Responder · CS-810 · Removable Robot Operator for Emergency Services

THE MACHINE GOES IN.
THE OPERATOR STAYS OUT.

A removable robot operator that takes the seat of a fire, rescue or hazmat machine you already own — and works its own joysticks, levers, pedals and switches.

Seat-Anchored Retrofit · Wired-Only Comms · Nobody In Harm's Way

13
Actuator modules in the SE-series family
7
Authority modes, OFF to AUTONOMOUS
5
Mechanical states, OEM to FAULT/SAFE
0
Radios or GNSS receivers anywhere on the unit
What It Is

A Robot Operator.
Not a New Machine.


Responder CS-810 is a self-contained unit that sits in the operator's seat of a machine the customer already owns — excavator, dozer, loader or tractor — and works that machine's own joysticks, levers, pedals and switches with its own actuators. A camera reads the dashboard. It never connects to the host machine's CAN bus, ECU or firmware; the only wire between the two is a fused feed from the accessory point. It lifts out, and the machine is standard again.

The purpose is stated plainly: put the machine into the fire, the flood, the collapse, the contaminated ground, and leave the person outside it. Responder is the civil emergency-services profile on this platform — fire ground, structural collapse, hazmat, disaster response, flood and wildfire earthworks, rubble and route clearance for civil agencies.

Responder is one of two profiles built on the same Eddie CS-8xx hardware. Defender CS-820 carries the identical dock, actuator modules and authority model into field-engineering work — earthworks, berms, obstacle reduction, route and rubble clearance for a unit's own plant. The hardware does not change between the two profiles; the rule set — the tasks each is allowed to run, and the safe state each goes to when something falls outside the rules — does.

Status: IFC — In Test.

The Claim
Nobody in the seat. Nobody in harm's way.

The dock is the machine's own seat-belt anchors and pins, and it stays with the machine. The unit lifts out and the machine returns to standard operation — nothing cut, wired or reprogrammed to put it back the way it came.

  • No CAN, no ECU, no firmware — the only wire between the unit and the machine is a fused feed from the accessory point.
  • No radio, no GNSS — preset at the dock, fibre-tethered, or onboard optical-AI; nothing aboard to jam.
  • No weapon, ever — a carrier and an operator, never fitted to a weapon platform.
01 How It Works · Seat, Camera, Fibre

SEAT IN. COUPLERS ON. NOTHING WIRED TO THE MACHINE.


Every connection Responder makes is mechanical, optical or electrical — never a tap into the machine's own systems. The dock anchors to seat-belt pins that are already there; the couplers land on controls that are already there; the one new wire is a fused feed from the accessory point.

The unit's body sits in a cradle resting on the OEM seat pan, in the operator's own seat, with the machine's own lap belt threaded through a closed tunnel between the cradle rails. From there, actuator modules pin to whatever the machine already has — hand levers, a tiller, the steering wheel from its centre, pedals, gates, rotaries, switch stations — while a camera reads the dashboard. Nothing connects to the host machine's CAN bus, ECU or firmware; the fused accessory feed is the only wire that crosses between the two.

Before the first task, and every day after, the unit works each control through a set of calibration steps — learning where neutral sits, where the limits are, and how the control returns when it is released. Controls wear and no two machines are quite alike, so this runs every day the unit works, not once at install. Key rotation is left out of the actuator set on purpose: a key is a human's authority token, not a step for the unit to take.

SEAT INSTALL SEAT-ANCHORED DOCK · FUSED FEED ONLY NO BUS · NO ECU · NO FIRMWARE — ONE FUSED FEED HOST CAB · IN SECTION CAMERA READS THE DASH THE MACHINE'S OWN CONTROLS RED MANUAL RELEASE — EVERY ACTUATOR TIER 2 · FIBRE — UNJAMMABLE STAND-OFF OPERATOR CDNS · CS-810 NO RADIO · NO GNSS ILLUSTRATIVE SCENE — NOT A DEPLOYMENT RECORD CS-810 · seat install — mechanical and optical, nothing wired to the host
Full Specification Sheet

Every Figure, Grouped for the Walk-Around.


