Drone Autonomy Spec
c52f37c6Table
| Subsystem | Failure mode | Effect | Severity (1–10) | Detection (1–10, higher is harder) | Mitigation / release action |
|---|---|---|---|---|---|
| Aircraft input | Surge/reverse/short | Board damage, smoke, loss of companion functions | 9 | 3 | Fuse, TVS, reverse protection, eFuse; validate at 9–36 V and transient profile |
| Compute supply | Undervoltage/reset loop | Loss of perception/network/swarm functions | 8 | 4 | Separate safety MCU, PGOOD/IMON, brownout policy, hold-up assessment |
| Linux compute | Crash/deadlock | Stale guidance or communications loss | 10 | 3 | Heartbeat, S32K watchdog/sanity gate, autopilot fallback |
| Safety MCU | Firmware or clock failure | Loss of supervision | 10 | 5 | External watchdog, safe GPIO defaults, independent reset/power monitoring |
| Camera link | Frozen/delayed frames | Incorrect terminal/GPS-denied guidance | 10 | 5 | Hardware timestamps, freshness checks, confidence gating, dual-sensor cross-check |
| Radar link | Stale/corrupt data | Incorrect obstacle/range estimate | 9 | 5 | Timestamp/CRC/plausibility checks and defined fallback |
| FHSS swarm link | Loss/interference/spoofing | Loss of coordination or unsafe tasking | 9 | 5 | Authentication, encryption, replay prevention, autonomous separation/failsafe |
| Wi-Fi/SIYI | Congestion/jamming | Video/data loss | 6 | 3 | Separate control/safety links; bandwidth prioritization and buffering |
| Autopilot interface | Pinout/power mismatch | Damage or loss of flight-control interface | 10 | 4 | Freeze exact autopilot model, protected connector power, preflight continuity test |
| Radar power connector | Disconnect/water ingress | Radar loss or short | 8 | 4 | Sealed locking connector, strain relief, fault detection |
| Enclosure | Condensation/water ingress | Corrosion, intermittent faults, shorts | 9 | 6 | Gasket, pressure vent, conformal coat, humidity testing, drainage/no water traps |
| Thermal system | Insufficient heat transfer | Throttling, shutdown, component ageing | 9 | 5 | Aluminum spreader/fins, TIM, thermal simulation and chamber test |
| TPS26630 footprint | Overlapping/incorrect thermal pads | Solder short/open or unreliable protection path | 10 | 4 | Verify/correct library footprint before release; AOI/X-ray criteria |
| AI overload | NPU/CPU saturation | Dropped frames, delayed decisions | 9 | 4 | Worst-case concurrent workload benchmark; do not assume Hailo-class capability |
Scope
Highest-Priority Actions