Key takeaway
Buying a chatbot is not an operating model.
Public thesis / Minute Zero
The Operating Model for a Governed AI Front Door
The operating model for minute zero is a governed navigation layer that sits in front of high-friction moments in the care journey and routes patients into the right human and digital pathways.
Why this matters
Three points this page is designed to establish.
Key takeaway
Identity becomes the control plane because AI collapses the distance between request, data, and action.
Key takeaway
The board needs evidence of demand shaping, not vanity metrics.
Evidence base
The public signal behind the claim.
Control plane
The issue treats identity, consent, provenance, and governed data access as operating infrastructure rather than compliance afterthoughts.
Model constraints
The report’s design thesis includes approved model inventories, scoped connectors, retrieval limits, logging, and explicit PHI training boundaries.
Board scorecard
The issue recommends governing minute zero through a scorecard that ties access, margin, and risk together rather than relying on bot activity metrics.
Argument
A governed navigation layer sits in front of high-friction care moments
Patients need a simple way to ask minute-zero questions without defaulting to unmanaged external surfaces. That does not require a single interface. It requires one governance fabric across the portal, app, website, voice, messaging, and staff tools.
The goal is consistency of control and handoff, not forced channel consolidation.
Argument
Identity, consent, and model controls are product requirements
In an AI-mediated front door, the system must know who is asking, on behalf of whom, for what purpose, with what data permissions, and what evidence remains after the interaction.
That makes identity proofing, caregiver delegation, least-privilege access, purpose limitation, retention rules, and provenance central to design rather than secondary policy items.
- Patient, caregiver, workforce, app, and agent identity should share one enterprise standard.
- Different minute-zero purposes justify different data access and escalation logic.
- PHI use for training should remain explicitly governed, not assumed.
Argument
Human handoff and board reporting complete the model
Many deployments fail because they optimize the interface but not the handoff. Minute-zero strategy only works if the next step is fast, clear, and operationally connected.
The board should govern through indicators like redirection accuracy, leakage reduction, clinician handoff speed, consent exceptions, and time to produce access evidence after an incident or inquiry.
Board implication
What leadership should do with this framing.
Board use
Assign one enterprise owner for minute-zero operations.
Board use
Expect runtime privacy and identity controls, not static policy statements.
Board use
Require scorecards that show access, margin, and risk moving together.
Inside the sprint
What stays inside the issue
The public thesis describes the six-part operating model. The full issue includes the operating architecture, identity stack, governance scorecard, and board memo used to sequence implementation.
Related theses
Continue through the sprint in public.
Public thesis / Minute Zero
What Is Minute Zero in Healthcare?
A public thesis on minute zero: the first care decision now happens before the provider is involved, changing access, demand shaping, and governance.
Read public thesisPublic thesis / Minute Zero
Why AI Is Capturing the First Five Minutes of Care
AI is absorbing behavior created by affordability pressure and access friction, making it one of the fastest-growing surfaces for minute-zero work.
Read public thesisPublic thesis / Minute Zero
The Economics of Missing Minute Zero
When a provider is absent at minute zero, it inherits demand rather than shaping it. That appears as misrouting, leakage, higher cost-to-serve, and margin pressure.
Read public thesis