The complete data card for Responder CS-810 — fit, control, authority, security and compliance, grouped the way a fleet buyer compares them. Mass, reach and endurance are machine-specific and are not published here: this profile is defined by what it fits and what its rule set allows, not by a single chassis number.

Responder CS-810 · Removable Robot Operator Eddie Family · Emergency Services Profile

01Interface & Fit

Mounting / dock
The machine's own seat-belt anchors and pins — stays with the machine
Seating
Unit body in a cradle resting on the OEM seat pan, in the operator's own seat
Belt routing
The machine's own lap belt threads a closed tunnel between the cradle rails
Host machines
Excavator, dozer, loader or tractor — the customer's own machine, unmodified
Removal
Lifts out; the machine returns to standard operation

02Drive & Control

Actuation
The host machine's own joysticks, levers, pedals and switches, worked by the unit's own actuators
Actuator modules
13 — SE-HAND · SE-TILLER · SE-WHEEL · SE-PEDAL · SE-PEDAL-HI · SE-GATE · SE-ROTARY · SE-SWITCH · SE-SWITCH-MATRIX · SE-AUX · SE-SENSE · SE-DOCK · SE-CORE
Steering
Driven from the centre of the machine's own steering wheel via a machine-specific adapter plate
Dashboard reading
A camera reads the machine's dashboard
Host bus connection
None — no link to the CAN bus, ECU or firmware; the only wire is a fused feed from the accessory point
Electrical
24 VDC family-wide; 12 V machines get conversion in the fit kit
Comms
CAN 2.0 / Ethernet, wired only — wireless never carries the safety loop or a motion command
Guidance tiers
Tier 1 preset at the dock · Tier 2 fibre-tethered, human-in-loop · Tier 3 onboard optical-AI, sealed rule set
Radios / GNSS aboard
0
Calibration
Worked through a set of steps every day it operates, learning neutral, limits and control return

03Authority & States

Authority modes
7 — OFF · MANUAL · ASSIST · APPROACH · TELEOP · AUTONOMOUS · MAINTENANCE
Mechanical states
5 — 0 OEM · 1 INSTALLED/DISENGAGED · 2 ARMED · 3 AUTONOMOUS CONTROL · 4 FAULT/SAFE
Key rotation
Excluded from the actuator set — keys are human authority tokens
Task safe-states
Each task in the rule set carries its own defined safe state: withdraw to the dock line, ground the implement and hold, or run to the tether end — designed per task, in advance
Physical release
A hardwired stop and a red manual release on every actuator, always mechanical, always available

04Security & Authorization

Rule sets & firmware
Signed and sealed; a hardware root of trust runs nothing unsigned; no debug access on shipped units
Tamper response
Ends in a safe stop and a retained log — tampering made expensive, slow, obvious and self-defeating
Authorization model
A lease, issued and withdrawable by Canadian Shield; delivered by wire or at the dock, never by radio
Withdrawal / expiry
Safe stop, then the minimum-risk condition; the unit stays installed and will not run until re-authorized — the host machine is never touched
Keys
Held in Canada

05Standards & Compliance

Design standards named
ISO 12100 · ISO 13849 · ISO 17757 · ISO 19014 — named at design; no conformity assessment has been performed
Ownership
Customer owns the machine and the hardware; the configuration and application are Canadian Shield's, licensed and revocable
Weapon scope
None — never operates a weapon, handles energetic material, or is fitted to a weapon platform: a carrier and an operator, not a munition
Patent status
Patent pending
Export control
Export-controlled — international transfer subject to Canadian government permits; export posture is counsel-first

Design standards are named at design; no conformity assessment has been performed against any of them. Mass, reach and endurance figures are machine-specific and are not published here.

