Tool-grounding
Every report requires a completed tool call chain — architectural guarantee, not model-dependent. 100% on MTBBench n=40
Pipeline · Table B
Guideline attribution
Each tool type mapped to governing standard (AMP/ASCO/CAP, NCCN, IEDB, HIPAA Safe Harbor)
eval harness · Table B
HITL gate
Human review triggered on actionable cases (TMB-High, MSI-H). 7.5% catch rate [0%, 17.5%] — fires selectively, not over-flagging
approve_patient_report
De-id integrity
validate_deidentification called on every report output. HIPAA Safe Harbor 45 CFR 164.514. Architectural guarantee
mcp-deidentify · Table B
HIPAA audit log
Timestamped record of every tool call, patient ID, and outcome. 45 CFR 164.312(b) Security Rule
Pending confirmation
Canonical fixtures + doc-audit
Version-controlled source of truth for all tool outputs; CI scan catches canonical value drift on every PR
tests/fixtures/ · audit.py