Custom AgentUndisclosed

Put a de-identifying gate in front of the agent, then let it read your own records: a $1,000 colonoscopy deductible and a drafted appeal

Eugene Vestel(Substack 专栏 evestel 作者,原帖作者本人)Substack · 2026-02-24

Read original

Saved text / editorial summary

原帖相关段落逐字(Substack,2026-02-24,本轮直连取得全文,HTTP 200): “I created a personal FHIR server. Not a startup platform. Not a shared cloud. A private instance. … Epic patient-access FHIR data from two health systems, Additional clinical records not available via TEFCA, Pharmacy data, Insurance history and claims via Flexpa using the CARIN Alliance IG (Coverage + EOBs).” “This guardrail proxy sits between Open Claw and any FHIR server. Every request passes through it. No exceptions. … Automated PHI reduction (masking, truncation, stripping identifiers), Immutable audit logs, Step-up authorization for writes, Human-in-the-loop confirmation for clinical actions.” “Case in point: my colonoscopy. I was never told it would be billed as diagnostic instead of routine. That meant a $1,000 deductible despite the fact that if I'd waited a few weeks (turning 45 in 2026), it would've been fully covered. Open Claw helped me: understand the billing nuance, draft a dispute, identify leverage (including credit reporting thresholds), decide whether escalation was worth it.” 中文对照:他建了一个私有 FHIR 实例,汇总两家医疗系统的 Epic 数据、TEFCA 之外的临床记录、药房数据与 Flexpa 的保险理赔;护栏代理位于 OpenClaw 与 FHIR 服务器之间,做 PHI 脱敏、不可变审计日志、写操作升级授权、临床动作人工确认;肠镜被按诊断性计费产生 1000 美元 deductible,Agent 帮他理解计费口径、起草申诉、找出施压点并判断是否升级。

Business model

Substack writer Eugene Vestel built a personal health agent over his own private FHIR server. First he had a vendor-neutral guardrail proxy designed: PHI masking, truncation and identifier stripping, immutable audit logs, step-up authorisation for writes, and human-in-the-loop confirmation for clinical actions. Only then does OpenClaw read from that server to prep appointments, draft follow-up messages, fill forms, write insurance appeals, track longitudinal trends and flag cost issues early. The concrete case is his own colonoscopy, billed as diagnostic rather than routine, leaving a $1,000 deductible when waiting a few weeks (he turns 45 in 2026) would have made it fully covered. The agent helped him understand the billing nuance, draft a dispute, identify leverage including credit reporting thresholds, and judge whether escalation was worth it. The source gives no outcome for the dispute: the $1,000 is exposure, not money saved.

The value is the order of operations: settle ownership and de-identification before discussing what the agent can do. Health data mistakes are irreversible, so the guardrail belongs at the data layer rather than being left to model behaviour. The $1,000 is exposure, not a gain; what the agent produces is a bill you finally understand and a draft you can act on.

Workflow

  1. Consolidate your own data first: patient-access records, pharmacy data, insurance claims via CARIN Coverage and EOBs.
  2. Put a de-identifying guardrail proxy between the agent and the data, with no bypass.
  3. Grant only the fields this task needs, never raw PHI.
  4. Run a read-only pass and produce an itemised list of billing discrepancies with the source document for each.
  5. Draft the appeal or follow-up, marked unsubmitted; a human submits it.
  6. Turn longitudinal metrics into one timeline you can take to the next appointment.
  7. Keep the environment isolated and install no third-party skills of unknown origin.

Adaptation plan

The source gives no outcome for the appeal, no cost, no token figures and no error rate. It does not state which model or how the proxy is deployed beyond the design, and the architecture is one technically capable individual's setup rather than a product. The workflow, prompt, synthetic example and pitfalls are AgentFlow's proposals, untested.

Prompt

AgentFlow draft · Untested.

You are a personal medical billing review assistant. Your goal is to turn a bill I cannot read into a draft I can act on. You have de-identified read-only data. You have no submission rights.

