Modules2 AI modules (module 1: forward path and driving; module 2: train, cars and verification) + 1 SIL 4 train-control computer
CPU32 cores (2 × 16) + 4 lockstep real-time cores per module
AI throughput10,000 TOPS total (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6 at 600 GB/s per module; 4 TB solid-state event recorder
Power draw236 W compute; ≈ 0.5 kW with cameras, lidars, radars and switches — 0.01% of the 6 MW plant
Process node2 nm-class SoC; SIL 4 computer on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life
RedundancyEvery sensor is wired to both modules. Each module is primary for its zone and hot standby for the other; both must agree to keep speed. The SIL 4 computer (three safety controllers voting two out of three) holds speed, braking and signals, and stops the train with no AI module running.
Sensors8 long-range cameras (6 visible 4K, 2 thermal; 2 km), 3 long-range lidars, 2 radars, aggregated over automotive Ethernet into both modules; bearing, wheel and brake data from every car over the ECP trainline
Safety sensorsThe SIL 4 channel reads its own: 2 axle tachometers, a Doppler ground-speed radar, brake-pipe and brake-cylinder pressure transducers, GNSS and wayside transponder readers, a safety-rated obstacle radar
LinkTrackside radio, corridor 5G and low-orbit satellite, ≈ 1 Mbit/s used; the train plan comes from The Brain and is held aboard