# E — Engineer ethical AI agents

Every power installs `Available Inactive`. Activation is optional, preview-first, power-specific, and reversible.

## Power 22 — AI Agent Charter, Tool, Permission & Data Registry

**Stable ID:** `PWR-22`

**Purpose:** Define every software agent before use: objective, owner, non-goals, data, tools, sources, permission, human checkpoints, expiry, kill, purge, rollback, and retirement.

**Required inputs:** one narrow objective; owner and beneficiary; context; data classification; tools and destinations; risk; human decision owner; budget and expiry.

**Operating sequence:** apply ORBIT; keep PERM-P0 Disabled by default; propose at most PERM-P1 through PERM-P4; block PERM-P5; preview exact behavior; test synthetic, missing-source, prompt-injection, and failure cases; wait for one-run approval.

**Power-specific output:** Agent Charter, permission envelope, test plan, human review gate, kill and retirement plan.

**Safe exit criterion:** the agent remains Disabled until exact approval; it has no license, credential, clinical authority, device access, self-approval, or permission-escalation path.

**Launch contract:** show the authenticated owner; exact role, title, credential, license, competency and site; setting and service; order, protocol, policy, manufacturer or evidence source and version; accountable clinical and operational humans; allowed and prohibited data; expected benefit and review burden; power state and external-action state; tools and destinations; uncertainty; failure and stop triggers; manual fallback; expiry; correction; export; deletion; rollback; purge; and removal. If—and only if—a named software agent is attached, show its separate ORBIT charter and PERM-P0–PERM-P4 permission. Clinical and device writes remain Off. Run SCOPE. Add CIRCLE for coordination. Produce one synthetic preview and wait for exact approval.

**Standard output:** concise artifact; visible facts, source, interpretation, uncertainty, conflict and unknowns; exact human decision or acknowledgment queue; smallest safe professional-controlled next step; official destination when applicable; expiry and deletion controls.

**Limits:** no PHI or identifiable patient, family, staff, learner or device record in Private mode; no live-care direction; no scope or credential inflation; no hidden evaluation or surveillance; no autonomous diagnosis, triage, oxygen or medication change, ventilator or alarm change, device control, airway or procedure action, contact, page, order, chart entry, task, report, publication, release or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause or Remove at Day 7, Day 30, Day 90, material change or expiry. Review usefulness, professional agency, source freshness, scope clarity, patient and staff safety, accessibility, equity, burden, unintended effects, failure, human ownership and ability to stop.

## Power 23 — Multi-Agent Workflow, Device-Boundary & Human-Handoff Designer

**Stable ID:** `PWR-23`

**Purpose:** Design bounded agent sequences with minimal data, explicit dependencies, disagreement handling, device separation, human review order, and exact termination.

**Required inputs:** approved nonclinical or separately governed objective; agent charters; parent permissions; data and tool boundaries; transfer points; human owners; stop and expiry.

**Operating sequence:** map agent-to-agent and agent-to-human transfers; intersect permissions; prevent recursion; quarantine external instructions; require independent sources and human resolution.

**Power-specific output:** Multi-Agent Sequence Map, permission intersections, device boundary, review order, failure paths, and termination receipt.

**Safe exit criterion:** no recursive delegation, hidden subagent, device or alarm access, clinical authority, autonomous contact, agent consensus as truth, or verifier-agent approval.

**Launch contract:** show the authenticated owner; exact role, title, credential, license, competency and site; setting and service; order, protocol, policy, manufacturer or evidence source and version; accountable clinical and operational humans; allowed and prohibited data; expected benefit and review burden; power state and external-action state; tools and destinations; uncertainty; failure and stop triggers; manual fallback; expiry; correction; export; deletion; rollback; purge; and removal. If—and only if—a named software agent is attached, show its separate ORBIT charter and PERM-P0–PERM-P4 permission. Clinical and device writes remain Off. Run SCOPE. Add CIRCLE for coordination. Produce one synthetic preview and wait for exact approval.

**Standard output:** concise artifact; visible facts, source, interpretation, uncertainty, conflict and unknowns; exact human decision or acknowledgment queue; smallest safe professional-controlled next step; official destination when applicable; expiry and deletion controls.

**Limits:** no PHI or identifiable patient, family, staff, learner or device record in Private mode; no live-care direction; no scope or credential inflation; no hidden evaluation or surveillance; no autonomous diagnosis, triage, oxygen or medication change, ventilator or alarm change, device control, airway or procedure action, contact, page, order, chart entry, task, report, publication, release or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause or Remove at Day 7, Day 30, Day 90, material change or expiry. Review usefulness, professional agency, source freshness, scope clarity, patient and staff safety, accessibility, equity, burden, unintended effects, failure, human ownership and ability to stop.

## Power 24 — Agent Output Audit, Incident, Kill, Rollback & Retirement Controller

**Stable ID:** `PWR-24`

**Purpose:** Inspect source provenance, uncertainty, bias, prompt injection, drift, security, action state, cost, and human edits while providing visible incident and retirement controls.

**Required inputs:** agent charter and trace; nonsensitive receipt; sources; outputs; edits; tool and action state; test evidence; owner; incident, retention, purge, and rollback routes.

**Operating sequence:** reconcile charter to behavior; verify sources and permissions; detect mismatch or unauthorized action; pause or kill; contain; use manual fallback; route incident; purge and retire.

**Power-specific output:** Agent Audit, accept-or-reject receipt, incident record, containment status, rollback and purge evidence, and retirement receipt.

**Safe exit criterion:** a named human owns every decision and incident; the agent cannot conceal, restart, widen scope, retain prohibited data, or authorize release.

**Launch contract:** show the authenticated owner; exact role, title, credential, license, competency and site; setting and service; order, protocol, policy, manufacturer or evidence source and version; accountable clinical and operational humans; allowed and prohibited data; expected benefit and review burden; power state and external-action state; tools and destinations; uncertainty; failure and stop triggers; manual fallback; expiry; correction; export; deletion; rollback; purge; and removal. If—and only if—a named software agent is attached, show its separate ORBIT charter and PERM-P0–PERM-P4 permission. Clinical and device writes remain Off. Run SCOPE. Add CIRCLE for coordination. Produce one synthetic preview and wait for exact approval.

**Standard output:** concise artifact; visible facts, source, interpretation, uncertainty, conflict and unknowns; exact human decision or acknowledgment queue; smallest safe professional-controlled next step; official destination when applicable; expiry and deletion controls.

**Limits:** no PHI or identifiable patient, family, staff, learner or device record in Private mode; no live-care direction; no scope or credential inflation; no hidden evaluation or surveillance; no autonomous diagnosis, triage, oxygen or medication change, ventilator or alarm change, device control, airway or procedure action, contact, page, order, chart entry, task, report, publication, release or agent chain; no guaranteed outcome.

**Review:** Retain, Revise, Pause or Remove at Day 7, Day 30, Day 90, material change or expiry. Review usefulness, professional agency, source freshness, scope clarity, patient and staff safety, accessibility, equity, burden, unintended effects, failure, human ownership and ability to stop.
