# DISCOVER — Healthcare Research & Innovation Leader Complete AI OS

## Setup, Benefits & User Guide

**Program ID:** `HRIL-AIOS-DISCOVER-COMPLETE-1.0`<br>
**Lane:** `healthcare_research_innovation_leadership`<br>
**Home:** My DISCOVER Mission Control at `/healthcare-research-innovation-leaders/dashboard`<br>
**Version / review date:** 1.0.0 / 2026-07-16

## What you gain

DISCOVER gives a healthcare research and innovation leader a dedicated, governed organizational planning lane, plus an optional owner-private whole-life record, for mission, opportunity framing, research/QI/clinical/product boundary questions, evidence provenance, study-design options, portfolio decisions, co-design, funding and partnership readiness, implementation, translation, responsible AI-agent evaluation, leadership growth and whole-life renewal. It can reduce scattered work, make uncertainty and ownership visible, improve reproducibility and support safer stop/continue conversations. It does not grant authority, approval, compliance, scientific validity, safety, funding or permission to act.

## Before you install

**Installation may take a while** and may span several visible Hermes turns. **Nothing continues in the background.** Do not paste PHI/PII, participant/patient records, recruitment/contact/consent/safety narratives, person-level workforce data, secrets, export-controlled data, confidential sponsor/vendor/contract content, peer-review material or privileged invention details. Use synthetic/public sources or approved process/aggregate references only. Installation completes only after an accepted Activation Report; static artifact QA is not target-Hermes runtime proof.

The working product is independent and **not endorsed, certified, licensed, accredited, cleared, approved, or affiliated** with cited bodies.

## Easiest setup path

1. Give Hermes only the complete one-file installer Markdown—not the ZIP or modular source files.
2. Start read-only: `INSPECT DISCOVER INSTALLER ONLY — CREATE NO STATE.`
3. Read the S0 capability/collision/privacy/rollback report. Then, if correct: `INSTALL DISCOVER AFTER S0 — USE EXACT VERIFIED COMPONENT HASHES AND KEEP ALL POWERS AND AGENTS INACTIVE.`
4. Keep the session open across Phase 2–4. Hermes must emit `OVERLAY_STAGED_NOT_TESTED`, render and bind Mission Control, and **only then** execute S2. Inspect every receipt, unsupported capability and quarantine report.
5. Accept Phase 5 only if counts, states, routes, accessibility/fallback and evidence are exact. Installation leaves all powers inactive and agents disabled.

## Exact installation prompt

> **Hermes:** Install this entire Markdown file as `HRIL-AIOS-DISCOVER-COMPLETE-1.0` inside Nurse AI OS. Preserve the exact standalone lane, qualified routes, namespace, 17 component boundaries/hashes, 24 inactive powers, 24 Preview workflows, 30 templates, 18 executable schemas, ten disabled agents, ten fixtures/adapters and 160 runtime criteria. Do not summarize away executable content. Perform every phase visibly, pause for required human decisions, and never enable an external action, connector, power or agent by default.

## Exact resume prompt

> RESUME DISCOVER FROM LAST VERIFIED RECEIPT — DO NOT REPEAT PASSED PHASES, DO NOT CREATE A SECOND DASHBOARD, REPORT BEFORE/AFTER HASHES.

## Exact recovery prompt

> REPAIR DISCOVER FROM LAST VERIFIED RECEIPT — QUARANTINE FAILED STATE, CHANGE ONLY DISCOVER OBJECTS, RETEST AFFECTED CRITERIA, REPORT THE EXACT DELTA.

## Exact uninstall prompt

> FULL UNINSTALL DISCOVER

## Exact first safe use prompt

> OPEN MY DISCOVER MISSION CONTROL IN PREVIEW ONLY. USE SYNTHETIC DATA TO FRAME ONE RESEARCH OR INNOVATION QUESTION, KEEP FRAME MULTIPLE_OR_UNRESOLVED WHERE FACTS ARE MISSING, TAKE NO EXTERNAL ACTION, AND SHOW THE HUMAN GATE, EXPIRY, DISCARD PATH AND RECEIPT.

