Drone Autonomy Spec


flux

Escalated internally to the Flux engineering team with:
  • Compute Vision Board link
  • HTTP 524 preflight failures
  • Partial auto-route corruption
  • Airwire increase from 247 to 442
  • Ground-fill/stitching-via corruption when applying routing rules
  • Clean recovery commit c52f37c6
  • Current safe board state
For a human support case and status follow-up, use Contact Support and reference the KRYSTAL Compute Vision Board routing/rules corruption issue.
write a reportwith all info for a new engineer to take over the PCB and fix it.

flux

I’ll create a structured takeover report covering both boards, architecture, completed work, current live state, known blockers, recovery history, verification gates, and the exact order a new engineer should follow.

flux

Created the comprehensive PCB Engineering Takeover Report.
It covers:
  • Both project links and board responsibilities
  • Current CM5 and S32K344 architecture
  • Power, camera, radar, autopilot, Wi‑Fi, FHSS and SIYI interfaces
  • Board dimensions, stackups and enclosure direction
  • Completed fixes and verified checks
  • Routing-service failure and recovery history
  • Known footprints, software and regulatory risks
  • Recommended takeover sequence
  • Fabrication-release gates
  • Immediate first-day checklist and required engineer deliverables
The report clearly marks both boards HOLD for fabrication until routing, interface freeze, DRC, thermal, software and mechanical validation are complete.
Review takeover report
Audit live board states
Prepare migration package
Freeze external interfaces

Connector Pinout Matrix — KRYSTAL Module
Status: Draft v0.1
Scope: Preliminary connector and board-to-board signal allocation for the first KRYSTAL prototype.
Architecture basis: Two-board system: Board 1 compute/communications, Board 2 safety/navigation/payload I/O.

1. Connector Strategy
KRYSTAL should use rugged, locking external connectors and two internal high-reliability board-to-board connectors. Exact connector families are still TBD, so this matrix defines required signal groups before final mechanical connector selection.
Design principles:
  • Keep safety-critical flight-controller and payload I/O on Board 2.
  • Keep Ethernet, radio, USB service, and high-bandwidth compute interfaces on Board 1.
  • Let Board 2 own power sequencing, compute reset, actuator enable, and emergency release authority.
  • Split internal power and safety-critical interconnect across two board-to-board connectors so one connector is not a single point of failure.
  • Treat every external connector as an ESD, surge, EMI, and water-ingress risk point.

2. External Connector Summary

Table


IDNameBoardPreliminary pin count targetPrimary role
J-AAircraft Power InputBoard 2 or power entry area4 to 6Main 9-36 VDC input and chassis/shield reference
J-BFlight Controller 1Board 28 to 10Primary CAN FD, UART/MAVLink, sync, ground
J-CFlight Controller 2Board 28 to 10Redundant CAN/UART and heartbeat input
J-DPayload BusBoard 212 to 16CAN FD, RS-485, aux power, emergency line
J-EExternal EthernetBoard 18 plus shieldRugged 100/1000 Ethernet link
J-FRadar HeadBoard 1 plus Board 2 control10 to 14Ethernet, sync, trigger, regulated radar power
J-GUSB-C ServiceBoard 1USB-C standardService/debug/log extraction; bench power only if supported
J-HRF AntennasBoard 12 to 4 coaxGNSS, swarm radio, optional LTE/5G/UWB
J-V1Front Remote CameraBoard 1TBDTerminal-guidance remote camera link; prefer GMSL2 over coax/STP
J-V2Down Remote CameraBoard 1TBDDownward optical-flow / VIO / GPS-denied remote camera link; prefer GMSL2 over coax/STP
J-IPayload ActuatorsBoard 212 to 20PWM, digital outputs, servo, winch command, feedback
J-JPayload SensorsBoard 216 to 24Load cells, analog sensors, limit switches, temperature
J-KDebug/FactoryBoard 2 and Board 1TBDProgramming, SWD/JTAG, UART console, manufacturing test

