​🚀 The Invisible Flight: Inside AutoFlight's Prosperity I Secret Brain

​A technical deep dive into AutoFlight's eVTOL aircraft: the fusion of simple fixed-motor design and the safety of European certification.

​The future of urban flight isn't just about captivating design; it's about mathematical rigor pushed to the extreme. For AutoFlight, their flagship model, the Prosperity I, represents the engineering synthesis of the greatest challenge: building an aircraft safer than a commercial airliner. Their ambition is clear: to exceed the safety threshold of one catastrophic failure per billion flight hours the austere 10^{-9} Equation. This goal has driven the company to establish its development and certification hub in Germany, merging Asian production speed with the regulatory strictness of EASA (European Union Aviation Safety Agency).

​🏗️ The Hybrid Architecture: The Art of Transition

​The Prosperity I is neither a traditional helicopter nor a conventional airplane. It is a Lift + Cruise vehicle that embraces the best of both worlds, with a relentless focus on efficiency during horizontal flight.

​The structure is molded from advanced composite materials (carbon fiber), which offer maximum structural strength with minimum weight.

1. ​Lift Mode (Vertical Takeoff): For the hover phase and vertical takeoffs in urban environments, the aircraft relies on a Distributed Electric Propulsion (DEP) system, consisting of ten fixed propellers arranged along the wings. This configuration is intrinsically safe, as its very existence is a form of redundancy. Should one or even two motors suffer a mechanical or electrical failure, thrust is immediately redistributed among the remaining motors, ensuring stability in hover.
2. ​Cruise Mode (Horizontal Flight): Once airborne, the aircraft transforms. The lift propellers are shut down, and the plane flies like an efficient fixed-wing aircraft, propelled by two or three dedicated pusher propellers on the tail. The pilot's controls transfer to the aerodynamic movable control surfaces: ailerons, elevators, and the rudder. This switch, managed entirely by the flight computer, is the secret to achieving ranges exceeding 250 km.

​🔄 The Critical Phase: The Flight Transition

​The Flight Transition is the most complex phase, where the aircraft switches from being supported by motor thrust (Lift) to being supported by the aerodynamic lift of the wings (Cruise).

1. ​Horizontal Acceleration: After reaching a safe altitude, the aircraft's nose is tilted slightly forward. The lift motors begin to generate horizontal thrust.
2. ​Lift Generation: As the aircraft accelerates horizontally, air flows over the fixed wings, which begin to generate Aerodynamic Lift. Initially, this lift is low.
3. ​The Blending: Upon reaching a Critical Speed the minimum speed at which the wings can sustain the aircraft the Flight Control Computer (FCC) initiates a millimeter-precise process of role reversal.
   • ​Constant Total Lift: The computer ensures that Total Lift (motor thrust lift + wing aerodynamic lift) remains constant or slightly greater than the aircraft's weight to prevent altitude loss.
   • ​Progressive Lift Shutdown: The power of the ten lift motors is gradually reduced.
   • ​Cruise Engagement: Concurrently, the power to the dedicated pusher propellers (Cruise) is gradually increased to maintain acceleration.
4. ​Efficient Flight: When the lift generated by the fixed wing is sufficient to support almost the entire weight of the vehicle, the lift motors are completely shut down. The Transition is complete, and the Prosperity I flies in fixed-wing mode, maximizing energy efficiency.

​🧠 The Hidden Brain: The Science of Redundancy at Every Level

​The true engineering triumph occurs within the control systems, where redundancy is layered to prevent any single point of failure (Single Point of Failure).

​A. Hardware and Logic Redundancy (Voting)

​The control core, the Flight Control Computer (FCC), operates on a foundation of multiple safety measures:

• ​Physical Multiplication (3x or 4x): The aircraft is equipped with three or four independent FCC units (Triplex or Quadruplex), isolated and separately powered.
• ​The Digital Voting Logic: All units simultaneously and independently perform the same calculations. If one computer fails or sends an inconsistent datum, the others immediately disregard it according to the majority rule. The faulty unit is deactivated, allowing the system to remain Fail-Operational (operational despite the fault) and maintain flight integrity.

​B. The Depth of Sensor Redundancy

​Sensor redundancy is critical to meeting the 10^⁹ requirement and is expressed in multiple forms:

1. ​Redundancy by Dissimilarity: The most advanced form of redundancy avoids using identical systems (which might fail due to the same systematic design flaw) in favor of systems with different physical operating principles.
   • ​Altitude: The aircraft uses a Barometric Altimeter (measuring air pressure), a Radar/Laser Altimeter (measuring exact ground distance), and altitude data derived from the GNSS (Global Navigation Satellite System). If weather conditions or a sensor error make the Barometric Altimeter unreliable, the other dissimilar sources guarantee accuracy.
   • ​Attitude/Position: IMUs (Inertial Measurement Units), which measure acceleration and rotation, are paired with GNSS. The two systems continuously check each other in a process known as Integrated Navigation (Fusion), compensating for the IMU's drift with the long-term accuracy of the GNSS.
2. ​Spatial/Geographical Redundancy: Sensors are physically separated:
   • ​GNSS antennas are positioned at distant points on the aircraft to prevent total system shutdown due to localized damage.
   • ​The power to each primary sensor is supplied by separate electrical lines to protect the system from short circuits.
3. ​Cross-Domain Redundancy (Avionics): Obstacle avoidance sensors utilize different physical domains:
   • ​Radar: Uses radio waves, effective through thick fog.
   • ​Lidar: Uses laser pulses, excellent for high-resolution 3D mapping.
   • ​EO/IR Cameras: Use visible light (electro-optical) or heat (infrared).

​This architecture ensures that the failure of one type of sensor in a specific condition (e.g., Lidar fails in fog) is immediately covered by another sensor operating in a different physical domain.

​⚡ Power Management of the Electric Heart

​Energy is managed with the same logic of redundancy:

• ​Modular Battery Packs: The batteries are divided into physically and thermally isolated compartments. Their location is meticulously calculated to keep the Center of Gravity (CG) at a stable point, which is fundamental for stability in hover.
• ​Intelligent BMS: Each battery module has its own BMS (Battery Management System). In the event of a severe thermal event (thermal runaway), the faulty pack is immediately electronically disconnected to prevent contamination of the other modules, ensuring critical power continuity. The on-board computer recalculates the remaining energy and range in real-time, instantly determining the nearest safe landing area (Diversion) in case of module loss.

​🕹️ The Cockpit: The Interface with Safety

​All this technical sophistication is translated into an intuitive piloting experience. The AutoFlight pilot doesn't fight against aerodynamic forces but directs an extremely powerful flight assistant.

​Controls such as the Side-stick Joystick and the Simplified Power Throttle send digital inputs. The pilot's true skill focuses on supervising the Transition and managing automated modes, such as Hover Hold, which keeps the aircraft perfectly stationary.

​The Prosperity I embodies the promise that urban air mobility will be not only fast and clean but infallible, thanks to the invisible complexity of its voting and dissimilar redundancy systems.