The auto-mode trust gate
Auto-mode lets a routing rule act without a person. Faxart treats turning it on as a safety decision, not a convenience toggle. This page explains the model behind enabling it.
Earned, not granted
Section titled “Earned, not granted”Eligibility is computed live from a rule’s track record, never stored as a flag a human flips. Over a trailing window of decisions, a rule has to clear several bars at once: enough samples, a high agreement rate with the humans who reviewed its suggestions, and a clean recent streak. Defaults are conservative.
Because eligibility is live, a rule that starts making mistakes stops being eligible on its own. There is no stale “approved” bit to forget about.
Three gates to engage
Section titled “Three gates to engage”- Role. Only members of the approver group can engage auto-mode.
- Live eligibility. Engagement is refused if the rule is not eligible at that moment, not merely when someone last looked.
- A molly-guard. The approver types the rule’s name to confirm, and the engagement is recorded with the evidence that justified it.
Two brakes while running
Section titled “Two brakes while running”- A per-fax confidence floor: even an engaged rule only auto-routes a fax it is confident about.
- Drift auto-disengage: if the rule starts diverging from what humans would have done, it switches itself back to suggest-only.
The anti-inflation property
Section titled “The anti-inflation property”Auto-routed faxes are recorded as machine actions and are excluded from the trust metric. A rule cannot pad its own track record by acting autonomously. The evidence that earns trust is always human decisions.
The line that does not move
Section titled “The line that does not move”Auto-mode routes. It never files to a chart. Filing requires a human to confirm the patient, because that needs an independent cross-check (MRN against name and date of birth) that a routing record does not provide.
A note on history
Section titled “A note on history”The engagement ledger is bitemporal: it records both when a rule was engaged and when the system believed it. Disengaging is a sequenced amend, so prior beliefs survive and the full timeline can be replayed. You can always answer “what was engaged, and what did we think, last Tuesday?”