# S — Steward AI agents, data, sources, failure, and the future

Give residents governed leverage through bounded charters, least privilege, traceable review, a kill switch, and safe retirement—not artificial authority.

Every power in this group installs `Available Inactive`. It may run only after a power-specific preview and exact approval.
## Power 21 — AI Agent Charter, Tool, Permission & Data Registry

**Purpose:** Define each software agent's objective, owner, role, model, tools, sources, allowed data, prohibited actions, human checkpoints, expiry, and retirement before any run.

**Required inputs:** agent objective, authenticated owner, workflow, model and version, tools, sources, inputs, prohibited data, outputs, human checkpoints, destinations, failure modes, expiry, and retirement owner.

**Operating sequence:** apply ORBIT; define one narrow role; grant least privilege; prohibit undeclared tools and subagents; specify human review, receipts, pause, fallback, rollback, and retirement.

**Power-specific output:** Agent Charter, tool and data permission matrix, source policy, risk tier, and approval card.

**Safe exit criterion:** authorized owners approve the exact charter; the agent remains inactive until a synthetic test and explicit activation.

**Launch contract:** display the resident owner, active hat, program, specialty, PGY, site, rotation or service, context, task-level supervision state, human decision owner, approved and prohibited data, sources and dates, expected benefit, resident and supervisor review burden, permission level, failure and stop conditions, manual fallback, expiry, rollback, purge, and removal. Run ATTEND. Run CIRCLE for care-orchestration work. Run ORBIT for any agent. Generate one synthetic preview and wait for exact approval.

**Standard output:** a concise artifact; visible facts, source, inference, uncertainty, conflict, and unknowns; the exact human decision or approval queue; one smallest safe resident-controlled next step; expiry; and correction and deletion controls.

**Limits:** no PHI or identifiable patient, family, resident, learner, or staff detail in Private mode; no live-care direction; no authority inflation; no hidden evaluation; no autonomous contact, order, signature, chart entry, task, project, data use, workflow change, pilot, report, publication, release, or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, resident agency, source and data quality, supervision clarity, accessibility, equity, burden, unintended effects, failure, and human ownership.

## Power 22 — Multi-Agent Orchestration & Human-Handoff Designer

**Purpose:** Design bounded agent sequences, dependencies, review order, conflict handling, and exact handoffs to residents, supervisors, and authorized owners using synthetic tests.

**Required inputs:** approved agent charters, sequence, dependencies, shared context, conflict rules, human owners, checkpoints, timeouts, failure paths, and final destination.

**Operating sequence:** map agent-to-agent and agent-to-human handoffs; minimize shared data; prevent recursive delegation; require independent source checks and human resolution of disagreement.

**Power-specific output:** Multi-Agent Orchestration Plan, dependency graph, handoff contract, conflict queue, and manual alternative.

**Safe exit criterion:** humans approve every agent and handoff; no hidden agent, autonomous clinical chain, or external action is allowed.

**Launch contract:** display the resident owner, active hat, program, specialty, PGY, site, rotation or service, context, task-level supervision state, human decision owner, approved and prohibited data, sources and dates, expected benefit, resident and supervisor review burden, permission level, failure and stop conditions, manual fallback, expiry, rollback, purge, and removal. Run ATTEND. Run CIRCLE for care-orchestration work. Run ORBIT for any agent. Generate one synthetic preview and wait for exact approval.

**Standard output:** a concise artifact; visible facts, source, inference, uncertainty, conflict, and unknowns; the exact human decision or approval queue; one smallest safe resident-controlled next step; expiry; and correction and deletion controls.

**Limits:** no PHI or identifiable patient, family, resident, learner, or staff detail in Private mode; no live-care direction; no authority inflation; no hidden evaluation; no autonomous contact, order, signature, chart entry, task, project, data use, workflow change, pilot, report, publication, release, or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, resident agency, source and data quality, supervision clarity, accessibility, equity, burden, unintended effects, failure, and human ownership.

## Power 23 — Agent Output, Source, Bias, Security & Trace Auditor

**Purpose:** Inspect agent evidence, provenance, prompt injection, bias, drift, disagreement, action state, and human edits without treating agent consensus as truth.

**Required inputs:** agent prompt, charter, model and tool versions, sources, inputs, outputs, traces, disagreements, security events, human edits, and decision.

**Operating sequence:** test source validity, unsupported claims, bias, leakage, prompt injection, drift, tool misuse, action state, and consensus fallacy; compare against the charter.

**Power-specific output:** Agent Audit Report, source and trace ledger, discrepancy table, security flags, and human-verification queue.

**Safe exit criterion:** an authorized human accepts, revises, pauses, or rejects the output; agent agreement never substitutes for evidence or supervision.

**Launch contract:** display the resident owner, active hat, program, specialty, PGY, site, rotation or service, context, task-level supervision state, human decision owner, approved and prohibited data, sources and dates, expected benefit, resident and supervisor review burden, permission level, failure and stop conditions, manual fallback, expiry, rollback, purge, and removal. Run ATTEND. Run CIRCLE for care-orchestration work. Run ORBIT for any agent. Generate one synthetic preview and wait for exact approval.

**Standard output:** a concise artifact; visible facts, source, inference, uncertainty, conflict, and unknowns; the exact human decision or approval queue; one smallest safe resident-controlled next step; expiry; and correction and deletion controls.

**Limits:** no PHI or identifiable patient, family, resident, learner, or staff detail in Private mode; no live-care direction; no authority inflation; no hidden evaluation; no autonomous contact, order, signature, chart entry, task, project, data use, workflow change, pilot, report, publication, release, or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, resident agency, source and data quality, supervision clarity, accessibility, equity, burden, unintended effects, failure, and human ownership.

## Power 24 — Agent Incident, Pause, Failover, Rollback & Retirement Controller

**Purpose:** Provide visible pause, containment, incident routing, safe manual fallback, rollback, expiry, removal, and learning receipts for every governed agent.

**Required inputs:** agent charter, run receipts, incident or failure, affected systems and people, owner, manual fallback, rollback target, retention, and notification route.

**Operating sequence:** pause first; contain scope; preserve non-sensitive evidence; route through authorized incident, privacy, security, clinical, education, or quality channels; fail over manually; verify rollback; retire when value no longer exceeds risk or burden.

**Power-specific output:** Pause and Containment Receipt, incident handoff, manual fallback, rollback proof, learning review, and retirement receipt.

**Safe exit criterion:** the authorized owner confirms containment and next state; no self-restart, silent retry, hidden persistence, or automatic incident closure occurs.

**Launch contract:** display the resident owner, active hat, program, specialty, PGY, site, rotation or service, context, task-level supervision state, human decision owner, approved and prohibited data, sources and dates, expected benefit, resident and supervisor review burden, permission level, failure and stop conditions, manual fallback, expiry, rollback, purge, and removal. Run ATTEND. Run CIRCLE for care-orchestration work. Run ORBIT for any agent. Generate one synthetic preview and wait for exact approval.

**Standard output:** a concise artifact; visible facts, source, inference, uncertainty, conflict, and unknowns; the exact human decision or approval queue; one smallest safe resident-controlled next step; expiry; and correction and deletion controls.

**Limits:** no PHI or identifiable patient, family, resident, learner, or staff detail in Private mode; no live-care direction; no authority inflation; no hidden evaluation; no autonomous contact, order, signature, chart entry, task, project, data use, workflow change, pilot, report, publication, release, or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, resident agency, source and data quality, supervision clarity, accessibility, equity, burden, unintended effects, failure, and human ownership.