## Exact first-agent preview prompt

> PREVIEW AN ORBIT ONE-RUN CHARTER FOR AGT-09 USING ONLY A SYNTHETIC PUBLIC-SOURCE BRIEF. KEEP THE AGENT PERM-P0 DISABLED, ADD NO TOOLS, NETWORK OR DESTINATIONS, RUN NOTHING, AND SHOW THE FROZEN HASHES, CAPS, HUMAN APPROVAL, KILL, RECONCILIATION AND RETURN-TO-P0 REQUIREMENTS.

## Published download filename

Canonical governed web release:

- `discover-healthcare-research-innovation-leader-complete-edition.zip`

The complete program and both guide formats remain directly inspectable in the published package under their descriptive filenames. The supplied source documented additional short aliases; this governed web release intentionally publishes one canonical ZIP instead of duplicate alias files. See `ROLE-PACK.json` for exact upstream-to-published provenance and transformations.

## Exact recovery and removal prompts

- `RESUME DISCOVER FROM LAST VERIFIED RECEIPT — DO NOT REPEAT PASSED PHASES, DO NOT CREATE A SECOND DASHBOARD, REPORT BEFORE/AFTER HASHES.`
- `REPAIR DISCOVER FROM LAST VERIFIED RECEIPT — QUARANTINE FAILED STATE, CHANGE ONLY DISCOVER OBJECTS, RETEST AFFECTED CRITERIA, REPORT THE EXACT DELTA.`
- `FULL UNINSTALL DISCOVER` — inspect the deletion/export/private-store/other-lane/hold preview, then provide the second confirmation only if correct.

## Mission Control

`/healthcare-research-innovation-leaders/dashboard` is the accessible canonical Markdown source of truth; `/healthcare-research-innovation-leaders/mission-control` is its only alias. It shows active hat/authority, data ceiling, a deterministic maximum-seven attention queue, aggregate portfolio/governance/evidence views, ten-agent controls, life-plan neutral link and Pause/Kill/Correct/Export/Resume/Rollback/Uninstall controls. Four safe launchers open Preview only: **Frame a Research or Innovation Question**, **Build an Evidence and Source Brief**, **Review Portfolio, Authority, and Decision Readiness**, and **Design a Translation or Adoption Experiment**. They expose input/schema, human gate, receipt/expiry and discard/rollback.

## Optional owner-private whole-life plan

WF-24/TPL-25 is optional and owner-only. It uses active hat `private_individual`, DATA-D3-PRIVATE, partition `research_innovation_discover.private.owner.<owner_id>` and one owner ACL. Before any lookup or persistence, Hermes must enforce `owner_id == sole ACL principal_id == partition owner suffix`; mismatch blocks with zero disclosure/retention and returns only to the authenticated owner. There is no institutional authority, approval, tenant/parent access, agent access, analytics, training, institutional export, separate receipt or private-existence trace. The private record keeps only its own `content_sha256`, `created_at` and `updated_at` plus owner-set review/delete fields. The organizational lane may display only exact neutral bridge wording the owner explicitly selects; it stores no private-plan reference or reason.

## Research/QI/clinical/innovation boundary

FRAME may output only possible pathways or `MULTIPLE_OR_UNRESOLVED`. It never declares not research, exempt, IRB not required, no consent required, FDA not regulated, HIPAA compliant or clinically appropriate. Labels such as pilot, QI, deidentified or public do not decide permission. Your HRPP/IRB, QI, clinical, privacy, regulatory, legal and other authorized local owners decide.

