medOS ultra
AI AgentsClinical · plane-isolatedClinical coworkers

Clinical · plane-isolated

Clinical coworkers

A coder, nurse, pharmacist and scribe for every chart — all draft-until-signed.

Clinical coworkers are named AI agents that draft the documentation and clinical thinking around a chart: ICD-10/DRG codes, SBAR handoffs and care plans, medication second opinions, and the consultation note itself. Every output is a proposal a clinician must accept, edit or reject — no coworker can write to a chart hands-free, by design. They run on the Clinical data plane only, audited per decision with a full reasoning trace, and PHI can stay on-box.

Recommender-firstHuman sign-offPlane-isolatedOn-box AI option
Clinical coworkersclinical · plane-isolated
live
senseproposeapproveexecute
encounter notedraft-until-signed

Coder draft · ICD-10 + DRG

I21.4NSTEMI
E11.9Type 2 diabetes
DRG 281AMI w/o CC
recommenderconf 0.84
AcceptEditReject
drafting…→ inbox ✓

The clinical coworkers

A coworker for every clinical surface

Clinical isn't one job — it's the whole hospital. Each surface gets its own plane-isolated coworker that drafts the work and waits for a clinician to sign. Sixteen of them, and counting.

coder — workbench
AN 69-002148 · IPD ผู้ป่วยใน · LOS 4dDRG 127
I50.0Congestive heart failure
PDx
J18.9Pneumonia, unspecified organism
SDx
E11.9Type 2 diabetes mellitus
SDx
96.04Insertion of endotracheal tube
ICD-9-CM

AI suggests: I50.0 + J18.9 (recommender-only)

AcceptDismiss
chart signed — edits require unlock workflow
COMPLETENESS
region pack THrule pack v2.4

4 / 4 dx coded

1 procedure coded

summary unsigned by MD

Health information

Coding coworker

draft-until-signed

Drafts ICD-10 / ICD-9-CM / DRG on the signed chart.

Explore the surface
nursing — e-MAR medication round
MEDICATION ROUND · Ward 4B · B07now 14:05 · day shift
Medication06:0010:0014:0018:0022:00
Potassium chloride 20 mEq POfixed

auto-held: K+ > 5.5 — CDS rule

Prednisolone 30 → 5 mgtaperdue
Morphine 2 mg IVPRN
✓ given● due now— held○ upcoming2 alerts carried to night shift
Inpatient nursing

Ward nurse coworker

draft-until-signed

Drafts SBAR, care plans and the e-MAR round.

Explore the surface
pharmacy — verify → dispense → deliver
VERIFY4
Similar order 2h ago — confirm?

Ceftriaxone 2 g IV

HN 66-04211OD

Warfarin 3 mg

HN 66-01120taper

Paracetamol 500 mg

HN 66-09833PRN

+1 more

DISPENSE2

Insulin RI sliding

HN 66-07442sliding scale

Enoxaparin 60 mg

HN 66-03318q12h
DELIVER3

Vancomycin 1 g IV

HN 66-02207q12h

Morphine PCA

HN 66-05519PCA

Omeprazole 20 mg

HN 66-08804OD
Pharmacy

Pharmacist coworker

draft-until-signed

Drafts interaction checks, second-opinion & dispense verify.

Explore the surface
ambient-scribe — draft until signed

listening — audio never leaves the browser

CHIEF COMPLAINTChest tightness for 2 days, worse on exertion Confirmed
HPIOnset 2 days ago, pressure-like, radiates to left arm, relieved by restConfirm
VITALS NARRATEDBP 152/94 · HR 96 · SpO2 96% RA · T 36.8Confirm
DIFFERENTIALSI20.0 unstable angina · K21.9 GERDcatalog-groundedConfirm
ORDERSECG 12-lead stat · Troponin I · ASA 300 mg POConfirm

no raw transcript at rest · fail-open to regex

Documentation

Ambient scribe

draft-until-signed

Drafts the consultation note from ambient audio.

Explore the surface
cds-rules — configurable clinical decision support
ACTIVE RULES — /admin/cds-rulesNEWS2 · MEWS · qSOFA · sepsis library
NEWS2 aggregate ≥ 7CRITICAL2 today
Hyperkalemia K+ ≥ 5.5CRITICAL1 today
qSOFA ≥ 2 (sepsis screen)WARNING3 today
NPO violation — oral orderWARNING0 today
Antibiotic timing 1h windowINFO4 today

Every vitals write auto-fires CDS. Alerts surface via global FAB + drawer + inline badge. Rules are data rows — editable live, no code deploy.

Clinical decision support

CDS sentinel

draft-until-signed

Drafts NEWS2 / MEWS / qSOFA / sepsis alerts on every observation.