3. J-A Aircraft Power Input
Recommended signals:

Table


Pin groupSignalDirectionNotes
PowerVIN_9_36VInputMain aircraft power input; size for 65 W peak plus margin
PowerVIN_RETURNInputPower return; route with high-current path
ChassisCHASSIS_SHIELDPassiveBond to enclosure strategy TBD
Sense optionalVIN_SENSE_PLUSInputOptional remote sense or diagnostic input
Sense optionalVIN_SENSE_RETURNInputOptional remote sense return
Key optionalPOWER_PRESENT / IDInputOptional harness detect or coded input
Protection required near connector:
  • Fuse or eFuse.
  • Reverse-polarity protection.
  • TVS and surge suppression.
  • Inrush control.
  • Input current and voltage monitoring.
  • EMI filtering.

4. J-B Flight Controller 1
Schematic implementation added:

Table


Schematic connectorPartPurposePin allocation
J6JST GH 4-pin BM04B-GHS-TBTAutopilot CAN FD1 = 5V_CAN_LOCAL / VREF accessory, 2 = CAN1_H, 3 = CAN1_L, 4 = GND
J7JST GH 6-pin SM06B-GHS-TBAutopilot MAVLink/TELEM UART1 = 5V_CAN_LOCAL / VREF accessory, 2 = FC1_UART_RX_FROM_AUTOPILOT, 3 = FC1_UART_TX_TO_AUTOPILOT, 4 = CTS, 5 = RTS, 6 = GND
These connectors are intended to make KRYSTAL easy to connect to common PX4/ArduPilot-style flight-controller harnesses. Final harness validation must confirm the exact autopilot vendor pinout before first power-up. The 5 V pin is an accessory/reference rail, not a guaranteed autopilot main-power output; add connector current limiting/backfeed protection before using it to power external equipment.
Recommended signals:

Table


SignalDirectionBoard ownerNotes
FC1_CAN_HBidirectionalBoard 2Primary CAN FD high
FC1_CAN_LBidirectionalBoard 2Primary CAN FD low
FC1_UART_TXOutput from KRYSTALBoard 2MAVLink TX to flight controller
FC1_UART_RXInput to KRYSTALBoard 2MAVLink RX from flight controller
FC1_UART_CTSInput optionalBoard 2Hardware flow control
FC1_UART_RTSOutput optionalBoard 2Hardware flow control
FC1_SYNCBidirectional or inputBoard 2Time sync or PPS-style signal
GND_ISO_OR_REFReferenceBoard 2Depends on isolation strategy
SHIELDPassiveEnclosureCable shield termination strategy TBD
Recommendation: isolate CAN where practical; consider isolated UART if flight-controller ground offset is likely.

5. J-C Flight Controller 2
Recommended signals:

Table


SignalDirectionBoard ownerNotes
FC2_CAN_HBidirectionalBoard 2Redundant CAN FD high
FC2_CAN_LBidirectionalBoard 2Redundant CAN FD low
FC2_UART_TXOutput from KRYSTALBoard 2Redundant MAVLink TX
FC2_UART_RXInput to KRYSTALBoard 2Redundant MAVLink RX
FC2_HEARTBEAT_INInputBoard 2Independent flight-controller heartbeat/status
FC2_SYNCBidirectional or inputBoard 2Optional sync line
GND_ISO_OR_REFReferenceBoard 2Depends on isolation strategy
SHIELDPassiveEnclosureCable shield termination strategy TBD

