Healthcare Compliance

Healthcare is where "show a verifiable record of what your agents did" stops being a slogan. If an agent fleet drafts breach notifications, triages privacy queries, or assembles audit evidence, the organisation that deployed it will eventually be asked to show exactly what those agents accessed and why. CueCrux answers that question with machinery rather than policy documents: the Crux Daemon signs a CROWN receipt for every state mutation, and the receipts are hash-chained on an append-only spine, so the trail is tamper-evident by construction.

Attribution is built in. Every agent connection binds to a passport, so there are no anonymous writes; any receipt resolves back to who acted, at what trust tier, under which grants. When an OCR-style audit asks who touched a record set, the answer is a replay, not a reconstruction from best-effort logs.

High-stakes actions route through human gates that cannot auto-approve past a timeout, and each approval lands as a signed fact. For erasure obligations, scoped forget with a dry-run shows exactly what a deletion will touch before it executes, and the deletion itself mints a receipt.

The daemon runs locally, CPU-only, with no account required, which matters in healthcare: sensitive material stays on your infrastructure, and the receipt chain verifies offline.