## The 24 DISCOVER SuperPowers

| Power | Pillar | Function | Installed state |
|---|---|---|---|
| PWR-01 | D | Mission, Impact & Research Leadership Compass | Available Inactive |
| PWR-02 | D | Unmet Need & Opportunity Framing Studio | Available Inactive |
| PWR-03 | D | Portfolio Prioritization & Stop/Continue Navigator | Available Inactive |
| PWR-04 | I | Research–QI–Clinical–Innovation Boundary Navigator | Available Inactive |
| PWR-05 | I | Research Integrity, Reproducibility & Provenance Studio | Available Inactive |
| PWR-06 | I | Data, Privacy, Rights & IP Governance Mapper | Available Inactive |
| PWR-07 | S | Study Concept & Design Options Architect | Available Inactive |
| PWR-08 | S | Feasibility, Participant Burden & Safety Readiness Lens | Available Inactive |
| PWR-09 | S | Outcomes, Measures & Analysis-Intent Studio | Available Inactive |
| PWR-10 | C | Participant, Patient, Community & Workforce Co-Design Planner | Available Inactive |
| PWR-11 | C | Scientific Team, Partnership, RACI & Conflict Navigator | Available Inactive |
| PWR-12 | C | Funding, Grant & Sponsor Readiness Studio | Available Inactive |
| PWR-13 | O | Portfolio Milestone, Dependency & Decision Orchestrator | Available Inactive |
| PWR-14 | O | Governance & Submission-Readiness Navigator | Available Inactive |
| PWR-15 | O | Site, Vendor, Technology & Pilot Readiness Studio | Available Inactive |
| PWR-16 | V | Innovation Assumption & Bounded Experiment Lab | Available Inactive |
| PWR-17 | V | Value, Health-Economics, Equity & Burden Scenario Studio | Available Inactive |
| PWR-18 | V | Translation, Commercialization & Scale/Stop Pathway Architect | Available Inactive |
| PWR-19 | E | Evidence Landscape, Systematic Search & Horizon-Scan Navigator | Available Inactive |
| PWR-20 | E | Implementation Science, Adoption & Learning-System Studio | Available Inactive |
| PWR-21 | E | Dissemination, Publication & Evidence-to-Decision Studio | Available Inactive |
| PWR-22 | R | Responsible AI Use-Case, Agent & Model Governance Command | Available Inactive |
| PWR-23 | R | Research Leadership, Capability, Career & Succession Builder | Available Inactive |
| PWR-24 | R | Whole-Life Purpose, Capacity & Renewal Navigator | Available Inactive |

## The 24 runnable Preview workflows

| Workflow | Name | Primary template/schema | Mode |
|---|---|---|---|
| DSC-WF-01 | Define My Research & Innovation Mission and 90-Day Focus | TPL-01 / SCH-01 | Preview Only |
| DSC-WF-02 | Frame an Unmet Need Without Locking in a Solution | TPL-02 / SCH-02 | Preview Only |
| DSC-WF-03 | Compare Portfolio Options and Prepare a Stop/Continue Decision | TPL-03 / SCH-03 | Preview Only |
| DSC-WF-04 | Route a Research–QI–Clinical–Innovation Boundary Question | TPL-04 / SCH-02 | Preview Only |
| DSC-WF-05 | Build a Reproducible Evidence and Integrity Trace | TPL-05 / SCH-04 | Preview Only |
| DSC-WF-06 | Map Data, Privacy, Rights, Retention and IP Questions | TPL-06 / SCH-05 | Preview Only |
| DSC-WF-07 | Draft a Study Concept and Compare Design Options | TPL-07 / SCH-06 | Preview Only |
| DSC-WF-08 | Prepare Feasibility, Burden and Safety Readiness Questions | TPL-09 / SCH-07 | Preview Only |
| DSC-WF-09 | Define Outcomes, Measures and Analysis Intent Before Results | TPL-10 / SCH-08 | Preview Only |
| DSC-WF-10 | Plan Reciprocal Participant, Patient and Community Co-Design | TPL-11 / SCH-09 | Preview Only |
| DSC-WF-11 | Design the Team RACI, Expertise, Partnership and Conflict Map | TPL-12 / SCH-09 | Preview Only |
| DSC-WF-12 | Prepare a Funding, Grant or Sponsor Readiness Brief | TPL-13 / SCH-10 | Preview Only |
| DSC-WF-13 | Orchestrate Portfolio Milestones, Dependencies and Decision Gates | TPL-14 / SCH-03 | Preview Only |
| DSC-WF-14 | Prepare Governance and Submission Readiness Without Submitting | TPL-15 / SCH-11 | Preview Only |
| DSC-WF-15 | Compare Site, Vendor, Technology and Pilot Readiness | TPL-16 / SCH-07 | Preview Only |
| DSC-WF-16 | Design a Bounded Non-Production Innovation Experiment | TPL-17 / SCH-12 | Preview Only |
| DSC-WF-17 | Build Value, Economics, Equity and Burden Scenarios | TPL-18 / SCH-13 | Preview Only |
| DSC-WF-18 | Map Translation, Commercialization and Scale/Stop Gates | TPL-19 / SCH-13 | Preview Only |
| DSC-WF-19 | Create an Evidence Landscape and Reproducible Horizon Scan | TPL-20 / SCH-04 | Preview Only |
| DSC-WF-20 | Plan Implementation, Adoption Evaluation and Responsible Withdrawal | TPL-21 / SCH-14 | Preview Only |
| DSC-WF-21 | Prepare a Human-Voice Dissemination or Evidence-to-Decision Package | TPL-22 / SCH-15 | Preview Only |
| DSC-WF-22 | Charter and Evaluate One Bounded AI-Agent Run | TPL-23 / SCH-17 | Preview Only |
| DSC-WF-23 | Build My Research Leadership, Capability and Succession Plan | TPL-24 / SCH-01 | Preview Only |
| DSC-WF-24 | Create My Private Whole-Life Purpose and Renewal Plan | TPL-25 / SCH-16 | Preview Only |

