From Fly-by-Wire to Retinal Surgery

What aviation teaches us about safety in surgical robotics

In 2025, commercial aviation transported more than four billion passengers worldwide.

The accident rate? Less than one major accident per several million flights.

This level of safety did not emerge by chance. It was the result of a fundamental redesign of control systems.

Modern aviation became safer when engineers stopped focusing solely on performance — and started engineering protection at the limits of human capability.

What if surgery followed the same logic?

What truly changed aviation

The decisive shift in aviation safety was not automation in the sense of eliminating the pilot. It was the progressive introduction, beginning in the 1980s, of fly-by-wire architectures and advanced autopilot systems — a fundamental transformation of how control is exercised.

Since then, the rate of major accidents per million flights has been divided by more than five. This evolution is multifactorial — training, regulation, maintenance — but the redesign of control systems marked a structural turning point. Safety improved not only because incidents were reduced, but because critical situations were prevented from becoming irreversible.

Before fly-by-wire, flight controls were largely mechanical. When a pilot moved the stick or pedals, cables and hydraulic systems directly actuated control surfaces. The aircraft responded almost immediately to human input, with minimal mediation.

Fly-by-wire changed that relationship.

Pilot inputs are now converted into electronic signals interpreted in real time by onboard computers. These systems translate intention into action within predefined control laws and certified flight envelopes. In certain conditions, if a command risks stall, structural overload, or loss of control, the system limits or corrects it.

Autopilot systems operate on the same principle. They continuously monitor altitude, speed, attitude and trajectory, adjusting the aircraft hundreds of times per second. Even when disengaged, stabilization layers remain active in the background.

These systems were not designed to replace pilots.

They were designed to prevent small deviations from escalating into catastrophic outcomes.

The pilot remains central — choosing the route, evaluating conditions, managing complexity and assuming responsibility. But the system ensures that performance never exceeds safe structural or aerodynamic boundaries.

The breakthrough was not autonomy.

It was the engineering of limits.

And that shift — from direct control to controlled control — transformed aviation into one of the safest systems ever built.

What happens when the environment is no longer airspace, but living tissue?

Retinal microsurgery: operating at biological limits

Retinal microsurgery unfolds in an environment far less predictable than the sky.

Here, movements are measured in microns.

The retina is a living, fragile, dynamic tissue. It reacts to traction, fluid dynamics and instrument contact. Each maneuver subtly alters the field in which the next must be performed.

Modern retinal surgery compounds this complexity: indirect microscopic visualization, elongated micro-instruments, delicate membrane peeling, subretinal injections. Precision must be sustained throughout, often over extended procedures.

Even in experienced hands, physiological tremor ranges from 50 to 100 microns. Yet some critical steps are performed within anatomical structures only a few hundred microns wide. In certain regions, retinal thickness itself measures approximately 200 to 300 microns.

The scale of potential involuntary motion approaches the scale of the tissue being treated.

Margin for error becomes minimal.

The challenge is not speed. It is not throughput. It is stability when human capability reaches its natural boundary.

And unlike aircraft, no two retinas are identical. Each patient presents anatomical variation. Each intervention evolves uniquely. Every gesture carries immediate consequence.

This is where the reflection on control architectures becomes essential.

As in aviation, the objective is not to replace expertise.

It is to stabilize performance where biological limits introduce variability.

The true role of surgical robotics

Surgical robotics is often discussed in terms of autonomy, workflow automation or task delegation.

In micron-scale surgery, that framing misses the point.

The essential question is not: how can the machine act instead of the surgeon?

It is: how can we ensure that every critical gesture is executed with unwavering consistency and repeatability?

At this scale, robotics must first serve as an architecture of stabilization — capable of filtering tremor, refining motion amplitude and maintaining micron-level constancy within controlled, safe limits.

This distinction is fundamental.

It is not autonomy that defines safety at the micron scale.

It is control. It is restraint. It is repeatability. It is responsibility.

Engineering restraint

Designing such systems is more demanding than enabling motion.

As Arnaud Tellier, VP Strategic, often says:

“In surgical robotics, the difficulty is not knowing when to act. It is ensuring that we do not act beyond what is safe.”

In high-precision environments, safety is defined by boundaries.

A robotic platform must respect surgical intent, operate within strict control constraints and enhance stability without ever overriding clinical judgment.

This philosophy guided the development of LUCA at AcuSurgical.

LUCA was not conceived as an autonomous surgical system. It was engineered to provide consistent, micron-level stabilization during the most delicate retinal maneuvers — precisely where variability carries the greatest impact. Beyond stability, it enables reproducibility: the ability to execute identical, controlled movements repeatedly, reducing performance dispersion between procedures.

Just as fly-by-wire systems reshaped aviation safety, robotic stabilization can reshape surgical consistency.

From variability reduction to complication prevention

In aviation, control systems did more than reduce incidents. They shifted catastrophic events from plausible risk to statistical rarity.

Surgery must pursue the same transformation.

Reducing micro-instability during critical maneuvers influences more than operator comfort and fatigue. It reshapes procedural variability itself.

Greater stability leads to more consistent execution of key steps, more predictable safety profiles and reinforced surgeon confidence.

The objective is not spectacular automation.

It is silent reliability. Procedure after procedure.

Perspectives

In aviation, safety is engineered long before takeoff.

In surgery, it must be engineered long before incision.

The future of surgical robotics will not be defined by the degree of autonomy.

It will be defined by the quality of the limits it embeds.

At the scale of microns, the difference between automation and engineered restraint is not philosophical. It is a safety requirement.