AERIS ENGINEERING BLUEPRINT
SYSTEM CONCEPT / 2026
THE FUTURE OF CLINICAL WASTE HANDLING / 001

Intelligence at the point of disposal.

An end-to-end engineering blueprint for a corridor-ready mobile unit that identifies, segregates and traces biomedical waste—without treating AI as a substitute for safety.

AERIS / DESIGN STUDYFIG. 01 — 3/4 ISOMETRIC
VISION ARRAYSEALED INTAKE04 STREAMS
01 / 04SMART MOBILE SEGREGATION SYSTEM
CONCEPT VISUALIZATION
Turn the concept into a rendering

Generate the requested photorealistic industrial design using built-in AI.

AI generation uses 1 image credit per request. The schematic above is a design illustration, not a photograph of a built device.

04segregation streamsYellow / Red / White / Blue
02compute layersEdge inference + control
01traceable event chainFrom deposit to pickup
Safety by designFail closed. Human in loop.
01SYSTEM ARCHITECTURE & HARDWARE

Engineered as two brains.
One safe machine.

Separate probabilistic perception from deterministic motion. The vision computer recommends a route; the control layer verifies every interlock before anything moves.

01 / SENSEIsolated intakeCamera · tray · identity
→
02 / DECIDEEdge AI + policyClassify · verify · abstain
→
03 / CONTROLSafety supervisorInterlock · route · confirm
→
04 / RECORDEvent ledgerPublish · sync · audit
COMPUTE STACK

Inference on the edge. Control off the edge.

Primary SBC

Raspberry Pi 5 (8 GB) for a controlled pilot: CSI camera, quantized MobileNetV2/YOLO-class inference, local event queue and touch UI. Add an inference accelerator only after profiling.

Higher-throughput option

Jetson Orin Nano-class module for multi-camera detection or richer on-device navigation. Size the thermal solution and power rail from measured worst-case load.

Real-time controller

ESP32-S3 for actuator timing, sensors and Wi-Fi telemetry; Arduino Mega/Uno is suitable for the bench prototype. For deployment, pair with independent hardwired E-stop, contactor and door interlocks—not software alone.

Interface contract

UART/CAN command frame: event ID, target bin, policy version, sequence and CRC. Controller returns accepted/rejected, position feedback and fault code. Missing heartbeat or stale command means stop and hold.

POWER & MOTION

A mobility platform built for corridors.

Drivetrain

24 V differential drive with two geared BLDC/DC motors, encoders and current-limited motor drivers; two low-profile passive casters stabilize the trolley. Start in supervised push/assist mode, then validate autonomous navigation.

Internal routing

Enclosed indexing chute or four-position rotary diverter driven by an encoder-equipped stepper with homing switch; a torque-limited servo is acceptable for a small bench flap. Separate bin mouths, gaskets and replaceable liners.

Navigation stack

Corridor pilot: line/marker following with bumper stop. Advanced mode: mapped LiDAR + odometry, speed limits, obstacle stop, manual takeover, dock localization and restricted-area geofences.

Electrical architecture

24 V LiFePO₄ pack with BMS, fuse and protected charge port; fused DC-DC rails for SBC, LEDs and controls. Hardware E-stop removes traction and routing power while preserving fault logging.

SENSOR MATRIX

Redundancy where mistakes matter.

Specify ingress protection, cleanability and calibration access for the actual hospital environment.

Sensor / subsystemRole in the decisionInterface
Global-shutter RGB camera + diffuse LED ringTop-down object recognition; freeze motion and normalize exposure.CSI / USB 3
Short-range ToF / break-beam at intakePresence, item count and closed-gate confirmation before inference.I²C / GPIO
Ultrasonic or sealed ToF, one per binEstimate remaining headroom; reject deposits before the fill limit.GPIO / I²C
Load cell + instrumentation ADC per binMeasure mass delta and independently enforce bin weight limits.HX711 / SPI
Inductive / capacitive proximity pairFlag exposed metal or unexpected material; never replace vision.Digital / analog
2D barcode + optional RFID readerBind bags, sealed containers and pickup handoffs to an audit event.USB / UART
Door switches, latch feedback + motor currentProve the path is closed and detect jams, access or failed movement.Safety GPIO / ADC
2D LiDAR, wheel encoders + bumper stripLocalize in mapped corridors, detect obstacles and stop on contact.USB / CAN / GPIO

Mechanical boundary: exposed sharps should not enter a shared scanning tray. Provide a dedicated, locked, puncture-resistant sharps port and preserve source segregation at the point of generation.

02AI VISION & SEGREGATION

See the object.
Understand the risk.

Appearance is only one signal. A clinically approved rules engine—not a CNN label alone—decides whether an item can enter a particular stream.

