Modules2 AI modules (spreader and box landing; travel path and people) + 1 certified safety controller
CPU32 cores (2 × 16) + 4 lockstep real-time cores per module
AI throughput10,000 TOPS total (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6, 600 GB/s per module
Power draw200 W compute; ≈ 0.4 kW with 12 cameras, 4 lidars and 4 radars — 0.6% of the carrier’s ≈ 70 kW average draw
Process node2 nm-class SoC; safety controller on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life of the carrier’s 20 years
RedundancyEvery sensor is wired to both modules. Module 1 is primary for the spreader and box landing and hot standby for the travel path; module 2 is primary for the travel path and people and hot standby for the spreader. Module 2 runs a different people-and-obstacle model, so the two paths never share a blind spot. Either one alone runs the carrier at reduced speed.
SafetyThe SIL 3 controller has its own sensors: encoders on every wheel and wheel angle, hoist encoders and load cells, limit switches on the hoist and spreader, and safety-rated lidar and radar at all four corners. A software fault can never drive the carrier outside its certified safe envelope.
Sensors12 cameras on automotive Ethernet through camera aggregation switches, 4 lidars at the corners, 4 radars, box-edge cameras on the spreader, wheel-angle and hoist encoders
LinkPrivate 5G; every move assigned by The Brain, position reported at 10 Hz; braking decided aboard in ≤ 100 ms; drive current loops closed every 1 ms