# SCRIMED Agent Governance Control Plane

SCRIMED Agent Governance is a synthetic/no-PHI control plane. It evaluates metadata-only agent session state and does not authorize PHI export, autonomous clinical care, diagnosis, treatment, prescribing, EHR writeback, payer submission, production deployment, certification claims, or customer go-live.

## Current Status
- Status: scrimed-agent-governance-active-synthetic-no-phi
- API: /api/scrimed-agent-governance
- Brief: /api/scrimed-agent-governance/brief
- Production readiness: false

## Policy Decisions
- phi-touched-block-export: require_review; If PHI touched, block export and require human review. Reason: PHI access changes the action boundary; export cannot proceed without qualified approval.
- untrusted-content-restrict-tools: require_review; If untrusted external content read, restrict tool actions. Reason: Untrusted content can inject instructions or poison retrieval context.
- cost-threshold-requires-approval: require_review; If agent cost exceeds threshold, require approval. Reason: Cost guardrails prevent runaway agent loops and unexpected billing exposure.
- external-communication-review: require_review; If action attempts external communication, require review. Reason: External communication can create legal, clinical, patient, or payer consequences.
- outside-declared-scope-deny: deny; If agent task is outside declared scope, deny. Reason: Agents are deny-by-default outside their declared identity and permission scope.
- clinical-recommendation-decision-support-only: require_review; If clinical recommendation requested, return decision-support-only boundary. Reason: Clinical content can support review but cannot become autonomous diagnosis, treatment, or prescribing.

## Sample Evaluation
- Decision: require_review
- Dynamic risk score: 65
- Human approval required: true
- Audit hash: scrimed-intel-fbf4539a

No production deploy, certification, customer go-live, PHI, EHR writeback, payer submission, diagnosis, treatment, or prescribing authority is granted.