The words 'automotive-grade' are far harder to earn than any compute number

Another chip ran an on-device large model at a launch event—bright screen, loud applause. But what I thought about after watching was something else: when it crashes, will the dashboard still light up?

I'm talking about the Huashan A1000 family. A while back I put its architecture table side by side with our cockpit domain solution. 58 TOPS, 16nm—honestly not impressive by today's standards. The A2000 family is already touted at 200 to 1000 TOPS, so the A1000 looks like last-gen stuff.

But I work on cockpits, and I can't kick the habit of looking at chips a certain way. The first thing I flipped to was the safety island in its heterogeneous architecture. The 8-core A55, 4-core DSP, and in-house NPU do the work; the safety island is the fallback. These two things get wildly unequal space in the spec sheet—the working part is written up enthusiastically, the fallback gets one line. But when it comes to the actual vehicle, what often decides whether it passes review is that one line.

Last month I specifically went to try a car equipped with it. I didn't look at how smoothly NOA ran; I looked at how the system degrades in edge cases. Whether it degrades cleanly matters more than whether it runs beautifully.

The evidence is simple. It's the first domestic chip of its kind to be mass-installed in vehicles—Geely's "Qianli Haohan" comes standard with it, the Galaxy flagship sedan uses it, and Dongfeng has production models too. These cars aren't demos; they're sold to ordinary users, they have to cold-start in winter and work after baking in summer sun. That AEC-Q100 certificate isn't about benchmark scores.

I've been through quite a few automotive-grade chip solutions, and my biggest takeaway is: consumer-grade chips compete on peak performance; automotive-grade chips compete on the floor. The peak decides how the launch event is pitched; the floor decides whether you have anything to say after an accident.

The A1000 isn't the sexiest chip, but it's one that dares to let OEMs put it in production cars. That word "dares" is worth more than 58 TOPS.

I just don't know how the A1000 line will go once the A2000 rolls out. Do any of you have cars with the A1000? How well does the domain controller's degradation strategy actually work in practice?