A policy in Alice is a rule that runs on every decision, not a document in a binder. Approved policies come from the organization; two more are derived from signals — an intelligence event and a readiness gap — and are labelled by source and status.
DEMO-POL-001 · owner Privacy Officer
Scope: All AI requests touching PHI or regulated data
PHI and regulated data may only be processed by sovereign models inside hospital-controlled infrastructure; never over an external network.
DEMO-POL-002 · owner Chief Information Officer
Scope: All staff AI use
Staff may use only agents in the governed registry; consumer chatbots are prohibited for any patient or internal information.
DEMO-POL-004 · owner AI Governance Lead
Scope: Any agent output leaving the organization
Nothing an agent produces is published or sent outside the boundary without a named human's approval (the Alice kernel's no_external_publish restriction).
DEMO-POL-005 · owner Security Lead
Scope: AI-involved incidents at a prescribed hospital
Derived from the Intelligence Terminal item on O. Reg. 51/26: AI-involved security events are reported on the regulation's timelines. Draft pending Security Committee approval; applied as REVIEW only.
DEMO-POL-006 · owner AI Governance Lead
Scope: Agents whose host system was discovered rather than approved
Derived from the readiness assessment's critical blocker GOV-04 (shadow AI present): agents attached to a discovered system are capped at Level 1 and every non-public request is reviewed until the inventory is verified.
Alice on this site runs over the synthetic Lakeview General Hospital environment. Verdicts, checks, and receipts are computed by the Nexus decision engine on synthetic requests; nothing here is a customer, a patient, or a production deployment. Signed-in organizations see their own agents, decisions, and receipts.