Vendor and Product Reality
Smith+Nephew is a tier-one orthopedic implant and surgical-technology vendor, and CORI is its second-generation surgical robotics platform, succeeding the NAVIO system. The CORI Surgical System pairs an image-free registration workflow with a handheld bur or saw whose cutting envelope is constrained in real time by the robotic controller. The platform is positioned as a compact, cart-based alternative to the larger autonomous-arm robots offered by competitors, with deployment models that emphasize ambulatory surgical centers in addition to hospital ORs.
The clinical core of CORI is robotics-assisted total knee arthroplasty, where the surgeon plans implant alignment intraoperatively from a kinematic and bony registration, then executes bone preparation through a handheld tool whose speed and engagement are modulated by the controller as the tool approaches the planned resection boundary. The platform also supports unicompartmental knee arthroplasty and is being extended toward additional indications. Across these applications the same control philosophy holds: the surgeon retains motor authority, and the robot retains boundary authority.
That division of authority is CORI's commercial differentiator and a genuine safety strength. Because the surgeon is in the loop on every cut, the platform avoids the regulatory and adoption friction of fully autonomous resection. The controller does modulate the tool near the planned boundary, retracting bur exposure and reducing speed as the resection envelope is approached. What that boundary-control model does not expose as a first-class construct is a graduated commitment taxonomy: an explicit, named distinction between a shallow exploratory pass, a partial commit awaiting re-verification, a deferred segment, and a full commit to irreversible volume removal. Exposure control governs where the tool may cut; it does not, on its own, represent how strongly a given cut is committed or what verification its closure requires.
Architectural Gap
Knee arthroplasty is a sequence of irreversible bone resections whose individual quality compounds into final implant fit and limb alignment. A cut that is one millimeter too deep cannot be undone; a cut that is one millimeter too shallow can be extended. The asymmetry is fundamental. Boundary control keeps the tool inside the planned envelope, but it does not itself encode this reversibility asymmetry as a governed property of each cut: the difference between a recoverable and an irrecoverable step remains implicit in the surgeon's training rather than explicit in the system's behavior.
What is missing is a graduated commitment layer that distinguishes shallow exploratory passes, partial commits with explicit re-verification, deferred segments awaiting confirmation, and full commits to irreversible volume removal. Such a layer is not a relaxation of safety; it is a sharpening of it, because each commitment level carries a different verification obligation and a different recovery story. The CORI hardware is already capable of executing these distinctions, what it lacks is the governance substrate that names them.
What Governed Actuation Provides
The governed actuation primitive contributes four mechanisms that map directly onto orthopedic resection. First, graduated actuation modes give the controller a structured choice space at every boundary approach rather than a single threshold. The disclosed mode set spans disabled, simulated, advisory, consultative, shadowed, partial, constrained, stage-gated, deferred, full, and emergency-accelerated execution, selected by a governance-policy-defined mapping from the composite admissibility determination rather than by a binary permit-or-deny gate. A near-boundary pass can therefore run in partial mode (fractional magnitude, reduced rate, or reduced scope) or in stage-gated mode (a sequence of stages with admissibility re-evaluation between them) instead of the sole choice of continuing or stalling. Second, harm minimization is evaluated against the irreversibility of the candidate cut, so a near-boundary pass on a bone-stock-critical region is bounded differently than a near-boundary pass in a region with reserve. Third, post-actuation verification compares observed actuation effects against expected effects and is recorded as required closure on every commit, with the verification surface (a re-registration, a depth probe, a kinematic check) selected by the commitment mode. Fourth, reversibility-aware commitment-point evaluation classifies each proposed cut into a reversibility class, identifies the point in the actuation chain beyond which the cut becomes irreversible, elevates admissibility thresholds for irreversible steps, and records each commitment-point transit in the lineage field, producing an auditable trail keyed to the resection rather than to the procedure.
Applied to total knee arthroplasty, the primitive lets the controller execute a shallow first pass in partial mode, surface a depth-and-orientation verification to the surgeon in consultative mode, and only then escalate to full-mode removal of the planned volume. Applied to unicompartmental work, where bone stock is more constrained, deferred mode becomes a recorded state in which the planned volume is queued behind an additional confirmation step. Across both, the primitive turns surgeon-in-the-loop from a procedural convention into a system-level invariant.
