Modules2 light AI modules (navigation & rules of the road; perception) + 2 certified safety controllers; mission containers carry their own compute
CPU16 cores (2 × 8) + 2 lockstep real-time cores per module
AI throughput3,000 TOPS (2 × 1,500, INT8 / FP4 sparse)
Memory2 × 64 GB LPDDR6, 300 GB/s per module
Power draw94 W compute; ≈ 0.4 kW with 10 cameras, 2 lidars and the radar — 0.008% of the 5.2 MW plant
Process node2 nm-class SoCs; safety controllers on a mature 16 nm node, 15-year supply; compute is a line-replaceable unit, swapped at mid-life
RedundancyEvery sensor is wired to both modules. Each module is primary for its zone and hot standby for the other. A software fault can never drive the vessel outside its certified safe envelope.
Safety channel2 × SIL 3 controllers with their own sensors: jet-shaft encoders, nozzle and bucket position sensors, engine overspeed and oil-pressure switches, fire and flood detectors, and a safety-rated collision radar
Sensors10 cameras (6 visible 4K, 4 thermal) on automotive Ethernet through camera aggregation switches; 2 docking lidars, 1 navigation radar, AIS, 400 plant sensors
DrivesMotor-generator drives close their own current loop at 1 kHz; governors and nozzle actuators close theirs locally; the modules send throttle and nozzle set-points at 10 Hz
LinkLine-of-sight mesh and satellite; the run plan is aboard, so a lost link changes nothing