Steady Eddie · Physical Autonomy Systems The removable operator
The machine and its sensing set, from the engineering model
What's inside

Industrial parts. Names you already trust.

STE Integrate is engineered around the parts that already run mines, plants and vehicles: an NVIDIA AI computer on a rugged Connect Tech carrier, Sony imagers on Leopard Imaging cameras, an Ouster lidar, Parker mobile-machine controllers, Festo and SMC pneumatics, sealed TE Connectivity DEUTSCH connectors. Nothing exotic, nothing that cannot be bought again in ten years, and every part chosen for a reason we can show you.

Download the STE Integrate product sheet (PDF)

The machine and its sensing set, from the engineering model.

The map

Six groups of parts, one unit.

Eyes, computer, gateway, hands, stop and seat. The computer proposes. The gateway checks. The hands move the machine's own controls. The stop can cut power and vent air without asking any of them. This is the specification STE Integrate is built to: parts named by maker and family, ratings the makers' own.

What's inside STE Integrate: the map WHAT'S INSIDE STE INTEGRATE SIX GROUPS OF PARTS · MAKERS NAMED · RATINGS ARE THE MAKERS' OWN THE MAP THE EYES SENSING LEOPARD IMAGING · SONY IMX490 CAMERAS ×10OUSTER OS0-128 LIDARSBG SYSTEMS ELLIPSE-D GNSS / INSVECTORNAV VN-110 INERTIAL UNITSICK TMM88D BOOM AND STICK ANGLECODED BAND FOR SWING ANGLE · IN-HOUSE THE COMPUTER PROPOSES · NO DIRECT I/O NVIDIA JETSON AGX ORINCONNECT TECH ROGUE-RX XP CARRIERINNODISK INDUSTRIAL NVMe · MOXA SWITCHINFINEON OPTIGA TPM · EATON SUPERCAPSMEAN WELL RAILWAY DC-DCTE CONNECTIVITY DEUTSCH CONNECTORS THE SEAT A PERSON AUTHORIZES RUGGED SUNLIGHT-READABLE TOUCH DISPLAYCINCOZE / WINMATE CLASSYUBICO YUBIKEY HARDWARE KEYSIGNED APPROVAL · MACHINE · PLAN · LIMITS · EXPIRYREQUESTED IS NEVER SHOWN AS ACTUALSTOP & REVOKE IS SOFTWARE, NOT THE RED BUTTON THE STOP HARDWIRED · VETO CERTIFIED MOBILE-MACHINE SAFETY CONTROLLERSCHNEIDER ELECTRIC CONTACTORS ×2, IN SERIESROSS MONITORED DOUBLE VALVE · VENTS THE AIRFESTO LOCKABLE HAND VALVE · PADLOCK AND GAUGEKAVLICO PRESSURE CHANNELS ×3VIAIR COMPRESSOR · RATED RECEIVERRED STOPS IN THE CAB AND OUTSIDE THE GATEWAY CHECKS EVERY COMMAND NXP AUTOMOTIVE CONTROLLERS ×2 · INDEPENDENTOWN SUPPLY · OWN CLOCK · OWN WATCHDOGTEXAS INSTRUMENTS ISOLATED CAN, EACH THE HANDS MOVE THE CONTROLS · LET GO PARKER IQAN-MC43 MOBILE CONTROLLERFESTO PROPORTIONAL VALVES · HEATED MANIFOLDSMC COMPACT CYLINDERS · SPRING CLEARNOVOTECHNIK ANGLE SENSOR ON THE STICKSICK SENSORS PROVE THE GAPIGUS SHOES · SKF ROD ENDS · SOUTHCO PINSFESTO TRAVEL CYLINDERS · SPLIT CLAMP THE MACHINE'S OWN CONTROLS · NOTHING CUT, TAPPED OR FLASHED DATA BOUNDED PROPOSALS CHECKED APPROVAL MOVES THE LEVERS CUTS POWER AND VENTS AIR · NO SOFTWARE PATH REACHES IT RED BUTTON, TWO CHANNELS, STRAIGHT TO THE STOP ENGINEERED AROUND THESE PARTS · NAMED BY MAKER AND FAMILY · NO LOGOS STEADY EDDIE · STE INTEGRATE
What's inside STE Integrate: the eyes, the computer and the seat across the top; the stop, the gateway and the hands below; the machine's own controls along the bottom.
The computer

An AI computer built for vibration, cold and dust.

