Persona in action. Watch the work, not the slideware.
Three recreations of governed personas at work across the platform's sibling systems — logging in through three governance gates, completing tasks autonomously where that is safe, and stopping dead where the law reserves the decision for a human. This is human-in-the-loop as an architecture, not a checkbox: the demonstrable oversight that the EU AI Act and its peers expect of high-risk clinical AI.
EPS-77031 · Priya Sharma2 items · from Dr A. Okafor, GP consultSIGNED BUNDLENEW
EPS-77029 · T. Adeyemi1 itemDISPENSED
EPS-77026 · M. Kovacs3 itemsDISPENSED
Open EPS-77031
Pharmacy Dispensing CLINICAL CHECKEPS-77031 · Priya Sharma · on warfarin
Co-amoxiclav 625 mg1 tablet, three times a day · 5 daysINTERACTION: WARFARINEVIDENCE CITEDDISPENSED
AUTONOMOUS RESOLUTION · T2 ACT-THEN-REVIEW
FlagCo-amoxiclav can strengthen warfarin's effect on blood clotting
AssessmentRecognised interaction, not a contraindication · advise a clotting (INR) blood test in 3–5 days
ActionCounselling note printed · GP record annotated · dispense proceeds
Resolved and dispensed autonomously · queued for pharmacist review · evidence manifest signed
Pharmacy Dispensing CONTROLLED DRUGEPS-77031 · item 2 of 2
Morphine sulphate 10 mg, modified release1 tablet, twice a day · Schedule 2 controlled drugHUMAN SIGN-OFF
THE PERSONA STOPS HERE.Controlled-drug supply requires a registered pharmacist's signature — escalating to pharmacist_or_prescriber_validation.
HUMAN SIGN-OFF · T1 SYNCHRONOUS
PharmacistR. Ndlovu (human) · controlled-drug register entry drafted for approval
DecisionAPPROVED & SIGNED
Supply released under human signature · the agent could draft, never decide
One prescription. Two boundaries respected.
The routine item was checked, resolved and dispensed autonomously with cited evidence. The controlled drug stopped the persona cold and left with a human signature. Both loops closed back to the GP record; the patient was notified on the Citizen Portal.
4SIBLING SYSTEMS
1SUPERPERSONA
2HUMAN SIGNATURES
6SIGNED MANIFESTS
Emergency Department TRIAGEDaniel Okoye · 54 · walk-in
STRUCTURED TRIAGE · TRIAGE SUPERPERSONA (ASSISTS)
PresentingCentral chest pain, 40 min, radiating to left arm
ObservationsHR 96 · BP 148/92 · SpO2 97%
Pathway outputRED FLAG · CARDIAC
ESCALATION
NO DIAGNOSIS BY AI.The agent prioritises and escalates to emergency_team_break_glass — a named team, not a queue.
ED team alerted in 40 seconds from door · cubicle assigned
Emergency Department ORDER SETDr L. Marsh (human) · ED clinician
AGENT-DRAFTED ORDERS · T1: THE AGENT DRAFTS, THE HUMAN SIGNS
12-lead ECGimmediateDRAFTED
High-sensitivity troponinnow + 3 h → laboratory (LIS)DRAFTED
Troponin (hs-cTnT)62 ng/L — above the normal limit
Critical valueED PAGED · 08:53
SIGN-OUT IS HUMAN-ONLY.The agent chased the sample and paged the flag — result authorisation is a clinical act, released under laboratory authorisation rules.
PACS-RIS IMAGINGChest X-ray · Daniel Okoye
AI SECOND READ · DRAFT
Draft findingNo pneumothorax; no widened mediastinum; normal cardiac silhouette
StatusDRAFT ONLY
VALIDATION · radiologist_validation_required
RadiologistS. Whitfield (human)
ReportVALIDATED & SIGNED · 09:07
Draft accelerated the read · the signature stayed human
Emergency Department DISPOSITIONDr L. Marsh (human)
ONE CONSOLIDATED TIMELINE · NOTHING WAITED
08:12Triage red-flag → team break-glass
08:19ECG signed · bloods drawn · CXR requested
08:53Troponin critical value paged
09:07Chest X-ray validated by radiologist
09:26Clinical decision by Dr Marsh: admit to cardiology, acute-coronary-syndrome pathway
Admission letter and safety-net advice drafted by the agent · signed by the human · copies to GP record and Citizen Portal
The agent never diagnosed. It made sure nothing waited.
