Alerts

The safety monitor sets this condition when phase current sensor measurements are irrational or out of bounds.

The safety monitor will initiate a unit limp condition for the remainder of the drive cycle.

This condiiton is set when CAN peripheral hardware indicates an overrun or transmission error on the primary CAN bus.

No immediate impact, may lead to indicating an MIA condition for the specific CAN ID listed in alert payload.

The safety monitor sets this condition when CAN communication from Parking Brake CAN node is considered irrational or missing.

Parking Brake CAN node is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when encoder speed sensor measurements are irrational or out of bounds.

The safety monitor will initiate a unit limp condition for the remainder of the drive cycle.

The safety monitor sets this condition when stator temperature sensor measurements are irrational or out of bounds.

No immediate impact.

This condition is set when this ECU powers on and detects an abnormal reset condition from the previous power cycle (for example, from a watchdog timeout).

No immediate impact.

Set when absolute difference between DIx_torqueActual and PMx_torqueMeasured is > 100Nm for 100ms

No immediate impact.

The safety monitor sets this condition when DI Heartbeat communication is too fast or too slow.

The safety monitor will initiate a unit limp condition for the remainder of the drive cycle.

This condition is set when a the GPIO register of the ECU reports a configuration error, intended to be a diagnostic alert only.

No immediate impact.

This condition is set when the power electronics and DI-PM switch-off path test fails, most likely due to damaged inverter hardware.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

This condition is set the watchdog GPIO pin is set, indicating an immediate watchdog reset is imminent. This alert is intended to collect diagnostic information only.

This alert provides an imminent warning of a likely watchdog reset event.

The safety monitor sets this condition when CAN communication from DIS is considered irrational or missing.

DIS is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from PM is considered irrational or missing.

PM is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from GTW is considered irrational or missing.

GTW is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from VCFRONT is considered irrational or missing.

VCFRONT is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from UI is considered irrational or missing.

UI is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when resolver speed or angle measurements in correspondence with DI are considered irrational or out of bounds.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

This condiiton is set when CAN peripheral hardware indicates an overrun or transmission error on the secondary CAN bus.

No immediate impact, may lead to indicating an MIA condition for the specific CAN ID listed in alert payload.

The PM detects the measured HVIL current is consistently an irrational value for more than 60 seconds.

Vehicle functions that depend on PM HVIL statuses may be unavailable, or their performance may be affected. Other alerts may also be present as the high voltage (HV) battery contactors will be unable to close.

This condition is set when the inter-process communication version between DI and PM is mismatched.

Prevents DI ECU from booting, presents itself as a complete inhibition of drive unit capability.