The thinking happens on board, on hardware made for vehicles rather than for a rack, in a sealed two-chamber aluminium enclosure that keeps the computer and the safety hardware in separate rooms on separate power.

Compute module

NVIDIA Jetson AGX Orin

The AI module that runs perception and planning on board, with thirty-two gigabytes of memory. The same family drives autonomous vehicles and industrial robots.

NVIDIA
Rugged carrier

Connect Tech Rogue-RX XP

The board the module bolts to, rated by its maker from forty below to eighty-five above, taking anything from ten to thirty-six volts of machine power, with two ten-gigabit Ethernet ports, two solid-state drive slots and sixteen lanes of camera input. Every connector on it locks.

Connect Tech
Storage

Innodisk industrial solid-state drive

Two terabytes of industrial flash on the fastest PCIe lane, rated by its maker for the shock and vibration of a working machine and for a million-hour class of service life. It holds the signed software and the rolling record of what the machine did.

Innodisk
Network

Moxa managed industrial switch

A managed industrial Ethernet switch with power over Ethernet, keeping camera, service and gateway traffic apart, with hardware time-stamping so every sensor shares one clock.

Moxa
The gateway

Two NXP automotive controllers

Two independent automotive-grade controllers check every motion command against its bounds before it reaches the drives. Each has its own supply, its own clock and its own watchdog, and a Texas Instruments isolated CAN transceiver between it and the machine's wiring.

NXP · Texas Instruments
Security

Infineon OPTIGA TPM

A hardware root of trust. The unit boots only software we signed, and the keys never leave the chip.

Infineon
Power

MEAN WELL railway-grade converter

A converter built for rail vehicles turns the machine's rough supply into clean, isolated power for everything in the box, with the surge and reverse-polarity protection ahead of it on our own board.

MEAN WELL
Hold-up energy

Eaton supercapacitor modules

Two supercapacitor modules carry the computer through a power loss for long enough to close its files cleanly. No battery to maintain, nothing to replace on a schedule.

Eaton
Connections

TE Connectivity DEUTSCH connectors

Every cable in and out of the unit ends in a sealed DEUTSCH connector, the same family the machine's own harness uses, bought genuine and through the authorised channel only.

TE Connectivity
The eyes

Ten cameras, a lidar, and a sense of where it stands.

Ten automotive high-dynamic-range cameras from one imager family, in four lens widths, so a low sun, a dark shop and a flashing beacon are all read by the same eyes. Above them a lidar that looks a full circle around the machine and ninety degrees top to bottom, a dual-antenna satellite receiver that knows its heading standing still, and an inertial unit that feels how the house moves.

The distinctive piece is a passive reflective band on the carbody. A downward camera reads it and gives the angle between the house and the tracks optically, so nothing touches the machine's own swing electronics. Radar for rain and dust is an option, added where a site's weather calls for it.

The awareness ring, plan view FORWARD THE BLIND DISC · WHAT THE RING CANNOTSEE · ABOUT 2.3 M ACROSS THECENTRE, BY DESIGN A THIRD OF THE HORIZON INEACH LENS, TILTED DOWN FROM HERE OUT,EVERY POINT IS SEENBY TWO CAMERAS THE 12 M VISIBILITYCIRCLE · THESTANDARD'S REFERENCE EIGHT CAMERAS ON A RING DESIGN GEOMETRY · NOT TO SCALE ON YOUR SCREEN · NOT A LIVE OUTPUT
The awareness ring from above: the camera ring and the lidar cone around the machine.
Cameras

Leopard Imaging cameras on Sony IMX490 imagers

Ten sealed automotive cameras, IP67 and IP69K, rated from forty below to eighty-five above, with LED-flicker mitigation so a lit sign or a beacon reads as steady light. Four lens widths, one serializer, one colour response.

