Safety you can audit
The model does not decide whether she is safe
In almost every AI health product, the language model receives the message and a filter checks
what it said. We inverted it. A deterministic clinical kernel reads every message, every
reading and every score first. When it fires, the model is never invoked at all — so it
cannot talk a woman out of an escalation, because on those turns it does not run.
05App · WhatsApp · SMS · health worker · clinician console
04Escalation clock — an alert closes only on a recorded human action
03Clinical safety kernel — deterministic, tested, and first
02Grounded conversation, risk models, behavioural tailoring
01Symptoms, instruments, devices, records
The kernel is a pure function with no network calls, tested on an adversarial corpus of
phrasings that are easy to miss — understatement, euphemism, negation traps, Nigerian English
and Pidgin, and warning signs buried mid-paragraph after small talk. A build that misses one
does not deploy.