Modules2 AI modules (spreader zone; landside & lashing zone) + 1 certified safety controller
CPU32 cores (2 × 16) + 4 lockstep real-time cores per module
AI throughput10,000 TOPS total (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6, 600 GB/s per module
Power draw200 W compute; ≈ 0.5 kW with 32 cameras, 8 lidars and 2 radars — 0.14% of the crane’s ≈ 350 kW average draw
Process node2 nm-class SoC; safety controller on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life of the crane’s 25–30 years
RedundancyEvery sensor is wired to both modules. Module 1 is primary for the spreader zone and hot standby for the landside; module 2 is primary for the landside and hot standby for the spreader zone. Either one alone runs the crane at reduced speed.
SafetyThe SIL 3 controller has its own sensors: absolute encoders on hoist, trolley, boom and gantry, load cells in the headblock pins, limit switches at every end of travel, and safety-rated lidar and radar on the gantry and trolley. A software fault can never drive the crane outside its certified safe envelope.
Sensors32 cameras on automotive Ethernet through camera aggregation switches, 8 lidars, 2 radars; load cells, sway sensors and encoders on every drive
LinkFibre through the cable reel, private 5G backup; plan from The Brain each second, trajectory corrected on the crane every 25 ms, drive current loops closed every 1 ms