PERCEPTION PIPELINE / ON DEVICE
RGB + DEPTHUNKNOWN CLASSPOLICY GATE
01 / DETECTYOLOv8n-class
02 / CLASSIFYMobileNetV2
03 / ACTRules + interlocks

Train for abstention, not just accuracy.

Use a single-object MobileNetV2 INT8 classifier for constrained tray views; move to a YOLOv8n-class detector if occlusion or multiple objects must be detected. Collect site-specific images across glove colors, masks, syringes, vials, fluids, packaging, glare and damaged items. Annotate unknown / mixed / prohibited examples explicitly.

Split by ward, camera session and object instance to avoid leakage. Report per-class recall, false-route rate, calibration and an out-of-distribution rejection curve on a held-out site. Set confidence thresholds from validation—not a universal number—and require human review below threshold. Edge Impulse can manage an embedded training/deployment workflow, but qualification remains site-specific.

Needle attached? Mixed waste? Uncertain contamination? Stop and escalate. Never guess a color from pixels alone.
POLICY MAPPING / INDIA EXAMPLE

Four streams. No shortcuts.

Based on India’s Bio-Medical Waste Management Rules framework; configure for the actual facility and latest local directions.

01 / YELLOW

Soiled & infectious

Blood/body-fluid-soiled dressings, anatomical waste and other yellow-stream items under the approved policy. A used mask may need this path depending on contamination and facility protocol.

Not a generic “all masks” rule
02 / RED

Contaminated recyclables

Examples include gloves, tubing and already needle-free syringe barrels where permitted by facility policy. Never detach an attached needle to make a syringe eligible for this stream.

Do not detach an attached needle
03 / WHITE

Sharps

Needles, blades and other metal sharps belong in a translucent, puncture-proof sharps container. Use a separate direct-disposal port; bypass the shared sorter completely.

Dedicated puncture-proof path
04 / BLUE

Glass & implants

Broken/discarded contaminated glassware, medicine vials and ampoules where applicable, excluding cytotoxic-contaminated items; metallic body implants follow the prescribed route.

Cytotoxic exception requires review
PHYSICAL SEGREGATION SEQUENCE

From tray to sealed compartment.

08 CONTROLLED STEPS
01

Present

Staff places one permitted item on a recessed, cleanable tray. Break-beam confirms one-object occupancy; a splash guard and lid isolate the intake.

02

Acquire

Gate closes. Fixed LED illumination and camera capture multiple views; weight and proximity signals are sampled. No hand can reach the diverter.

03

Classify

Edge model outputs class, confidence and unknown score. A policy engine combines item, contamination context and site-approved segregation rules.

04

Validate

Reject on ambiguity, multiple objects, sharps signal, hazardous exclusions, inconsistent sensors, full bin or open door. Ask staff to use the approved manual path.

05

Index

Controller verifies target, sealed receiving bin, lid and chute position; move the diverter while the inlet remains locked.

06

Deposit

Open only the selected path, tilt the tray, then re-close. Position switches and bin mass delta confirm a plausible transfer; a jam faults closed.

07

Contain

Return to home, wipe/purge the isolated intake under validated procedures, and prevent the next item until gate and latch feedback agree.

08

Record

Create an immutable-intent event with model/policy versions, operator pseudonym, route result and timestamps; queue it locally when offline.

Object recognizedPolicy allows routeSensors & interlocks agree Actuate Else: hold & human review
03IoT CLOUD & DIGITAL TRACEABILITY

Every deposit leaves
an audit trail.

Design for intermittent hospital Wi-Fi. Segregation must remain safe offline; telemetry is a record of what happened, never permission to make an unsafe move.

EDGEESP32 + SBCSensor events, verified route, local queue
TRANSPORTMQTT over TLSmTLS / per-device identity, QoS 1
PLATFORMBroker + event storeDeduplicate event IDs, retain audit history
OPERATIONSHospital dashboardFill level, mass, ward, timestamp, pickup queue and faults
TRANSPORT

Publish, don't poll.

Send health snapshots to facility/HCF-01/aeris-014/status and discrete deposit and pickup events to .../events. Use MQTT/TLS with device certificates, QoS 1 and broker acknowledgements; HTTPS batch upload is a fallback. ThingsSpeak suits lab telemetry; a custom broker and event store support a production custody trail.

OFFLINE-FIRST

Never lose an event.

Persist a bounded, encrypted local queue on the SBC; replay in order after reconnection. Unique event ID + monotonic sequence prevent duplicate accounting. Sync clocks via NTP and flag unsynchronized time.

LOCATION & PRIVACY

Use indoor identity.

