Sign the tools perimeter before FHIR credentials
Write access needs an executive-signed matrix before integration teams plug the EHR into an agent demo.
Sean Gates
June 8, 2026 · 6 min read
The demo books the appointment, sends the confirmation, updates the chart. The room applauds. Monday morning, the wrong confirmation goes to the wrong patient, and Legal discovers the AI had write access nobody on the executive committee approved. Call it a Tools strategy failure: the EHR was connected before anyone drew the perimeter.
More tools is not more care
Vendors sell autonomy: more integrations, more actions, more "hands." In healthcare, Tools are where liability lives. Read is surveillance; write is incident. The usual roadmap connects everything and trims scopes later. Later is a PR crisis.
Strategy inverts the sequence: tools perimeter before credentials.
The perimeter document
Your delegate builds a one-page matrix executives sign:
| System class | Default posture | Notes |
|---|---|---|
| EHR clinical | read-first; draft-only writes | human sign in chart |
| Scheduling | read slots; book = approved gate | idempotent retries |
| Payer portals | read status; submit = human click | log every invocation |
| Email / SMS to patients | forbidden until explicit program | blast radius |
| Billing / PM | read; no autonomous claim submit | financial harm |
This is read-first doctrine with named exceptions, the same maturity you expect for human trainees.
Draft-not-send
The pattern Legal usually accepts: AI drafts inside the EHR; a licensed human publishes. Patients do not receive autonomous outbound clinical content from v1. You can still cut nurse clicks. Accountability stays human.
Orchestration decides *when* a tool fires. Gateway decides *who* may invoke it. Tools decide *what systems may change state at all*.
Geniuses in the loop
Combine human intelligence with machine intelligence at the right price and capability. Tools extend humans; they do not replace sign-off on consequence-heavy steps. Autonomy theater sells demos; graded autonomy ships Monday.
Competitors may go live faster. They also ship your brand on their mistake. A quarter of perimeter work beats a year of incident response.
What you approve this quarter
Approve endpoints, read vs write vs draft, roles, logging to Gateway, and exception owners. Skip the vague line item "EHR integration."
Your delegate will need a healthcare tools map before engineers wire endpoints; the failure mode to rehearse with Legal is autonomous patient email before anyone signs the matrix.