Architect HIPAA-compliant agent guardrails for patient support

• Scope agents to administrative intents only—scheduling, billing, directions—not clinical advice • Apply minimum necessary PHI in prompts; use internal patient tokens instead of full identifiers in LLM context • Configure BAA-covered Einstein features and verify data residency requirements • Implement output filters blocking diagnostic language, medication recommendations, and symptom triage • Restrict agent actions to read-only PHI lookups unless authenticated patient identity is verified • Maintain access logs meeting HIPAA audit trail requirements with role-based transcript access • Conduct annual risk assessment including agent-specific threat scenarios and breach drills