Eight rules

Written before the work, so the work can be held to them.

1. Does not diagnose, reassure or advise.

One. It does not diagnose, reassure or advise a patient about their symptoms. It collects information, explains process and hands over to a person.

2. Writes only what it can source.

Two. It does not write what it cannot source. Every statement that could enter a record points to where it came from, or is shown as an open question.

3. Never acts silently.

Three. It does not act silently. Anything it changes in a record, a schedule or a message is logged with what it changed, why and for whom.

4. Says when it does not know.

Four. It says when it does not know. Confidence is shown in words a clinician can use, and a refusal to answer is an acceptable output.

5. Always overridable by a person.

Five. A person can always override it, and can see how. No flow requires a clinician to accept a draft to continue.

6. Uses patient data only as given.

Six. It does not train on patient data that was not given for that purpose. Where data is used for research, the consent and approvals are stated on the record.

7. Tested where it fails.

Seven. It is tested where it fails, not only where it works. Languages, accents, rare presentations and unhappy paths get their own test sets.

8. Never publishes what it has not measured.

Eight. We do not publish a result we have not measured, and we do not describe a proposal as a product.