Composition Pathway
Composition with CORI does not require modification of the handheld tool or its safety-rated control loop. The substrate sits above the planning and constraint-enforcement layer as a commitment arbiter, consuming the registered plan, the live tool pose, the bone-stock model, and a harm predicate, and emitting both an actuation mode and an associated verification obligation. The bur controller continues to enforce kinematic constraints; the substrate determines how strongly the cut is committed and how its closure is verified.
Integration touches the surgical UI, the planning model, and the procedural log. The UI gains a small set of intelligible states (partial, deferred, committed, verified) that map to existing surgeon mental models. The planning model gains per-resection reversibility annotations derived from the bone-stock model. The procedural log gains commitment-mode entries that flow into the existing case record without disrupting it. Each surface is bounded, and none destabilizes the regulatory posture of the underlying device.
Commercial Implication
CORI's commercial story rests on outcome consistency, OR efficiency, and adoption among ambulatory centers. Graduated actuation reinforces all three. Outcome consistency improves because near-boundary cuts are bounded by an explicit commitment policy rather than by surgeon variance. OR efficiency improves because deferred and partial modes replace ad-hoc pauses with structured ones whose closure is part of the workflow. Ambulatory adoption improves because the auditable commitment trail materially strengthens the credentialing and quality story that ASCs must present to payers and to their own boards.
For Smith+Nephew strategically, the substrate also creates a defensible architectural moat that is independent of the implant catalog. Competitor platforms can match a saw or a bur; replicating a graduated-commitment governance layer with associated verification and reversibility semantics is a different and more durable barrier.
Licensing Implication
The governed actuation primitive is offered to Smith+Nephew as a licensable architectural layer that overlays the existing CORI control stack. Licensing covers the graduated actuation mode taxonomy, the harm-minimization predicate interface, the post-actuation verification protocol, and the reversibility classification schema, together with the patent claims that protect their composition in a surgical-execution context. Smith+Nephew retains the registration workflow, the constraint enforcement, the implant catalog integration, and the regulatory submissions. The license positions CORI as the orthopedic robotics platform whose every cut is governance-legible, an architectural posture that competitors cannot reach without implementing the same primitive.
Embodiments and Implementation Notes
The approach is enabling for a skilled implementer of surgical robotics control software, and is not limited to knee arthroplasty. A commitment arbiter is inserted between the intraoperative planning model and the safety-rated constraint-enforcement loop. On each proposed tool engagement it takes as input the registered plan, the live tool pose, a bone-stock or tissue-reserve model, an authority credential for the operating surgeon, and a harm predicate, and it emits an actuation mode plus a bound verification obligation. The constraint loop is unchanged and continues to enforce kinematic limits; the arbiter only decides how strongly a cut is committed and how its closure is verified.
Contemplated variations include: reversibility ontologies ranging from a two-class reversible/irreversible split to a graded ontology with recoverable, partially-recoverable, and irrecoverable classes; mode mappings tuned per actuator class (bur, saw, drill, reamer, impactor) and per authority level; verification surfaces implemented as re-registration, optical or electromagnetic depth probing, kinematic re-check, force-torque signature comparison, or intraoperative imaging; harm predicates parameterized by remaining bone stock, ligament balance targets, or planned implant fit; and lineage records persisted to the case log, to a device-level audit store, or to an external governance mesh. The same arbiter generalizes to hip, shoulder, and spine resection, to soft-tissue surgical actuators, and to any surgical-tool actuator whose actions carry an asymmetric reversibility profile. Modes may be combined (for example, a stage-gated partial pass) and additional governance-policy-defined modes may be introduced without disturbing the governance chain, so the enumeration here is illustrative rather than exhaustive.
Disclosure Scope
The inventive subject matter described here, the composite admissibility evaluator, the graduated actuation modes, the reversibility-aware commitment-point evaluator, the harm-minimization deviation mechanism, the post-actuation verification mechanism, and the lineage-recorded actuation provenance, is disclosed in U.S. Provisional Application No. 64/049,409. This article is a dated public description of that Governed Actuation subject matter and its application to surgical-execution control.
References to the Smith+Nephew CORI Surgical System, to the NAVIO system, and to any other named product, vendor, indication, or market are provided solely as external context to situate the disclosed technology. Those references describe third-party systems as a matter of public fact and are not claims of U.S. Provisional Application No. 64/049,409. Product capabilities, indications, clearances, and regulatory status of any named third-party system remain the province of their respective owners and may change; nothing here should be read as asserting a defect in, endorsement of, or affiliation with any named product or company.
