Appearance
About this article
- Audience: Firmware authors, integrators, and operators deploying on Shadow 1
- Goal: Internalize hardware guardrails, imaging standards, and cloud integration contracts before changing pipelines
- Type: Concept
Summary
Ghost Protocol edge firmware targets Shadow 1 (RVC4 / Qualcomm QCS8550) running device OS 1.30.1+ with the Edge AI v3 vision pipeline. Requirements align with OpenIPC modular design, OWASP IoT ISVS hardening, ONVIF interoperability, and Ghost Protocol pipeline best practices.
Prerequisites
- Dev environment configured for Shadow development
- Architecture overview for system context
Platform baseline
| Attribute | Requirement |
|---|---|
| Hardware | Shadow 1, IP67 enclosure, 48 MP IMX586 sensor, 52 TOPS AI (48 INT8 DSP + 4 FP16 GPU) |
| OS | Device OS 1.30.1+, Linux kernel 5.15 |
| Framework | Edge AI v3 unified dai.node.Camera pipelines |
| Cloud | Google Cloud VMS integration via outbound MQTT and optional WebRTC/SRTSP archival |
Connectivity
- Preferred: LAN over PoE+ (IEEE 802.3at) on the industrial Ethernet port — power + data for production fleets.
- Supported: WLAN via M8 connector + Wi‑Fi adapter for failover or sites without hardline.
- M8 accessories: I/O relay controller and CANbus adapter — see Shadow connectivity & M8 accessories.
Power and thermal
- PoE+ (IEEE 802.3at) required for peak 4K@60 FPS encode plus inference; standard 15 W PoE forces downscaled inference and throttled encoding. Size budget for M8 accessories too.
- Firmware monitors power delivery and degrades gracefully when budget is constrained.
- Thermal guardrails via SystemLogger:
- Optimal: die < 70 °C — full pipeline
- Warning: die > 75 °C — reduce inference FPS, prioritize video
- Critical: die > 85 °C — suspend AI, maintain RTSP/MQTT, publish
THERMAL_CRITICAL
- Memory budget (8 GB RAM): ~2 GB video buffer, ~4 GB AI execution, ~2 GB OS and services. eMMC wear managed through rolling retention and prune policies.
Imaging and spatial metadata
- Evidence mode — 4K (3840×2160) up to 60 FPS H.265 for NVR ingestion
- Action mode — 1080p high frame rate downscale for tracking workloads
- Spatial fusion — Shadow 1 is single-lens; use
dai.node.NeuralDepthto produce XYZ coordinates (RDF frame) alongside detections - Tracking — On-device
dai.node.ObjectTrackerwith device-side sync; avoid host-only timestamp matching - Bounding boxes alone are insufficient for fusion-aware analytics
Deployment and OTA
- Custom CLI (
vms-cli) replaces legacy oakctl workflows for deploy, model hot-swap, and status telemetry. - A/B rollback — New builds land on partition B; watchdog reverts to partition A if pipeline init fails.
- Model format — Convert models through the Ghost Protocol ML Pipeline / Qualcomm AI Hub to
.superblobor Qualcomm SNPE.dlc; raw ONNX falls back to CPU and violates thermal budgets. - Container DNS must propagate without restart (systemd-resolved on OS 1.30.1+).
Cloud and security integration
- Telemetry — Local MQTT client publishes JSON metadata to Google Cloud Pub/Sub; video and metadata paths stay decoupled.
- Live viewing — WebRTC signaling from the edge for low-latency preview.
- Archival — Secure RTSP or ONVIF Profile S over VPN (for example WireGuard) into object storage ingestion.
- Zero trust — Outbound-only control plane (MQTT or WebSocket); mTLS or OIDC for GCP authentication; inbound SSH/HTTP disabled by default.
Payloads include timestamp, camera_id (role label), detection list with optional spatial fields, and telemetry block (die temp, fps).
Reference standards
| Standard | Application |
|---|---|
| OpenIPC | Modular firmware and human-readable stream configs |
| OWASP IoT ISVS | Device hardening and secure update mechanics |
| ONVIF (use-go/onvif) | Discovery, Profile S video, Profile M metadata |
| Edge AI architecture | Camera node and pipeline patterns |
Next steps
- Edge AI and RF-DETR — pipeline implementation detail
- Recording contract — justified chunk and sidecar fields
- MQTT architecture — fleet topic namespaces
Operator depth
Hardware-specific calibration, thermal probe logs, and deployment evidence live in private operator handoff (not published).