Modules2 AI modules (stack zone; truck handover zone) + 1 certified safety controller
CPU32 cores (2 × 16) + 4 lockstep real-time cores per module
AI throughput10,000 TOPS total (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6, 600 GB/s per module
Power draw200 W compute; ≈ 0.35 kW with 14 cameras and 4 lidars — 0.3% of the crane’s ≈ 120 kW average draw
Process node2 nm-class SoC; safety controller on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life of the crane’s 25–30 years
RedundancyEvery sensor is wired to both modules. Module 1 is primary for the stack and hot standby for the truck handover zone; module 2 is primary for the handover zone and hot standby for the stack. Either one alone runs the crane at reduced speed; with both lost, the safety controller finishes the move at creep speed and parks, and the block’s other RMG takes the queue.
SafetyThe SIL 3 controller has its own sensors: absolute encoders on hoist, trolley and gantry, load cells in the headblock, limit switches at every end of travel, and safety-rated lidar gates at both cantilevers. A software fault can never drive the crane outside its certified safe envelope.
Sensors14 cameras on automotive Ethernet through camera aggregation switches, 4 lidars over the stack, position encoders on hoist, trolley and gantry, load cells
LinkFibre in the cable reel; plan from The Brain each second, trajectory corrected on the crane every 25 ms, drive current loops closed every 1 ms