A prior-auth agent keeps its memory in Inhold

This page replays a real run of Inhold, recorded at commit 6a504573c5 on 2026-11-02. Every patient, payer and person in it is made up. An in-process socket hook saw 0 outbound connection attempts during the run.

Audit log for this run Evidence pack (zip) How to verify a pack run.json

The demo signs its audit anchors with a key published in the code, so here they show the mechanism only. An install signs them with a key in your KMS.

Try a request

Pick who is asking, for what purpose, and what they ask for. Each answer was made by Inhold's policy check when this page was built, and wrote the audit rows shown. Inhold does not run in your browser: the panel replays answers recorded at build time, on a separate synthetic instance with its own audit log.

The setup

Loaded 3 synthetic charts into Inhold (labelled PHI at write time).

1. A nurse corrects a letter; the correction becomes a skill

Nurse Rivera's edit:
--- agent_output
+++ corrected
@@ -4,6 +4,7 @@
 We request authorization for MRI lumbar spine without contrast (CPT 72148).
 Diagnosis: Lumbar radiculopathy M54.16.
 Clinical findings: Radiating left leg pain for 9 weeks, positive straight-leg raise at 40 degrees.
+Conservative therapy completed: 6 weeks of physical therapy (Sep 1 to Oct 13) and NSAIDs, no relief.
 
 Sincerely,
 Utilization Review, Contoso General Hospital (synthetic)
Skill 'cite-conservative-therapy' v1 approved by nurse.rivera, derived from ctx_7dcded420ad4.

Next letter (different patient) uses the skill ['cite-conservative-therapy']:
--- without skill
+++ with skill
@@ -4,6 +4,7 @@
 We request authorization for MRI right knee without contrast (CPT 73721).
 Diagnosis: Tear of medial meniscus, right knee S83.241.
 Clinical findings: Mechanical locking twice weekly, joint-line tenderness, positive McMurray test.
+Conservative therapy completed: 8 weeks of home exercise program and bracing, persistent locking.
 
 Sincerely,
 Utilization Review, Contoso General Hospital (synthetic)

2. The billing agent asks for the same patient's notes

billing-agent search (purpose=billing): 0 results (PHI is filtered out before ranking; the agent learns nothing about it)
  get as purpose=billing: DENIED (audit: purpose 'billing' may not read items written under 'prior_auth')
  get as purpose=prior_auth: DENIED (audit: billing-agent is not registered for purpose 'prior_auth')
Audit rows for those denials: seq [20, 21]

3. The security team exports the evidence pack, twice

Wrote inhold-evidence-pack.zip (32 KB). Audit chain: 24 rows, ok=True, head 80b2f5ea515e82d4...
Second pack checked against the first pack's anchors: ok=True
Same pack with row 3 rewritten and the chain rehashed: ok=False
Open CONTROL_MAP.md and TOP20_ANSWERS.md inside the zip.

4. Network

Outbound connection attempts during the run: 0