6. J-D Payload Bus
Recommended signals:

Table


SignalDirectionBoard ownerNotes
PAYLOAD_CAN_HBidirectionalBoard 2Payload CAN FD high
PAYLOAD_CAN_LBidirectionalBoard 2Payload CAN FD low
PAYLOAD_RS485_ABidirectionalBoard 2RS-485 A
PAYLOAD_RS485_BBidirectionalBoard 2RS-485 B
AUX_12V_SWOutputBoard 2Protected switched auxiliary 12 V
AUX_5V_SWOutputBoard 2Protected switched auxiliary 5 V
AUX_RETURNReturnBoard 2Return for aux power
EMERGENCY_LINEBidirectional or outputBoard 2Emergency inhibit/release signaling; exact polarity TBD
PAYLOAD_PRESENTInputBoard 2Harness/payload detect
SHIELDPassiveEnclosureCable shield termination
Protection required:
  • ESD on CAN/RS-485 and digital lines.
  • Common-mode choke as needed for CAN/RS-485.
  • Current limiting on AUX_12V_SW and AUX_5V_SW.
  • Fault feedback to safety MCU.

7. J-E External Ethernet
Recommended signals:

Table


SignalDirectionBoard ownerNotes
ETH_TRD0_P/NBidirectionalBoard 11000BASE-T pair 0
ETH_TRD1_P/NBidirectionalBoard 11000BASE-T pair 1
ETH_TRD2_P/NBidirectionalBoard 11000BASE-T pair 2
ETH_TRD3_P/NBidirectionalBoard 11000BASE-T pair 3
ETH_SHIELDPassiveEnclosureMagnetics/shielding strategy TBD
Options:
  • Standard 1000BASE-T with magnetics on Board 1.
  • Rugged Ethernet connector or panel feedthrough.
  • Consider Ethernet switch if radar, service Ethernet, and external network are simultaneous requirements.

8. J-F External Radar Head
Implemented safety/base-board power/control connector (J9)
The base board now implements J9 as TE Connectivity DEUTSCH DT13-08PA, an 8-position sealed locking right-angle PCB header. Radar data remains on the compute-board Gigabit Ethernet path through J4/J3; J9 carries only protected power and low-speed safety/control.

Table


J9 pinNetFunction
1, 2RADAR_PWR_SW_TBD_9_36VProtected/switched aircraft-bus pass-through; voltage/current TBD pending radar selection
3, 4GNDRadar power/signal return
5RADAR_TRIGGER_3V33.3 V trigger output through 100 ohm series resistor and ESD protection
6RADAR_TIME_SYNC_3V33.3 V time-sync output through 100 ohm series resistor and ESD protection
7RADAR_STATUS_N_3V3Active-low/open-drain status or fault input, 10 k pull-up, 1 k input series resistor, ESD protected
8RADAR_PRESENT_N_3V3Active-low presence input, 10 k pull-up, 1 k input series resistor, ESD protected
U14 TPS26630 provides 1.5 A provisional current limiting, controlled startup, approximately 39.2 V OVP, IMON, fault and power-good feedback to S32K344, and safe default-off via a hardware pull-down on SHDN. D7 TPD4E05U06 protects all four exposed low-speed lines. Confirm final signal direction/levels and radar power requirements before cable release.
Recommended signals:

Table


SignalDirectionBoard ownerNotes
RADAR_ETH_PairsBidirectionalBoard 1Ethernet data path; 100/1000 type TBD
RADAR_PWR_SWOutputBoard 2 power control / Board 1 routing TBDRegulated switched radar power
RADAR_PWR_RETURNReturnBoard 2Return for radar power
RADAR_SYNCBidirectional or outputBoard 2 and Board 1Time sync; voltage level TBD
RADAR_TRIGGERBidirectional or outputBoard 2 and Board 1Trigger/strobe; voltage level TBD
RADAR_FAULTInputBoard 2Optional fault or power-good feedback
RADAR_CAN_HBidirectional optionalBoard 2Optional CAN FD fallback
RADAR_CAN_LBidirectional optionalBoard 2Optional CAN FD fallback
SHIELDPassiveEnclosureShield termination
Open decisions:
  • TI radar evaluation platform power voltage/current.
  • Ethernet type: standard 100/1000BASE-T vs automotive Ethernet.
  • Sync/trigger voltage levels and timing.
  • Whether radar power switching is physically on Board 1 or Board 2.