## The 30 functional templates

| Template | Name | Function |
|---|---|---|
| TPL-01 | Mission & Impact Compass | W01; active hat, mandate, purpose, intended impact, non-goals, red lines, protected life, 90-day focus |
| TPL-02 | Unmet Need & Opportunity Brief | W02; signal, affected context, current alternatives, evidence, burden, owner, unknowns |
| TPL-03 | Portfolio Prioritization and Stop/Continue Matrix | W03; criteria, assumptions, ranges, opportunity cost, reversibility, decision owner |
| TPL-04 | FRAME Boundary Classification Intake | W04; possible pathways, triggering facts, unresolved questions, official review routes |
| TPL-05 | TRACE Evidence Provenance Card | W05; exact question/claim, source/version/status, methods/population, limits, conflicts, corrections, expiry |
| TPL-06 | Data, Privacy, Rights and IP Governance Intake | W06; approved metadata only, permitted use, access, retention, sharing, security, rights/IP and formal owner questions |
| TPL-07 | Study Concept Synopsis | W07; question, context/population, design options, comparator, outcomes, bias, feasibility, required experts |
| TPL-08 | Design Options, Bias and Validity Canvas | Cross-cutting W07/W09/W20; candidate designs and threats without design approval |
| TPL-09 | Feasibility, Burden and Safety Readiness Checklist | W08; aggregate/site readiness and official safety routes without a safety conclusion |
| TPL-10 | Outcome, Measure and Analysis-Intent Shell | W09; definitions, denominators, provenance, missingness, subgroups, uncertainty and review needs |
| TPL-11 | Participant, Patient and Community Co-Design Plan | W10; shared decisions, access, compensation questions, burden, dissent and feedback-back |
| TPL-12 | Team RACI, Expertise and Conflict Disclosure Map | W11; roles, decision rights, expertise gaps, conflicts/material interests, authorship and exit questions |
| TPL-13 | Funding, Grant and Partner Readiness Brief | W12; aims, fit, requirements, milestones, scenario budget, dependencies and internal routing |
| TPL-14 | Portfolio Milestone, Dependency and Decision Board | W13; aggregate milestone state, dependencies, official-system references, owners and decision deadlines |
| TPL-15 | Governance and Submission-Readiness Checklist | W14; applicable-review questions, package gaps, owners and authoritative destinations; never a submission |
| TPL-16 | Site, Vendor, Technology and Pilot Readiness Matrix | W15; requirements, evidence, privacy, security, accessibility, interoperability, support, lock-in and exit |
| TPL-17 | PROBE Assumption and Experiment Card | W16; smallest reversible non-production test, measures, burden, stop/rollback, human approval |
| TPL-18 | Value, Economics, Equity and Burden Scenario | W17; finance-approved aggregates, source/version, ranges, capacity, distribution and uncertainty |
| TPL-19 | Translation, Commercialization and Scale/Stop Pathway | W18; intended use, evidence thresholds, regulatory/IP/contract questions, operations, maintenance and exit |
| TPL-20 | Evidence Landscape and Horizon-Scan Map | W19; reproducible question/search shell, evidence strata, contradictions, gaps and update watch |
| TPL-21 | Implementation Strategy and Adoption Evaluation Plan | W20; context, determinants, strategies, implementation outcomes, balancing measures, adaptation, sustainment/withdrawal |
| TPL-22 | Dissemination, Publication and Evidence-to-Decision Plan | W21; audience, exact claims, sources, limitations, contributors/AI, accessibility, rights and release route |
| TPL-23 | ORBIT Agent Charter and One-Run Evaluation Card | W22; frozen versions/hashes, one-run token, fixtures, bounds, human checkpoints, kill and reconciliation |
| TPL-24 | Leadership Capability, Career and Succession Plan | W23; strengths, learning, scholarship, mentoring, relationships, succession and protected development |
| TPL-25 | Private Whole-Life Purpose and Renewal Plan | W24; owner-only values, relationships, community, protected time, recovery, minimum mode and legacy |
| TPL-26 | Participant Rights and Consent Question Set | Cross-cutting W04/W08/W10/W14; questions for qualified reviewers, never a consent form or waiver determination |
| TPL-27 | Data Management, Retention and Sharing Plan | Cross-cutting W06/W07/W09/W14/W21; metadata-level plan and official repository/data-owner routes |
| TPL-28 | Source, Policy, Registry and Obligation Watch Card | Cross-cutting W05/W14/W19/W21; authority type, legal status, stability, current version, applicability owner and expiry |
| TPL-29 | Decision, Approval, Exception and Escalation Receipt | Cross-cutting all consequential states; binds a named human, authority, exact object hash, decision, time and expiry |
| TPL-30 | After-Action, Learning and Closeout Record | Cross-cutting W03/W13/W16/W18/W20/W22; expected/observed results, harms/burden, deviations, decision, rollback/retirement and next review |

