Home › Robotic Medicine › Protocol library
Section 09 · Robotic Medicine · Library indexRobot-readable protocol library
A table of contents for clinical protocols written so a robot can follow them and humans can check every step. It is organized by body system, mirroring the site’s Clinical section. There are 79 protocols in 17 categories: 75 draft and 4 research only.
Draft protocols (75)
Each draft has its own page with a step-by-step view and a machine-readable YAML and JSON version. Every YAML file is checked against the protocol schema when the site is built. Thresholds are left as placeholders for clinical leads to set.
Legend
Draft A full conceptual draft page exists, with a machine-readable YAML version (version shown on each page). Not for clinical use.
In clinical review Drafted, and held from publication until its clinical review is finished; no page yet.
Research only Speculative or out of reach today; kept on the list as a research question.
Max rung The highest autonomy the protocol may ever use: 1 ground-steered, 2 supervised, 3 conditional (see the capabilities outline). Clinical tasks stop at rung 2; only logistics reaches rung 3.
T1 write first (common or time-critical, or a core safety skill)
T2 next
T3 later
Showing 79 of 79
Cardiovascular6 protocols
On this site: Orthostatic intolerance at landing · Risk atlas: cardiovascular
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-CARD-001 | Cardiac arrest: bring defibrillator and oxygen, stream video (the robot does not run the arrest)Draft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised fetching and video; the robot never runs the arrest. v0.3 is editorial (year-only citation labels). | Rung 2 | Draft v0.3 | T1 |
| RMP-CARD-002 | Chest pain: vital signs and 12-lead ECG recording support, relay to flight surgeonDraft v0.4 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching; crew place electrodes. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T1 |
| RMP-CARD-003 | Abnormal heart rhythm on monitoring: record, alert crew and groundDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Supervised recording and closed-defibrillator fetch; the robot never reads a rhythm. | Rung 2 | Draft v0.2 | T1 |
| RMP-CARD-004 | Light-headedness on standing after landing: alert, kit fetch, vital signs recorded (the crew help the crewmember lie down)Draft v0.4 (reviewed, AI-assisted, Oct 21, 2026). At an Earth landing the NASA flight surgeons and recovery team lead and the robot only fetches kit and hands over records; on the Moon or Mars the CMO leads. The crew, not the robot, help the crewmember lie down; the robot never prompts a stand, and timed stands follow the flight surgeon's checklist (elapsed time shown only on request). v0.3 records the foundation owner's scope decision (Earth landings, support-only). v0.4 gates every step at an Earth landing: only the kit fetch and the RMP-EGR-001 record hand-over run there, on the landing medical lead's request (R10, batch 10 review). | Rung 2 | Draft v0.4 | T2 |
| RMP-CARD-005 | Scheduled heart rate and blood pressure checks: reminder, preparation checklist and recordDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). A check starts only when the crewmember or CMO accepts the prompt. The crewmember places the cuff; the robot shows a standard preparation checklist (including no exercise, caffeine or nicotine in the last 30 minutes and an arm held at heart level by a strap) and records readings as displayed, never saying whether a reading is high or low. v0.3 is editorial (link-loss wording). | Rung 2 | Draft v0.3 | T2 |
| RMP-CARD-006 | Chest compressions given by a robot in weightlessnessSpeculative, no validation data. Published microgravity CPR guidance (DGLRM/ESAM 2020) applies to human rescuers only. | None | Research only | T3 |
Respiratory5 protocols
On this site: In-flight emergencies · Risk atlas: hypoxia
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-RESP-001 | Shortness of breath: oxygen set-up support, oxygen saturation, relayDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised fetching of the closed oxygen kit; the robot never starts or adjusts oxygen. | Rung 2 | Draft v0.2 | T1 |
| RMP-RESP-002 | Choking or blocked airway: bring kit, steady the scene; airway care by crewDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised fetching; airway care by crew. v0.3 is editorial (crew actions never wait for the link; year-only citation labels). | Rung 2 | Draft v0.3 | T1 |
| RMP-RESP-003 | Severe allergic reaction: urgent alert, bring the sealed emergency and oxygen kits on command, record vital signs (no drug advice)Draft v0.4 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching; the CMO gives any medicine. v0.3 is editorial (crew actions never wait for the link; year-only citation labels). v0.4 is editorial (link-loss wording). | Rung 2 | Draft v0.4 | T1 |
