Exergie/NeoECU-Hardware
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[UNVERIFIED] Astra diagram pass

Browse Source
This commit is contained in:
h3cx
2026-09-10 23:39:49 +02:00
parent 45c0d7f8ec
commit 31b3595ac0
81 changed files with 3762 additions and 192 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Architecture/IO_MODULES/ANALOG_INPUTS.md
+2 -12
View File
@@ -9,13 +9,7 @@ use `SENSOR_GND` and are kept separate from ignition/injector return currents.
## General 0--5 V channels
```text
connector -- transient clamp -- R_TOP --+-- ADC-local C_HOLD -- ADC
|
R_BOTTOM
|
SENSOR_GND
```
![Analog input](../diagrams/analog-input.svg)
`R_TOP` is the divider's upper resistor; do not add a separate series
`R_PROT` in the normal passive channel. It is the element that limits current
@@ -45,11 +39,7 @@ of `+5V_SENS` and sample it close to the sensor channel.
## NTC temperature channels
```text
+5V_SENS -- R_PULLUP --+-- NTC -- SENSOR_GND
|
attenuator / local filter --> ADC
```
![Thermistor](../diagrams/thermistor.svg)
The attenuator and ADC protection are required even if a normal temperature
range appears below 3.3 V: an open thermistor raises the node to `+5V_SENS`.
Architecture/IO_MODULES/DEAD_MAN.md
+4 -15
View File
@@ -48,22 +48,11 @@ not the safety-critical shutoff path.
The permission gates operate from `+5V_MAIN` and accept 3.3 V MCU logic
levels. Their outputs are 5 V logic levels.
```text
protected 5 V --> independent NO contact A --> protected A input
+--> 3.3 V --> DEADMAN_A_STATUS --> MCU
`--> 5 V --> DEADMAN_A_HELD -----+
|
protected 5 V --> independent NO contact B --> protected B input +--> AND --> DEADMAN_OK --+
+--> 3.3 V --> DEADMAN_B_STATUS --> MCU ^ |
`--> inverter --> DEADMAN_B_RELEASED -- NOT-+ |
|
MCU_RUN_PERMIT ---------------------------------------------------------------------------------------------AND --> ENGINE_PERMIT --+
|
ignition-permission inverter
--> SAFE_IGNITION_INHIBIT
![Deadman inputs](../diagrams/deadman-inputs.svg)
MCU_INJECTOR_SIG -------------------------------------------------------------------------------------------AND --> SAFE_INJECTOR_SIG
```
![Deadman permit](../diagrams/deadman-permit.svg)
![Deadman outputs](../diagrams/deadman-outputs.svg)
The logic equations are:
Architecture/IO_MODULES/DIGITAL_INPUTS.md
-3
View File
@@ -113,9 +113,6 @@ The comparator's 40 V fail-safe input capability eliminates power-backfeed
through the comparator; it does not replace harness fault protection. Every
channel shall include the following protection functions:
The right-hand side of the figure above shows the required functional
protection arrangement.
- **Primary positive clamp:** use a connector-side TVS or equivalent
protection element. Its working standoff shall exceed the 16.8 V maximum
normal battery input. Its worst-case dynamic clamp voltage, including
Architecture/IO_MODULES/DIGITAL_OUTPUTS.md
+4 -29
View File
@@ -22,15 +22,7 @@ may use either class only when the external starter interface accepts it.
Use the automotive-qualified TI `TPS4H000-Q1` quad smart high-side switch.
It is supplied from `+5V_AUX`, not directly from `+5V_MAIN`.
```text
+5V_MAIN --> +5V_AUX eFuse / load switch --> TPS4H000-Q1 VBB
|
MCU GPIO --> TPS4H000-Q1 INx OUTx --> LOGIC_OUTx --> connector
| |
R_IN_PD R_OUT_PD
| |
GND GND
```
![Logic output](../diagrams/logic-output.svg)
- `+5V_AUX` isolates an external logic-output fault from `+5V_MAIN`, the MCU,
and the sensor-excitation rail.
@@ -67,28 +59,11 @@ fault and transient specification before schematic freeze.
Use the automotive-qualified Infineon `TLE9104SH` smart quad low-side switch.
It drives battery-domain loads supplied from `VBAT_PROT`.
```text
VBAT_PROT --> external load --> SINK_OUTx --> TLE9104SH OUTx
|
internal low-side MOSFET
|
OUT_PGND --> power-entry ground star
![Sink power](../diagrams/sink-power.svg)
VBAT_PROT --> TLE9104SH VS +5V_MAIN --> TLE9104SH VDD
+3V3_MAIN --> TLE9104SH VIO
![Sink interfaces](../diagrams/sink-interfaces.svg)
MCU GPIO --> TLE9104SH INx MCU SPI <--> TLE9104SH SPI
| |
R_IN_PD diagnostics
|
TLE9104SH local ground reference
MCU enable --> TLE9104SH EN
|
R_EN_PD
|
TLE9104SH local ground reference
```
![Sink command](../diagrams/sink-command.svg)
- The TLE9104SH supplies active inductive-load clamping, configurable
overcurrent protection, short-circuit and thermal protection, direct channel
Architecture/IO_MODULES/ENGINE_POSITION_INPUTS.md
+1 -12
View File
@@ -39,18 +39,7 @@ freezing `R_PULLUP`. The crank-sensor part number remains to be selected.
