Alice · Decision · ALC-2026-0912-0002
Summarize a patient chart with the external cloud model
Sep 12, 2026, 9:41 a.m. ET · Hospitalist, Internal Medicine via Staff Drafting Assistant. Refused. Re-submit with Sovereign clinical model is eligible for this request inside the envelope.
The request
- Human
- Hospitalist, Internal Medicine · verified via Hospital SSO (synthetic)
- Agent
- Staff Drafting Assistant L1 · Human with assistant
- Purpose · workflow
- clinical-summarization · inpatient-discharge
- Data
- PHI
- Model requested
- External cloud assistant DEMO-MDL-EXT-01 · External · cloud provider, outside the organization's boundary
- Model selected
- None
- Tools
- none
- Action
- Summarize · risk MEDIUM · reversible
- Runtime
- governed-production · external network · session verified
The verdict
- Final verdict
- BLOCK
- Primary reason
- DATA_NOT_PERMITTED — PHI is outside the envelope (PUBLIC, INTERNAL).
- Policies triggered
- Data Sovereignty PolicyAutonomy Cap for Unverified Inventory (GOV-04 gap)
- Approval
- Not required
- Eligible alternative
- Sovereign clinical model is eligible for this request inside the envelope.
- Required next action
- Refused. Re-submit with Sovereign clinical model is eligible for this request inside the envelope.
- Outcome
- External model refused for PHI. The clinician re-submitted through the Discharge Summary Assistant on the sovereign clinical model (next decision at 16:45).
- Trust Receipt
- TR2-2026-0912-0002 · chain event #6 →
Decision evidence
Every check Alice ran, in order, with its status and reason code. This is the whole reasoning; there is no hidden chain of thought.
- Identity verified PASSHospitalist, Internal Medicine authenticated via Hospital SSO (synthetic).
IDENTITY_VERIFIED - Agent registered PASSStaff Drafting Assistant · active · owner Chief Information Officer · autonomy L1 (Human with assistant).
AGENT_REGISTERED - Purpose approved REVIEW"clinical-summarization" is not on the agent's approved purposes; a human must decide.
PURPOSE_NOT_APPROVED - Business workflow recognized REVIEWWorkflow "inpatient-discharge" is not registered for this agent.
WORKFLOW_UNREGISTERED - Data permitted FAILPHI is outside the envelope (PUBLIC, INTERNAL).
DATA_NOT_PERMITTED - Model eligible FAILExternal cloud assistant: PHI_REQUIRES_SOVEREIGN_EXECUTION, CLASSIFICATION_NOT_ALLOWED.
PHI_REQUIRES_SOVEREIGN_EXECUTION - Tools permitted NOT APPLICABLENo tools requested.
NO_TOOLS_REQUESTED - Action within envelope REVIEWAction risk MEDIUM meets the envelope's review threshold (MEDIUM).
RISK_AT_THRESHOLD - Policy · Data Sovereignty Policy FAILPHI cannot traverse an external network under the Data Sovereignty Policy.
PHI_EXTERNAL_NETWORK - Policy · Autonomy Cap for Unverified Inventory (GOV-04 gap) REVIEWHost system was discovered, not approved; non-public requests are reviewed until GOV-04 closes.
INVENTORY_UNVERIFIED_CAP - Approval requirement PASSHuman with assistant (L1): Summarize is inside the autonomy envelope.
WITHIN_AUTONOMY - Evaluation on file REVIEWalice-eval-v1 · drafting-quality has not been run; non-public use is reviewed until it is.
EVAL_NOT_RUN - Runtime context PASSgoverned-production · external network · session verified.
RUNTIME_OK
Alice on this site runs over the synthetic Lakeview General Hospital environment. Verdicts, checks, and receipts are computed by the Nexus decision engine on synthetic requests; nothing here is a customer, a patient, or a production deployment. Signed-in organizations see their own agents, decisions, and receipts.