Handrail — RefillRx Prescription Management Demo

Review your active prescriptions, set your Handrail Authority Contract parameters, and safely authorize medication refills with accessible human-in-the-loop consent.

Verified Patient Record

Synthetic Demo Patient — Fictional Data for Demonstration

Account Verified

Your Prescriptions

Lisinopril, Atorvastatin, and Metformin — Select to view details or stage for refill

3 Prescriptions

Medication & Strength	Rx ID	Refills	Copay Price	Eligibility	Actions

Prescription Details

Refill Order Staging

Pre-flight check against Handrail policy

Result / Audit Receipt

Transparent accountability distinguishing user authorization, agent request, Handrail decision, and final outcome

WebMCP Tool Registry & Trust Inspector

First-party tool metadata, explicit read-only/mutating classification, and deterministic trust verification

5 Expected Tools Active

Handrail 4-Gate Execution Pipeline & Consent Boundary

1. Tool Invocation

Gate 1: Tool Trust
Squatting • Injections

Gate 2: Authority Policy
Scope • Spend Limit

Gate 3: Human Consent
If Consequential

Gate 4: Execution
Pharmacy Action

Defaults-to-Safe Principle: Tool-Trust (Gate 1) runs before Authority (Gate 2) and Confirmation (Gate 3). Suspicious tools or unauthorized modifications default to safe immediately and NEVER reach human confirmation.

Active Session Baseline: SESSION-RX-2025-001

Unmarked Tool Policy: Default Mutating (Never Safe)

Structured Audit Trail

Deterministic session record of all agent invocations, policy evaluations, and human consent decisions

0 events

Authority Contract Verification Suite

Run automated policy evaluation tests and cryptographic verification

Click “Run Test Suite” to execute deterministic test suite verifying contract bounds, spend caps, and WebMCP definitions. View technical verification details →

Demo Scenarios

Interactive WebMCP agent scenarios with NO consent bypass.

Primary Demo Scenarios

Individual Tool Step Simulator

Delegation Trap & Mid-Session Trust Tests

Developer Utilities

AGENT ACTIVITY

Current authority bounds & recent agent action

LIVE

Current Authority:

Lisinopril 10 mg (RX-001) • Prepare & submit • Max spend: $25.00

Recent Action:

Session initialized with default contract.

Tool / Security Status:

● Ready / Idle (Waiting for agent task)

HANDRAIL AUTHORITY

Set deterministic boundaries for AI agent actions

AUTH-CTR-2025-001

Allowed Medications

Select the specific prescriptions the AI agent is authorized to act on:

Lisinopril 10 mg — RX-001 Oral Tablet • $12.40 • 2 refills
Atorvastatin 20 mg — RX-002 Oral Tablet • $18.75 • 1 refill
Metformin 500 mg — RX-003 Extended Release • $9.20 • 0 refills

Action Scope

Control whether the agent may only stage orders or also submit them:

Prepare only (Agent may stage refill calculations; human must submit) Prepare & submit (Agent may stage and initiate refill submission)

Maximum Amount & Limits

Maximum Spend Limit ($ USD): Agent cannot execute or prepare orders exceeding this cap.

Human Confirmation Threshold ($ USD): Refills at or above this amount require accessible human authorization.

Require explicit human confirmation before submission

Contract active

CONSENT / TRUST STATUS

Cryptographic bounds & deterministic policy metrics

0 Total Calls

0 Approved

0 Blocked

0 Confirmations

Contract SHA-256 Fingerprint:

Computing hash...

WebMCP Runtime Environment

Canonical browser registration inspection

Inspecting API...

document.modelContext: Unavailable

registerTool API: Unavailable

Registered Tools: 5 Registered Tools

First-party page-side JavaScript calls document.modelContext.registerTool when present. In standard browsers without native WebMCP flags, the API is not faked or emulated; Handrail operates canonical tools through its deterministic test harness.