9. J-G USB-C Service
Recommended behavior:
  • USB data for software loading, logs, and debug access.
  • Bench power only if explicitly supported by the power architecture.
  • Not a primary flight power input.
Required USB-C signals:

Table


SignalDirectionBoard ownerNotes
USB_D_PBidirectionalBoard 1USB 2.0 data
USB_D_NBidirectionalBoard 1USB 2.0 data
USB_SS_TX/RXBidirectional optionalBoard 1Include if USB 3 is required
CC1 / CC2Passive or controlledBoard 1Role/attach detection; PD controller only if PD needed
VBUS_SERVICEInput or senseBoard 1 / power systemBench-power policy TBD
GNDReferenceBoard 1USB return
SHIELDPassiveEnclosureESD and shield strategy required

10. J-H RF Antennas
Preliminary RF connector allocation:

Table


RF connectorFunctionBoard ownerNotes
RF1GNSS antennaBoard 1Active antenna bias optional
RF2Swarm radio primaryBoard 1Module-dependent
RF3Swarm radio diversity or LTE/5GBoard 1Optional
RF4UWB or LTE/5G secondaryBoard 1Optional
Mechanical requirements:
  • Keep RF routing short and controlled impedance.
  • Place connectors at enclosure edge with antenna cable bend-radius allowance.
  • Maintain antenna keepouts and isolation between radios.

10A. J-V1 / J-V2 Vision Camera Interfaces
Camera data is high bandwidth and belongs on Board 1 compute/vision, not Board 2 safety MCU.
Decision update: the front and downward cameras are mounted on the drone body, so J-V1/J-V2 should be rugged remote-camera links rather than direct long CSI-2 FFC cables.
Recommended first-prototype allocation:

Table


ConnectorRolePreferred interfaceNotes
J-V1Front cameraPreferred GMSL2 coax/STPTerminal guidance / target acquisition; global shutter preferred
J-V2Downward cameraPreferred GMSL2 coax/STPOptical flow / visual odometry / landing aid; mono global shutter preferred
Because the cameras are remote from KRYSTAL, replace direct CSI-2 with a rugged remote-camera link:

Table


Remote-camera optionBoard 1 signalsCamera-head signalsNotes
GMSL2 / GMSL3Deserializer to CSI-2 compute inputSensor + serializerGood for compact remote cameras over coax/STP
FPD-Link III / IVDeserializer to CSI-2 compute inputSensor + serializerTI ecosystem alternative for rugged camera heads
Typical direct CSI-2 signal groups, exact pinout TBD by compute SOM and camera connector:

Table


Signal groupNotes
CSI_CLK_P/NControlled-impedance differential pair
CSI_D0_P/N through CSI_Dx_P/NLane count depends on camera resolution/frame rate
CAM_I2C_SCL/SDACamera control bus; pull-ups on compute side if required
CAM_MCLKOptional master clock if required by sensor/module
CAM_RESET_N / PWDNPer-camera control lines
CAM_SYNC / TRIGGER optionalNeeded for synchronized capture or timestamping
CAM_PWR railsSensor/module dependent; normally generated on compute/vision board
GND / shieldMultiple grounds around high-speed pins; shield strategy TBD
Remote-camera ecosystem decision: prefer GMSL2. Do not finalize J-V1/J-V2 connector pinout until the exact camera module, coax/STP connector, power-over-cable policy, and MAX9296A-to-serializer reference design are selected. The serializer and deserializer must match: GMSL2 parts do not interoperate with FPD-Link parts.

