Loading…
Loading the pagePlatform
Each stage below separates what exists in the demonstrator from what is synthetic, what needs funded research and what needs an NHS approved environment. Those are four different things and they are not interchangeable.
Seven stages. Each states its inputs, the rule it applies, the authority it needs and the record it leaves.
State is projected from the event history on every read rather than stored and mutated.
Deterministic detectors for delay, missing prerequisite, stale dependency, non-response and conflict.
Only catalogued actions may be proposed. The planner cannot invent one.
Deny by default. Uncatalogued, clinical or insufficiently evidenced proposals are refused.
One named role for bounded action, two for higher impact, and they cannot be the same person.
A repeated call has one effect. External systems are simulated in the demonstrator.
Bounded retries, compensating action on partial failure, escalation on the rest.
Real records from a seeded run, not an illustration. The same scenario at the same seed produces the same records in the same order.
| Seq | Elapsed | Class | Event | Outcome | Record |
|---|---|---|---|---|---|
| 1 | 02:00 | — | Constraint detected | Prerequisite never requested | 5cdd6c2d9a |
| 2 | 02:00 | A | Authority decision | Permitted — the system may act |
State is projected from an event history on every read rather than stored and mutated, so the same events always produce the same state and any point in a run can be rebuilt exactly.
Exists in the demonstrator
Deterministic projection and replay across seeded scenarios.
Synthetic or modelled
All events are invented. Volumes are small — five pathways, not five thousand.
Requires funded R&D
Ingesting real pathway state that arrives late, out of order and contradictory across systems.
Requires an NHS approved environment
Any connection to a live source system.
Deterministic detectors identify delay, missing prerequisite, stale dependency, non-response and conflicting state, each carrying the facts that triggered it and an explicit uncertainty value.
Elective pathways expose the challenge clearly: many teams, systems, dependencies and decisions must align for care to progress. This is where we are proving the approach — not the boundary of what it is for.
We are not claiming a universal diagnosis of NHS elective care. Every service is organised differently, and the teams doing this work already know where their own friction sits far better than we do.
What we are testing is narrower: that in some services, material manual coordination sits between an operational issue becoming visible and the next appropriate step happening — and that a bounded execution layer could reduce it without touching clinical judgement.
Leva Health's thesis is that material manual coordination sits between detecting a blocked pathway and resolving it, and that a controlled execution layer could close that gap.
Every label below is invented. It exists to show the shape of the problem, not to represent any real service or patient.
A detector that performs well on clean, well-ordered events may perform badly on all three of these. That is the central technical uncertainty in the research programme, and it has a real negative answer available.
Chasing an outstanding dependency, raising a coordination task, recording that a prerequisite is missing, escalating an overdue item to a named role, preparing a communication for approval.
Diagnosis, treatment, clinical priority, clinical suitability and eligibility. Routed to an authorised clinician and never decided by the system. A refusal here is the architecture working.
A request requiring clinical judgement is refused by the real policy engine and routed to a clinician, rather than by a scripted animation.
We are inviting NHS professionals to review the synthetic demonstrator and tell us where the workflow is unrealistic, where the authority boundaries sit wrongly, and what would need resolving before any evaluation. Review takes about 25 minutes and is by individual invitation.
| 86a32a76bf |
| 3 | 02:00 | A | Action executed | Executed through a simulated connector | 76eeb6e1d6 |
| 4 | 02:00 | — | Outcome confirmed | resolved | 24e39908a9 |
| 5 | 04:00 | — | Constraint detected | Capacity recovery opportunity | 8f0b00f918 |
| 6 | 04:00 | C | Authority decision | Refused by policy | 040383b262 |
| 7 | 04:00 | — | Escalated | Prohibited condition | 6deb8a214b |
| 8 | 04:00 | — | Constraint detected | Capacity recovery opportunity | 4d0c3bae72 |
| 9 | 04:00 | C | Authority decision | Refused by policy | 2a5cb1f81b |
| 10 | 04:00 | — | Escalated | Prohibited condition | b531ce3cc7 |
| 11 | 06:00 | C | Authority decision | Held for named human approval | 8c8786b77a |
| 12 | 06:00 | C | Approval requested | Queued for a named human | efad2b8c3c |
| 13 | 08:00 | C | Approval decision | Awaiting a second signature | a6f2272da3 |
| 14 | 08:00 | C | Approval decision | Approved by a named role | 747fecb19e |
Exists in the demonstrator
Six detectors with reason codes, facts and stated uncertainty.
Synthetic or modelled
Thresholds are demonstrator defaults with no evidential basis, and are labelled as such.
Requires funded R&D
Whether detectors transfer to real data, and what false positive rate is tolerable in a real workflow.
Requires an NHS approved environment
Calibration against observed baselines.
A planner assembles a response from the action catalogue, with its reason, its evidence and the authority it requires attached. It cannot invent an action that is not catalogued.
Exists in the demonstrator
Ranked proposals from a nine-action catalogue, each with evidence.
Synthetic or modelled
The catalogue is hand authored for one invented service.
Requires funded R&D
Bounded AI assistance in interpretation and planning, measured against the deterministic baseline.
Requires an NHS approved environment
A catalogue agreed with the organisation that will operate it.
The policy engine decides. Deny by default: anything uncatalogued, clinical or insufficiently evidenced is refused and recorded. An action’s class is a property of the catalogue, resolved at decision time.
Exists in the demonstrator
Five authority classes enforced; clinical and uncatalogued requests refused and audited.
Synthetic or modelled
The policy set is ours, not an organisation’s.
Requires funded R&D
Where a real organisation is willing to place the boundary, and evidencing that it holds.
Requires an NHS approved environment
Agreement on delegated authority, with clinical safety and governance sign-off.
Permitted low-risk actions execute with idempotency controls so a repeated call has one effect. Everything else waits for named human approval, which can be given, refused, amended or allowed to expire.
Exists in the demonstrator
Idempotent execution, approval queue, separation of duties, expiry, rejection.
Synthetic or modelled
Every external system is a simulator implementing an interface.
Requires funded R&D
Integration with real systems, and identity assurance for the people approving.
Requires an NHS approved environment
Any write to an operational system.
The system checks whether an action produced its expected outcome, retries within bounds, applies compensating action on partial failure and escalates what it cannot resolve to a named human.
Exists in the demonstrator
Outcome monitoring, bounded retry, compensation, SLA escalation, injected failure recovery.
Synthetic or modelled
Outcomes are compared against a no-action and a manual comparator built from stated assumptions.
Requires funded R&D
Attributing operational change in a live service against a moving baseline.
Requires an NHS approved environment
Prospective evaluation with a declared comparator.
Every step appends to a tamper evident chain recording actor, authority class, evidence, policy version, input and output hashes, and outcome. Altering a record breaks verification from that point onward.
Exists in the demonstrator
Hash-chained records, verification, a tamper demonstration and a machine-readable evidence export.
Synthetic or modelled
In-memory for the demonstrator, with no retention policy.
Requires funded R&D
Durable, access-controlled retention and external anchoring.
Requires an NHS approved environment
Records covering real people and real actions.
Leva Health is developed by Orbixa Technologies Ltd, a company registered in England and Wales under company number 16519488.
Company number 16519488