ModulesIn-line robot: 2 light AI modules + 1 certified safety controller (SIL 3) in the pressure hull. Each spread machine: 2 heavy AI modules + 1 safety controller.
CPURobot: 16 cores (2 × 8), plus 2 lockstep real-time cores per module. Spread machine: 32 cores (2 × 16), plus 4 lockstep real-time cores per module.
AI throughputRobot: 3,000 TOPS (2 × 1,500, INT8 / FP4 sparse). Spread machine: 10,000 TOPS (2 × 5,000).
MemoryRobot: 2 × 64 GB LPDDR6, 300 GB/s per module. Spread machine: 2 × 128 GB, 600 GB/s per module.
Power drawRobot: 82 W of compute inside a 350 W load, all from the bypass turbine. Spread machine: 212 W of compute, ≈ 0.4 kW with sensors.
Process node2 nm-class SoCs; safety controllers on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life.
RedundancyEvery sensor is wired to both modules. In the robot, module A is primary for the magnetic-flux and caliper data and module B for the EMAT ring; each is hot standby for the other. A software fault can never drive the robot outside its certified safe envelope.
Safety channelThe SIL 3 controller holds the robot under 5 m/s on its own sensors: two independent speed pickups on the odometer wheels, a differential-pressure transducer across the cups and the valve position encoder. On any fault a spring opens the bypass and the robot slows. On the spread it holds e-stop, geofence and load-moment limits on safety-rated radar, load cells and boom-angle encoders.
SensorsRobot: 1,024 Hall channels, 256 EMAT channels, 64 caliper arms, 3 odometers, navigation-grade IMU. Spread machine: 8 cameras on automotive Ethernet through camera aggregation switches, 2 lidars, 4 radars, RTK GNSS.
LinkNo radio in the pipe: an acoustic beacon sends status to the line fibre at 10 bit/s, and each leg’s 400 GB offloads at the trap over a 10 Gbit/s dock in 6 minutes. Spread machines: private 5G and satellite to The Brain. The valve drive and every machine drive close their own inner loops at 1 kHz.