01 — Problem
RadPass already logs every change of responsibility and every machine state (see the core case study), but across five separate pages. A question as simple as "which energies were last disabled, and where" meant knowing which page held the answer, then reading it by hand.
AI Assistant answers in place: type the question, get a sentence, a chart, and a link to the full report.
02 — Interface: four attempts
03 — Scope
Enabled per organisation and per role from the Owner platform. Tested toggling it on and off: the whole panel disappears cleanly, not just the badge.
04 — The boundary test
A scope diagram means nothing until someone tries to break it. So before launch, I did.
Cross-tenant leak, found pre-launch
Signed in as one hospital, I asked about another hospital's data. The assistant answered anyway. The org boundary above wasn't enforced yet, it just looked like it was.
Reported and closed before launch, then re-tested the same question against the same two orgs to confirm the fix actually held, not just that the query changed.
05 — Validation
06 — Testing
One shape stayed inconsistent: inferring a current state from a log of changes. A stricter fix existed and was rolled back on purpose, to keep the answer able to explain what changed. Left as a known limitation, not a rushed patch.
NOW