Alerts

Alerts

Signal Name Description Condition Impact
One or more of the expected controller area network (CAN) messages from the Autopilot Primary (APP) were not received.
A message the local ECU expects to receive from the APP ECU is not received within the expected timeout, or the drop rate is too high while the APP is CAN active.
Autopilot does not operate as expected.
An issue is indicated from the non-volatile memory manager.
Non-volatile memory misconfiguration or underlying flash/filesystem error.
Non-volatile memory records may be incorrect or missing.
Warns if the processor has experienced a reset due to power loss.
Sudden power loss.
Controller is MIA for some time.
Warns if the processor has experienced a reset due to watchdog reset.
A watchdog (external or internal) was not serviced in time.
Controller is MIA for some time.
The handwheel calibration data does not match across controller and monitor.
Controller and monitor handwheel calibration data not matching
Steering control from this node is disabled
Secondary disconnect controller (SDC) HV backup rail voltage sensor is providing irrational values.
HV backup rail voltage measured low while Power Good (PGOOD) hardware signal to SDC is asserted.
Pyro disconnect may not function as expected.
Secondary disconnect controller (SDC) boost rail voltage sensor is providing irrational values.
SDC boost rail sensor reading is below operational value while HV backup rail voltage measurement (Vbackup) is at nominal value.
Pyro disconnect may not function as expected.
At least one phase current sensor offset is outside of the expected limits.
Phase current sensor offset is higher or lower than expected limit.
Pyro disconnect may not function as expected.
Secondary disconnect controller (SDC) reference voltage (Vref) for current sensor measurement is irrational, making SDC unable to monitor drive unit electrical state.
SDC reference voltage (Vref) measurement is outside of expected range.
Pyro disconnect may not function as expected.
Universal asynchronous receiver-transmitter (UART) data version differs between drive inverter (DI) and secondary disconnect controller (SDC).
UART data version detected as differing between DI and SDC.
Unable to run pyro self-test.
HVLINK messages are not being received by secondary disconnect controller (SDC).
At least one message from HVLINK consumed by SDC is not received.
Active discharge control by SDC may be forced ON.
Drive inverter (DI) switching-feedback (fdbk) pin to secondary disconnect controller (SDC) is in an irrational state.
DI switching-feedback pin is set but DI running-feedback is cleared.
Pyro disconnect may not function as expected.
Secondary disconnect controller (SDC) motor speed estimate is irrational.
SDC estimated motor speed is too high or too low
Some SDC functions may be unavailable
Drive inverter (DI) running-feedback (fdbk) pin to secondary disconnect controller (SDC) is in an irrational state.
DI UART data is active, but running-feedback pin state is low.
SDC will not skip pyro self-test (PST) if DI is MIA at startup. Potential overlapping pyro self-tests.
Secondary disconnect controller (SDC) failed the drive unit pyro self-test.
Pyro test voltages were out of range during pyro self-test.
Pyro disconnect may not function as expected.
Drive Inverter (DI) controller area network (CAN) or UART communication to the secondary disconnect controller (SDC) is missing (MIA).
SDC is not receiving all expected CAN or UART frames from DI.
SDC is unable to determine DI status
One of the phase current sensors is reading an irrational out-of-range value.
One of the phase current sensors is reading an irrational out-of-range value.
The Secondary Disconnect Controller (SDC) will be disabled.
Drive Inverter (DI) controller area network (CAN) or UART communication to the secondary disconnect controller (SDC) is missing (MIA).
SDC is not receiving all expected CAN or UART frames from DI.
SDC is unable to determine DI status
Vehicle Controller (VC) LV Power State controller area network (CAN) communication to the secondary disconnect controller (SDC) is missing (MIA).
SDC is not receiving all expected CAN frames from VC.
SDC is unable to determine if drive inverter (DI) is expected to be LV powered
The external electrically erasable programmable read-only memory (EEPROM) is returning unexpected data over the serial peripheral interface (SPI).
Invalid data received from external EEPROM over SPI.
Analysis of trigger condition for a previous pyro disconnect event cannot be completed because EEPROM data is inaccessible.