EHR sandbox loop
Read a signed note from the EHR. Attest the coding. Write the receipt back.
This is the attested loop on a real interoperability pipe. The note comes in over FHIR (Redox), the model proposes, a deterministic engine checks, a named clinician signs, and a hash-anchored receipt goes back into the chart — so the record itself carries proof a human reviewed the AI's work.
Sandbox. Synthetic operative note, no real patient, no PHI. Runs on a Redox-shaped fixture today; the same code posts to a Redox Development environment the moment credentials exist. Not coding advice.
Why this matters:surgeons told us the paste-in demo isn't the product — the EHR is. This is the same loop as Wonder Bill, run against a standard FHIR pipe instead of a text box, with the receipt landing in the record.
What it is not: production integration. Production is a per-health-system connection through the interoperability vendor plus a signed BAA. Nothing here touches PHI.