Triage escalated in seconds to a named team. Orders were drafted, chased and consolidated. Troponin and imaging came back signed by the humans the law expects. The clinician spent the hour on the patient — not on the chase.
4SYSTEMS · ED LIS PACS GP
74MINUTES DOOR-TO-DECISION
0AI DIAGNOSES
4HUMAN SIGNATURES
CITIZEN PORTAL
Appointment tomorrow, 12:10Endocrinology review, Clinic 4. Check in from your phone when you arrive.
AssistantWant your annual bloods done the same day, so you skip a second trip?
BookedBloods added at 12:40, same building.
CARE COORDINATOR SUPERPERSONA · SEQUENCING (AUTONOMOUS)
TaskFit phlebotomy after the 12:10 consult, same site
TierADMIN · NO CLINICAL CONTENT
Escalation, if stuckresponsible_clinician_or_service_owner
The assistant never diagnoses — its write scope on the clinical chart is empty
VISIT DAY · 12:04
Checked in from the car park
Consult · Dr Imran (human) · 12:10
Bloods · 12:40
Results · when verified
CLINIC VIEW · CONSULT IN PROGRESS
ClinicianDr Imran (human) · full history on one screen
Agent's partPre-visit summary drafted · annual bloods order pre-staged for signature
OrderSIGNED BY DR IMRAN → LIS
VISIT DAY · 12:58
Consult done · 12:34
Bloods taken · 12:47
Laboratory processing…
AssistantYour samples are with the lab. You are free to go — results come to this app once a clinician has seen them.
LIS · SAME-DAY RUN
Diabetes control (HbA1c) · kidney function · cholesterolANALYSER 13:22
VerificationHUMAN SIGN-OUT
Release ruleAbnormal results route to the clinician first — never straight to the phone
14:05
Results readyReviewed and released by Dr Imran. Diabetes control (HbA1c) improved — 48 down to 44. Plain-language summary inside.
Follow-up bookedRepeat review in 6 months, 11 Feb · 09:50. One tap to change.
WHAT JUST HAPPENED, IN ORDER
13:41Results verified · clinician review queue
13:58Dr Imran (human) reviews and releases
14:02Assistant drafts the plain-language summary — from the released record only
Consult, bloods, verified results and a booked follow-up — inside two hours, watched live from a phone. The assistant coordinated everything and decided nothing: every clinical judgement on this timeline carries a human name.
1TRIP INSTEAD OF 3
115MINUTES, CONSULT TO RESULTS
100%RESULTS CLINICIAN-REVIEWED
0PHONE CALLS NEEDED
EVIDENCE CHAIN — every step emits a signed, ledger-anchored manifest
signalbox
Choose a demonstration
Press Play, or step through the scenes.
Human-in-the-loop is not a feature here. It is the architecture.
What you just watched is demonstrable oversight — the design posture that the governance frameworks for high-risk clinical AI expect. Alignment is built into the architecture; formal conformity assessment remains specific to each deployment and jurisdiction.
EU AI ACT · ART. 14 — HUMAN OVERSIGHTGraduated autonomy is the oversight mechanism
T0 and T1 actions cannot execute without a named human; T2 is act-then-review. Every run is headed — a person can watch live and interrupt at any step.
EU AI ACT · ART. 12 — RECORD-KEEPINGLogs you saw being written
Every scene emits a signed, ledger-anchored evidence manifest — automatic records that reconstruct who acted, under which assumed persona and authority.
Decisions with legal or significant effect — sectioning, certification, sign-out, controlled-drug supply — are human-reserved in code, not in policy.
DCB0129 / 0160 · CLINICAL SAFETYSafety controls in the build pipeline
The assurance agent enforces clinical-safety controls at build time and named escalation at run time — supporting, never replacing, your Clinical Safety Officer.
Stylised recreations — not product screenshots — of journeys the platform executes as code: the flagship patient_visit_gp_to_pharmacy_to_lis_to_referral scenario and the patient-visit acceptance pathways (31 care hops, 14 executed autonomously, statutory decisions human-reserved in code). The real runs are driven headed by SignalBox with persona switching and signed evidence capture — the cursor carries the identity of whichever persona is driving. Book a walkthrough to watch one live.