Permissions & action boundaries

The signed-in user matters

Menaela can only retrieve or change information available to the current staff user. For example, a secretary should not gain access to medical-note content simply by asking for it in Chat.

Some actions require explicit approval

Sensitive actions can surface approval controls before execution. Signing or amending medical notes through Menaela requires explicit approval. Routine scheduling actions do not all require a separate confirmation when the request itself is already clear and authorized.

Autonomous delivery is checked again before sending

A reply prepared earlier is not treated as irrevocable. Before an autonomous patient reply is delivered, Menaela rechecks whether clinic autonomy is still active, whether staff have taken over or replied, whether a newer run superseded the old one and whether the channel still permits delivery.

A clinic instruction cannot grant new powers