| RMP-RESP-004 | Lung ultrasound assist with a crew-held probe (diagnostic only)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The CMO holds the probe; the robot holds the display and relays remote guidance; every image is non-diagnostic, for human review. The probe is never placed on an open wound unless the flight surgeon directs it with a sterile cover. | Rung 2 | Draft v0.2 | T2 |
| RMP-RESP-005 | Scheduled breathing rate and oxygen saturation checksDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Starts only when the crewmember accepts the prompt; SpO2 and heart rate as displayed once the reading settles; the CMO counts the breathing rate over a full minute; the oxygen in use is recorded as the CMO states it, never adjusted. A failed oximeter reading is URGENT (shared SPO2_ALERT_PCT). | Rung 2 | Draft v0.2 | T3 |
Neurological & vestibular7 protocols
On this site: Space motion sickness · Risk atlas: sensorimotor
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-NEURO-001 | Head injury: urgent relay, supplies, recording of the CMO's checks, prompt-only repeat checksDraft v0.4 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching and recording; the CMO does the checks. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T1 |
| RMP-NEURO-002 | Stroke warning signs: guided check recording, urgent relayDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised recording and optional kit fetch. v0.3 is editorial (crew actions never wait for the link; year-only citation labels). | Rung 2 | Draft v0.3 | T1 |
| RMP-NEURO-003 | Seizure: clear the space, time and record, alert crew and groundDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised clearing, timing and video. v0.3 is editorial (seizure first-aid wording, crew actions never wait for the link, year-only citation labels). | Rung 2 | Draft v0.3 | T1 |
| RMP-NEURO-004 | Space motion sickness: symptom, vomiting and fluid-intake log, containment supplies (no drug advice)Draft v0.5 (reviewed, AI-assisted). Moved up from Tier 2. v0.3 is editorial: headache links to the headache log (RMP-NEURO-007). v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.5 | T1 |
| RMP-NEURO-005 | Post-landing balance testing: a crewmember spots, the robot recordsDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). All post-landing balance and walking tests run here. Vital signs and light-headedness are checked before any standing test; a crewmember spots; the robot clears the fall space only before a test and never moves during one, never touches anyone, and never cues, times or scores a test. At an Earth landing the robot is support-only (scope decision by the foundation owner, Oct 21, 2026). v0.3 gates every step at an Earth landing: only the kit fetch and the RMP-EGR-001 record hand-over run there, on the landing medical lead's request (R10, batch 10 review). | Rung 2 | Draft v0.3 | T2 |
| RMP-NEURO-006 | Sleep complaints and sleep-medicine use: private sleep log, prompt-only check-ins, relay to the flight surgeon (the robot never wakes anyone and names no medicine)Draft v0.6 (reviewed, AI-assisted). Retitled from "Headache and sleep complaints"; a separate headache log is now drafted (RMP-NEURO-007, v0.1). v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link). v0.6 is editorial (names the headache log, RMP-NEURO-007). | Rung 2 | Draft v0.6 | T3 |
| RMP-NEURO-007 | Headache log: private log, red-flag escalation and routes (carbon dioxide, after a spacewalk or pressure change, head injury, vision change, dehydration); never says what caused itDraft v0.4 (reviewed, AI-assisted, Oct 21, 2026). Private log with red-flag routes; never attributes a cause. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T2 |
Eyes & SANS4 protocols
On this site: SANS clinical management · Risk atlas: SANS
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-EYE-001 | Eye injury, foreign body or chemical splash: eyewash and containment supplies, timing, video, urgent relayDraft v0.4 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching and timing; the robot never touches the eye. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T1 |
| RMP-EYE-002 | Routine vision checks for spaceflight-associated neuro-ocular syndrome: reading charts, Amsler grid and eye questions (the robot never compares results)Draft v0.5 (reviewed, AI-assisted). v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.5 | T2 |
| RMP-EYE-003 | Retinal photo and OCT imaging: camera positioning support for SANS monitoringDraft v0.5 (reviewed, AI-assisted). Moved up from Tier 2. v0.3 is editorial (wording only). v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.5 | T1 |
| RMP-EYE-004 | Eye ultrasound assist (diagnostic only)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The CMO holds the probe on the closed eyelid; no scan until the unit shows the eye preset; no scan after any stated or suspected eye injury unless the flight surgeon directs it (RMP-EYE-001). Clips are non-diagnostic, for human review. | Rung 2 | Draft v0.2 | T3 |
