Control panel

The System Administrator's seat. Everything on the platform can be controlled from here — the live model, the outbound feeds, the import hold, the integrity checks — and none of it quietly: full control is not exemption, and every switch thrown on this page lands on the audit trail under your name.

Every model the platform runs, in one inventory: the language models behind the assistant and the predictive, classification, optimization and mapping models behind the other capabilities. Bring your own: register any model against the capability slot it serves — an LLM by provider and model ID, or any other model by its TLS inference endpoint. Registration is inventory (mirroring Registry & preflight), enablement is a decision, and activation binds the model to its slot. Every step is audited.

Model	Kind	Slot	Provider / endpoint	Model ID · version	Status	Actions
PHI RAG The clinical assistant - retrieval over the Data Store through role-scoped tools, cited answers under the reader's role and purpose.	retrieval	assistant	built-in	— · v1	enabled	Edit built-in
Claude Sonnet 5 The language model PHI RAG runs on: reads gate-released excerpts, writes the drafted answer.	foundation	assistant	Anthropic API	claude-sonnet-5 · v1 ACTIVE	enabled	Edit built-in
Scripted fallback Answers from fixed logic when live model calls are off or unavailable.	deterministic	assistant	built-in	— · v1	enabled	Edit built-in
No-show risk model Predicts missed appointments so outreach goes where it helps. Subject to the fairness screen: subgroup calibration is published, and the permitted intervention is support, never denial of scheduling.	predictive	noshow	built-in	noshow-grad-boost · v2.1 ACTIVE	enabled	Edit built-in
Sensitivity classifier Classifies every incoming condition, medication and document into the sensitive categories (Part 2 SUD, mental health, reproductive, HIV, genetic) at the ingestion door.	classifier	segmentation	built-in	sens-classify · v1.4 ACTIVE	enabled	Edit built-in
Scheduling optimizer Template and capacity optimization under hard fairness constraints - overbooking burden may not concentrate on protected groups.	optimization	scheduling	built-in	sched-opt · v1.2 ACTIVE	enabled	Edit built-in
Terminology mapper Maps source-system codes to standard terminologies; low-confidence mappings queue for human review rather than being silently accepted.	mapper	ingest	built-in	term-map · v3.0 ACTIVE	enabled	Edit built-in
Denial risk model Scores every claim for denial risk before submission, from the payer and service-line adjudication history in the Data Store. Advisory only; factors cited.	predictive	claims	built-in	denial-risk · v1.0 ACTIVE	enabled	Edit built-in
Prior auth evidence assembler Retrieves the chart evidence for each payer criterion and drafts appeal letters into the signature queue. Gaps stated as gaps, never inferred.	retrieval	priorauth	built-in	pa-evidence · v1.0 ACTIVE	enabled	Edit built-in
Coding integrity model Reads charts against coded claims both ways: codes without documentation, and documented conditions never coded. Drafts clinician queries; never changes a code or note.	classifier	coding	built-in	coding-integrity · v1.0 ACTIVE	enabled	Edit built-in
ROI requirements validator Validates every release request against the configured jurisdiction requirements before release. Can block, never approve; unconfigured jurisdictions fail closed.	classifier	roi	built-in	roi-validator · v1.0 ACTIVE	enabled	Edit built-in
Ambient listener — faster-whisper Speech-to-text for ambient documentation. Runs inside the deployment: audio never leaves the account, no vendor BAA exists because no vendor touches the audio. Consent-gated per jurisdiction before any capture.	custom	ambient	Self-hosted (MIT)	small.en int8 · v1.2 ACTIVE	enabled	Edit built-in
Inbox triage ranker Ranks the clinical inbox — abnormal results, documents, unsigned drafts — by urgency. Reorders, never removes: triage that hides items is a safety incident.	deterministic	triage	Built-in	urgency-rank v1 · v1.0 ACTIVE	enabled	Edit built-in
Imaging read assistant Reads representative frames of an imaging series in the viewer - a genuine vision inference over the pixels - and drafts a structured report with measurements from the acquisition scale. Drafts land in the signature queue. Demo reads run over synthetic phantom frames and say so.	vision	imaging	Anthropic (your BAA)	claude-sonnet-5 · v1.0 ACTIVE	enabled	Edit
Patient instructions writer Writes plain-language patient instructions from chart facts; paired no-new-assertions checker gates release (SPEC 5.3).	llm.generative	instructions	organization-managed	byom-instructions-writer · v1.0 ACTIVE	enabled	Edit
Ingest QA reviewer Reads the deterministic ingest QA sweep and argues mapping-pipeline root causes and fix order (SPEC 5.13).	llm.analytic	ingestqa	organization-managed	byom-ingestqa-reviewer · v1.0 ACTIVE	enabled	Edit

A new model registers as registered (inventory only) — enable it, then activate it into its slot, each an audited decision. Endpoints must be HTTPS; anything else is rejected. The assistant slot is live-wired to the active foundation model; the other slots bind the platform's capability screens, and the fairness screen applies to any predictive model before it serves patients. A model that cannot actually answer fails loudly with the error stated — the platform never silently falls back to a model you did not choose.