Occupancy without identity, gear that meets the standard, and an algorithm that runs in the analysis unit. Plus many other scenarios the system can still take.
A heat map is not decoration. It tells the control room how the railcar fills: door, aisle, seats — without putting a name on a passenger. Keeping privacy starts here, not in a legal annex.
The algorithm that makes the map and the rest of the events does not sit in a cloud. It runs in the analysis unit, on gear that has to meet the railcar’s transport standard: vibration, fire, electromagnetic compatibility, full operation in motion. Without that there is no install.
Violence, running and fire are the examples that explain easily. The system can take many other scenarios from your procedures: a door left open, someone still there after the stop, a blocked aisle. You write the scenario. You measure it on your railcars.