Ear, nose, throat & dental4 protocols
On this site: Mission medical kits
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-ENT-001 | Nosebleed: supplies, containment, pressure timing, video (crew apply pressure)Draft v0.4 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching and timing; positioning advice removed (the CMO decides). v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T2 |
| RMP-ENT-002 | Tooth pain, lost filling or lost crown: dental supplies, sealed container for a loose crown, screen support for the CMO's mouth camera, relay to a ground dentistDraft v0.6 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching and holding a display; nothing robotic goes near the mouth. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). v0.6 is editorial (cross-links no longer say planned). | Rung 2 | Draft v0.6 | T2 |
| RMP-ENT-003 | Ear or sinus pain: otoscope camera supportDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 because the robot brings the kit and holds the otoscope display. Symptom questions first (sudden hearing loss and vertigo after a pressure change are URGENT); images only with consent, for human review. | Rung 2 | Draft v0.2 | T3 |
| RMP-ENT-004 | Head and nasal congestion, sore throat: symptom log with red-flag escalationDraft v0.5 (reviewed, AI-assisted). Moved up from Tier 3. v0.3 is editorial: the nosebleed pressure time is shared with RMP-ENT-001. v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.5 | T2 |
Gastrointestinal3 protocols
On this site: Point-of-care ultrasound
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-GI-001 | Abdominal pain: abdominal ultrasound assist with a crew-held probe (diagnostic only)Draft v0.4 (reviewed, AI-assisted, Oct 21, 2026). The crew hold the probe; the robot holds the display and relays remote guidance; clips are non-diagnostic, for human review. v0.3 is editorial (remote-guidance context; probe cleaning under RMP-INF-002; "cannot pass urine" routes to RMP-RENAL-002). v0.4 adds the open-wound probe rule (R4, batch 9 review). | Rung 2 | Draft v0.4 | T1 |
| RMP-GI-002 | Vomiting or diarrhea: intake and output log, sealed containment and clean-up supplies (no drug or fluid advice)Draft v0.4 (reviewed, AI-assisted). Sealed waste only. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T2 |
| RMP-GI-003 | Constipation and bloating: private bowel and symptom log, relay to the flight surgeon (no drug, fluid or diet advice)Draft v0.4 (reviewed, AI-assisted). v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T3 |
Renal & urologic5 protocols
On this site: Kidney stone risk · Risk atlas: renal stones
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-RENAL-001 | Assisted diagnostic ultrasound for a suspected kidney stoneDraft v0.7 (reviewed, AI-assisted). Full protocol page from the Part 1 worked example (originally ASSIST-US-RENAL-001). v0.5 is editorial. v0.6 is editorial (year-only citation labels). v0.7 is editorial (crew care never waits for the link).Try it in the ground console simulation | Rung 2 | Draft v0.7 | T1 |
| RMP-RENAL-002 | Trouble passing urine: bladder ultrasound support, crew holds the probe (diagnostic only)Draft v0.6 (reviewed, AI-assisted). The robot holds the screen and records; the crew hold the probe. v0.4 is editorial. v0.5 is editorial (year-only citation labels). v0.6 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.6 | T1 |
| RMP-RENAL-003 | Urinary tract infection symptoms: private dipstick result log (entered by the crewmember)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The crewmember does the dipstick alone and enters the results in a private log; the robot is never in the hygiene area and never reads a strip. Fever alerts use the shared clinical-lead value, plus 36 °C or below. | Rung 2 | Draft v0.2 | T2 |
| RMP-RENAL-004 | Fluid intake and urine output log for a possible dehydration concern (the robot never judges hydration or advises fluids)Draft v0.4 (reviewed, AI-assisted). v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T2 |
| RMP-RENAL-005 | Urinary catheter supplies and hygiene supportDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for the checked supply fetch. The robot stays outside the hygiene area and only stages supplies; the CMO or crewmember does all catheter care; a controller limit bars any handling of a catheter, drainage bag or urine (sealed waste only). | Rung 2 | Draft v0.2 | T3 |
Musculoskeletal & trauma6 protocols
On this site: Bone loss countermeasures · Risk atlas: bone fracture
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-MSK-001 | Major trauma: bring trauma kit, video, assist crew (the robot does not lead)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised fetching, scene clearing and video; the robot never touches the injured crewmember. | Rung 2 | Draft v0.2 | T1 |