In the Doctrine

Not “Stop and Wait.”
A Safe State for Every Task.


The fleet's default when something falls outside the rules is: stop, go to the minimum-risk condition, call a human. That default holds almost everywhere in this fleet — and it is precisely wrong for the seats Responder is built to fill.

In a burning structure or on a failing slope, stopping and waiting for a person can itself put a person in harm's way. So each task in the Responder rule set carries its own defined safe state — withdraw to the dock line, ground the implement and hold, or run to the tether end. That state is designed per task, ahead of the call, and it is never chosen in the moment: the moment is exactly when a machine should not be improvising what "safe" means.

The authority chain does not bend for the tempo of an emergency. Responder is mechanical and optical scope only — a carrier and an operator, never a strike platform. It never operates a weapon, never handles energetic material, and is never fitted to a weapon platform. Weaponization is not a product decision.

The Chain of Authority
AI plans. Rules govern. Humans authorize. Safety has veto.

Onboard optical-AI proposes inside its own sealed rule set; the rule set governs what may even be proposed; a human authorizes the task before it runs; and the physical stop and the red manual release on every actuator always remain — the lock is on the logic, never on safety.

Deployment

A Seat, Filled and Emptied.


One fit-and-recover cycle, walked through — illustrative of how the unit is used, not a mission or incident record.

01 · Fit

The Dock Goes In Once

The dock anchors to the machine's own seat-belt pins — a fit done once, ahead of any call. The unit itself stays in its case until a seat needs filling, and the machine works exactly as it always has in the meantime.

02 · Engage

Couplers On, Camera Up, Rule Set Loaded

On site, the unit sets into the dock, couplers land on the host's own joysticks, levers, pedals and switches, and the camera reads the dash. The rule set for the task — preset, fibre-tethered, or onboard optical-AI — loads before anything moves.

03 · Recover

Lifts Out, Machine Stays Standard

When the seat is needed again, the unit lifts out. Nothing was cut, wired or reprogrammed on the machine — it is exactly what its manufacturer built, and the record of the task stays with Canadian Shield, not with the machine.

The Eddie Family · At a Glance

One Seat. Two Profiles.
A Doctrine Shared Across the Fleet.


Responder shares its dock, its actuator modules and its authority model with Defender, its field-engineering sibling under the Eddie CS-8xx line. The same reason for building it — put the machine in harm's way, not the person — also runs through platforms in other families built for exactly that kind of ground.

CS-820 · Eddie · Field Engineering

Defender

The same dock, modules and authority model, ruled for a different job: earthworks, berms and revetments, obstacle reduction, route and rubble clearance on ground where a person should not sit.

Beaver CS-250 · Ground

Beaver

Tracked. Battery-electric. Field engineer for route, berm and winch work — an anchored winch pulls roughly seven times what the tracks alone can.

Wolverine CS-260 · Ground

Wolverine

A compact tracked carrier that places self-reacting tools at the work face — the force closes on the structure, not the machine.

Proof, Not Promotion

Send the Machine.
Not the Operator.

If you run emergency plant, or the seats that are hardest to fill safely, Responder is on the table — with its limits, its status and its refusals stated in the open.

Full Marketing Package

The Rest of the Fleet.


Every Canadian Shield platform has a brochure like this one — same depth, same status discipline, same refusal to publish a number we cannot source. Organized by family below, or browse the full library.

Air · 8
CS-110 · Air

Goose

No battery. No motor. No receiver. A kinetic carrier launched at ~189 m/s on shop air.

Read the brochure Download PDF
CS-111 · Air

Encapsulator

A capture-head variant on the Goose CS-110 launch line — fouls rotors and entangles the airframe instead of striking it down.

Read the brochure Download PDF
CS-112 · Air

Matrix

Aimed, direct-fire, tethered — the net that stays connected to the gun that threw it.