Leopard Imaging · Sony
Lidar

Ouster OS0-128

A hundred and twenty-eight channels of lidar looking all the way round the machine and ninety degrees top to bottom, sealed to IP68 and IP69K, with the thermal design that makes a roof mount in the cold plausible.

Ouster
Position and heading

SBG Systems Ellipse-D

A dual-antenna GNSS and inertial unit that knows its heading while standing still, which matters on a machine that swings without moving, with RTK precision when a correction is available.

SBG Systems
Motion of the house

VectorNav VN-110

An industrial inertial unit reading how the house moves, shakes and tilts a thousand times a second.

VectorNav
Boom and stick angle

SICK TMM88D inclination sensors

Two-axis inclination sensors on the boom and the stick, reading their angle to a hundredth of a degree over CANopen.

SICK
Swing angle

The coded band

A passive reflective band on the carbody, read by a downward camera, gives the house-to-chassis angle optically. Our own design, and the reason the whole attitude chain needs nothing from the machine's electronics.

Steady Eddie
The stop

A stop that no software can talk to.

Energy authority sits in a separate, certified controller on its own hardware. Below it the stop is deliberately simple and physical: two contactors, a valve that vents the air, and a hand valve with a padlock.

Safety controller

A certified mobile-machine safety controller

Decides whether motion energy is allowed, and removes it, on its own hardware. There is no path from the AI or the computer to it.

Certified to the machinery safety standards by its maker
Power cut

Schneider Electric TeSys contactors

Two contactors in series. Opening either one removes power from every drive coil; each reports its own state through a mirror contact, and the rail voltage downstream is checked independently.

Schneider Electric
Air vent

ROSS monitored double valve

A monitored double valve vents the air from every actuator on demand, watches itself, and latches if its two halves disagree.

ROSS Controls
Lock-out

Festo lockable hand valve

The valve a technician turns to cut the air and vent it, with a padlock on the knob and a gauge downstream to prove zero.

Festo
Proof of pressure

Kavlico pressure transducers

Three independent pressure channels prove the air is really gone. Low pressure alone is never taken as safe; the levers must also be back at neutral and every actuator physically clear of its control.

Kavlico
Air supply

VIAIR industrial compressor

A twenty-four-volt compressor rated for continuous duty feeds a rated receiver, and sits outside the safety function, so nothing it does can hold the stop.

VIAIR
In the cab and outside

Two red stops

Two mushroom stops, cab and outside, each on two channels. Either one drops the contactors and the valve and latches, and neither can be reset from anywhere but the machine.

Schneider Electric · Banner Engineering
The hands

Mobile-machine controls, air-driven, and made to let go.

The parts that touch the machine's own controls come from the makers who already equip the machines: a Parker mobile controller, Festo valves, SMC cylinders, and sensors that read the machine's own stick rather than trusting the cylinder.

Motion controller

Parker IQAN-MC43

A mobile-machine controller from a hydraulics house, rated from forty below to eighty-five above, closing its loop every millisecond across five CAN buses with ten closed-loop outputs. It moves the controls on a fixed beat.

Parker
Metering the air

Festo proportional valves

Proportional valves meter the air both ways to each actuator, in a heated manifold so the valve pack stays above its cold limit on an Alberta morning.

Festo
The pushers

SMC compact cylinders

Compact spring-return cylinders push the joystick collar, one direction each, four to a stick, in the maker's cold-climate build. Cut the air and every one of them springs clear.

