DUAL EVERYTHING, BY ARCHITECTURE

Distributed electric lift — eight or twelve fixed-pitch rotors — wired so that no single failure owns the aircraft. Redundancy is the design's spine, not a feature bolted on.

Two independent battery packs feed two independent power buses, with adjacent motor pods on opposite buses so a bus loss thins the lift evenly instead of tipping it. Dual flight computers — each with its own inertial and baro sensors — run behind a cross-check arbiter. Navigation is three GNSS receivers voting two-of-three, backed by a dissimilar inertial channel that keeps flying when all three are wrong. Command is dual radio — conventional, legal and encouraged on the civil line — with an optional optical-fibre fly-by-wire tether under trade study for the most critical flight profiles.

Motor-out at full mass, across the failure map, with fault detection proven — that is flight-test territory, and the program says so plainly. The architecture is drawn to make those demonstrations possible; the demonstrations themselves are what the flight campaign is for.

FOUR LAYERS BETWEEN A FAILURE AND A PERSON

Redundancy is the first answer. The safety chain is every answer after that — a ladder of independent saves, each armed before the one above it is needed.

Layer one is the architecture itself: fly through the failure and land. Layer two is a whole-airframe ballistic parachute — the primary save for a crewed airframe above a deployment floor that drop testing will fix. Layer three is SIG AT rapid-expanding polyfoam encapsulation, a patent-pending hard stop for the cases a chute cannot catch. Layer four is the crashworthy cabin cell: an energy-absorbing seat with multi-point restraint, riding energy-absorbing gear, with the battery bays outboard behind containment walls and runaway vents pointed away from the occupant. The canopy is the primary egress path.

The program is open about what is not yet closed: the chute's minimum deployment floor, the foam-with-a-person cases, egress and extraction, thermal-runaway timing. Those are exactly the questions a crewed flight-test campaign exists to answer — and the reason the seats stay empty while it does.

CREW ROTATION, WITHOUT THE ROAD

The scenario below is the mission the CS-610 is engineered toward. It becomes real when the certification bar says so — not before. Today, prototype flights are uncrewed and experimental as applicable.

Arrive. A remote compressor site, four hours by winter road, eleven minutes by air. The mover lifts from the yard dock with the morning technician aboard, riding a surveyed corridor on voted GNSS with dual radio to the site net.

Work. On the pad, the machine sets down on its energy-absorbing gear beside the CS-DOCK and takes its charge while the crew works. No idling truck, no road crew, no eight-hour round trip for a ninety-minute inspection.

Recover. Shift's end: the outbound technician boards, the dock releases, and the mover flies the corridor home — the same layered safety chain riding every minute of it. The road stays unploughed. The crew is home for dinner.