## Ten optional agents

| Agent | Name | Bounded function | Installed state |
|---|---|---|---|
| AGT-01 | Opportunity & Evidence Scout | Searches an approved public/authoritative source allowlist and drafts a TRACE evidence landscape with source versions and limits. | PERM-P0 Disabled |
| AGT-02 | Boundary & Governance Questioner | Applies FRAME to approved metadata and prepares questions/routes for HRO/IRB, QI, clinical, privacy, security, regulatory and legal owners. | PERM-P0 Disabled |
| AGT-03 | Study Concept & Design Drafting Assistant | Creates non-authoritative study concept and design-option drafts from approved, non-person-level inputs. | PERM-P0 Disabled |
| AGT-04 | Methods, Measures & Reproducibility Reviewer | Checks definitions, denominators, provenance, pre-specification, bias threats, consistency, corrections and reproducibility questions. | PERM-P0 Disabled |
| AGT-05 | Participant Burden, Accessibility & Equity Reviewer | Reviews approved plans for burden, exclusion, access, language, digital divide, missing voices, compensation questions and feedback-back. | PERM-P0 Disabled |
| AGT-06 | Portfolio, Funding & Dependency Orchestrator | Builds aggregate portfolio scenarios, milestone/dependency maps, readiness gaps and decision briefs. | PERM-P0 Disabled |
| AGT-07 | Innovation Experiment & Translation Planner | Uses PROBE to draft non-production experiments, evidence thresholds, translation/scale questions, stop and rollback plans. | PERM-P0 Disabled |
| AGT-08 | Implementation, Value & Learning Analyst | Builds traceable aggregate implementation/value/equity scenarios and balancing-measure questions. | PERM-P0 Disabled |
| AGT-09 | Human-Voice Dissemination & Integrity Assistant | Drafts source-annotated plain-language options, limitations, disclosure and accessibility questions and applies anti-slop checks. | PERM-P0 Disabled |
| AGT-10 | Independent Agent Auditor & Kill Sentinel | Evaluates frozen agent versions against canonical positive/negative fixtures and prepares violation, kill, rollback, purge and retirement evidence. | PERM-P0 Disabled |

Agents have no credentials, tools, network, destinations, memory, schedule, recursion or background execution on install. P0/P1 requires null authorization and empty source/tool/destination/network allowlists. A future P2/P3 one-run evaluation requires an expiring ORBIT authorization with exact frozen prompt/model/policy/input/output hashes, one invocation, zero retries, caps, independent fixtures, an authorized-human `one_run` decision, kill path and reconciliation. The bounded lifecycle is `one_run_authorized` → `running` → `killed` or `reconciled`; the intact authorization and receipt chain remain bound throughout. A useful first agent test is an AGT-09 charter preview over a synthetic public-source brief; keep the agent P0 Disabled until a separate authorized run and return it to P0 after reconciliation.