11. J-I Payload Actuators
Recommended signals:

Table


Signal groupExample signalsDirectionNotes
PWM outputsPWM_OUT1 to PWM_OUT4OutputProtected PWM outputs
Digital outputsDIG_OUT1 to DIG_OUT4OutputProtected digital outputs
Servo outputsSERVO1_PWM, SERVO2_PWMOutputAdd 5 V servo power only if current budget allows
Winch controlWINCH1_FWD/REV, WINCH2_FWD/REVOutputPrefer command interface to external high-current driver unless current is small
Output feedbackOUT_FAULT, OUT_CURRENT_SENSEInputFault and current telemetry to safety MCU
Emergency releaseRELEASE_ARM, RELEASE_FIRE, RELEASE_FBMixedFinal polarity and actuator type TBD
Power returnACT_RETURNReturnKeep high-current paths out of logic ground where possible
Rule: high-current winch and payload motor operating power should not flow through KRYSTAL PCB unless the final current is proven small and the PCB is sized accordingly.

12. J-J Payload Sensors
Schematic implementation added for first load-cell channel:

Table


Schematic connectorPartPurposePin allocation
J5JST GH 6-pin SM06B-GHS-TBLoad-cell / cable-tension sensor1 = LC_EXC_P / 3V3_AON, 2 = LC1_SIG_P, 3 = LC1_SIG_N, 4 = LC_EXC_N / GND, 5 = CHASSIS_SHIELD, 6 = LC1_ID_PRESENT

Table


AFEPartNotes
U10ADS1232IPW24-bit bridge-sensor ADC, gain 128, 10 SPS, internal oscillator, ratiometric 3.3 V excitation/reference for first prototype
Recommended signals:

Table


Sensor typeSignal allocationNotes
Load cellsLC1 to LC4 differential pairs, excitation, shieldFour channels minimum; design expandable to eight
Analog 0-3.3 VANA_IN1 to ANA_IN4Add filtering and overvoltage protection
Digital isolated inputsDIN1 to DIN8Limit switches, latch status, payload present
Frequency/pulse inputsPULSE_IN1 to PULSE_IN4Encoders, tachometer, pulse sensors
TemperatureTEMP_IN or 1-Wire/I2C optionalExact sensor interface TBD
Payload IMU/GNSSUART/I2C/SPI optionalPrefer external payload bus if sensor is remote
Precision note: use external load-cell ADC/AFE for cable tension. Do not depend on MCU internal ADC for precision load-cell measurement.

13. Internal Board-to-Board Connectors
Use two board-to-board connectors between Board 1 and Board 2.
B2B-A: Power and High-Current/Control Interconnect

Table


Signal groupDirectionNotes
COMPUTE_5V or COMPUTE_INPUTBoard 2 to Board 1Compute input power; current rating TBD after SOM selection
COMPUTE_GNDSharedMultiple pins required
COMPUTE_ENBoard 2 to Board 1Safety MCU enables compute domain
COMPUTE_RESET_NBoard 2 to Board 1Safety MCU can reset compute
COMPUTE_PGOODBoard 1 to Board 2Compute rail power-good feedback
RADAR_PWR_SW optionalBoard 2 to Board 1/J-FIf radar power switch is located on Board 2
AUX_FAULTSBoard 2 to Board 1 optionalTelemetry to compute
CHASSIS_REF optionalSharedEMI/shielding strategy TBD
B2B-B: Data, Watchdog, and Safety Interconnect

Table


Signal groupDirectionNotes
COMPUTE_HEARTBEATBoard 1 to Board 2Linux liveness signal to safety MCU
SAFETY_STATUSBoard 2 to Board 1Safety state summary
SAFETY_FAULTBoard 2 to Board 1Fault/interrupt line
HOST_SPI or HOST_UARTBidirectionalMain command/telemetry link between compute and safety MCU
HOST_CAN optionalBidirectionalOptional compute-to-safety CAN path
TIME_SYNCBidirectionalTimebase alignment for logs/sensor fusion
EMERGENCY_INHIBIT_STATUSBoard 2 dominantCompute can read; safety owns control
DEBUG_UARTBidirectionalDevelopment console path
BOOT_MODE / RECOVERYMixedManufacturing/service support
SPARE_GPIOMixedReserve at least 8 spare lines
Redundancy recommendation:
  • Put at least one heartbeat/status path and one ground reference on each connector.
  • Do not place every safety-critical signal on a single connector.
  • Use multiple ground pins adjacent to high-speed or noisy signals.