## Electrical interface
```text
ECU
+12V_SENS ------------------------+--------------------------> sensor supply
SENSOR_GND ---------------------------------------------------> sensor return
|
+12V_SENS -- R_PULLUP -- TRIG_x ---+-- connector -- sensor output
|
+-- connector-side transient protection
+-- R_DIV_TOP --+-- Schmitt buffer --> 3.3 V timer input
+-- R_DIV_BOTTOM -- SENSOR_GND
+-- C_FILTER ------ SENSOR_GND
```
![Trigger input](../diagrams/trigger-input.svg)
- Supply the sensor from `+12V_SENS`; its rail generation, protection, current
limit, and diagnostics belong to `POWER_ARCHITECTURE.md`.
Architecture/IO_MODULES/IGNITION.md
+4 -34
View File
@@ -14,13 +14,7 @@ confirmed.
## Power path
```text
VBAT_PROT --> coil primary --> VBG08H HVC
|
internal IGBT
|
PGND1 + PGND2 --> IGN_PGND --> power-entry ground
```
![Ignition power](../diagrams/ignition-power.svg)
- `HVC` connects to one coil-primary terminal; the other terminal connects to
`VBAT_PROT`.
@@ -37,23 +31,7 @@ VBAT_PROT --> coil primary --> VBG08H HVC
`INP` is active high: a rising edge begins coil dwell and a falling edge
causes the normal spark event.
```text
STM32 ignition timing output
--> 3.3 V-to-5 V non-inverting buffer --> 1 kOhm --> INP
|
low-capacitance
Zener clamp
|
VBG local Kelvin-ground reference
SAFE_IGNITION_INHIBIT
--> 1 kOhm --> EN
|
low-capacitance
Zener clamp
|
VBG local Kelvin-ground reference
```
![Ignition command](../diagrams/ignition-command.svg)
The VBG08H-E input-high requirement is 3 V. A 5 V buffer is used rather than
direct STM32 drive to preserve high-level margin across MCU output tolerance,
@@ -91,9 +69,7 @@ and must not create a path that can pull `EN` low during a fault.
internal threshold and releases when the current reaches the nominal 6.5 A
threshold. The threshold is not externally programmable.
```text
VBG08H C.F. --> reference-style R/C filter and 3.3 V pull-up --> STM32 GPIO
```
![Ignition flag](../diagrams/ignition-flag.svg)
The pull-up voltage must not exceed 5.5 V; `+3V3_MAIN` is suitable. The signal
is a diagnostic confirmation of primary-current buildup and is not part of the
@@ -105,13 +81,7 @@ maximum dwell time.
Define `IGN_PGND` as the ignition module's high-current return domain.
```text
PGND1 -- matched heavy copper --+
+--> IGN_PGND local joining point --> power-entry ground
PGND2 -- matched heavy copper --+
|
VBG08H GND -- short, separate Kelvin reference trace --+
```
![Ignition ground](../diagrams/ignition-ground.svg)
- `PGND1` and `PGND2` must use equal-length, equal-width, and similarly
shaped copper paths to the `IGN_PGND` joining point. The VBG08H-E uses these
Architecture/IO_MODULES/INJECTON.md
+4 -19
View File
@@ -13,13 +13,7 @@ low-impedance injector requires a different architecture.
## Power path
```text
VBAT_PROT --> injector positive terminal --> injector coil --> VNL5050 DRAIN
|
internal low-side MOSFET
|
SOURCE --> INJ_PGND --> power-entry ground
```
![Injector power](../diagrams/injector-power.svg)
- The injector's positive terminal connects to `VBAT_PROT`; its negative
terminal connects to `DRAIN`.
@@ -37,12 +31,7 @@ VBAT_PROT --> injector positive terminal --> injector coil --> VNL5050 DRAIN
`INPUT` is active high. It receives only the hardware-permitted injector
command defined by the two-channel deadman interlock.
```text
SAFE_INJECTOR_SIG --> 1 kOhm Rprot --> INPUT
|-- 10 kOhm ---------> INJ_PGND
`-- low-capacitance
Zener clamp ------> INJ_PGND
```
![Injector command](../diagrams/injector-command.svg)
```text
SAFE_INJECTOR_SIG = ENGINE_PERMIT AND MCU_INJECTOR_SIG
@@ -70,9 +59,7 @@ status inputs disagree.
`STATUS` is an open-drain diagnostic output. It is read by the MCU through a
1 kOhm protection resistor and a `+3V3_MAIN` pull-up.
```text
+3V3_MAIN pull-up --> MCU-side status node --> 1 kOhm Rprot --> STATUS
```
![Injector status](../diagrams/injector-status.svg)
The 3.3 V pull-up is within the pin rating and provides a safe MCU logic level.
The diagnostic path supports off-state open-load detection and indicates
@@ -84,9 +71,7 @@ separate, unambiguous MCU-readable short-circuit/current-limit indication.
Define `INJ_PGND` as the injector module's high-current return domain.
```text
VNL5050 SOURCE --> short, low-impedance INJ_PGND copper --> power-entry ground star
```
![Injector ground](../diagrams/injector-ground.svg)
- `INJ_PGND` runs directly to the power-entry ground star, where it joins the
battery return, `IGN_PGND`, `DGND`, and sensor return domains.