Alerts

The safety monitor sets this condition when phase current sensor measurements are irrational or out of bounds.

The safety monitor will initiate a unit limp condition for the remainder of the drive cycle.

The safety monitor sets this condition when CAN communication from DI is considered irrational or missing.

DI is considered not communicating on CAN for remainder of drive cycle.

Set when absolute difference between DIx_torqueActual and PMx_torqueMeasured is > 100Nm for 100ms

No immediate impact.

The safety monitor sets this condition torque production error is detected.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition torque production error is detected.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition torque production error is detected.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition torque production error is detected.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition torque production error is detected.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition when smart watchdog faults are present.

Loss of torque production. The safety monitor and drive inverter may reset.

This condition is at application boot when the external crystal is not the active clock source.

Unit may have limited torque or torque disablement with this alert present, see other active alerts for more details.

The safety monitor sets this condition and indicates diagnostic information in its payload for root cause analysis.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

This condition is set when ECC protection detected a flash fetch or RAM read error, intended to be a diagonstic alert only.

No immediate impact.

This condition is set when the inter-process communication version between DI and PM is mismatched.

Prevents DI ECU from booting, presents itself as a complete inhibition of drive unit capability.

This condiiton is set when CAN peripheral hardware indicates an overrun or transmission error on the secondary CAN bus.

No immediate impact, may lead to indicating an MIA condition for the specific CAN ID listed in alert payload.

The safety monitor sets this condition when resolver speed or angle measurements in correspondence with DI are considered irrational or out of bounds.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition when CAN communication from UI is considered irrational or missing.

UI is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from VCFRONT is considered irrational or missing.

VCFRONT is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when rotor movement is detected during stationary excess heat production.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition when CAN communication from GTW is considered irrational or missing.

GTW is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from PM is considered irrational or missing.

PM is considered not communicating on CAN for remainder of drive cycle.