## Seven safe first days

1. Confirm active hat, delegated authority, local routes and optional private-store choice.
2. Preview the Mission & Impact Compass with organizational content under the tenant ACL; place personal details only in WF-24's owner-private record.
3. Frame one synthetic unmet need and let FRAME remain unresolved where facts are missing.
4. Build one TRACE card from an official public source.
5. Preview one portfolio decision or bounded PROBE experiment; take no action.
6. Review team/community/equity, accessibility, data-rights and burden questions.
7. Review Mission Control, all disabled agents, receipts and the reversible 90-day focus. Retain, revise, pause or uninstall.

## Official source registry and freshness

## Authoritative source seed registry

These are **seeds to verify current**, not applicability determinations, legal advice, compliance findings, approval, or permission to act. The applicable source depends on jurisdiction, activity, sponsor/award, product, population, data, setting, date, local policy and contract. A named qualified local owner must confirm current version, scope, effective/compliance dates, local precedence and expiry before consequential use. The eCFR is authoritative but unofficial as an edition of the CFR; agency convenience pages and reproductions may also be unofficial. Always reconcile the official source and local counsel/office.

| Official seed | Exact HTTPS URL | Visible status at review | Pack implication | Local owner | Refresh |
|---|---|---|---|---|---|
| OHRP Decision Charts | https://www.hhs.gov/ohrp/regulations-and-policy/decision-charts/index.html | Official decision aid; 2018 Requirements charts dated 2020 | FRAME questions only; never an institutional determination | HRPP/IRB | Quarterly |
| 45 C.F.R. Part 46 | https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-A/part-46 | Binding/current in scope; verify current text | Human-subject protection reference | HRPP/IRB/legal | On every use |
| OHRP QI FAQ | https://www.hhs.gov/ohrp/regulations-and-policy/guidance/faq/quality-improvement-activities/index.html | Official nonbinding FAQ | Do not infer research/QI status | HRPP/IRB/QI | Quarterly |
| HHS OCR HIPAA Research | https://www.hhs.gov/hipaa/for-professionals/special-topics/research/index.html | Official page; reviewed 2024-08-21 | Privacy questions and formal routes | Privacy Board/privacy/legal | Quarterly |
| HIPAA Security Rule NPRM | https://www.hhs.gov/hipaa/for-professionals/security/hipaa-security-rule-nprm/index.html | Proposed; existing Security Rule remains in effect | Separate current controls from future readiness | Security/privacy/legal | Monthly until final |
| 42 C.F.R. Part 93 | https://www.ecfr.gov/current/title-42/chapter-I/subchapter-H/part-93 | 2026 transition depends on allegation-received date | Confidential route; AI never makes misconduct findings | RIO/legal/ORI liaison | On intake |
| March 2026 NIHGPS | https://grants.nih.gov/policy-and-compliance/nihgps | Award/budget-period specific | Pin edition, notice, NOFO and award terms | Research administration | On award change |
| NIH BESH NOT-OD-26-067 | https://grants.nih.gov/grants/guide/notice-files/NOT-OD-26-067.html | Applies by covered due/solicitation date from 2026-05-25 | Ask date/NOFO; other obligations may remain | Research administration/HRPP | On application |
| NIH Data Management and Sharing | https://grants.nih.gov/policy-and-compliance/policy-topics/sharing-policies/dms | Current canonical policy topic; award-specific | DMS planning and repository questions | Research administration/data steward | Quarterly |
| NIH AI in Applications NOT-OD-25-132 | https://grants.nih.gov/grants/guide/notice-files/NOT-OD-25-132.html | Policy for submissions on/after 2025-09-25 | Human originality/responsibility and provenance | PI/research administration | On application |
| NIH Public Access Policy | https://grants.nih.gov/policy-and-compliance/policy-topics/public-access/nih-public-access-policy-overview | Covered manuscripts accepted on/after 2025-07-01 | Track dates/rights; no automatic disclosure | Library/research administration/TTO | On acceptance |
| FDA E6(R3) GCP | https://www.fda.gov/regulatory-information/search-fda-guidance-documents/e6r3-good-clinical-practice-gcp | Final guidance, September 2025 | Quality-by-design prompts; regulations still govern | Regulatory/sponsor/PI | Quarterly |
| FDA AI Regulatory Evidence | https://www.fda.gov/regulatory-information/search-fda-guidance-documents/considerations-use-artificial-intelligence-support-regulatory-decision-making-drug-and-biological | Draft January 2025; not for implementation | Draft-informed prompts only | Regulatory/FDA liaison | Monthly |
| FDA Diversity Action Plans | https://www.fda.gov/regulatory-information/search-fda-guidance-documents/diversity-action-plans-improve-enrollment-participants-underrepresented-populations-clinical-studies | Draft; verify status | Do not treat draft as binding | Regulatory/HRPP/community | Monthly |
| FDA Good Machine Learning Practice | https://www.fda.gov/medical-devices/software-medical-device-samd/good-machine-learning-practice-medical-device-development-guiding-principles | Official guiding principles; scope-specific | Lifecycle questions, not device authorization | Regulatory/quality | Quarterly |
| NIST AI RMF 1.0 | https://www.nist.gov/itl/ai-risk-management-framework | Voluntary; revision underway in 2026 | Versioned Govern/Map/Measure/Manage prompts | Responsible AI owner | Quarterly |
| NIST Generative AI Profile | https://www.nist.gov/publications/artificial-intelligence-risk-management-framework-generative-artificial-intelligence | Voluntary; page updated 2026-04-08 | Confabulation, injection, privacy and provenance tests | Responsible AI/security | Quarterly |
| HHS Section 504 Web/Mobile | https://www.ecfr.gov/current/title-45/subtitle-A/subchapter-A/part-84/subpart-I/section-84.84 | Binding in scope; 2026 amendment and entity-specific 2027/2028 dates | Build/test to WCAG 2.1 AA; determine coverage | Accessibility/legal | Quarterly |
| DOJ Title II Web Rule | https://www.ada.gov/resources/2024-03-08-web-rule/ | Binding for covered public entities; extended dates | Entity/date-specific accessibility route | Accessibility/legal | Quarterly |
| Public Law 119-83 | https://www.govinfo.gov/content/pkg/PLAW-119publ83/html/PLAW-119publ83.htm | Enacted 2026-04-13; SBIR/STTR through 2031-09-30 | Security diligence questions; no eligibility certification | Research administration/security | On solicitation |
| USPTO AI-Assisted Inventorship | https://www.govinfo.gov/content/pkg/FR-2025-11-28/html/2025-21457.htm | Agency guidance, 2025-11-28 | Preserve human contribution; counsel decides | Technology transfer/patent counsel | On invention |

