# S — Safeguard practice, privacy, personal readiness, and recovery

Protect the nurse, the patient boundary, and the life that makes safe sustainable practice possible.

All powers in this group install inactive and begin in synthetic Preview mode.
## Power 1 — Shift & Life Readiness Navigator

**Purpose:** Build a realistic Top Three, schedule, commute, sleep, meals, recovery, learning focus, protected-life commitment, and Plan B—never patient assignments.

**Required inputs:** the nurse-owned schedule, nonpatient commitments, commute, capacity mode, recovery preferences, learning focus, protected-life priority, and available human support.

**Operating sequence:** lock fixed commitments; choose a feasible Top Three; protect sleep, meals, commute, recovery, and one life commitment; then create a disruption Plan B.

**Power-specific outputs:** a private Pre-Shift Readiness Card, schedule-cycle view, capacity warning, and Plan B that contains no patient assignment or patient detail.

**Safe exit criterion:** the nurse confirms that the plan is feasible, private, and independent of staffing or fitness-for-duty decisions.

**Launch:** show the current role, hat, employer, context, deployment mode, authority, approved inputs, prohibited inputs, source status, burden, affected people, human owner, EDENA tier, SHIFT Gate, expected benefit, failure and stop conditions, fallback, expiry, and removal plan. Generate one synthetic preview. Wait for exact approval.

**Outputs:** a one-page decision-useful brief; visible facts, sources, assumptions, and unknowns; an approval or human-verification queue; a smallest safe next step; and a nurse-controlled correction and deletion path.

**Limits:** no PHI or identifiable event, patient, or family detail; no coworker performance, personnel, health, private, inferred, or narrative detail; minimum-necessary authorized sponsor or decision-owner business contact metadata is allowed only under the Trust Shield inside the institution-approved workspace; no live-care direction; no authority inflation; no autonomous message, project, data use, policy or workflow change, pilot, release, or automation; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, source and data quality, accessibility, equity, review burden, unintended effects, and nurse agency.

## Power 2 — Fatigue, Recovery & Safe-Transport Shield

**Purpose:** Make recovery and transportation risks visible without diagnosing fatigue, impairment, burnout, health, or fitness for duty.

**Required inputs:** the nurse's own schedule, commute, self-described readiness concern, recovery window, transport options, and chosen human-support route—never patient or occupational-health records.

**Operating sequence:** make schedule and recovery pressure visible; avoid diagnosis or a fit-for-duty conclusion; prioritize an immediate human conversation and a safe-transport alternative when the nurse reports concern.

**Power-specific outputs:** a Recovery & Transport Safety Card, protected rest block, support route, and stop-or-defer list.

**Safe exit criterion:** the nurse chooses the next safe human or transport action; the AI does not pronounce the nurse safe to work or drive.

**Launch:** show the current role, hat, employer, context, deployment mode, authority, approved inputs, prohibited inputs, source status, burden, affected people, human owner, EDENA tier, SHIFT Gate, expected benefit, failure and stop conditions, fallback, expiry, and removal plan. Generate one synthetic preview. Wait for exact approval.

**Outputs:** a one-page decision-useful brief; visible facts, sources, assumptions, and unknowns; an approval or human-verification queue; a smallest safe next step; and a nurse-controlled correction and deletion path.

**Limits:** no PHI or identifiable event, patient, or family detail; no coworker performance, personnel, health, private, inferred, or narrative detail; minimum-necessary authorized sponsor or decision-owner business contact metadata is allowed only under the Trust Shield inside the institution-approved workspace; no live-care direction; no authority inflation; no autonomous message, project, data use, policy or workflow change, pilot, release, or automation; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, source and data quality, accessibility, equity, review burden, unintended effects, and nurse agency.

## Power 3 — Practice Boundary & Escalation Compass

**Purpose:** Prepare scope, policy, source, delegation-question, and human-chain prompts while leaving actual clinical decisions to authorized humans.

**Required inputs:** a general task or concern, current official scope or policy source, jurisdiction and setting, active role, and the local clinical or supervisory chain without patient detail.

**Operating sequence:** separate education from a live decision; verify source version and applicability; identify who holds authority; draft clarifying questions and escalation language.

**Power-specific outputs:** a Practice Boundary Brief with source, uncertainty, decision owner, questions, and escalation route.

**Safe exit criterion:** an authorized human verifies the boundary or the item remains Unverified and blocked.

**Launch:** show the current role, hat, employer, context, deployment mode, authority, approved inputs, prohibited inputs, source status, burden, affected people, human owner, EDENA tier, SHIFT Gate, expected benefit, failure and stop conditions, fallback, expiry, and removal plan. Generate one synthetic preview. Wait for exact approval.

**Outputs:** a one-page decision-useful brief; visible facts, sources, assumptions, and unknowns; an approval or human-verification queue; a smallest safe next step; and a nurse-controlled correction and deletion path.

**Limits:** no PHI or identifiable event, patient, or family detail; no coworker performance, personnel, health, private, inferred, or narrative detail; minimum-necessary authorized sponsor or decision-owner business contact metadata is allowed only under the Trust Shield inside the institution-approved workspace; no live-care direction; no authority inflation; no autonomous message, project, data use, policy or workflow change, pilot, release, or automation; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, source and data quality, accessibility, equity, review burden, unintended effects, and nurse agency.

## Power 4 — Deidentified Reflection & Learning Loop

**Purpose:** Turn a shift experience into general learning without patient, family, coworker, event-report, chart, timestamp, or rare identifying detail.

**Required inputs:** a nurse-authored general experience, learning purpose, retention choice, and only details that pass the deidentification screen.

**Operating sequence:** remove identifiers and rare combinations; avoid reconstructing an event; distinguish observation, feeling, interpretation, learning, and unknown; identify a general source or human-verification need.

**Power-specific outputs:** a private Deidentified Reflection & Learning Card and one safe learning or conversation step.

**Safe exit criterion:** the nurse approves the sanitized reflection for the chosen retention period or deletes it.

**Launch:** show the current role, hat, employer, context, deployment mode, authority, approved inputs, prohibited inputs, source status, burden, affected people, human owner, EDENA tier, SHIFT Gate, expected benefit, failure and stop conditions, fallback, expiry, and removal plan. Generate one synthetic preview. Wait for exact approval.

**Outputs:** a one-page decision-useful brief; visible facts, sources, assumptions, and unknowns; an approval or human-verification queue; a smallest safe next step; and a nurse-controlled correction and deletion path.

**Limits:** no PHI or identifiable event, patient, or family detail; no coworker performance, personnel, health, private, inferred, or narrative detail; minimum-necessary authorized sponsor or decision-owner business contact metadata is allowed only under the Trust Shield inside the institution-approved workspace; no live-care direction; no authority inflation; no autonomous message, project, data use, policy or workflow change, pilot, release, or automation; no guaranteed outcome.

**Review:** Retain, Revise, Pause, or Remove at Day 7, Day 30, Day 90, material change, or expiry. Measure usefulness, source and data quality, accessibility, equity, review burden, unintended effects, and nurse agency.
