Modules2 AI modules (path ahead; trailers and flanks) + 1 certified safety controller
CPU32 cores (2 × 16) + 4 lockstep real-time cores per module
AI throughput10,000 TOPS total (2 × 5,000, INT8 / FP4 sparse)
Memory2 × 128 GB LPDDR6, 600 GB/s per module
Power draw200 W compute; ≈ 0.4 kW with 10 cameras, 4 lidars and 6 radars — 0.7% of the tractor’s ≈ 50 kW average draw
Process node2 nm-class SoCs; safety controller on a mature 16 nm node, 15-year supply. Compute is a line-replaceable unit, swapped at mid-life of the tractor’s 12 years
RedundancyEvery sensor is wired to both modules. Module 1 is primary for the path ahead and hot standby for the trailers; module 2 is primary for the trailers and flanks and hot standby for the path ahead. Module 2 runs a different people-and-obstacle model and cross-checks module 1’s path, so the two never share a blind spot. Either one alone drives the road train at reduced speed and stops it within 17 m from 40 km/h.
SafetyThe SIL 3 / ASIL-D controller has its own sensors: wheel-speed encoders on every axle, trailer-angle sensors, limit switches on the coupler and every twist-lock, and safety-rated lidar and radar at the corners. It alone commands steering, brakes and coupling. A software fault can never drive the tractor outside its certified safe envelope.
Sensors10 cameras on automotive Ethernet through camera aggregation switches, 4 lidars, 6 radars, trailer-angle and twist-lock sensors, wheel-speed and load sensing on every axle
LinkPrivate 5G; routes, slots and crane hand-offs from The Brain, position at 10 Hz; braking decided aboard in ≤ 100 ms; drive current loops closed every 1 ms