14. Initial Net Naming Convention
Use explicit prefixes so schematic pages remain readable:

Table


PrefixMeaningExample
VIN_Raw or protected aircraft inputVIN_9_36V
SYS_Regulated system railsSYS_5V, SYS_3V3
SAFE_Always-on safety domainSAFE_3V3, SAFE_WDOG
CMP_Compute-domain signalsCMP_RESET_N, CMP_HEARTBEAT
FC1_ / FC2_Flight-controller linksFC1_CAN_H
PAY_Payload bus or payload I/OPAY_CAN_H, PAY_RS485_A
RAD_Radar connector signalsRAD_TRIGGER
ACT_Actuator outputsACT_PWM1
SNS_Sensor inputsSNS_LOADCELL1_P
B2B_Board-to-board reserved namesB2B_TIME_SYNC

15. Open Connector Decisions
Before schematic capture is frozen, decide:
  • Final connector families and mating harnesses.
  • Required connector IP rating and sealing strategy.
  • Cable shield termination method.
  • Whether flight-controller interfaces are galvanically isolated.
  • Exact radar electrical interface and power requirement.
  • Exact load-cell count and connector allocation.
  • Whether actuator connectors carry power or only command/feedback signals.
  • Emergency-release actuator type, current, polarity, and feedback method.
  • Whether external Ethernet and radar Ethernet require an onboard switch.
  • Compute SOM final choice and exact carrier connector pinout.
  • Front/down camera mechanical placement, cable length, interface type, and selected camera module connector pinout.
  • Whether KRYSTAL needs a direct safety-radio receiver input connector, or whether RadioMaster TX16S receiver state is observed only through the autopilot. If direct input is required, select receiver protocol: SBUS, CRSF, Spektrum serial, PWM, or UART.
  • Whether the SIYI HM30/MK32 tertiary data/video link connects to KRYSTAL directly over Ethernet, through the autopilot/GCS network, or only to the camera payload/ground unit. If direct, reserve an Ethernet/network connector or switch port and define IP subnet/addressing.
  • Reference drone uses Pixhawk/autopilot integration; maintain easy Pixhawk-style CAN and TELEM/MAVLink connector mapping and verify exact pinout before first power-up.

Start schematic capture in this order:
  1. J-A aircraft power input and protection.
  2. Always-on safety regulator rail.
  3. NXP S32K344 safety MCU core, reset, clock, debug, watchdog.
  4. J-B and J-C flight-controller CAN/UART interfaces.
  5. B2B-A and B2B-B board-to-board interconnect symbols.
  6. J-D payload bus and basic protection.
This lets KRYSTAL establish the safety and power backbone before the compute SOM connector is finalized.
  • 1. Connector Strategy

  • 2. External Connector Summary

  • 3. J-A Aircraft Power Input

  • 4. J-B Flight Controller 1

  • 5. J-C Flight Controller 2

  • 6. J-D Payload Bus

  • 7. J-E External Ethernet

  • 8. J-F External Radar Head

  • Implemented safety/base-board power/control connector (J9)

  • 9. J-G USB-C Service

  • 10. J-H RF Antennas

  • 10A. J-V1 / J-V2 Vision Camera Interfaces

  • 11. J-I Payload Actuators

  • 12. J-J Payload Sensors

  • 13. Internal Board-to-Board Connectors

  • B2B-A: Power and High-Current/Control Interconnect

  • B2B-B: Data, Watchdog, and Safety Interconnect

  • 14. Initial Net Naming Convention

  • 15. Open Connector Decisions

  • 16. Recommended Next Schematic Start