Aircraft propulsion utilizing a safety critical energy management system

An energy management system (EMS) for an aircraft, the EMS is configured to be connectable with a plurality of source line replaceable units (source LRUs) and a plurality of sink line replaceable units (sink LRUs), where a source LRU is a source of power for a high voltage DC link used for propulsion and a sink LRU uses the power from the high voltage DC link for propulsion, the EMS comprising:

• communication interfaces configured to receive status information from each of the source LRUs and sink LRUs, the status information comprising information from respective sensors within the respective LRU and a determination that the information from each sensor is within a predetermined range;
• and to transmit commands to the source LRUs and the sink LRUs;
• and
• redundant control paths for controlling safety critical operations, the redundant control paths being configured to independently determine whether to electrically isolate a LRU from the high voltage DC link based on the status information from the LRU, wherein isolation is based on the independent determination;
• wherein the redundant control paths also comprises a second control path, where the second control path comprises a human machine interface in a control cabin in the aircraft to display the status information and receive a command to isolate an LRU.