System

Interim QC pass on the {{entity:Surgical Robot System}} (se-surgical-robot), covering sessions 360–362. Project now stands at 323 requirements across 6 documents with 287 trace links and baseline {{stk:BL-SESURGICALROBOT-020}} locked at QC-2026-03-20. Decomposition status remains in-progress; this pass covers the session-359 to session-363 window.

Findings

Missing rationale and section ({{stk:ARC-MAIN-019}}): The architectural record on verification plan coverage — written in session 360 — was created without --rationale, --verification, or --section fields. This left it as a floating requirement outside the architecture-decisions document with null fields. Count of requirements missing rationale: was 1, now 0. Missing verification: was 1, now 0.

Invalid duplicate tag on {{stk:ARC-MAIN-015}}: This requirement carried the tag duplicate-of-ARC-MAIN-017, but ARC-MAIN-017 does not exist in the project. The tag was a session-357 tagging error; the requirement itself (FPGA infrastructure layer vs. algorithmic layer separation) is substantively distinct from ARC-MAIN-018 and non-redundant. Tag removed. The requirement is retained.

IFC verification gap: {{ifc:IFC-MAIN-040}} (Console Computer → {{entity:inter-cart fibre link}} 48-byte frame protocol at 1kHz) lacked a VER entry. This is the kinematic command path interface whose frame integrity is safety-critical — a framing error can cause RTPE stall or misinterpreted commands. IFC coverage: 45/46 → 46/46 (100%).

SUB verification gap — pre-session-359 residual: 45 of 96 subsystem requirements lacked VER entries. The majority (SUB-MAIN-010 through SUB-MAIN-053 range, plus SUB-MAIN-065 through 088) are from sessions 340–358 and predate the last QC. Sessions 360–362 themselves maintain good coverage discipline. This session added VER entries for {{sub:SUB-MAIN-094}} ({{entity:motion control system}} IEC 62304 Class C qualification), {{sub:SUB-MAIN-071}} ({{entity:real-time protocol engine}} TDM jitter), {{sub:SUB-MAIN-082}} ({{entity:workspace safety enforcer}} proximity enforcement), and {{sub:SUB-MAIN-083}} (WSE degraded-mode bounding-box fallback). Total SUB+IFC coverage: 67% → 69%.

Lint (3 high findings): {{entity:procedure data recorder}}, {{entity:motion control}}, and {{entity:time compute node}} are classified without the {{trait:Physical Object}} trait but carry requirements with physical constraints. These entities are software/firmware components that reside inside physical hardware; the lint engine detects the mismatch because their housing requirements reference temperature and voltage limits. No requirement changes are needed — the constraints are on the containing compute node, not on these software components directly. This is a known ontology boundary for embedded software entities.

Corrections

• {{stk:ARC-MAIN-019}}: Added --rationale (verification coverage rationale for SIL-classified IFC requirements), --verification (Inspection), and assigned to architecture-decisions/section-1773953598035.
• {{stk:ARC-MAIN-015}}: Removed invalid duplicate-of-ARC-MAIN-017 tag; requirement is unique.
• {{ifc:IFC-MAIN-040}}: Created {{stk:REQ-SESURGICALROBOT-036}} — protocol integrity test for 48-byte 1kHz frame stream with CRC-CCITT verification. Trace link with derivation rationale added.
• {{sub:SUB-MAIN-094}}: Created {{stk:REQ-SESURGICALROBOT-035}} — IEC 62304 Class C lifecycle artefact inspection procedure. Trace link added.
• {{sub:SUB-MAIN-071}}: Created {{stk:REQ-SESURGICALROBOT-037}} — RTPE TDM jitter measurement at 1ns resolution over 100,000 cycles. Trace link added.
• {{sub:SUB-MAIN-082}}: Created {{stk:REQ-SESURGICALROBOT-038}} — WSE proximity enforcement test across 100 boundary trajectories. Trace link added.
• {{sub:SUB-MAIN-083}}: Created {{stk:REQ-SESURGICALROBOT-039}} — WSE degraded-mode fault injection test. Trace link added.

flowchart TB
  n0["Tremor Rejection Filter"]
  n1["Motion Scaling Module"]
  n2["Kinematics Engine"]
  n3["Workspace Safety Enforcer"]
  n4["Joint Servo Controller"]
  n5["Real-Time Compute Node"]
  n6(["Surgeon Console"])
  n7["Patient-Side Cart"]
  n8["Trajectory Generator"]
  n6 -->|6-DOF vel cmds 1kHz| n0
  n0 -->|filtered vel 1kHz| n1
  n2 -->|joint setpoints| n3
  n3 -->|validated cmds| n4
  n4 -->|CAN-FD 5Mbps| n7
  n3 -->|fault signal| n5
  n5 -->|heartbeat 200Hz| n0
  n1 -->|scaled velocity 1kHz| n8
  n8 -->|Cartesian poses 1kHz| n2

Residual

45 SUB requirements still lack VER entries, all from sessions 340–358. The full-QC gate (>10% uncovered) was already breached before this session; the backlog is real but predates the current QC window. These requirements span {{entity:safety and interlock subsystem}}, {{entity:vision and imaging system}}, {{entity:haptic feedback subsystem}}, and the motion control algorithmic layer. The next full QC (triggered at first-pass-complete) must address this backlog systematically before the status can advance to qc-reviewed.

Three high-severity lint findings (Physical Object mismatch on software entities) are acknowledged as ontology boundary artefacts for embedded software classified inside physical hardware. No action required.

Next

The decomposition target calls for verifying Haptic, Power, Instrument, and Safety-Interlock subsystem coverage. Session 361 added Power Management interfaces and SUB requirements with VER coverage; session 362 added SIS and Console failover requirements. The remaining decomposition work is on the {{entity:haptic feedback subsystem}} and {{entity:safety and interlock subsystem}} sub-component requirements. When the decomposition target is complete, DECOMPOSITION_STATUS should transition to first-pass-complete, triggering the full QC pass that will address the 45-requirement VER backlog.