| OP here. *** I'm seeing comments about AI-generated writing. This is my voice—I've been writing in this style for years in government policy docs. Happy to discuss the technical merits rather than the prose style. *** At Ontario Digital Service, we built COVID-19 tools, digital ID, and services
for 15M citizens. We evaluated LLM systems to improve services but could never
procure them. The blocker wasn't capability—it was liability. We couldn't justify "the model
probably won't violate privacy regulations" to decision-makers who need to
defend "this system cannot do X." This post demonstrates the "Prescription Pad Pattern": treating authority
boundaries as persistent state that mechanically filters tools. The logic: Don't instruct the model to avoid forbidden actions—physically remove
the tools required to execute them. If the model can't see the tool, it can't
attempt to call it. This is a reference implementation. The same pattern works for healthcare (don't
give diagnosis tools to unlicensed users), finance (don't give transfer tools to
read-only sessions), or any domain where "98% safe" means "0% deployable." Repo: https://github.com/rosetta-labs-erb/authority-boundary-ledge... |