CECI.
Critical Environment Clinical Intelligence
GROUNDED ANSWERING AGENT
CECI informs. Clinicians decide.
A general model will answer anything, which is precisely the problem at the bedside. CECI answers only from the content the institution has drafted, approved, and published, cites the document and version behind every claim, and refuses when the library holds no basis.
The name
CECI stands for Critical Environment Clinical Intelligence. It is also the French for “this,” the word you use while pointing at something specific. That is the whole behaviour of the product: not an opinion about the topic, but a finger on the approved paragraph that governs it here, in this institution, in this version.
How it answers
Grounded answers, or none at all
Grounding
Retrieval runs against approved institutional content only. Nothing outside the governed library can enter an answer.
Citation
Every answer names the document and version it came from, so a clinician can read the source rather than trust a summary.
Refusal
No basis, no answer. CECI says “no source found” rather than generating one.
At the point of care
A citation on every answer, and a refusal when there is none
Ask CECI
Approved library onlyWhat is our vasopressor escalation threshold on the unit?
Escalate when mean arterial pressure stays below the unit target after adequate volume resuscitation, following the approved unit protocol.[1]
[1] Shock and vasopressor protocol · ICU · v3.2 · approved
What dose does the new agent start at?
No source found
The approved library holds no basis for this answer. Nothing was generated.
Capabilities
Built for governed clinical use
- Hybrid retrieval across the institution's approved library
- Answer mode grounded only in approved institutional content
- Role-gated access with multi-factor authentication throughout
- Runs on premises, inside the institution's boundary
- Every interaction logged and reviewable
Boundaries
What it does not do
- No autonomous diagnosis and no clinical action
- No answers invented when the library is silent
- No patient information required, entered, or stored
- No content published without institutional approval
Deployment
Where it runs, and on what
- PlacementHospital or unit node inside the institution's network
- Content sourceThe CELSUS approved library, and nothing else
- ModelsAny model the institution approves, served on its own compute
- Data egressNone. Questions and answers stay inside the boundary
- Patient dataNot required, not entered, not stored
- GovernanceRuns under SALVEA policy, audit, and evaluation
Compliance
Designed to operate within PIPEDA and provincial health-information acts.
- PIPEDA
- Provincial health-information acts
- HL7 FHIR
- SNOMED CT
- ICD-10-CA
Governance
Accountable by construction
01 / Sovereign
Served on premises under the institution's control, with no dependency on third-party cloud services.
02 / Governed
Answers can only draw on content the institution has drafted, approved, and published.
03 / Clinician-led
Decision support only. Clinical judgement stays with the clinician at every step.
04 / Audited
Every question, answer, and citation is logged, versioned, and reviewable.
The safety property built into the platform, not a setting on top of it. A qualified human holds the judgement and the accountability: every model, agent, and workflow is designed to inform that person and stop at them.
A clinician decides
The system surfaces evidence, risk, and reasoning. It does not order, prescribe, or act on a patient. Every clinically consequential step waits on a named person with the authority to take it.
Approval before action
Anything sensitive routes to explicit human approval before it takes effect. The approval gate is enforced in the platform itself, not left to policy documents or user discipline.
Reasoning shown, not hidden
Every output carries what it drew on, what it was missing, and how it was formed, so the reviewing clinician can accept, question, or reject it on the evidence rather than on trust.
Accountability stays human
The operator, the custodian, the key-holder, and the approver are the institution's own people. Clinical accountability is never transferred to a model or to us.
CELSUS governs the content. CECI answers from it. MINIM writes the record. A clinician signs everything.