**Volatility watch (reviewed 2026-07-16):** the 2026 42 C.F.R. Part 93 transition, March 2026 NIHGPS, NOT-OD-26-067 BESH change, September 2025 FDA E6(R3), draft FDA AI and Diversity Action Plan documents, NIH AI/public-access rules, 2026 accessibility amendments and dates, P.L. 119-83, 2025 USPTO AI-inventorship guidance, NIST AI RMF revision work, and the proposed HIPAA Security NPRM all require explicit version/status checks. `unknown`, `draft`, `proposed`, `superseded`, `conflicted` and `not locally reviewed` remain visible blockers.

The working product name is DISCOVER. It is independent and **not endorsed, certified, licensed, accredited, cleared, approved, or affiliated** with any cited agency, institution, standards body, sponsor or vendor. Framework alignment is not certification.


Refresh at least quarterly and after a rule, notice, award, model/vendor, incident or local-policy change. Exact status, jurisdiction, actor/product/setting scope, effective/compliance dates, supersession, local precedence, named applicability owner and expiry stay separate. eCFR is authoritative for current codified regulatory text; agency convenience summaries may be unofficial. Unknown blocks consequential use.

## Troubleshooting

- **Stopped at S0/S1/S2:** inspect the exact failed/unsupported criterion and receipt; do not ask Hermes to skip it.
- **Sensitive input detected:** stop, discard/quarantine, verify zero retention and use the official authorized system.
- **Duplicate dashboard or route:** quarantine the new binding; preserve one canonical state; run the route/reinstall fixture.
- **Schema or hash mismatch:** stop before migration; compare canonical bytes; repair under a new receipt/version.
- **Expired source/authority/approval:** block release; route to the named human and rerun affected tests after new evidence.
- **Legal/records hold:** expect `UNINSTALL_INCOMPLETE_AUTHORIZED_HOLD`; keep exact retained refs, owner, authority, ACL and release condition visible.

DISCOVER assists accountable humans. A file that parses, hashes, compiles, renders and passes accessibility/archive checks is a validated artifact—not proof that target Hermes executed isolation, action blocking, agent kill, rollback or uninstall correctly. Only timestamped target-runtime receipts can support those claims.