Explore the surface
opd-autopilot — station autonomy matrix
red flags evaluated BEFORE any AI proposal — chest pain · FAST · qSOFA
OFFASSISTSUGGESTAUTO
Screening
Doctor assign
Lab routing
Pharmacy
PaymentLOCKED
payment never AI-auto — invariant, not configkill switch · 3-layer: env · entitlement · per-station
Outpatient

OPD triage coworker

draft-until-signed

Drafts an ESI triage level and the next station.

Explore the surface
er — triage board
ESI LANES · ห้องฉุกเฉิน9 in department
L1 · 1
69-104202m
L2 · 2
69-098707m

red-flag: chest pain — AI deferred

69-101511m
L3 · 3
69-095418m
69-096124m
69-097331m
L4 · 2
69-092240m
69-091847m
L5 · 1
69-089063m
er_bed_stay_log · Bay 3 · 142 min฿1,860 posted to ledger
Emergency

ER coworker

draft-until-signed

Drafts triage, bed placement and red-flag escalation.

Explore the surface
or — room status board
ROOM STATUSSign-in → Incision → Closing → PACU
OR 1In case

Lap chole · Dr. Wirote

OR 2Turnover 12:40

next: TKA · Dr. Suda

OR 3Available

block: General PM

OR 4incidentCSSD hold

set #A-114 reprocess

Block utilization · by surgeon service

General
82%
Ortho
74%
ENT
61%
Cardiac
45%
Operating room

Perioperative coworker

draft-until-signed

Drafts counts, the surgical checklist and the op-note.

Explore the surface
labor-ward — WHO partograph (ห้องคลอด)
CERVICOGRAPH · ปากมดลูก (cm) × ชั่วโมงG2P1 · 39+2 wk
0246810024681012ALERTACTIONreview — crossed alert line
FHR (bpm)140138144within range

Newborn · ทารกแรกเกิด

HN issued

via global-sequence

AN linked

AN 69-002214

Apgar 1' / 5'

9 / 10

Delivery (ห้องคลอด)

Labor-ward coworker

draft-until-signed

Drafts partograph alerts and newborn registration.

Explore the surface
icu — dynamic flowsheet
ICU FLOWSHEET · bed ICU-03score preset DS_IPD_ICU
MAP trendfalling
hr08:0009:0010:0011:0012:0013:00MAP727068656361HR889296101108112SpO2979695939291FiO2.30.35.40→ .40.45.50NEWS2123576
NEWS2 7 at 12:00 — escalation: urgent clinical reviewco-sign: RN done · awaiting charge nurse
Critical care

ICU flowsheet coworker

draft-until-signed

Drafts flowsheet anomalies, trends and carry-forward.

Explore the surface
lab — specimen pipeline
ORDERED12
COLLECTED9
IN TRANSIT3
RECEIVED8
RESULTED14
FILED41
K+6.1mmol/L
CRITICAL — escalation ack pending
Cr1.4mg/dL
HIGH
Hb11.8g/dL
normal
specimen transportPorter scan · temp chain 4.2°C ok
SP-66-1207
Laboratory

Lab coworker

draft-until-signed

Drafts critical-value escalation and result triage.

Explore the surface
imaging-nm — modality worklist & hot lab
MODALITY WORKLISTDICOM MWL · 4 studies
CTCT Chest w/ contrast
in-progress
MRMRI Brain — stroke protocol
scheduled
PET-CTF-18 FDG whole body
reading
SPECTTc-99m MIBI cardiac rest
scheduled
Radiopharmacy hot lab · decay clock
Tc-99mT1/2 6.0h

04:12:33

F-18T1/2 110m

01:21:08

Ga-68T1/2 68m

00:42:51

Lu-177T1/2 6.6d

158:07:44

RDE^O11 dispense request sent — awaiting RAS^O17
Tc-99m 740 MBq
Radiology

Imaging & NM coworker

draft-until-signed

Drafts report drafts and dose-safety checks.

Explore the surface
blood-bank — unit registry & infection screen
UNIT REGISTRY · ธนาคารเลือดrealtime
UN-66-0412A+
available
UN-66-0398O-
crossmatched
UN-66-0371B+
quarantine
UN-66-0405AB+
available
custody scanUN-66-0398 → OR 3 · counter-scan ok · 4.1°C
14:32:08
Infection register · ทะเบียนผลติดเชื้อ
LOCKEDAUTO-UNLOCKED · LISMANUAL

▸ blood_lis_results present — register auto-unlocked

Transfusion

Blood-bank coworker

draft-until-signed

Drafts compatibility, custody chain and reaction watch.

