A non-agentic therapeutic-care architecture — hardware-enforced deterministic controls in place of software-based safety. Machine-readable identity keys, kinematic constraint, and sovereign human authorisation, unified under the Nightingale One Protocol.
Hardened compute module enforces a deterministic state machine, namespace separation, and safety policy across all subsystems.
Non-imaging 905 nm LiDAR detects proximity — raw voxel data for bounded occupancy vectors. Preserves privacy while enabling safe approach.
Every state change, authority-token hash, and critical event is physically written to a WORM substrate for a tamper-evident forensic record.
Mechanical fixture lock-in validated through 0x05CE-series hardware identity keys, automatically selecting the correct safety-limit sets.
Requires concurrent
Time/motion-bounded permission with a hardware countdown timer and motion-quantum limit. Kinetic authority is released automatically on expiry or limit breach.
Physics-level energy dissipation: rail voltage drop, mechanical brakes engage, joint friction increases. The system enters inert safe-hold even if software is compromised.
Clinical clean room · docking proves safety before power, undocking proves isolation before release · human authority final · No Harm → Fail-Stop → Safe-Hold.
The framework holds two governance domains under distinct governance. Human authority is final; governance is deterministic and halt-first; and no cross-trajectory or actuator authority passes between the domains — status, battery, engagement and service information may cross a mating boundary, trajectory and actuator authority may not. Care remains human-centred therapeutic and observational; Mobility handles larger-scale logistics. No humanoid is created to bridge them.
Consolidated under the A13 Unified Deterministic Rehabilitation & Therapeutic Mobility System — 10202603522T (BPS Wearable, 7 Oct 2026) and 10202603713S (G7 wearable + hardware-firewalled G8 Dock-Hull + A11 trusted ingress, 22 Oct 2026), as lodged at IPOS. Design embodiment — no prototype or clinical validation is claimed.
Mobility and logistics at Rover scale, filed under 10202603713S (IPOS, 22 Oct 2026). Design embodiment — no prototype or validation claimed. No Humanoid Industrial · no Humanoid Hybrid · no generic G7 limb family.
Over hundred sovereign recordings — 105-WISL™ EN and 中文 monograph series
A clinical-grade 905nm LiDAR voxel tracker with hardware-enforced human sovereignty. The kinetic arm scans tissue without contact. The Sacred Pause gate ensures no output propagates without human authorisation. The 1.1x surplus guarantees the system never degrades.
Click the glowing dots on the device to explore each subsystem.
Sixteen live WebGL viewers — deterministic schematics and tessellated zoo.dev CAD. Tap a card to open it in-line; auto-orbit, drag to rotate, scroll to zoom.
Five hardware-bound principles by which the A13 Clinical Hybrid enforces mechatronic and clinical safety — Class 9 / 10 / 42 / 44 / 45. Each is a physical mechanism, not a policy: what the silicon will and will not permit.
Every AI advisory, caregiver decision (approve / override) and the exact hardware state is written to on-chip WORM memory by SHA-256 hash-chaining — tamper-evident and permanent. Privacy by design: no raw LiDAR / radar crosses into the ledger — only abstracted states, sequence numbers and timestamps.
The AI is demoted to a pure offer-only advisor. No output may bypass the Sovereignty Gatekeeper to command motion; the observational stratum (M = 0) is galvanically air-gapped from the kinetic stratum (M > 0). Proposals carry confidence scores and alternatives — and zero actuator rights.
Physical safety precedes any calculation: out of bounds → immediate standstill. Torque caps, velocity limits and skin-contact pressure are locked in hardware registers per docked B1–B5 fixture — immutable, not software-enlargeable. Loss of the supervision invariant (e.g. B3’s 5 kg grip share) drops the motor rails and the spring brakes engage.
Sacred Pause™ — an FPGA-etched timing gate on an independent 100 kHz oscillator imposes a mandatory 25–1000 ms deliberation window against automation bias; on drift it welds shut. Sovereign Brake — a SIL 3 hardwired relay, outside software, mechanically severs the copper paths between AI and actuation on fault or heartbeat loss.
