Why these inputs exist
A calibration can only be applied safely if the engine knows whether its conditions are present. The purpose is not to collect more data for its own sake; it is to prevent incorrect interpretation. If the engine does not know the context, it should not pretend that it does.Input hierarchy
The engine prioritizes the most specific biological evidence available.Genotype as the strongest signal
When a relevant genotype is confirmed, it should govern the calibration decision. APOL1 high-risk genotype may modify kidney-risk interpretation beyond standard creatinine or eGFR logic; Duffy/ACKR1 status may modify interpretation of baseline neutrophil counts; hemoglobinopathy markers may affect the reliability of HbA1c as a glycemic marker. Confirmed genotype is a high-confidence input because it directly maps to a defined biological mechanism. Even then, genotype does not create an automatic diagnosis or treatment decision. It changes interpretation, supports review, or affects routing — and remains under the same controls: evidence linkage, lifecycle status, clinician visibility, patient language control, and audit trace.These controls prevent genotype from becoming an invisible algorithmic modifier.
Phenotype and lab patterns
When genotype is not available, phenotype or repeated lab patterns may suggest that a calibration is relevant — for example, a recurring neutrophil pattern suggesting a Duffy-null phenotype, or a glycemic mismatch raising concern that HbA1c is not accurately reflecting glucose exposure.
This avoids both underuse and overuse of calibration. The system can surface the possibility without pretending the mechanism has been confirmed.
Self-reported ancestry
Self-reported ancestry can be clinically useful context, but it must be handled carefully. It should not be treated as a definitive biological marker, should not override confirmed genotype, should not be used to make broad assumptions, and should not be used outside the stated clinical purpose.
This is one of the most sensitive parts of the system. The patient must understand why the question is being asked.
Context inputs beyond ancestry
Not all calibration inputs are ancestry-related. Many are routine clinical context variables that can change interpretation: fasting status, pregnancy status, recent acute illness, recent strenuous exercise, medication use, biotin use, dehydration at draw, time of draw, altitude, and assay method. The engine treats context as part of the clinical input, not as an afterthought. Pregnancy, acute illness, recent strenuous exercise, fasting confirmation, and assay confounding are examples of safety conditions that can suppress, harden, or route interpretation to review.Consent and transparency
Ancestry and genotype data are sensitive. The system collects and uses them only with express consent, clear purpose, and heightened protection. Ancestry and genotype data are sensitive under Colombian Ley 1581, requiring express consent and heightened protection, and the patient must be told why the information is requested and how it is used. A patient-facing explanation should be simple: “Some lab values can be interpreted more accurately when we know certain biological or genetic context. We ask for this information only to improve clinical interpretation and only with your consent.” A safe consent model includes:- Purpose — the data is used to interpret labs more accurately.
- Scope — the data is used only for clinical calibration and related review.
- Voluntary nature — the patient understands what is optional.
- Impact of missing data — some calibrations may not apply without the input.
- Protection — sensitive data receives heightened access controls.
- Review — clinicians can inspect how the input affected interpretation.
- Withdrawal or correction — the patient can update or correct information.
The goal is not only compliance. The goal is trust.
Purpose limitation
Sensitive inputs are used only for their stated clinical purpose: calibration and interpretation.
Ancestry is never used for any purpose other than clinical calibration. This should remain a hard product, legal, and clinical boundary.
Conservative handling of uncertainty
The engine should never force a calibration when the input signal is weak, missing, or contradictory.
This preserves the preventive tone of the system: act early when justified, but escalate when uncertain.
Avoiding misuse
The system must avoid broad racial generalizations. A calibration applies to a defined mechanism, not to appearance, identity, or unsupported assumptions.
The system encodes specific, documented biological mechanisms, not broad racial generalizations. This is both scientifically and ethically necessary.
Clinician-facing visibility
Clinicians should see exactly how ancestry, genotype, phenotype, or context influenced an interpretation. The clinician view shows the input source, confidence level, calibration applied, applies-when condition, evidence source, version, review requirement, patient-visible effect, and a link to the decision record. This protects the physician from black-box interpretation. The clinician should never have to guess why the engine changed a result.Patient-facing language
Patient-facing language should be accurate, simple, and non-alarming. The patient does not need every technical detail, but the explanation should not hide the existence of context-based interpretation.
The tone should be preventive and calm. The system avoids language that sounds deterministic when the input is uncertain.
Data protection
Sensitive inputs require stronger protection than ordinary product data. Clinical data and decision records are sensitive data, with least-privilege access, segregation, and audit logging, and de-identified data may improve calibrations only with separate consent. For ancestry, genotype, and phenotype inputs, the protection model includes express consent, access restriction to authorized clinical or technical roles, purpose restriction to clinical interpretation, audit logging, data minimization, segregation from general product data, consented de-identification for learning, and a retention policy that avoids indefinite storage without clinical or legal basis. Traceability and privacy must work together. The system should be explainable without exposing sensitive information unnecessarily.Runtime example
- Duffy-null neutrophil count
- Uncertain HbA1c