The pedestal mount head-on on a white ground: the cabinet base, the rotating head and the two launch pods either side of it.
CDNS Institutional · The line

The Tubes Do Not Move.
The Site Decides Everything Else.


CDNS Institutional is fixed-site protection against small uncrewed aircraft, built on the Launch Platform's pneumatic chain and firing the rounds that chain already throws. Two products carry it: a mount that stands on prepared ground, and a mount that carries its loads into a building's structure. Detect, track, classify and cue are Canadian Shield's own. A person arms every shot.

The line

Two Mounts on One Chain.
Nothing About the Chain Changes.


This line adds the thing that holds the tubes, points them, powers them and refuses to let them fire outside a sector cut for the ground they stand on. It adds nothing to the round and nothing to the air behind it.

CDNS Institutional is fixed-site protection against small uncrewed aircraft. It is one line and two products: the Pedestal Mount, a slewing, elevating head on a cabinet pedestal, and the Roof Mount, whose loads go into a building's primary structure rather than onto its deck. Both fire the rounds of the CDNS UAV Platforms line, and the sensing that cues them is built in-house.

The tube module is the one already drawn on the launch platform: Ø90.00 mm on the bore, 3.00 m of stroke, 30 bar of air behind it, and a normally closed solenoid breech on every barrel. A round is 1.600 kg and leaves at 189.2 m/s. Nothing on this line is a new round, and nothing on it is a new launch chain.

Doctrine
Carriers, not munitions. A person arms every shot.

There is no warhead, no fuze, no primer, no propellant and no energetic material on either mount, in any round either mount fires, or in the miss canopy option. A cue is a permissive, never a trigger. Each arm action releases one barrel, and the mount returns to SAFE after every shot. No automated or remote-only fire path exists.

The line is not a remote weapon station and it has no automated fire mode. It carries no jammer, no spoofer and no other radio-frequency effect. There is no radio transmitter, no receiver and no satellite navigation receiver aboard either mount, every data path is wired or fibre, and neither mount carries an antenna. The console stands inside the site's secure area with a direct view of the mount and the sector it covers, and no workstation elsewhere on the network can arm or fire.

The products

One Stands on the Ground.
The Other Stands on a Building.


The two mounts answer the same problem from two different pieces of structure. What sits above the bearing is common work; what sits below it is the whole of the difference.

The pedestal mount on a plain ground: a cabinet base on four levelling feet carrying a rotating head with a sensor housing and two six-tube launch pods.
A launch platform on its skid frame, the tube array raised on a scissor cradle, air receivers and a control cabinet alongside it.
THE PEDESTAL MOUNT

A head on a column, anchored to the ground

A slewing, elevating head carrying tube pods and the sensor head, on a cabinet pedestal that houses power, control, the uninterruptible supply and the wired network. Three bases are open to it: a bolted anchor on a concrete plinth, a steel socket embedded in a reinforced-concrete pier, or four levelling legs for a transportable variant.

The Pedestal Mount

THE ROOF MOUNT

A mount whose loads reach the building's steel

A launch mount on a building roof, its loads carried through a dunnage frame and posts in curbed penetrations into the building's primary steel or columns. Nothing bears on the roof deck or the membrane. Two architectures are open: the launch platform skid on a roof frame, or the Pedestal Mount's own head on a short stool over a column.

The Roof Mount

Both products are known by name and carry no roster designation, as the launch platform and the forward manufacturing cell do. A mount is specified by the ground under it, the pod on it and the sector cut for the site, and none of those three is a catalogue choice.

Common to both

One Tube Module.
One Chain of Permissives.


Everything above the bearing is shared between the two products, and every item on that list is inherited from a machine that already exists rather than drawn again for this line.

The elevating cradle's ram and cable chain under the launcher tube, with the air receiver bank behind them.

Loading is settled per site. A magazine feeds the breech from a locked store of rounds on an indexed carrier with no pyrotechnics in it; pre-loaded pods hold one ready round in each tube behind a locked, sensed cover, and are reloaded at the breech or by exchanging the pod. Either way the rounds are counted, the cover is a permissive, and nothing is loaded that the breech has not read.

The shot

Eighteen Kilonewtons at the Breech.
Almost None of It at the Drives.


One shot is a step, not a shove. It reaches its peak before the round has moved at all, so it is a load on structure and on brakes rather than a demand on a motor.

