Alerts

The safety monitor sets this condition when smart watchdog faults are present.

Loss of torque production. The safety monitor and drive inverter may reset.

This condition is at application boot when the external crystal is not the active clock source.

Unit may have limited torque or torque disablement with this alert present, see other active alerts for more details.

The safety monitor sets this condition and indicates diagnostic information in its payload for root cause analysis.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

This condition is set when ECC protection detected a flash fetch or RAM read error, intended to be a diagonstic alert only.

No immediate impact.

This condition is set when the inter-process communication version between DI and PM is mismatched.

Prevents DI ECU from booting, presents itself as a complete inhibition of drive unit capability.

This condiiton is set when CAN peripheral hardware indicates an overrun or transmission error on the secondary CAN bus.

No immediate impact, may lead to indicating an MIA condition for the specific CAN ID listed in alert payload.

The safety monitor sets this condition when resolver speed or angle measurements in correspondence with DI are considered irrational or out of bounds.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition when CAN communication from UI is considered irrational or missing.

UI is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from VCLEFTS is considered irrational or missing.

VCLEFTS is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when rotor movement is detected during stationary excess heat production.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

The safety monitor sets this condition when CAN communication from GTW is considered irrational or missing.

GTW is considered not communicating on CAN for remainder of drive cycle.

The safety monitor sets this condition when CAN communication from PM is considered irrational or missing.

PM is considered not communicating on CAN for remainder of drive cycle.

-

The safety monitor sets this condition when CAN communication from DIS is considered irrational or missing.

DIS is considered not communicating on CAN for remainder of drive cycle.

Any received HVP frame is MIA

Active discharge may turn ON

This condition is set the watchdog GPIO pin is set, indicating an immediate watchdog reset is imminent. This alert is intended to collect diagnostic information only.

This alert provides an imminent warning of a likely watchdog reset event.

This condition is set when the power electronics and DI-PM switch-off path test fails, most likely due to damaged inverter hardware.

The safety monitor will inhibit torque and excess heat production for the remainder of the drive cycle.

This condition is set when a the GPIO register of the ECU reports a configuration error, intended to be a diagnostic alert only.

No immediate impact.

The safety monitor sets this condition when DI Heartbeat communication is too fast or too slow.

The safety monitor will initiate a unit limp condition for the remainder of the drive cycle.

This condition is set when this ECU powers on and detects an abnormal reset condition from the previous power cycle (for example, from a watchdog timeout).

No immediate impact.