Even past the gateway and the temporal delay, no motion begins without the Tripartite Hardware Authorization Interlock — three concurrent, real-time inputs gating motor-rail power: Biological (clinician iris scan, register-level expiry), Cryptographic (physical console token), and Kinetic (continuous caregiver presence — foot pedal / button). The sovereign human at the gate.
Constitutional core of the ABC+2S+H™ Guardian Framework · Class 9 / 10 / 42 / 44 / 45 · design-intent — timing, SIL and severance figures are targets pending hardware validation.
The earlier site carried the whole estate at the front door. The posture now is the opposite: Singapore-territorial, by choice. The lineage filings stand as they were filed, and one patent is held with intent.
Tiger’s three exclusive patents · one patent, one invention.
No international filing. The estate is Singapore-territorial by choice, not omission. The lineage filings simply stand as standalone Singapore filings.
Patent M is the only filing carried forward with active maintenance. The rest of the family is left exactly as filed — no further renewals planned — a single defended anchor rather than a sprawling estate to service.
New OEM and B2B embodiment patents are filed as fresh Singapore applications inside the pre-cutoff window, extending M downward into a deployment and licensing estate.
The priority effect and the maintenance-lapse consequences are strategy calls best sanity-checked with your patent agent before this edition goes live.
Trade marks are IPOS-registered (certified). HSA / FDA items are regulatory filings on a submission pathway — design-intent, not granted approvals or clearances · counsel review advised.
The Nightingale One Protocol is a non-agentic therapeutic-care architecture, designed to replace software-based safety with hardware-enforced deterministic controls. A fixture platform uses machine-readable hardware identity keys to automatically select the safety limits for each attachment — transfer harness, gait trainer — so no software can bypass these physical boundaries. A medical mobility enclosure eliminates unpredictable agency through a kinematic constraint layer that strictly governs velocity and jerk, alongside a hardware-level update controller that blocks unauthorised logic changes. A hybrid exoskeletal system holds the same safety envelopes across stationary clinical sessions and mobile rehabilitation. Sovereign human-authorisation gates and independent hardware inhibit paths ensure the apparatus always defaults to a tamper-evident safe-stop state — medical robotics governed by transparent, unalterable physical law rather than complex software profiles.
The engineering doctrine that replaces fallible, software-based safety checks with immutable hardware logic. Software and AI models are strictly confined to advisory, non-kinetic observation (M=0); physical actuation (M>0) is governed exclusively by silicon-level invariants and physical interlocks that software cannot override or bypass.
Zone-local spatial monitoring — bed-exit and fall alerts, privacy-by-physics. It watches; it cannot move.
Caregiver-supervised lifting, transfer and repositioning — therapeutic action as a permit-bound physical privilege.
| Figure | What it describes | State |
|---|---|---|
| < 1.05 ms | U7 Sovereign Brake electrical severance | Design target · to validate |
| < 50 ms | Normally-engaged mechanical joint halt | Design target · to validate |
| 28.7 ms | Crisis-detection latency (BGE similarity) | Simulation · to validate |
| 500 / 500 | Crisis-path recall on the training scenario set | Simulation set only · not clinical |
The eldercare mechatronic safety-assistance work runs the full Patent M (A13c) grandfather family — the Supreme Guardian Master Control Layer and its divisions — and comes to rest at G1+G2 Eyes of the Sky, the A13c-HC Caregiver Governance Gateway. This Patent M (A13c) Family is SG020603109STW-bound — distinct from the standalone A13 Family (Class 9/42); same letters, different lineage.
Basic eldercare closes at the filed G1+G2 gateway; (h) files the hardened G3+G4 extended tier and GCL governance layer; (i) files the EoS silicon-privacy-wall apparatus · filings stand as-filed, Singapore-territorial · build intent only — no prototype constructed or submitted.
