 4 lidars and 3 radars — 0.004% of the 32 MWe drawn at 19.5 kn
Process node2 nm-class SoCs; safety controllers on a mature 16 nm node, 15-year supply
RedundancyEvery sensor is wired to two modules. Each module is primary for its zone and hot standby for its pair: navigation with cargo and plant, perception forward with perception aft. Any one module can bring the ship to a safe drift or anchorage. Two independent SIL 3 safety controllers hold the plant trip, cargo emergency shutdown, steering and shaft interlocks.
Sensors24 cameras (visible and thermal) aggregated over automotive Ethernet through camera switches into the modules, 4 lidars for berthing, 3 radars, AIS, echo sounder, gas detection on every deck, 1,800 cargo and plant sensors
LinkLow-orbit satellite at sea (plan updates each minute; the planning model runs aboard); fibre and private 5G in port
Service lifeCompute is a line-replaceable unit, swapped at mid-life in the year-20 dry-docking; the hull runs 40 years