Explore the surface
compounding-room — USP <797>/<800> admixture
WORKSHEETCR-66-0211
IngredientDoseVolume
Vancomycin HCl1 g20 mL
NaCl 0.9%230 mL
Final admixture1 g250 mL

calc concentration = 4.0 mg/mL

BUD 24h @ 2–8°C · infuse ≥ 60 min

supervisedthroughputsimulation
PILLARS

BCMA barcode

3/3 scans matched

ON

Gravimetric verify

tolerance ±5% · 4.2 g / 4.0 g

ON

Photo capture

step 2 of 4 captured

ON

USP 800 hazardous

non-hazardous recipe

OFF

Double-check

awaiting 2nd pharmacist

ON
Sterile admixture

Compounding coworker

draft-until-signed

Drafts recipe math and incompatibility checks.

Explore the surface
nutrition — diet orders & meal rounds
Soft diet · low sodium class B ×1.2active
NPO since 22:00 — OR 07:30oral orders CDS-blocked
Diabetic 1800 kcal TH: อาหารเบาหวานbreakfast · lunch · dinner

Ward 5A

14 trays

Ward 5B

11 trays

ICU

6 trays

Patient QR menu — bed-side ordering, charges post to the ledger/patient-menu/:token
Dietary

Nutrition coworker

draft-until-signed

Drafts diet orders, NPO windows and meal rounds.

Explore the surface
patient-360 — 3D patient command
DIAGNOSES
3
ORDERS
5 active
LIVE VITALS
HR 92
ALERTS
2
2 clinicians viewing“repeat troponin in 3 hours”proposal pending
Cross-department

Patient-360 assistant

draft-until-signed

Drafts answers and actions across the whole chart.

Explore the surface

What it senses

The signals it watches for you

It reads across the systems you already run — on the medOS event substrate — and surfaces the issue while there is still time to act.

Discharged-but-uncoded encounters

Watches encounter_journey_cache for newly discharged charts with no codes filed, then drafts ICD-10/ICD-9 and the DRG for a coder to sign.

Structured encounter summary

Reads the encounter's structured read model — diagnoses, orders, results, vitals — never free-text it has to guess at, so proposals are grounded in catalog IDs.

Live consultation transcript

The ambient scribe listens to the doctor-patient conversation locally (audio never leaves the browser) and turns the final transcript into chief complaint, HPI, narrated vitals and a SOAP note.

Active medication & allergy list

The pharmacist coworker reads the active orders, allergy list and CDS interaction rules to surface a second opinion before administration.

Vitals & observation writes

Every observation write fires CDS rules; the nurse coworker reads the resulting EWS trend and overdue acknowledgements to draft an SBAR escalation.

Shift & handoff boundaries

At end of shift it senses open alerts and carried-forward issues to draft the SBAR handoff for the oncoming nurse.

What it proposes

Drafted work, never an autonomous act

Each item lands in the Acknowledgement Inbox with its reasoning and a confidence score. Nothing is sent, charged or changed until a human accepts.

proposalconf 0.86

Drafted discharge coding

Primary I21.4 (NSTEMI) + secondary E11.9, drafted as a DRG with the supporting chart lines cited, queued to the coder to accept/edit.

AcceptEditReject
proposalconf 0.82

SBAR escalation handoff

"S: 64M post-op day 2, HR 118, SpO2 91% on RA; B: …; A: possible PE; R: request urgent review" — drafted from the live EWS trend, sent to the charge nurse.

AcceptEditReject
proposalconf 0.79

Pharmacist second opinion

Flags a potential warfarin + ceftriaxone interaction on the active order and proposes an INR-monitoring note — never blocks the order, only advises.

AcceptEditReject
proposalconf 0.74

Ambient SOAP draft

From a 9-minute consult: chief complaint, HPI (onset 3d, severity 7/10), vitals BP 140/90, and a SOAP note — every field shown beside its transcript excerpt for per-field confirm.

AcceptEditReject

The loop

Sense → propose → approve → execute

01

Sense

Reads the Clinical-plane read models only — discharged-uncoded encounters, the structured chart, a live consultation transcript, the active order/allergy list, or the EWS trend.

02

Propose

Drafts the code set, SBAR, second-opinion note or SOAP note as a proposal with a confidence score and the cited chart lines or transcript excerpts behind it. Nothing is written.

03

Approve

The draft lands in the Acknowledgement Inbox (or beside the consultation form) as an agent_proposal; a clinician accepts, edits or rejects each field — and that disposition is the training label.

04

Execute

On accept the agent calls the very same write path the clinician uses — the coding write, the note's Redux dispatch, the order form prefill — through the existing confirm-gate. No shadow write path ever touches a chart.