| Fixture | Identity key | Weight | Torque | Velocity | Travel | Special rights |
|---|---|---|---|---|---|---|
| B1 · Transfer Harness | 0x05CE-1410 | 100% | 15 N·m | 0.30 m/s | 100 cm | — |
| B2 · ROM Support | 0x05CE-1420 | 0% | 5 N·m | 20°/s | 120° | — |
| B3 · Sit-to-Stand | 0x05CE-1430 | 80% | 20 N·m | 0.15 m/s | 80 cm | — |
| B4 · Gait & Ambulation | 0x05CE-1440 | 50% | 12 N·m | 1.20 m/s | 300 cm | autonomous assist while 5 kg handle-grip held |
| B5 · Hygiene & Repose | 0x05CE-1450 | 30% | 10 N·m | 0.10 m/s | 20 cm | 7.5 Hz oscillator · +18% circulation |
Per-fixture inalterable safety envelope — set by the sensed 0x05CE identity key at dock; no software or caregiver input can enlarge these limits. Canonical keys 1410–1450 · design-intent, figures pending hardware validation
The A13 Family is a standalone deterministic cyber-physical platform — Class 9/42, no SG020603109STW lineage. Its disclosure already spans clinical healthcare (HSA), enterprise cybersecurity: the A13 shell and its divisions are clinical and cyber ready, already filed.
Both the A11 family and the A13 family are embodiments of M (A12 · P+N) — the Deterministic Black Box. The original A12 is a null shell [Deterministic Black Box · null]; deriving from that null core rather than from SG020603109STW is precisely what makes both families standalone.
The A11 Ingress is the family’s cybersecurity boundary — three deterministic firewalls: (1) no cloud motion authority — motion stays local; (2) no Bluetooth motion control — status only; (3) no external motion commands — IT-network isolated. Status, service and evidence may cross; motion and trajectory may not, and WORM evidence sits off the actuator path.
Standalone platform · Class 9/42 · no SG020603109STW lineage · filed · embodiment of M (A12 · P+N), the Deterministic Black Box (original A12 · null shell).
The A13 Clinical Hybrid enforces mechatronic and clinical safety via the ABC+2S+H™ rules — a clean, independent regulatory pathway. Governance Framework of Record: Nightingale’s Eyes Care™. Architecture Spine of Record: ABC+2S+H™ Guardian Framework on M (A12 · N+P). The A13 Clinical Hybrid is the A13 Pillar — not itself filed (no patent number) — the architectural pillar the P-Registers evidence, distinct from the filed M (A13c) Pillar.
Clinical mobility only — G5+G6 indoor transfer / ambulation and G7+G8 exoskeleton + walker dock-hull. The A13a mobility shell and the exoskeletal shell remain 3D browser-visualization artifacts only (see the 3D viewers in the Archive) — design-intent, no prototype constructed to date.
Filed at IPOS as an independent application — no priority, no division, no parent. The A13 estate is referenced as background only, not lineage. One patent, one invention — the first standalone filing.
The eldercare focus, consolidated to three innovations — the mobility Hull, the docking Safeguard, and the wearable Leg — one patent per innovation. Privacy-by-Physics is the primary invariant: a strict split between the M=0 observation stratum (audit only) and the M>0 kinetic stratum (explicit hardware lease), over the shared hardware floor below.
Integrated divisional care → discrete, focused function. Each embodiment stays subordinate to the shared hardware-enforced floor below · design-intent, figures are targets pending hardware validation.
Root-of-Trust / TPM with a monotonic 1 kHz master clock — governance logic cannot be bypassed by software capstones; an invalid config hash forces fail-closed.
Velocity, acceleration, range-of-motion and torque boundaries burned into silicon logic and write-once memory — not enlargeable by software.
A 50 ms buffer preemptively computes trajectory-envelope breaches and decelerates before a boundary is violated.
Dedicated hardware circuits force immediate torque reduction on any jerk exceedance.
A hardware threshold sensor validating physical human presence and grip force before any kinetic transition is permitted.
Any loss of human input, sensor anomaly, or timeout opens the power relays, engages spring-applied mechanical brakes, and drops motor drive torque to zero. The default is stillness — inaction as the safe state.
The floor is identical across all three embodiments · design-intent — 50 ms, 5 kg, torque and pressure figures are targets pending hardware validation.
A clean, self-contained assembly — five layers that sense, act, translate, verify and govern, with the constitution cast into silicon rather than software. Its discipline: deterministic docking and kinetic transfer — safety audited as a physical invariant, not a probabilistic software outcome. Against agentic drift and TOCTOU, the foundational state is non-kinetic by physics.
