[P1] Emergency stop cascade — unified e-stop with hardware + software layers #459

Closed
opened 2026-03-05 09:17:54 -05:00 by sl-jetson · 0 comments
Collaborator

Goal

Unified emergency stop system that guarantees safe shutdown from any trigger source.

Trigger Sources

  • Voice: "stop" or "emergency"
  • Gamepad: Square button
  • Tilt safety: VESC pitch >45 degrees
  • Obstacle: <0.3m from LIDAR
  • Geofence violation
  • Software watchdog timeout
  • Remote kill: MQTT message from Tee
  • Hardware button (future: physical e-stop switch on chassis)

Cascade

  1. Immediate: zero /cmd_vel, VESC duty=0
  2. Within 100ms: disable autonomous control (follow-me, nav2, patrol)
  3. Within 500ms: face display ALERT, LED red flash, TTS if not voice-triggered
  4. Log e-stop event with trigger source + sensor snapshot
  5. Recovery: manual resume only (gamepad Start or voice "resume")

Requirements

  • ROS2 node: /saltybot/estop (action server)
  • Publish /saltybot/estop_active (Bool) — all motion nodes must check this
  • Latency: trigger to zero velocity <50ms
  • Cannot be overridden by autonomous nodes
  • Configurable: which triggers are armed
## Goal Unified emergency stop system that guarantees safe shutdown from any trigger source. ## Trigger Sources - Voice: "stop" or "emergency" - Gamepad: Square button - Tilt safety: VESC pitch >45 degrees - Obstacle: <0.3m from LIDAR - Geofence violation - Software watchdog timeout - Remote kill: MQTT message from Tee - Hardware button (future: physical e-stop switch on chassis) ## Cascade 1. Immediate: zero /cmd_vel, VESC duty=0 2. Within 100ms: disable autonomous control (follow-me, nav2, patrol) 3. Within 500ms: face display ALERT, LED red flash, TTS if not voice-triggered 4. Log e-stop event with trigger source + sensor snapshot 5. Recovery: manual resume only (gamepad Start or voice "resume") ## Requirements - ROS2 node: /saltybot/estop (action server) - Publish /saltybot/estop_active (Bool) — all motion nodes must check this - Latency: trigger to zero velocity <50ms - Cannot be overridden by autonomous nodes - Configurable: which triggers are armed
Sign in to join this conversation.
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: seb/saltylab-firmware#459
No description provided.