[INPUT]
Scope of this task: [for example one visit's bill and the matching EOB]
Allowed field whitelist: [for example date, item, billing code, billing type, amount, patient responsibility]
Source documents available: [document list]
Left to me: medical judgement, whether to submit an appeal, whether to escalate

[EXECUTION STEPS]
1) List every charge in scope: date, item, billing code, billing type, amount, patient responsibility. Use only whitelisted fields and never request or output raw identifiers.
2) Check each line against the source documents and flag three kinds of problem: billing type inconsistent with the record description, duplicate charges, and items that should have been covered but were billed to me. Cite the document for each.
3) For each finding give a recommended action: verify the code, request a review, submit an appeal, or gather more documents first.
4) Draft one appeal or follow-up message for the finding I name, marked as unsubmitted, ending with the list of documents to attach.
5) Give a rough read on whether escalation is worth it: amount involved, deadline, possible appeal or credit-reporting paths. Advise, never decide.
6) Write no diagnostic conclusions. Anything clinical must be marked as needing clinician confirmation.

[OUTPUT]
- Charge table with columns: date / item / code / billing type / amount / patient responsibility / finding.
- Findings, each with type, source document and recommended action.
- Appeal draft: subject, body, attachment list, clearly marked DRAFT - NOT SUBMITTED.
- Escalation note: amount, deadline, possible paths, ending with whether to escalate is your call.
- An uncertainty list stating what is missing.

[HUMAN CONFIRMATION]
- Do not submit appeals, contact providers or send any message; I submit after reviewing the draft.
- Never output names, national IDs or full record numbers; use only whitelisted fields.
- Give no diagnosis, medication or prognosis advice; mark anything clinical as needing clinician confirmation.
- Do not reach for fields or documents outside this scope.

[FAILURE AND MISSING INPUT]
- Missing EOB, unclear code meaning, amounts that do not reconcile: put them in the uncertainty list with what is needed; never infer what a code means.
- If a source document cannot be read, report failure; do not fill gaps from general knowledge.
- If input is insufficient at any step, stop there and list what to gather.

[SYNTHETIC EXAMPLE - not real data, format only]
Input: scope "one outpatient procedure bill and matching EOB"; whitelist: date, item, code, billing type, amount, patient responsibility
Output (extract):
| 2026-02-11 | colonoscopy | example code | diagnostic | example amount | example responsibility | record says screening, billing type inconsistent |
Finding: billing type inconsistent with record description; source EOB-example p.2; recommend requesting a code review.
Appeal draft: subject "Request for review of billing type", 4 paragraphs, 2 attachments - marked DRAFT - NOT SUBMITTED.
Escalation note: amount at stake, 30-day review deadline; whether to escalate is your call.

Running costs and pitfalls

The source gives no outcome for the appeal, no cost, no token figures and no error rate. It does not state which model or how the proxy is deployed beyond the design, and the architecture is one technically capable individual's setup rather than a product. The workflow, prompt, synthetic example and pitfalls are AgentFlow's proposals, untested. No independent cost benchmark is available. Check subscriptions, permissions and external actions before running a workflow.

Author-reported results are not independently audited.

Original text and media remain attributed to their authors.

Example and test provenance · Synthetic

Saved example in its original language; not proof of the author’s business results.

范围:某次门诊检查账单与对应 EOB;字段白名单:日期、项目、编码、计费类型、金额、自付;依据文件:EOB-示例编号、检查记录-示例编号。
| 2026-02-11 | 结肠镜检查 | 示例编码 | 诊断性 | 示例金额 | 示例自付 | 记录描述为筛查性,计费类型不一致 |
疑点:计费类型与记录描述不一致;依据 EOB-示例编号 第 2 页;建议先申请编码复核。
申诉草稿:标题「关于某次检查计费类型的复核申请」,正文 4 段,附件 2 份——标注「草稿,未提交」。
升级提示:涉及自付金额,复核申请时限 30 天;是否升级由你决定。
不确定项:EOB 第 3 页编码含义不明,需向机构索取编码说明。