| RMP-MSK-002 | Suspected fracture or sprain: splint supplies, video; the crew hold the limb steadyDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Retitled: the crew, not the robot, hold the limb (no-contact rule). Max rung raised from 1 to 2 for supervised fetching and recording. v0.3 is editorial (links to RMP-MSK-003, now drafted). | Rung 2 | Draft v0.3 | T1 |
| RMP-MSK-003 | Musculoskeletal ultrasound assist with a crew-held probe (diagnostic only)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The CMO holds the probe and the crew hold the limb; images are for human review only. A wound over the injury is treated as a possible open fracture, and no scan is done over it. | Rung 2 | Draft v0.2 | T2 |
| RMP-MSK-004 | Back pain in flight: symptom tracking with red-flag escalationDraft v0.4 (reviewed, AI-assisted). v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T2 |
| RMP-MSK-005 | Exercise form monitoring by cameraDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Consent before any camera use; live view and the exercise specialists' form checklist; clips only with consent, stored in the medical record, with no audio unless agreed. No scoring, measuring or comparing of the crew; a declined or unaccepted session is logged privately and never reported or counted; the robot never touches anyone or the device. | Rung 2 | Draft v0.2 | T3 |
| RMP-MSK-006 | Restraining a patient by robotSpeculative, no validation data. | None | Research only | T3 |
Skin & wounds5 protocols
On this site: Mission medical kits
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-SKIN-001 | Wound cleaning and dressing: hold and pass supplies, photo documentation (crew leads)Draft v0.7 (reviewed, AI-assisted). Max rung raised from 1 to 2 for fetching and photos; limb holding stays at rung 1. v0.3 is editorial (wording only). v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link). v0.6 is editorial (rashes route to RMP-SKIN-004; RMP-SKIN-003 is the wound photo log). | Rung 2 | Draft v0.7 | T1 |
| RMP-SKIN-002 | Burns and scalds: cooling and dressing supplies, cooling start time on request, photo log, urgent relay (the crew lead all first aid)Draft v0.5 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching, timing on request and photos; the robot never handles hot water. v0.4 is editorial (year-only citation labels). v0.5 is editorial (crew care never waits for the link; link to RMP-ENV-005). | Rung 2 | Draft v0.5 | T1 |
| RMP-SKIN-003 | Wound photo log: standard photos at each dressing change for healing reviewDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Consent comes before the camera moves; the standard set keeps a margin of surrounding skin; photos stay in the medical record, encrypted, and are never used for training or shown on a shared display. | Rung 2 | Draft v0.3 | T2 |
| RMP-SKIN-004 | Rash and skin irritation: photo logDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Symptom questions first (breathing trouble, a non-blanching or fast-spreading rash, blisters or mouth and eye sores are URGENT); the CMO checks all over the body, with darker-skin checks; a fading glass test never ends an alert; consented standard photos under the RMP-SKIN-003 photo rules. | Rung 2 | Draft v0.2 | T3 |
| RMP-SKIN-005 | Suturing a marked lineShown only in animals on Earth. | None | Research only | T3 |
Infection4 protocols
On this site: Risk atlas: host–microorganism · Risk atlas: immune
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-INF-001 | Fever: temperature and vital-sign recording support, early escalation to the flight surgeonDraft v0.4 (reviewed, AI-assisted). v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T1 |
| RMP-INF-002 | Cleaning and disinfecting the robot and shared equipment between tasksDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). The robot holds still in a cleaning hold while the crew clean; the record says "cleaning recorded as stated", never a contamination test. v0.3 is editorial (CDC disinfection summary read live; more items cited). | Rung 2 | Draft v0.3 | T1 |
| RMP-INF-003 | Isolating a sick crewmember: deliver supplies to reduce contactDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Deliveries to a hand-over point outside the isolation area and sealed waste only; no tracking of the isolated crewmember; on any cabin alarm the robot clears the exit routes first. | Rung 2 | Draft v0.2 | T2 |
| RMP-INF-004 | Air, water and surface sample collectionDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The crew collect every air, water and surface sample; the robot checks labels against the sampling plan (it never relabels), carries sealed samples and logs read-outs as stated, and never judges a result. Water use while a result is pending is the commander's decision with the CMO's advice. | Rung 2 | Draft v0.2 | T3 |
Toxic exposure & environment (CO₂, smoke, ammonia)5 protocols
On this site: In-flight emergencies · Telemetry: cabin environment
