The case for thinking at the edge
Cloud inference assumes a fast, reliable, permanently available link. In defence that assumption fails routinely — so the intelligence has to live on the platform, and that constrains everything.
Cloud inference assumes a fast, reliable, permanently available link. In defence that assumption fails routinely — so the intelligence has to live on the platform, and that constrains everything.
A great deal of modern artificial intelligence assumes a data centre. Models are large, compute is abundant, and the network connecting the two is fast and permanently available. Almost none of those assumptions hold on a platform operating in contested space.
This is not a preference or an optimisation. For defence autonomy, running intelligence on the platform is a structural requirement, and it constrains every engineering decision downstream.
The moment a platform is most alone is exactly the moment it most needs to be capable.
Deciding to run at the edge is easy. Making capable intelligence fit is the hard part, and it is where most of the engineering effort actually goes.
Onboard compute is bounded by weight, heat and power, and those three are linked. More capable compute is heavier and draws more current, which reduces endurance; it also produces heat, which must be removed, which costs weight again. Every watt spent thinking is a watt not spent moving. On a small platform, that trade is brutal and constant.
The disciplines that follow are unglamorous but decisive: designing and compressing models to run usefully in a small envelope; guaranteeing the loop completes on schedule every time rather than usually; sustaining performance without thermal throttling; and shedding non-essential work gracefully under load instead of falling over.
There is a temptation to optimise for the best-case number — how fast the model runs when nothing else is competing for the hardware. That figure is close to meaningless in a real system, where perception, navigation, control and communications all contend for the same silicon simultaneously.
What matters is the worst case: does the loop still close on time when everything is running at once and the platform is hot? A system that is usually fast and occasionally late is, for control purposes, simply unreliable.
Once a system genuinely does not need the link, several things improve at once. It stays useful when isolated. It decides at sensor rate rather than network rate. It exposes far less. And the bandwidth that does exist can carry conclusions rather than raw data — which is a better use of a scarce resource in any case.
This is why we settled the architecture early, in 2021, rather than treating it as something to retrofit. Decisions of this kind are extremely expensive to reverse once an entire stack has been built on the opposite assumption.
Continue
We publish our positions openly, including the parts we haven't solved.