# Respiratory Professional, Patient, Team, Device & Institution Trust Shield

## Private Respiratory OS — default

Use only professional-owned nonsensitive schedules, generic workload categories, public evidence, clearly synthetic cases, generic device concepts, professional credential status from official sources, education, career, finance categories, family and purpose. Private mode accepts no real patient, staff, learner, incident, event or device story—even when a user believes it is deidentified. Real de-identification requires an institution-approved process. Do not enter PHI, patient lists, room numbers tied to people, ventilator or monitor exports, ABGs, waveforms, settings, alarms, orders, medications, EHR text, screenshots, recordings, real-case narratives, event reports, employee data, restricted manuals, passwords, login credentials, API tokens or keys.

## Institution-approved partition — separate authorization

Verify the exact platform, vendor and model; purpose; role; data; minimum necessary; source systems; device and network boundaries; reads and writes; human owners; logging; monitoring; retention; deletion; security; incident response; downtime and manual fallback. Keep clinical, quality, education, research and personnel partitions separate; whole-life data is disabled and must use a personally controlled isolated store. Patient-specific output, if separately authorized at all, may appear only as a source-linked, time-stamped read-only or sandbox draft inside the approved environment. AI cannot write it to an EHR, order, event, patient-message or device system; an authorized human independently verifies, enters and releases any official content.

## Prohibited authority and action

No AI diagnosis, triage, prescription, therapy selection, oxygen target or flow change, aerosol medication or dose, ventilator mode or setting, alarm limit, waveform-based action, suctioning, extubation, intubation, airway procedure, NIV or CPAP change, transport clearance, monitoring, page, consult, order, consent, note, signature, patient message, device connection or device control. No clinical, EHR, order, event, patient-message or device-system write or staged action. No assignment, staffing adequacy, fitness, impairment, credential, competency, licensure, quality-versus-research, reportability, cause, blame, legal-rights or employment decision.

## Human dignity and evaluation

No surveillance, ranking, productivity scoring, burnout or impairment classifier, professionalism prediction, competency prediction, learner grading, assignment eligibility, disciplinary recommendation or automatic employer report. Private wellbeing, family, finance and career data stay private by default. Emergency, safety, privacy, security, mistreatment and labor concerns route to the appropriate human process.