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-ENV-001 | Smoke or fire: bring masks, account for crew, videoDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised mask fetch, accounting and video; the vehicle fire procedure leads. v0.3 adds an "oxygen in use" record and carbon monoxide oximeter wording, and uses year-only citation labels. | Rung 2 | Draft v0.3 | T1 |
| RMP-ENV-002 | Ammonia leak: emergency equipment, crew accounting; robot inspects only when the commander sends itDraft v0.4 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised fetching and accounting; module entry only when the commander sends it. v0.3 is editorial (NASA ISS source; link to RMP-ENV-005). v0.4 is editorial (cross-links no longer say planned). | Rung 2 | Draft v0.4 | T1 |
| RMP-ENV-003 | Rapid loss of cabin pressure: bring masks, crew accountingDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Max rung raised from 1 to 2 for supervised mask fetch and accounting; the robot clears every route first. | Rung 2 | Draft v0.3 | T1 |
| RMP-ENV-004 | High carbon dioxide: read cabin data, check crew symptoms and log for the flight surgeonDraft v0.6 (reviewed, AI-assisted). Moved up from Tier 2. Human start only. v0.3 is editorial: headache links to the headache log (RMP-NEURO-007). v0.4 is editorial (wording only). v0.5 is editorial (year-only citation labels). v0.6 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.6 | T1 |
| RMP-ENV-005 | Chemical on skin or in eyes: decontamination supplies (the crew rinse)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Emergency fetch of the eyewash kit first, then a sealed decontamination pack, to the clean side; only the CMO ends eye irrigation (pH endpoint, as in RMP-EYE-001); the robot never enters a contaminated module. | Rung 2 | Draft v0.2 | T2 |
Radiation3 protocols
On this site: Radiation limits and monitoring · Risk atlas: radiation
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-RAD-001 | Solar particle event: shelter logistics and dosimeter readoutsDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Routes cleared first; monitor and dosimeters read as displayed; the commander leads the shelter procedure and the all-clear. | Rung 2 | Draft v0.3 | T1 |
| RMP-RAD-002 | Personal dosimeter readout, exchange and loggingDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The crewmember keeps their own dosimeter. The prompt and the exchange and stowage log are the core; a camera readout without contact runs only when there is no dosimetry downlink, it has failed, or the flight surgeon asks. On any radiation alarm the crew go to shelter without waiting for the robot. | Rung 2 | Draft v0.2 | T2 |
| RMP-RAD-003 | Radiation sickness symptoms (nausea, vomiting): tracking and urgent relayDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Private check-ins after a radiation event; the clock-time symptom timeline goes only to the flight surgeon and the CMO; nausea or vomiting after the event is URGENT, as in RMP-RAD-001; never names a countermeasure or a cause, never estimates a dose, never wakes anyone. | Rung 2 | Draft v0.2 | T3 |
Behavioral health4 protocols
On this site: Behavioral health monitoring · Risk atlas: behavioral health
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-BEH-001 | Acute distress or behavioral emergency: alert crew lead and flight surgeon (the robot does not restrain)Draft v0.4 (reviewed, AI-assisted, Oct 21, 2026). v0.3 applies batch 8 review fixes 1–3 (alert recipients, commander as person of concern, summary). Max rung 2 covers only the immediate alert: words said to the robot raise the alert and a stop-and-hold, and everything else needs a human word. The robot never listens to crew conversations, and never restrains, judges risk or counsels. v0.4 links private calls to RMP-BEH-003. | Rung 2 | Draft v0.4 | T1 |
| RMP-BEH-002 | Scheduled mood, sleep and workload check-ins (private; urgent escalation of safety concerns)Draft v0.5 (reviewed, AI-assisted). Camera off; answers go only to the flight surgeon and behavioral health team. v0.3 is editorial: the short-sleep and sleep-medicine flags note that the flight surgeon may start RMP-NEURO-006. v0.4 is editorial (year-only citation labels). v0.5 is editorial (alert skips a person of concern; crew care never waits for the link). | Rung 2 | Draft v0.5 | T2 |
| RMP-BEH-003 | Private call relay with ground support (camera off unless the crewmember turns it on)Draft v0.3 (reviewed, AI-assisted, Oct 21, 2026; fixes verified). Max rung raised from 1 to 2 because the robot brings the call kit. The in-call controls are the robot's stop and the call screen's "get help" control. The camera is off unless the crewmember turns it on; a "get help" control on the call screen sends an URGENT alert; ground support who are concerned contact the CMO and commander directly. | Rung 2 | Draft v0.3 | T2 |
| RMP-BEH-004 | Sleep and lighting schedule supportDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Shows the sleep and lighting schedule the flight surgeon set, with silent on-screen prompts outside sleep stations; the crew change every light; the robot never wakes anyone and never suggests a sleep medicine, as in RMP-NEURO-006; its log stays separate unless the crewmember agrees. | Rung 2 | Draft v0.2 | T3 |