Thirty bar acts across a Ø90.00 mm bore and drives a 1.600 kg round three metres up the tube. The gas load on the closed breech end, the valve body and the barrel-to-breech joint is 18,441 N. Taking off the obturator's seal drag leaves 18,191 N of net reaction into the mount, and that peak lands at the very start of the stroke, 0.14 ms in.

The launch case, and what it puts into a mountValue
Bore and strokeØ90.00 mm × 3.00 m
Charge pressure30 bar
Round1.600 kg, leaving at 189.2 m/s
Launch energy28.64 kJ
Gas load on the breech18,441 N
Peak net reaction into the mount18,191 N
Mean base force over the stroke9,546 N
In-bore impulse357.3 N·s
Equivalent static load, first sizing36,382 N · the peak at a step-load factor of 2.0
Laying envelope±170° azimuth · −3° to +75° elevation

Per barrel, per shot. Member checks take a safety factor of 2.0 on top of the equivalent static load.

A barrel whose bore line sits away from the azimuth axis turns that reaction into torque on the head. At a lateral offset of half a metre it is about 9.1 kN·m, which is orders above anything a slewing drive is asked to deliver. The brakes carry the shot, not the drives, and the fire command waits until both brakes are set. Firing one barrel at a time is asymmetric by nature, and the design rule that follows is to keep bore lines as close to both axes as the pod allows. The numbers for each pod option are on the Pedestal Mount.

The arm chain

Four Permissives Inherited.
Five More Cut for the Site.


The chain is hard-wired in series ahead of the arm relay, so any one condition opens it on its own. None of it is on a network, and none of it is discretionary.

The boundary
The cue is a permissive. It can never bypass the chain or the arm action.

The cue that crosses the interface is bearing, range and height, and no fire command crosses it. One arm action releases one barrel, the arm relay drops when that shot completes, and the key is turned again for the next. Any loss of power, bus, arm relay or interlock returns the mount to SAFE with the breech closed.

A sensed stow lock pins the head at a stow attitude whenever the mount is SAFE and unattended, and the rangefinder is interlocked off while it is in. Every arm, fire and fault event is recorded with its time, its operator and its imagery, and the record cannot be edited in the field.

The sensor head

Passive Optics and a Rangefinder.
Everything Off the Head Is Glass.


Detect, track, classify and cue are Canadian Shield's own, built in-house, and they sit on the mount rather than beside it. The head is specified by function and class, and the figures behind it are what the physics requires.

The head detects, tracks, classifies and ranges, and hands the laying solution a cue of bearing, range and height. It shows the operator the imagery needed to identify what is up there and decide. The decision to arm stays the operator's, and the head has no path to the breech.

What the doctrine costs is written down rather than glossed. Optical detection is limited by fog, snow and rain. Without radio-frequency detection there is no warning of an aircraft before it can be seen. Detection range against a named target class comes from measurement, and no such figure is published on this line: what the optics fix is a resolution ceiling on a clear day against a target of known size and aspect, which is a different quantity. The apertures, the beam divergence and the pointing stability that follow from them are on the Pedestal Mount.

Human safety

A Missed Round Lands Hard.
The Design Starts From There.


Human safety comes first, on every line. On this one the human-safety case is the first design driver, and it governs the design rather than following it.

The round carries no chemistry, and that is not the hazard. The hazard is mass and speed: the design table gives 7.3 to 16.8 kJ at impact for a round that misses, and no lay in the envelope brings that below the bottom of the band. Sectors and elevation limits change where a miss comes down. They do not change how hard it comes down, and the case is written from that fact rather than around it.

The muzzle face of a launch platform's tube array, the tubes open and empty, nothing mounted above them.

Where a site controls the whole of the ground a round can reach, a surveyed footprint and a cam set cut to it carry the case. Where it does not, the design answer is a canopy carried in the round, and that work is engineering rather than a capability offered here.

The round option

A Canopy in the Body Bay.
A Bay That Opens and Initiates Nothing.


The miss canopy is an option on the rounds this line already fires, under engineering. It is not a new round, and nothing about how a missed round comes down is settled here.

The option is a packed canopy carried in the round's forward body bay, aft of the nose and head interface, on the airframe both heads share. The round keeps its 1.600 kg mass, its external envelope and its magazine pitch, and the launch case behind it does not change: 30 bar, 3.00 m of stroke and 189.2 m/s. The same option serves the kinetic head and the capture head.

