Modules3 AI modules (navigation; perception; plant & cargo — reactor plant, inerting, pumps) + 2 certified safety controllers
CPU48 cores (3 × 16) + 4 lockstep real-time cores per module
AI throughput15,000 TOPS total (3 × 5,000, INT8 / FP4 sparse)
Memory3 × 128 GB LPDDR6, 600 GB/s per module; 8 TB solid-state voyage log
Power draw300 W compute; ≈ 1.1 kW with 20 cameras, 4 lidars and 3 radars — 0.004% of the 30 MWe plant
Process node2 nm-class SoCs; safety controllers on a mature 16 nm node, 15-year supply
RedundancyEvery sensor is wired to two modules. Each module is primary for its zone and hot standby for the next: navigation backs perception, perception backs plant and cargo, plant and cargo backs navigation. Any one module can bring the ship to a safe drift or anchorage. Two independent SIL 3 safety controllers hold the reactor trip, cargo-valve emergency shutdown, steering and shaft interlocks.
Sensors20 cameras (visible and thermal) aggregated over automotive Ethernet through camera switches into the modules, 4 lidars for berthing, 3 radars, AIS, echo sounder, tank level and inert-gas sensors, 1,500 plant sensors
LinkLow-orbit satellite at sea (plan updates each minute; the planning model runs aboard); fibre and private 5G in port
Service lifeCompute is a line-replaceable unit, swapped at mid-life with the year-20 refuelling; the hull and plant run 40 years