Pharmacy & medication handling4 protocols
On this site: Medical kits and drug stability · Risk atlas: medications
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-PHARM-001 | Fetch a medicine a human has prescribed and match it to the order by barcodeDraft v0.7: full order match; after a mismatch the item is quarantined, and handed to the CMO only through a logged two-step override. No drug advice. v0.4 is editorial (wording only). v0.5 is editorial (year-only citation labels). v0.6 is editorial (crew care never waits for the link). v0.7 is editorial (NASA source now cited as OCHMO-MTB-012; rule unchanged). | Rung 2 | Draft v0.7 | T1 |
| RMP-PHARM-002 | Medicine inventory, expiry and storage-temperature tracking; draft resupply list for the pharmacy leadDraft v0.5 (reviewed, AI-assisted, Oct 21, 2026; verified under PHARM change control). Max rung lowered from 3 to 2. Anything that does not match the inventory record (including lot and location) is quarantined as in RMP-PHARM-001; nothing is handed over in this protocol, a temperature excursion tags the whole store without locking it, and an item leaves quarantine only by a record correction the pharmacy lead decides (never the CMO alone or the robot) or through RMP-PHARM-001. v0.3 makes the excursion-table release a type of record correction. | Rung 2 | Draft v0.5 | T1 |
| RMP-PHARM-003 | Dose log after a human gives a medicine (the robot never gives a dose)Draft v0.4 (reviewed, AI-assisted, Oct 21, 2026; verified under PHARM change control). The human who gave the dose states the time, amount and route first; only then does the robot scan the package the crew hold up, matching every field including route and amount. Any mismatch is NOT VERIFIED; the robot never takes, holds or hands over a package, never changes an order, and a log entry changes only through the two-step record correction. | Rung 2 | Draft v0.4 | T2 |
| RMP-PHARM-004 | Controlled-medicine count with a crewmemberDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026; verified under PHARM change control). A blind two-person count by the CMO and a witness, each entering their count privately; the robot logs, compares with the inventory record and flags discrepancies privately. The pharmacy lead decides any record correction (never the CMO alone, never the robot), and it fixes the record only; the RMP-PHARM-001 rules apply unchanged; no hand-over. | Rung 2 | Draft v0.3 | T3 |
Spacewalk (EVA) & decompression4 protocols
On this site: Decompression sickness and spacewalks · Risk atlas: decompression sickness
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-EVA-001 | Suspected decompression sickness after a spacewalk or pressure change: symptom log, equipment fetch, urgent relay (the robot never operates suit, pressure or oxygen)Draft v0.4 (reviewed, AI-assisted). Max rung raised from 1 to 2 for supervised fetching; oxygen and pressure are crew and flight surgeon actions. v0.3 is editorial (year-only citation labels). v0.4 is editorial (crew care never waits for the link). | Rung 2 | Draft v0.4 | T1 |
| RMP-EVA-002 | Prebreathe event log (the procedure timer stays primary)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Off by default where the EVA procedure already timestamps events; used when the EVA plan asks for a second record. Logs event times as the EVA crew call them and flags any stated break in prebreathe (URGENT with a symptom); the procedure timer stays primary. | Rung 2 | Draft v0.2 | T2 |
| RMP-EVA-003 | Hand and skin check after a spacewalk: photo logDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Symptom questions come first: any new symptom other than an isolated nail, fingertip or hand-abrasion finding is URGENT under RMP-EVA-001; numbness, tingling or weakness stays URGENT. Photos follow the photo rules and are for human review only. | Rung 2 | Draft v0.2 | T2 |
| RMP-EVA-004 | Helping an injured spacewalker back through the airlockSpeculative. | None | Research only | T3 |
Launch, landing & egress4 protocols
On this site: In-flight emergencies and evacuation · Postflight recovery
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-EGR-001 | Medical evacuation preparation: package records, images and logs for handoverDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Hand-over package from recorded entries only, "DRAFT – NOT READ BACK" until the CMO reads it back; sent only to the recipients the flight surgeon names. v0.3 is editorial (it routes to RMP-EGR-004, now drafted). | Rung 2 | Draft v0.3 | T1 |
