The CDNS Autonomy hub module on a tactical vehicle's steering wheel, its arms out to the rim, the pedal actuators below it and one of the unit's dash modules beside it.
CDNS Autonomy · Who it is for

One Removable Operator.
Three Rule Sets.


Responder CS-810 takes the seat of a fire, rescue or hazmat machine, Defender CS-820 takes the seat of an engineering unit's own plant, and the same hardware carries municipal and utility resilience work on the machines an agency already runs.

The three roles

Three Roles.
One Unit.


Three kinds of customer, one hardware family between them. The profile and the rule set change with the role; the seat, the dock, the wired stop and the manual release are the same in every cab.

EMERGENCY SERVICES

Responder CS-810

Fire, rescue, hazmat and emergency-management agencies put the machine on the fire ground, the collapse or the hazmat line and leave the seat empty.

Responder

DEFENCE ENGINEERING

Defender CS-820

Defence engineering units, ministries and the primes acting for them work earthworks, obstacle reduction, route and rubble clearance, remote handling and driving, on ground where a person should not sit.

Defender · The CDNS Defence Platform

CIVIL RESILIENCE

Municipal and utility

Municipalities and utilities convert plant they already own and already maintain for flood, wildfire, post-event access and debris and route clearance, with their own operators in their own yard.

Civil resilience

The CDNS Autonomy unit on the steering wheel and levers of a military truck cab, the cab's own stop and switches within reach beside it.
What changes

What Changes with the Role.
What Stays with the Machine.


Three roles, one row each: who sends the machine, the work, the ground, and what it does when something falls outside the rules.

RoleProfileWho sends the machineThe workThe groundThe safe stateRead next
Emergency servicesResponder CS-810A fire, rescue or hazmat service, an emergency-management office, or its contractor.Fire ground, structural collapse, hazmat, flood and wildfire earthworks, rubble and route clearance for civil agencies.The callout's ground: burning, flooded, contaminated or still moving, closed while the machine is on it.Decided per task, in advance. Each task carries its own, because stopping to wait can itself be the harm. It ends in a safe stop, then the minimum-risk condition.Responder
Defence engineeringDefender CS-820A defence engineering unit, a ministry, or a prime acting for one.Earthworks, berms and revetments, obstacle reduction, route and rubble clearance, remote handling and driving. Never operates a weapon. Never fires anything.A work site under threat, shut to everyone the job does not need. An open route is refused.Decided per task, in advance: withdraw along the tether, ground the implement and hold, or complete to a defined stop line. Then a safe stop and the minimum-risk condition.Defender
Civil resilienceResponder CS-810A municipality or regional district, a utility with its own plant, or its contractor.Flood and breach closure, wildfire guard, post-event access, debris and route clearance.Ground the yard already works, after an event, with any route closed to traffic.Decided per task, in advance, on Responder's rule set. A safe stop, then the minimum-risk condition.Civil resilience

One hardware family under three rule sets.

What changes with the role is the rule set: the tasks a profile may run, the movement space it may use, and the safe state it goes to when something falls outside the rules. All three are settled before the work starts, and none is a customer setting. What never changes is the machine end of it — the seat, the dock, the wired stop, the manual release, and the daily calibration.

One hardware family

The Same Seat.
Different Rules.


Eight things are the same in every cab and under every role. They are the machine end of the conversion, and none of them is a profile setting.

All three are CDNS Autonomy: one hardware family, programmed apart. Responder CS-810 carries the emergency-services role and the municipal and utility one; Defender CS-820 carries defence engineering. The same unit body sits in a cradle on the machine's own seat pan, the same dock is the machine's own seat-belt anchors and pins, and the same actuators work the joysticks, levers, pedals and switches already there. Nothing connects to the host machine's CAN bus, ECU or firmware. The only wire crossing in is a fused feed from the accessory point, and the unit lifts out and leaves the machine standard.

What separates the three is written down before the work starts, task by task, and never settled in the moment. Under all three, the wired stop and the manual release on every actuator always remain. Safety sets out the authority order and the stop; Machines and families sets out which plant the unit is fitted to.

How it works takes the conversion apart in order, from the survey of a cab to the first day the unit works in it.

The fit

The Same Four Questions.
Three Different Answers.


Every profile is scored the same four ways before anything is fitted. The answers change with the role; the questions do not.

01

The seat is the exposure

The first question is what the job exposes. Where the hazard reaches the operator rather than the machine, an empty seat removes it. Where the machine itself is the limit, this line is the wrong answer.

02

The task is fixed and repeated

A task written down before the day can be given entry conditions, an envelope and a safe state. A job that is different every hour cannot, so what scores well here is work that holds its shape.

03

The ground is closed to the public

The work area has to be one a person can walk and point at, with everyone inside it there for the job. A member of the public cannot consent to the risk, so public-traffic work rules a task out.

04

Utilization is high and predictable

The last question is how much of a shift or a callout the machine would spend working. It ranks a job; it does not decide one, and on the two emergency roles it never carries a row on its own.

The scored table sits one click down, on the door written for you: the callouts on Responder, the tasks on closed ground on Defender, the occasions after an event on Civil resilience.

Fit and refusal

The Plant Is Already Yours.
The Refusals Come With the Line.


The left column is the customer: whoever owns the plant, the seat and the ground. The right column is the line itself, and it reads the same whichever of the three you work in.

WHO IT IS FOR

The owner of the plant and the seat

  • Fire, rescue, hazmat and emergency-management agencies, filling the seats that are hardest to fill safely.
  • Defence engineering units, ministries and the primes acting for them, on plant already there.
  • Municipalities and utilities that own their plant, maintain it and keep it in their own yard.
  • The contractor that turns up when an agency or a municipality calls.
  • Owners of excavators, dozers, loaders, graders, telehandlers, material handlers, tractors and implement carriers, of any make or age.
  • Anyone who wants a first job scored on their own iron and their own ground first.
WHAT IT IS NOT

The same refusals on all three

  • Not a vehicle. It is the operator for the machines already in the yard.
  • Never operates a weapon and never fires anything. The line's one refusal.
  • Not permanently fitted and not left unattended. It is fitted for a task, authorized for a period, and lifted out.
  • No public-traffic work. A member of the public cannot consent to the risk.
  • No guaranteed production rate and no promised response time, on any of the three.
  • Not universal autonomy. One qualified configuration at a time, surveyed, fitted, calibrated and recorded.
The crew

The Seat Empties.
The Crew Does Not.


The unit takes a person out of the seat and leaves the rest where it was: the same crew, the same yard.

Operators and maintainers are trained by role, and independence is the measure: your own people run it, service it and recover it. Operations and training takes one shift apart, from the walk-around to the record it leaves; Safety carries the authority order, the stop and the lockout.

An excavator cab with a CDNS Autonomy unit on both of the machine's joysticks and both of its pedals at once, the seat behind them empty.
The conversation

The Role First.
Then the Machines in the Yard.


Which of the three you work in settles the profile, and the plant in your yard settles the fit. Both belong in the first sentence you send.

Name the plant already in the yard and the seat you want left empty first. From there the conversation is about your machines and the tasks you would rule in and out. Nothing on this site is an offer, and no prices appear on it.

What comes back is a shortlist rather than a quote: the machines the line covers, the seat it would empty first, and what a survey of that cab would measure. Fit is assessed machine by machine, one configuration at a time.

Each profile has a page of its own, for a board or a council package: Responder and Defender.