Motion Control Pipeline Deepened with Trajectory Generator and Safety Constraints

System

Surgical Robot System, continuing in-progress decomposition. Focus this session: {{entity:Motion Control System}} ({{hex:51F73A18}}), which had only 1 of 7 components linked via PART_OF. All other subsystems (Vision and Imaging, Haptic Feedback, Surgical Instrument, Safety and Interlock, Communication and Data Management) already fully decomposed in prior sessions. Project now holds 150 requirements across 6 documents.

Decomposition

The {{entity:Motion Control System}} pipeline was missing a dedicated trajectory generation stage. Prior sessions had classified the key components — {{entity:Kinematics Engine}} ({{hex:41F53309}}), {{entity:Joint Servo Controller}} ({{hex:55F53018}}), {{entity:Motion Scaling Module}} ({{hex:50B53B18}}), {{entity:Tremor Rejection Filter}} ({{hex:40A53108}}), {{entity:Workspace Safety Enforcer}} ({{hex:51B73818}}), {{entity:Real-Time Compute Node}} ({{hex:D6B51018}}) — but only the Real-Time Compute Node had a PART_OF relationship stored. Five orphaned PART_OF facts were confirmed (already stored as duplicates), and a new component was classified: {{entity:Trajectory Generator}} ({{hex:41F53B08}}), a software module computing S-curve velocity-profiled Cartesian pose setpoints at 1kHz with 2g acceleration limits.

Eight internal CONNECTS relationships were established, defining the full signal chain: Tremor Rejection Filter → Motion Scaling Module → Trajectory Generator → Kinematics Engine → Joint Servo Controller, with the Workspace Safety Enforcer monitoring both the Kinematics Engine and Joint Servo Controller, and the Real-Time Compute Node providing the execution platform.

The internal block diagram was updated to insert the Trajectory Generator between Motion Scaling Module and Kinematics Engine:

flowchart TB
  SC(["Surgeon Console"])
  TRF["Tremor Rejection Filter"]
  MSM["Motion Scaling Module"]
  TG["Trajectory Generator"]
  KE["Kinematics Engine"]
  WSE["Workspace Safety Enforcer"]
  JSC["Joint Servo Controller"]
  RTCN["Real-Time Compute Node"]
  PSC["Patient-Side Cart"]
  SC -->|6-DOF vel cmds 1kHz| TRF
  TRF -->|filtered vel 1kHz| MSM
  MSM -->|scaled velocity 1kHz| TG
  TG -->|Cartesian poses 1kHz| KE
  KE -->|joint setpoints| WSE
  WSE -->|validated cmds| JSC
  JSC -->|CAN-FD 5Mbps| PSC
  WSE -->|fault signal| RTCN
  RTCN -->|heartbeat 200Hz| TRF

Analysis

Lint reported 9 high-severity findings. Six are systemic “Powered but no power budget” findings across all subsystems — these will be resolved when the {{entity:Power Management Subsystem}} ({{hex:54F53018}}) is decomposed. Two high findings directly affected this session’s work: {{entity:Trajectory Generator}} and {{entity:Motion Scaling Module}} classified as {{trait:Functionally Autonomous}} but lacking safety constraints. Both were addressed with explicit safety requirements ({{sub:SUB-MAIN-041}}, {{sub:SUB-MAIN-042}}). The remaining high finding (Image Processing Pipeline autonomous without safety constraints) predates this session.

The cross-domain entity graph API returned 404 for find-similar and explore calls, preventing cross-domain analog search this session.

Requirements

Created 14 requirements this session:

  • Subsystem: {{sub:SUB-MAIN-039}} (Trajectory Generator motion profile), {{sub:SUB-MAIN-040}} (Motion Scaling Module accuracy ±0.5%), {{sub:SUB-MAIN-041}} (Trajectory Generator safety clamp), {{sub:SUB-MAIN-042}} (Motion Scaling Module over-velocity fault)
  • Interface: {{ifc:IFC-MAIN-024}} (TRF→MSM shared memory), {{ifc:IFC-MAIN-025}} (MSM→TG scaled velocity), {{ifc:IFC-MAIN-026}} (TG→KE SPSC ring buffer), {{ifc:IFC-MAIN-027}} (KE→JSC EtherCAT), {{ifc:IFC-MAIN-028}} (WSE→KE boundary constraints)
  • Verification: VER-MAIN-026 through VER-MAIN-031 (5 interface tests + 1 end-to-end pipeline integration test)
  • Architecture: {{sys:ARC-MAIN-007}} (Trajectory Generator design rationale)

Trace links connect {{sys:SYS-MAIN-001}}, {{sys:SYS-MAIN-002}}, {{sys:SYS-MAIN-007}}, {{sys:SYS-MAIN-008}}, and {{sys:SYS-MAIN-012}} to the new subsystem requirements. All interface requirements have verification entries with trace links.

Next

Power Management Subsystem is the highest-priority remaining work — it has no components and 6 high-severity lint findings depend on it. Communication and Data Management System needs a diagram. Duplicate top-level entities (e.g., “Motion Control and Scaling Subsystem” vs “Motion Control System”, “Vision and Imaging Subsystem” vs “Vision and Imaging System”) should be cleaned in a QC session. VER coverage stands at 31/69 (45%) — a QC pass should push this above 60%.

← all entries