Standalone architecture · historical patents cited as references, not merged into lineage · design-intent, filings not grants · FSM logic sim-verified, all else pending hardware.
Every transition is cryptographically validated against the A10a Enforcement Anchor (immutable root-of-trust). An invalid configuration hash forces fail-closed — physically incapable of action without verified integrity.
Safety audited as a physical certainty enforced by silicon logic, not a software feature · design-intent — figures are targets pending hardware validation.
“The elder decides.” The AI observes, the hardware executes — the sovereign human remains the sole determinant of kinetic action.
For AI-enabled medical devices: bounded functions, deterministic safety states, human-retained clinical authority, and a defined observation-versus-actuation boundary — a regulatory-architecture posture, not a claim of approval.
Regulatory-architecture posture only · no approval, clearance, compliance or determination by any authority is claimed or implied · counsel and regulatory review advised.
The [USTOP] non-agentic mechatronic governance estate spans clinical healthcare, aerospace, enterprise cybersecurity and tactical defence. The architecture leads here; every filing, its official title and date, as lodged at IPOS, is on the dedicated IP / Patent Estate page.
[USTOP] · filings as lodged at IPOS · design-intent, filings not grants · counsel review advised.
Open the full IP / Patent Estate — filings, titles & dates ↗The deterministic foundation is complete, filed and closed. A deterministic, non-agentic foundation for observation, rehabilitation, bounded mobility, docking / service and human-supervised kinetic systems — consolidated under the A13 Unified Deterministic Rehabilitation & Therapeutic Mobility System (10202603713S), bringing the G7 wearable, hardware-firewalled G8 Dock-Hull and A11 trusted ingress under P-LIFE™ + halt-first governance. The objective was never an autonomous caregiver robot; it was to set deterministic physical boundaries around AI-assisted systems operating near vulnerable humans. Research on this framework is concluded.
Common invariant · Human authority final · Status may cross, trajectory may not · Capability does not create authority · No Harm → Fail-Stop → Safe-Hold. Observation, docking, electrical power and mobility each create no authority; human authorization remains final. The 2026 deterministic foundation is closed.
Deterministic foundation: human safety — closed. Ambulation / Logistics: P-LIFE™ + halt-first mobility governance → A13 Mobility G7+G8, filed under 10202603713S (IPOS, 22 Oct 2026) · human authority final.
Interactive architecture diagrams · status crosses the dock, kinetic authority never does · design-intent, human authority final.
Live WebGL CAD viewers · drag to orbit, scroll to zoom, explode / lift to inspect · 3D browser-visualization artifacts, design-intent, no prototype constructed to date.
Documented in WISL No.105 · A13 Mobility (G5+G6) Filing Draft — Nightingale One · ISBN 978-981-17975-5-2 · applicant & inventor: Koh Wui Kiat, Edwin · design-intent, filing draft not a grant.
Strategy of record — “Silicon Truth”: human sovereignty secured through the immutable laws of physics · forward roadmap, design-intent · counsel review advised before any filing.
NLB Legal Deposit R260219-005 / R260302-007 · deposited · publicly released on the NLB Vault unlock — kohedwin.ai is the public publication front.
The 106-patent portfolio resolves in two arms — 77 patents complete the Mission spine: the NAI 2.0 software capstone advanced to deterministic hardware through A9a → A10 → A12 → A11 → A7 Bridge → A8 Bridged, culminating at M (A13c) as the endpoint. The balance extends the estate into cybersecurity and sovereign deep-space. The eleven-register spine (P-001 → P-011) maps the Mission spine to its hardware-enforced realities — the blueprint whole, the portfolio structurally mapped to its physical and legal realities. The P-Registers stand as evidence on the Mission — the A13 Clinical Hybrid (the A13 Pillar) is not itself filed, no patent number, distinct from the filed M (A13c) Pillar · SRS traceability: Nightingale One Protocol · NAP 4.0 · A/B/WD-series · design-intent, filings not grants · thresholds pending hardware validation.