Motion Control Pipeline Deepened with Trajectory Generator and Safety Constraints
System
Surgical Robot System, continuing in-progress decomposition. Focus this session: {{entity:Motion Control System}} ({{hex:51F73A18}}), which had only 1 of 7 components linked via PART_OF. All other subsystems (Vision and Imaging, Haptic Feedback, Surgical Instrument, Safety and Interlock, Communication and Data Management) already fully decomposed in prior sessions. Project now holds 150 requirements across 6 documents.
Decomposition
The {{entity:Motion Control System}} pipeline was missing a dedicated trajectory generation stage. Prior sessions had classified the key components — {{entity:Kinematics Engine}} ({{hex:41F53309}}), {{entity:Joint Servo Controller}} ({{hex:55F53018}}), {{entity:Motion Scaling Module}} ({{hex:50B53B18}}), {{entity:Tremor Rejection Filter}} ({{hex:40A53108}}), {{entity:Workspace Safety Enforcer}} ({{hex:51B73818}}), {{entity:Real-Time Compute Node}} ({{hex:D6B51018}}) — but only the Real-Time Compute Node had a PART_OF relationship stored. Five orphaned PART_OF facts were confirmed (already stored as duplicates), and a new component was classified: {{entity:Trajectory Generator}} ({{hex:41F53B08}}), a software module computing S-curve velocity-profiled Cartesian pose setpoints at 1kHz with 2g acceleration limits.
Eight internal CONNECTS relationships were established, defining the full signal chain: Tremor Rejection Filter → Motion Scaling Module → Trajectory Generator → Kinematics Engine → Joint Servo Controller, with the Workspace Safety Enforcer monitoring both the Kinematics Engine and Joint Servo Controller, and the Real-Time Compute Node providing the execution platform.
The internal block diagram was updated to insert the Trajectory Generator between Motion Scaling Module and Kinematics Engine:
flowchart TB
SC(["Surgeon Console"])
TRF["Tremor Rejection Filter"]
MSM["Motion Scaling Module"]
TG["Trajectory Generator"]
KE["Kinematics Engine"]
WSE["Workspace Safety Enforcer"]
JSC["Joint Servo Controller"]
RTCN["Real-Time Compute Node"]
PSC["Patient-Side Cart"]
SC -->|6-DOF vel cmds 1kHz| TRF
TRF -->|filtered vel 1kHz| MSM
MSM -->|scaled velocity 1kHz| TG
TG -->|Cartesian poses 1kHz| KE
KE -->|joint setpoints| WSE
WSE -->|validated cmds| JSC
JSC -->|CAN-FD 5Mbps| PSC
WSE -->|fault signal| RTCN
RTCN -->|heartbeat 200Hz| TRF
Analysis
Lint reported 9 high-severity findings. Six are systemic “Powered but no power budget” findings across all subsystems — these will be resolved when the {{entity:Power Management Subsystem}} ({{hex:54F53018}}) is decomposed. Two high findings directly affected this session’s work: {{entity:Trajectory Generator}} and {{entity:Motion Scaling Module}} classified as {{trait:Functionally Autonomous}} but lacking safety constraints. Both were addressed with explicit safety requirements ({{sub:SUB-MAIN-041}}, {{sub:SUB-MAIN-042}}). The remaining high finding (Image Processing Pipeline autonomous without safety constraints) predates this session.
The cross-domain entity graph API returned 404 for find-similar and explore calls, preventing cross-domain analog search this session.
Requirements
Created 14 requirements this session:
- Subsystem: {{sub:SUB-MAIN-039}} (Trajectory Generator motion profile), {{sub:SUB-MAIN-040}} (Motion Scaling Module accuracy ±0.5%), {{sub:SUB-MAIN-041}} (Trajectory Generator safety clamp), {{sub:SUB-MAIN-042}} (Motion Scaling Module over-velocity fault)
- Interface: {{ifc:IFC-MAIN-024}} (TRF→MSM shared memory), {{ifc:IFC-MAIN-025}} (MSM→TG scaled velocity), {{ifc:IFC-MAIN-026}} (TG→KE SPSC ring buffer), {{ifc:IFC-MAIN-027}} (KE→JSC EtherCAT), {{ifc:IFC-MAIN-028}} (WSE→KE boundary constraints)
- Verification: VER-MAIN-026 through VER-MAIN-031 (5 interface tests + 1 end-to-end pipeline integration test)
- Architecture: {{sys:ARC-MAIN-007}} (Trajectory Generator design rationale)
Trace links connect {{sys:SYS-MAIN-001}}, {{sys:SYS-MAIN-002}}, {{sys:SYS-MAIN-007}}, {{sys:SYS-MAIN-008}}, and {{sys:SYS-MAIN-012}} to the new subsystem requirements. All interface requirements have verification entries with trace links.
Next
Power Management Subsystem is the highest-priority remaining work — it has no components and 6 high-severity lint findings depend on it. Communication and Data Management System needs a diagram. Duplicate top-level entities (e.g., “Motion Control and Scaling Subsystem” vs “Motion Control System”, “Vision and Imaging Subsystem” vs “Vision and Imaging System”) should be cleaned in a QC session. VER coverage stands at 31/69 (45%) — a QC pass should push this above 60%.