Provider output is untrusted. Deterministic policy owns routing and export.
RECRUITER PROOF SURFACE
A trustworthy workflow is
more than a model call.
These are the engineering decisions behind the IntakeFlow demo: explicit boundaries, measurable behavior, and failure paths that remain safe to retry.
Model proposals and exact reviewer matches point to the source; ungrounded overrides stay explicit.
A versioned reviewer decision unlocks downstream export.
The same idempotency key safely survives a retryable failure.
ARCHITECTURE TRAIL
Document → evidence → policy → action
01IngestPDF validation
native text or OCR
native text or OCR
→
02ProposeTyped fields
page evidence
page evidence
→
03ValidateRules, conflicts
prompt injection
prompt injection
→
04ReviewVersioned correction
explicit approval
explicit approval
→
05ExportOutbox, retry
audit event
audit event
MEASURED QUALITY
Evaluation scoreboard
The deployment has not persisted its locked challenge evaluation yet.
BUILD PROVENANCE
What is running
This page reads the persisted locked challenge evaluation. CI independently regenerates the same gates and publishes the machine-readable proof artifact.
INTENTIONAL LIMITS
What this project does not claim
× No diagnosis, treatment, urgency, or coverage decisions.× No real patient data or production EHR connection.× No HIPAA-compliance claim; the public environment is synthetic and TTL-scoped.× Live model comparison is optional and never authoritative.