What the engineering is working on is named rather than smoothed over. Every automatic release needs a lock driven by the launch itself and a condition that opens it, and that pairing is recognizable as the architecture of a safety-and-arming device — the company's distinction is that this mechanism opens a bay and initiates nothing, and counsel's opinion on it comes before any trigger is selected. The canopy's planform, its porosity, its packed volume against the bay, and whether a drogue stage precedes it are open engineering. No descent figure is published, and none will be until a built canopy has been deployed and measured.

The site

A Foundation, Three Phases.
And an Engineer Licensed Where It Stands.


A mount on this line is half a machine and half a piece of the site. The half that belongs to the site is designed by people licensed there, and it is named here so that a first conversation can start from it.

THE STRUCTURE

Designed where the site is

The foundation, the pier or the roof interface is the work of a structural engineer licensed in the province the mount stands in, to the National Building Code as that province adopts it, the anchorage provisions of CSA A23.3 and CSA S16. Welds are to CSA W59. Frost depth, seismic design and the geotechnical report are site-specific.

THE SERVICES

Three phase, and a bus that survives losing it

The compressor runs on three-phase at 17 kW class, specified to the site's own distribution. The control bus is 24 VDC, physically segregated from the three-phase side, with an uninterruptible supply behind it that carries an orderly SAFE. The installation is to CSA C22.1.

THE AUTHORITIES

Named early, not discovered late

The provincial pressure-equipment authority registers the vessel and its relief device. The electrical inspection authority inspects the installation. A building official reviews a roof. The site's own accountable authority and its regulator name the risk they will accept.

Maintenance is a site's work too, and the schedule is short and fixed: the interlocks, the stop and the breech fail-closed proven at each use; harness and slew checks monthly; compressor service and breech seal inspection quarterly; the vessel hydrotest and the relief proof on the certificate. A lapsed vessel certificate takes the mount out of service. This line adds sensor window cleaning, dryer and desiccant service, a cam-set inspection and seal check, an anchor preload check, a foundation or roof-penetration inspection, a brake holding test, a tilt-switch check and a test of the uninterruptible supply.

Who it is for

Who Sites One of These.
And Who Should Stop Here.


Reading the right-hand column first saves everyone time. Both lists come out of the engineering rather than out of a policy.

WHO IT IS FOR

An authority that owns its own ground

  • An authority that owns the ground a round can reach and can have it surveyed.
  • A site with three-phase power and room for a compressor and a certified air bank away from the people on it.
  • An engineering authority that will read the loads, the foundation and the pressure-system requirements before anything else.
  • A safety officer who wants the permissive chain, the sector cam set and the exclusion zones beside their own.
  • A customer whose own threat assessment names the aircraft the sensor head has to be sized against.
  • A buyer who will site the mount, train the crew and hold the arm key.
WHAT IT IS NOT

Read this before the enquiry

  • Not offered for a site with people inside the ground a round can reach. Human safety at such a site is this line's first design driver, and that work is engineering.
  • Not a remote weapon station. A person stands at the console and arms every shot, and no automated or remote-only fire path exists.
  • Not a radio-frequency effect. There is no jammer and no spoofer on this line, nothing aboard either mount transmits, and neither mount carries an antenna.
  • Not an energetic system. No warhead, no fuze, no primer, no propellant and no energetic material, including in the canopy option.
  • Not a new round or a new launch chain. The bore, the stroke and the charge pressure are inherited unchanged.
  • Not an offer. Enquiries are screened, international transfer is subject to Canadian export permits taken per shipment, and counsel comes first.
The conversation

It Begins With a Piece of Ground.
Then the Power Already Standing on It.


Bring the site, what is around it, the services on it, and who would hold the arm key. The requirements follow from those four answers, and nothing on this page is an offer.

The useful first conversation is about a place: what the ground is and who owns it, what stands within reach of it, whether there is three-phase power and somewhere to put a compressor and a bank, and who would hold the arm key. The sector cam set, the foundation, the pod and the loading all follow from those.

The two products are on the Pedestal Mount and the Roof Mount. The pneumatic chain both of them inherit is on the launch platform, the rounds on CDNS UAV Platforms, and the hazard register and interlock chain the line builds on are on safety on the launch line. What the company designs, owns and keeps control of is on sovereignty. Every enquiry is screened, supply is subject to Canadian government permits issued per shipment, and the reply comes in writing, from a person.

All CDNS Institutional designs are patent pending; international transfer is export-controlled and subject to Canadian government permits taken per shipment, and nothing on this page is an offer.