Skip to Content

Cloud-Edge Safety Watchdog & Leases

Physical actions carry irreversible consequences. If cloud connectivity is interrupted, machines must never run unattended. isA enforces three distinct safety tiers.

1. 60-Second Timed Exclusive Leases

When cloud agents dispatch physical actions, the edge controller issues a temporary lease valid for up to 60 seconds:

  • Periodic Heartbeat: The agent flushes heartbeat tokens every 500ms.
  • Immediate Lockout on Timeout: If the lease expires, the edge watchdog engages emergency damping deceleration within 100ms, putting all joints in safe Hold state.

2. Zero Automatic Retries

In standard web APIs, a 504 Gateway Timeout triggers an automatic retry. In physical robotics, an automated blind retry is a major critical safety fault.

  • The platform strictly forbids silent retries at low levels.
  • Raw joint positions and hardware error codes are bubbled directly to the cognitive reasoning layer for deliberate re-evaluation.

3. CAN FD Industrial Bus & Hardware E-Stop

  • Determinism: 1Mbps arbitration + 5Mbps data phase ensures jitter-free 200Hz bus cycling.
  • Hard E-Stop Circuit: Dual-channel normally-closed relay immediately severs 48V/24V actuator power while preserving 5V logic power to capture flight-recorder blackbox logs.