| RMP-EGR-002 | Landing-day medical kit and empty-stretcher support (support-only at Earth landings)Draft v0.4 (reviewed, AI-assisted, Oct 21, 2026). At an Earth landing the NASA flight surgeons and recovery team lead and the robot only fetches kit and hands over records; on the Moon or Mars the CMO leads. Supervised kit fetch, route clearing before the hatch opens, and placing an empty stretcher; it never moves an occupied stretcher, and people move every crewmember. v0.3 records the foundation owner's scope decision (Earth landings, support-only). v0.4 gates every step at an Earth landing: only the kit fetch and the RMP-EGR-001 record hand-over run there, on the landing medical lead's request (R10, batch 10 review). | Rung 2 | Draft v0.4 | T2 |
| RMP-EGR-003 | Post-landing vital signs and symptom checks (balance tests: RMP-NEURO-005)Draft v0.5 (reviewed, AI-assisted, Oct 21, 2026). At an Earth landing the NASA flight surgeons and recovery team lead and the robot only fetches kit and hands over records; on the Moon or Mars the CMO leads. The CMO chooses and runs every check with a spotter; the robot records results as stated, never asks anyone to stand or walk, and treats pain or deformity after a fall as URGENT (bone fragility after flight). v0.3 records the foundation owner's scope decision (Earth landings, support-only). v0.4: balance and walking tests move to RMP-NEURO-005, and the robot does not move during a check. v0.5 gates every step at an Earth landing: only the kit fetch and the RMP-EGR-001 record hand-over run there, on the landing medical lead's request (R10, batch 10 review). | Rung 2 | Draft v0.5 | T2 |
| RMP-EGR-004 | Launch and entry monitoring relayDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The robot stays stowed and locked for every dynamic phase and never moves; it relays read-only the readings the vehicle already displays, stores and forwards through the communication blackout, and until motion stop sends URGENT alerts silently only to the flight surgeon, never on the crew voice loop; it never masks, delays or replaces a vehicle alarm or a flight-surgeon call. Support-only at an Earth landing. | Rung 2 | Draft v0.2 | T3 |
Routine & preventive exams6 protocols
On this site: Exercise countermeasures · Point-of-care ultrasound
| ID | Protocol | Max rung | Status | Priority |
|---|---|---|---|---|
| RMP-PREV-001 | Medical kit and equipment readiness checks: labels, seals, expiry and self-test statusDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Reads labels, seals, expiry and self-test status in place; never opens, moves or tests a kit; contents not checked. v0.3 is editorial (NASA source now cited as OCHMO-MTB-012; more banned expiry wording). | Rung 2 | Draft v0.3 | T1 |
| RMP-PREV-002 | Periodic health exam support (vital signs, photos, records)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Starts only when the crewmember accepts the prompt; checked kit fetch; a default checklist owned by the flight surgeon (vital signs incl. temperature and body mass, symptoms, skin, mouth, eyes, musculoskeletal); readings as displayed; photos with consent. Behavioral health stays in RMP-BEH-002 and RMP-BEH-003. | Rung 2 | Draft v0.2 | T2 |
| RMP-PREV-003 | Flight-surgeon-ordered surveillance scans, such as kidney and bladder ultrasound (diagnostic only)Draft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Runs only on the flight surgeon's scan order and when the crewmember accepts the prompt; checked kit fetch; the CMO holds the probe and the robot holds the display, relays and labels clips (non-diagnostic, for human review). Symptoms route to the kidney and urinary protocols. | Rung 2 | Draft v0.2 | T2 |
| RMP-PREV-004 | Blood and urine sample handling and labelingDraft v0.3 (reviewed, AI-assisted, Oct 21, 2026). Labels with two identifiers are printed only at the crewmember's side after identity is confirmed; the CMO labels in the crewmember's presence; a label mismatch holds the sample in its own sealed HELD bag in cold stowage, carried by the crew. The robot carries only a sealed bag, stops and holds it if it leaks, and never handles needles. v0.3 is editorial. | Rung 2 | Draft v0.3 | T2 |
| RMP-PREV-005 | Exercise session loggingDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). Starts only when the crewmember accepts the prompt; an unaccepted prompt is logged privately and never reported or counted. Logs the session times, the device's own session reference and the crewmember's words; device values only through an agreed read-only data interface. No scoring, adherence figures or comparisons, as in RMP-MSK-005; no camera; the exercise specialists review the log. | Rung 2 | Draft v0.2 | T3 |
| RMP-PREV-006 | Dental and skin self-check photo logDraft v0.2 (reviewed, AI-assisted, Oct 21, 2026). The crewmember does the self-check; consented standard skin photos under the RMP-SKIN-003 and RMP-SKIN-004 rules, with darker-skin checks; mouth, face, lip, ear and neck photos only with a handheld camera (nothing robotic near the head); photos go to the flight surgeon, and to the CMO only with agreement; dental problems go to RMP-ENT-002. | Rung 2 | Draft v0.2 | T3 |
No protocols match.