Record ward/station IDs from QR, RFID or mapped docking points rather than pretending GPS works indoors. Keep patient identifiers and raw tray images off the routine telemetry stream; limit operator identity to a pseudonym.

EVENT CONTRACT / JSON

One pickup. One defensible record.

Illustrative payload only—not live telemetry. Production schemas need versioning, access controls and site-approved retention.

pickup-event.json JSON / ILLUSTRATIVE
{
  "schema_version": "1.0",
  "event_id": "evt_pickup_01JEXAMPLE8M4K2",
  "event_type": "compartment_pickup",
  "occurred_at": "2026-09-29T10:42:18Z",
  "device_id": "aeris-hcf-014",
  "pickup_id": "PU-HCF01-0001842",
  "location": {
    "facility_id": "HCF-01",
    "ward_id": "WARD-C3",
    "station_id": "BAY-07"
  },
  "container": {
    "category": "RED",
    "compartment_id": "R-01",
    "liner_barcode": "LINER-00937",
    "seal_id": "SEAL-2048",
    "seal_verified": true
  },
  "measurements": {
    "gross_mass_kg": 3.84,
    "fill_percent_estimate": 38
  },
  "chain_of_custody": {
    "from": "aeris-hcf-014",
    "to": "authorized-collector-07",
    "operator_badge_id": "staff-pseudonym-17",
    "handoff_status": "sealed_and_scanned"
  },
  "linked_deposit_count": 27,
  "policy_version": "in-bmwm-2016-local-v3",
  "device_sequence": 1842
}
04SAMPLE FIRMWARE / C++ ARDUINO

Make the decision.
Prove the movement.

A deliberately limited two-bin bench sketch. The AI computer sends Y or R over USB serial; the controller checks headroom before moving the diverter.

Arduino Uno / Mega compatible
115200 baud · Servo.h · active-high buzzer
Two-bin demonstration, not clinical firmware
aeris_two_bin_bench.ino C++ / ARDUINO
#include <Servo.h>

// TWO-BIN BENCH PROTOTYPE ONLY. Not for clinical use.
// Yellow = Y, Red = R over USB serial at 115200 baud.
// Use an external, common-ground 5 V supply for the servo.
const uint8_t TRIG_PIN[2] = {7, 10}, ECHO_PIN[2] = {8, 11}; // Yellow, Red ultrasonic pins
const uint8_t SERVO_PIN = 9, BUZZER_PIN = 6; // Active-high buzzer
const int16_t HOME_DEG = 90, YELLOW_DEG = 35, RED_DEG = 145;
const float FULL_CM = 8.0;         // Calibrate to real liner geometry
const uint32_t SETTLE_MS = 900, SAMPLE_MS = 500;

Servo diverter;
float headroomCm[2] = {-1, -1};    // -1 means sensor fault
int16_t activeBin = -1;
bool returningHome = false;       // Stay busy until homing settles
uint32_t moveStarted = 0;
uint32_t lastSample = 0;

float readHeadroom(uint8_t bin) {
  digitalWrite(TRIG_PIN[bin], LOW);
  delayMicroseconds(2);
  digitalWrite(TRIG_PIN[bin], HIGH);
  delayMicroseconds(10);
  digitalWrite(TRIG_PIN[bin], LOW);
  uint32_t echoUs = pulseIn(ECHO_PIN[bin], HIGH, 25000UL);
  if (echoUs == 0) return -1;      // Timeout: fail closed
  return echoUs * 0.0343f / 2.0f; // Round-trip sound travel, cm
}

void sampleBins() {
  for (uint8_t bin = 0; bin < 2; bin++) {
    headroomCm[bin] = readHeadroom(bin);
    Serial.print(bin == 0 ? "YELLOW_CM=" : "RED_CM=");
    Serial.println(headroomCm[bin], 1);
  }
  bool overloaded =
    (headroomCm[0] >= 0 && headroomCm[0] <= FULL_CM) ||
    (headroomCm[1] >= 0 && headroomCm[1] <= FULL_CM);
  digitalWrite(BUZZER_PIN, overloaded ? HIGH : LOW);
  if (overloaded) Serial.println("ALERT:COMPARTMENT_FULL");
}

void setup() {
  Serial.begin(115200);
  for (uint8_t sensorIndex = 0; sensorIndex < 2; sensorIndex++) {
    pinMode(TRIG_PIN[sensorIndex], OUTPUT);
    pinMode(ECHO_PIN[sensorIndex], INPUT);
  }
  pinMode(BUZZER_PIN, OUTPUT);
  digitalWrite(BUZZER_PIN, LOW);
  diverter.attach(SERVO_PIN);
  diverter.write(HOME_DEG);
  sampleBins();                    // Never route before first reading
  lastSample = millis();
  Serial.println("READY:BENCH_ONLY");
}