Read the brochure Download PDF
CS-120 · Air

Gyrfalcon

Goose's launch chain, plus the power Goose leaves out — a tail motor and bow-thruster ring for mid-flight correction.

Read the brochure Download PDF
CS-130 · Air

Raven

A moulded electric aircraft that carries the network — decoy, relay, electronic support. Non-kinetic. Recoverable.

Read the brochure Download PDF
CS-140 · Air

Owl

A big, slow propeller and an IR-biased eye — orbiting instead of hovering, unheard, unseen, unjammed.

Read the brochure Download PDF
CS-150 · Air

Loon

The bird that flies its whole leg without asking a satellite for a name.

Read the brochure Download PDF
CS-160 · Air

Kestrel

The Air family's smallest body — a tube-launched, motor-cruising scout priced to lose, not to last.

Read the brochure Download PDF
Ground · 6
CS-210 · Ground

Grizzly

Tracked. Battery-electric. 150 kg over muskeg — with nothing to jam.

Read the brochure Download PDF
CS-220 · Ground

Moose

600 kg of freight over bad ground. Payload is the product — mobility is the constraint it is bought within.

Read the brochure Download PDF
CS-230 · Ground

Wolf

Eight coordinated carriers. One fibre trunk. One operator. Nothing to jam.

Read the brochure Download PDF
CS-240 · Ground

Lynx

A wheeled route-picker with thermal eyes — and a watch mode measured in days.

Read the brochure Download PDF
CS-250 · Ground

Beaver

Tracked. Battery-electric. An anchored winch pulls roughly seven times what the tracks alone can.

Read the brochure Download PDF
CS-260 · Ground

Wolverine

A compact tracked carrier that places self-reacting tools at the work face — the force closes on the structure, not the machine.

Read the brochure Download PDF
Water · 2
CS-310 · Water

Orca

Persistent survey & carrier AUV — one moulded hull that surveys, carries and watches.

Read the brochure Download PDF
CS-320 · Water

Jellyfish

A soft pulsed-jet payload carrier — slower than the current on purpose.

Read the brochure Download PDF
Underground · 8
CS-410 · Underground

Badger

A surface plant that pushes a steerable head into ground with no line, no map, no signal.

Read the brochure Download PDF
CS-411 · Underground

Aquifer

Coiled-tubing bore, fibre-guided — conduit installed, water table mapped, nothing to jam.

Read the brochure Download PDF
CS-425 · Underground

Ferret

Recon, mapping and locating in existing tunnels and culverts — with a block-only interpose capability, always human-confirmed.

Read the brochure Download PDF
CS-430 · Underground

Mole

A passive seismic and acoustic node on long-life battery — reporting only over a buried fibre link.

Read the brochure Download PDF
CS-435 · Underground

Trembler Line

A chain of buried Mole nodes on a fibre trunk — detect, localize, cue. Nothing radiated, nothing to jam.

Read the brochure Download PDF
CS-445 · Underground

Muskrat

Hybrid swim/crawl. Zero visibility. No diver, no radio, no GPS.

Read the brochure Download PDF
CS-450 · Underground

Gopher

It maps, it marks, it parks. Cheap enough to send in numbers.

Read the brochure Download PDF
CS-460 · Underground

Farell Pig

Flow-driven, self-propelled or tethered — it rides the line, it doesn't bore one.

Read the brochure Download PDF
Eddie · The Removable Operator · 2
This brochure CS-810 · Eddie

Responder

The removable operator for emergency services — fire, rescue, hazmat and disaster response. The machine goes in; the crew stays out.

Read the brochure Download PDF
CS-820 · Eddie

Defender

The removable operator for field engineering — earthworks, berms, obstacle reduction and route clearance, on the plant a unit already has.

Read the brochure Download PDF
Defence · Cross-Fleet · 1
CS-901 · Defence

Shield Pod

A canopy-retarded delivery pod: land on a crumple zone, right itself, open, release the carrier system.

Read the brochure Download PDF