SMC
Where the stick really is

Novotechnik RFD-4000

A non-contact angle sensor reads the machine's own joystick, so the loop closes on where the control actually is, not where the cylinder thinks it went. Sealed to IP69, rated from forty below.

Novotechnik
Proof of release

SICK rugged inductive sensors

A sensor on each pusher body proves a real physical gap between the pusher and the stick, cold-rated and sealed. The proof is the sensor, never the command.

SICK
Travel levers

Festo travel cylinders

Double-acting cylinders on the travel levers, pushing and pulling through a split clamp with a compliant insert. No drilling, no adhesive, no permanent change to the lever.

Festo
The small parts that matter

igus · SKF · Southco

Self-aligning polymer contact shoes from igus so a pusher meets its pad square; SKF spherical rod ends on the travel cylinders; Southco quick-release pins so the brackets come off by hand.

igus · SKF · Southco
The joystick pod on the platform, from the engineering model
The joystick pod, from the engineering model.
The pedal pod on the platform, from the engineering model
The pedal pod, from the engineering model.
The software platform

Named, signed, and kept out of the loop.

The runtime

NVIDIA JetPack and TensorRT

The unit runs NVIDIA's own platform for the Jetson: JetPack for the board, TensorRT for the models, so every model runs where NVIDIA built it to run.

NVIDIA
Trust

Secure boot, encryption, signed updates

Jetson secure boot proves that the software booting is the software we signed. Protected data is encrypted at rest. Updates arrive signed, into a second slot, under the Uptane and TUF frameworks the vehicle industry uses to keep forged or stale updates out.

NVIDIA · Uptane · TUF
Middleware

ROS 2 with Eclipse Cyclone DDS

Services talk over ROS 2 with the Cyclone DDS security profile: every service identified, everything denied by default.

ROS 2 · Eclipse Cyclone DDS
Bill of materials

Every build lists its parts

Each software build ships a machine-readable bill of materials in the CycloneDX format, built under the NIST secure software development framework, with the AI governed under the NIST AI Risk Management Framework.

CycloneDX · NIST
A voice in the cab

A local Qwen language model

A language model on the machine answers an operator's questions from the controlled manuals, with no connection required. It can explain. It cannot command anything.

Qwen
The seat

A screen that cannot overstate itself.

The display

A rugged, sunlight-readable touch screen

A twelve-inch industrial display, sealed at the front, bright enough for a cab in full sun and read through gloves and rain.

Cincoze · Winmate class
The key

Yubico YubiKey

The operator signs each job with a hardware key. The approval binds the machine's own serial number, the plan, the tool, the work zone, the limits and an expiry. Change any one of them and the approval dies.

Yubico
Requested is never actual

Thirty-two screens, forty-two alarms

What was asked stays apart from what the machine did, on every screen. Each alarm is cleared only by the system that raised it. Stop and revoke on the screen is software; the red button is not, and the screen says so.

Steady Eddie

How we buy.

Four lanes, each with its own rule, and no score that can override a failed one.

  • Certified safety partsOnly through the maker's authorised channel, only the exact certified variant, and an independent review before any of it is credited.
  • Compute, network and sensingManufacturer traceability, environmental evidence, country of origin and manufacturing site declared, firmware and its bill of materials reviewed, a disclosed update process.
  • Ordinary valves, cylinders and fittingsFactory identity, samples, first-article inspection and a golden sample before any lot ships.
  • Metalwork, harness and assemblyBuilt in Canada from released drawings, with end-of-line test on every unit.

Why these parts.

Every part on this page is chosen by a rule we can show you: a maker who publishes its ratings, a family that will still be made in ten years, a cold rating fit for the ground we work, and a sealed connector to bring it in. Where a maker's rating is quoted here, it is the maker's, about its own part. What the whole unit does, you judge with your own hands at our own Test Facility in Alberta. How the intelligence in the seat uses all of this.

Name your machine and we will tell you where it stands.