void loop() {
  uint32_t now = millis();
  if (now - lastSample >= SAMPLE_MS && activeBin == -1) {
    sampleBins();
    lastSample = now;
  }

  if (activeBin != -1 && now - moveStarted >= SETTLE_MS) {
    if (!returningHome) {
      diverter.write(HOME_DEG);
      returningHome = true;
      moveStarted = now;
      Serial.println("RETURNING:HOME");
    } else {
      sampleBins();                // Refresh before next command
      Serial.println(activeBin == 0 ? "DONE:YELLOW" : "DONE:RED");
      activeBin = -1;
      returningHome = false;
      lastSample = millis();
    }
  }

  if (Serial.available() > 0) {
    char command = Serial.read(); // Newline/other characters ignored
    if (command != 'Y' && command != 'R') return;
    if (activeBin != -1) {
      Serial.println("REJECT:BUSY");
      return;
    }
    int16_t target = command == 'Y' ? 0 : 1;
    if (headroomCm[target] < 0) {
      Serial.println("REJECT:SENSOR_FAULT");
      return;
    }
    if (headroomCm[target] <= FULL_CM) {
      Serial.println("REJECT:BIN_FULL");
      return;
    }
    diverter.write(target == 0 ? YELLOW_DEG : RED_DEG);
    activeBin = target;
    returningHome = false;
    moveStarted = now;
    Serial.println(target == 0 ? "MOVING:YELLOW" : "MOVING:RED");
  }
}
WIRING NOTES

Yellow: trigger D7 / echo D8. Red: trigger D10 / echo D11. Servo signal D9; buzzer D6. Power the servo from a separate regulated 5 V rail with a common ground; do not drive it from the Uno 5 V pin.

BEFORE DEPLOYMENT

Add a closed-loop homing sensor, door/lid interlocks, independent weight limit, jam detection, CRC-framed commands, watchdog, hardwired emergency stop and four-stream policy validation. The sketch uses headroom as a fill proxy, not a certified overload measurement.

05RISK MITIGATION & COMPLIANCE

Containment is a
system property.

No air-treatment add-on can promise “zero cross-contamination.” Engineer multiple barriers, validate performance and retain a safe manual fallback.

DESIGN PRINCIPLE 001

Fail closed. Stay segregated.

Use individually sealed, removable liners inside rigid compartments; keyed latches, negative-pressure handling only where justified by risk assessment, and no shared recirculation path between waste streams. Cleaning and handoff procedures are as important as electronics.

HEPA AIR PATH

Filter the exhaust.

If an active air path is required, keep each bin isolated and use a sealed, serviceable HEPA exhaust module with pressure-drop monitoring. Validate airflow, leakage and filter change under PPE; filtration is not sterilization.

UV-C OPTION

Shield every photon.

Optional enclosed UV-C may reduce contamination on exposed surfaces or in a duct only after dose validation. Dual independent lid interlocks, lamp-life monitoring and zero occupant exposure are mandatory design targets. Shadows and organic soil limit effect.

PHYSICAL BARRIERS

Keep sharps separate.

A dedicated puncture-resistant white sharps container bypasses the sorter. Never crush, shake or reopen filled liners. Label and barcode sealed bags; hand them to the authorized treatment chain.

Important distinction

UV-C or HEPA is supplemental risk reduction, not a replacement for segregation, approved treatment, cleaning or PPE. Do not describe collected waste as sterile.

HAZARD REVIEW / STARTER FMEA

Design against the failure, not the average.

Failure modeRequired response
Wrong classificationAbstain on low confidence, prohibited class, multi-item frame or context conflict; require staff review.
Cross-stream contactDedicated bin mouths, gasketed chute, one-open-path-at-a-time logic and validated clean-down schedule.
Jam / overfillMass + level agreement, motor current and position feedback; stop, latch closed and summon trained staff.
Mobility collisionSpeed-limited supervised mode first; LiDAR/bumper stop, E-stop, manual override and mapped no-go zones.
Power / network lossFail closed mechanically; E-stop removes drive power. Store audit events locally and retry only after recovery.
VALIDATION GATES

From prototype to permitted pilot.

Bench-test route accuracy, sensor faults, pinch points and E-stop behavior.

Challenge with wet/reflective/mixed items and hold-out ward data; document false routes.

Validate cleanability, seals, air path and UV dose (if fitted) with infection-control specialists.

Obtain site infection-control, occupational safety and regulator/authorized operator sign-off before clinical use.

PRIMARY REFERENCES

Design from the governing documents.

The four-color mapping here is an India-specific example. Local rules and facility policy control the actual deployment; verify all amendments, including the 2026 amendment, and local directions before deployment.

⚡Built with GenMB