Core protocol components
Every protocol in the library will be written to the same 13-part framework, set out in full in Part 1. The worked example is RMP-RENAL-001; the machine-readable format is defined by the protocol schema.
- Identity and scope. Name, version, mission types, conditions covered, highest autonomy rung allowed.
- Roles. Flight surgeon holds medical authority; crew medical officer acts under delegated care; what the robot may and may not do.
- Preconditions. Consent (and an emergency route), restraint, equipment checks, link status, crew medical officer able to take over.
- Required sensor inputs. What the robot must sense, and what to do if an input is missing.
- Structured steps. Short, numbered, machine-checkable actions with success criteria.
- Decision points. Explicit branches, each tagged with who decides: robot, crew or ground.
- Stop and escalate rules. Patient says stop, pain, unstable vital signs, loss of link, robot faults.
- Safety limits. Hard limits on force, speed, reach and duration.
- Logs and audit. Every input, decision, action and hand-off, time-stamped and protected.
- Links to requirements. Each rule traced to the NASA-STD-3001 requirement it serves.
- Validation. Simulation, training models, Earth analogs, then flight, with pass and fail criteria set in advance.
- Human sign-off levels. Who approves the protocol, and who approves each run at each rung.
- Change control for learning. How skills may be updated, re-validated and rolled back.
Where this list comes from
The categories and protocols are the foundation’s own outline. They follow the body systems used in this site’s Clinical section and the hazards in the Risk atlas.
NASA keeps its own lists, which we did not copy:
- NASA crew medical officers train on the space station medical checklist (JSC 48522) [1]. Its contents are not reproduced here.
- NASA’s Integrated Medical Model uses 100 medical conditions. A newer exploration list (ICL 1.0) has 120 conditions, chosen from 443 candidates [2]. We could not verify the full condition lists, so protocols are not mapped one-to-one to them.
- NASA-STD-3001 requires onboard medical care sized to mission length and return time, and evacuation for problems beyond onboard care [3].
How priority is set: Tier 1 covers time-critical emergencies, the most common onboard tasks, and core safety skills such as equipment readiness and cleaning. Priority and maximum rung are proposals and will change as each protocol is written and checked.
Written with AI assistance on Oct 20, 2026. No named human clinician has reviewed this page.
References 4
- NASA OCHMO. Medical Operations. Technical Brief OCHMO-TB-044 (2025). Crew surgeon keeps medical authority under delegated care; crew medical officers train on the JSC 48522 medical checklist. www.nasa.gov/wp-content/uploads/2025/08/ochmo-tb-044-medical…
- Kreykes AJ, Suresh R. Developing a new medical condition list for exploration spaceflight. Aerospace Medical Association meeting abstract, 2021 (NASA NTRS 20205008590). The Integrated Medical Model contains 100 medical conditions; the exploration list (ICL 1.0) has 120, chosen from 443 candidates. ntrs.nasa.gov/citations/20205008590
- NASA. NASA-STD-3001, Volume 1: Crew Health, Revision C (2023). www.nasa.gov/wp-content/uploads/2023/11/nasa-std-3001-vol-1-…
- NASA. NASA-STD-3001, Volume 2: Human Factors, Habitability, and Environmental Health, Revision F (2026), Section 10.6 Automated and Robotic Systems. standards.nasa.gov/standard/NASA/NASA-STD-3001_VOL_2
Checked on 2026-10-20: each link returned HTTP 200 (or redirected to the publisher), DOIs and PubMed IDs were matched in Crossref and PubMed, and each claim was checked against the source text.