Capabilities

What it can do

Medical coder

Drafts ICD-10/ICD-9 and DRG for discharged encounters from the structured chart, citing the lines that support each code. The coder owns the code; the agent only proposes.

Nurse SBAR & care-plan

Composes SBAR handoffs and care-plan drafts from vitals trends, EWS scores and open alerts, so the escalation is written before the nurse picks up the pen.

Pharmacist second-opinion

Reads active orders against the allergy list and CDS interaction rules and offers an advisory note. Recommender-only — it can suggest, never gate or block an order.

Ambient clinical scribe

Continuous-listen consultation capture: audio stays in the browser, only the text transcript is processed, and the result pre-fills the same note form the doctor would fill by hand.

Catalog-grounded extraction

Differentials and drug names resolve through the SmartDiagnosis and order catalogs, not free-form generation — a hallucinated entity can't reach a proposal.

Per-field accept/edit/reject

Drafts arrive field-by-field beside their source, so a clinician confirms each one. The accept/edit/reject delta is the training signal, captured to the audit log — never to the chart.

On-box inference option

Extraction can run on Ollama on your own hardware, so transcripts and chart data never leave the building. Falls back to a local-regex path when no model is configured.

Not a black box

Why it is safe to run

Autonomy without guardrails is a liability in a hospital. These are the constraints that make this agent safe to put to work.

Draft-until-signed, always

No clinical write — code, note, order, vitals — is persisted until a clinician confirms it. Clinical writes can never run hands-free; it's enforced by construction, not policy.

Clinical plane only, DB-enforced

These coworkers run under a Postgres role scoped to the Clinical plane. Plane confinement is a database grant — a Growth or marketing agent literally has no grant to read a chart.

No hallucinated entities

The SeenMatches guard rejects any terminal proposal that references a code or drug not surfaced from the catalog during the run. The model identifies that a BP medication was mentioned; the catalog resolves the actual entity.

Audited per decision

Every proposal and disposition is logged to llm_audit_log under a named agent identity with the full RunnerStep reasoning trace; the accept/edit/reject delta is the label, never written to the chart.

Data plane

Runs exclusively on the Clinical data plane under a Postgres role with grants on clinical read models only; isolation is enforced at the database grant level, so a non-clinical agent cannot read a chart.

Operating characteristics

What changes when it runs

Draft-until-signed

No autonomous clinical write

Every code, note and order is confirmed by a clinician before it persists

24/7

Always-on coding backlog

Drafts discharged-uncoded encounters overnight; your team works the exceptions

On-box

PHI can stay in the building

Extraction runs on Ollama on your hardware; air-gapped deployments supported

Per-field

Granular human sign-off

Each drafted field is accepted, edited or rejected beside its source evidence

Works on your stack

Reads and writes where you already work

On accept, it calls the very same endpoints your staff use — no shadow write path, no second source of truth.

encounter_journey_cache (structured chart read)Acknowledgement Inbox (agent_proposal disposition)cowork_proposals (draft + reasoning trace store)Medical Coder Workbench (coding write path)CDS rules engine (interaction & EWS evaluation)SmartDiagnosis & order catalogs (entity grounding)Consultation note form (scribe prefill via Redux)llm_audit_log (per-decision audit under agent_id)

Questions

Frequently asked

Can a coworker change a patient's chart on its own?

No. By design, every clinical output is a proposal a clinician must accept, edit or reject. On accept it calls the same write path your staff use, through the existing confirm-gate — there is no shadow path that lets it write hands-free.

Where does the consultation audio go?

Nowhere. The ambient scribe uses the browser's local speech recognition; audio bytes never leave the device. Only the de-identified text transcript is processed, and it's cleared from memory after you apply or discard the draft — no raw transcript is stored.

Does PHI leave our network for the AI?

It doesn't have to. Inference can run on Ollama on your own hardware, including air-gapped deployments. When no model is configured the scribe falls back to a local-regex path, so the feature never breaks.

How does it learn?

From your clinicians. Every accept, edit or reject is captured as the training label in the audit log. The model sharpens against your team's real dispositions — it is never trained by writing to the chart.

Could a marketing or growth agent read a chart?

No. Agents are scoped to one data plane and that isolation is enforced at the database grant level. A Growth-plane agent's role has zero grants on clinical tables — it cannot read a chart even if it tried.

What exactly can the pharmacist coworker touch?

It reads active orders, the allergy list and CDS rules and drafts an advisory second opinion. It is recommender-only: it can flag an interaction and propose a monitoring note, but it can never gate, hold or block an order.

Put Clinical coworkers on your floor

See it draft real work against your own workflows — every action under human sign-off.

Ask Anything