System design

Design retrieval and tool gates so an injected document cannot cross tenants or bypass clinician approval.

Turn risk decisions into dated access reviews, incident drills, restore tests, retention work, and scoped evidence.

Map the roles, data copies, and trust boundaries of a fictional clinical intake agent before choosing controls.