Skip to content
Technology How it works Breeder — Hyperion Burner — Aegis Burner — MetroVolt AI-Native Architecture Magnets Fuel cycle Safety Roadmap
Solutions AI & Data Centers Defense & Government Grid & Baseload Neutron Detection Quantum
Learn Technical Library
Proof Publications Whitepapers Technical Library Open Science & Reproducibility The Honest Gates
Company About / Mission Leadership Environment Health & Safety Investors Careers Press Contact
3D Model
AI Architecture › L1 · Control Plane
L1 · Control Plane

The Autonomous Hardware Failsafe

A self-contained hardware chain detects a magnet delta-T precursor and dumps the quench with zero latency and zero dependence on any AI or software.

THE STACK · click to jumpL7Ecosystem & StrategyL6Experience & VisualizationL5Applications & CopilotsL4OrchestrationL3Twin Modeling & AIL2Data FabricL1Control PlaneL0Foundation▲tlmctl▼L1 · CONTROL PLANEHard real-time actuation and the autonomous failsafe.1Edge FPGAµs-determinism2Real-Time Actuationcoils · heating · fuel3Hardware Failsafeautonomous trip4Sync Gatephase-locked timing5Signal I/OADC / DAC6Watchdogliveness & interlocksMACHINE TIEDrives magnets, ice-piston, and gas puff on the sub-10 µs loop.KRONOS FUSION ENERGYAI-NATIVE S.M.A.R.T. GENERATORCONTROL PLANESHEET 03REV. 2026-08L1 · AI-NATIVE STACK
L1 · Control Plane — its place in the stack (left, click any layer) and its internal components (right). Telemetry rises; control descends.

The last line, by design independent

Kronos's most important safety property is that the magnet protection path does not depend on intelligence of any kind. No model, no CPU, no software scheduler participates in the decision to protect a high-field REBCO magnet. A dedicated hardware chain senses the earliest thermal precursor of a quench and commits the energy dump on its own timing.

The chain

Distributed thermometry and co-wound sensing across the REBCO winding produce a local temperature-rise signal ΔT. When the rate or magnitude of ΔT crosses a hardwired comparator threshold — the signature of a normal zone forming — the comparator drives a switching element (a VOx / metal-oxide bypass path) that diverts current out of the affected winding into an external dump, converting stored magnetic energy to heat outside the coil.

Why zero-AI matters

A REBCO magnet at the breeder's 16.84 T peak field, or the burner's 26.49 T plug, stores large magnetic energy. A local normal zone that is not de-energized fast enough can drive destructive local heating. The protection therefore must work when everything smarter has failed: no network, no power to the compute racks, no valid model. By construction the failsafe uses only local analog sensing and a passive-biased switching element.

Relationship to L1

The FPGA control plane runs a faster, richer quench-precursor estimator that can act earlier and more selectively. But the hardware failsafe underneath it is the floor: even if the FPGA path is disabled, the ΔT → dump chain fires. Intelligence lowers the probability of ever reaching the floor; the floor guarantees safety when it is reached.

Content reviewed August 2026 · design-and-simulation stage