3allowlisted egress destinations per agent
0protected health information flows to unapproved endpoints in monitoring
12MCP servers reviewed and signed before use
After discovering that documentation agents could reach the open internet and arbitrary internal systems, the health system confined them with OS-level sandboxes, per-agent egress allowlists and a reviewed MCP server catalogue.
Spot an error, or know a record we should add? Members can propose additions and submit corrections.