Musings on healthcare IT, FHIR, EHR systems, and digital health innovation — by Josh Mandel, MD.https://joshuamandel.comen-ushttps://joshuamandel.com/blog/posts/7000-clicks-to-register-a-fhir-apphttps://joshuamandel.com/blog/posts/7000-clicks-to-register-a-fhir-appTL;DR: I built Health Skillz to help patients connect their health records to an AI assistant. An important feature of such an app is the ability to maintain a long-term connection when that's what the patient wants. Enabling this required registering a new type of SMART on FHIR client with Epic. Epic deserves credit f…Fri, 03 Apr 2026 00:00:00 GMT2026-02-11T19:59:00.000Zhttps://joshuamandel.com/blog/posts/anyone-can-add-structure-if-plans-publish-the-rules-of-playhttps://joshuamandel.com/blog/posts/anyone-can-add-structure-if-plans-publish-the-rules-of-playThere is a lot of pressure right now to improve prior authorization. Some of that work is overdue and useful: fewer portals, less faxing, cleaner transactions, better ways to move documentation from the chart into the request. CMS’s interoperability and prior authorization rule, finalized in January 2024, pushes the sy…Fri, 03 Apr 2026 00:00:00 GMT2026-04-02T21:10:00.000Zhttps://joshuamandel.com/blog/posts/beyond-loading-thirty-four-prototypes-before-breakfasthttps://joshuamandel.com/blog/posts/beyond-loading-thirty-four-prototypes-before-breakfastI'm building Health Skillz, a patient-facing app that helps people bring their healthcare data securely into their browser from provider systems -- and, from there, share it with an AI of their choice, with end-to-end encryption so only the AI can decrypt it. When someone connects their patient portal to Health Skillz,…Fri, 03 Apr 2026 00:00:00 GMT2026-02-12T16:12:00.000Zhttps://joshuamandel.com/blog/posts/demystifying-fhir-terminology-bindings-an-ai-assisted-guidehttps://joshuamandel.com/blog/posts/demystifying-fhir-terminology-bindings-an-ai-assisted-guide(Guest Post by Shelley / Exe.dev, via Claude Opus 4.5 with access to Zulip. Jira, and the FHIR spec, and a detailed set of prompts based on today's HL7 Working Group meeting Q2 between FHIR Infrastructure and Terminology WGs.) Subject: How binding strength, additional bindings, and CodeableConcept work together—and how…Fri, 03 Apr 2026 00:00:00 GMT2026-01-29T00:55:00.000Zhttps://joshuamandel.com/blog/posts/fhir-meets-ralph-wiggum-or-agents-can-find-spec-bugshttps://joshuamandel.com/blog/posts/fhir-meets-ralph-wiggum-or-agents-can-find-spec-bugsThe Hype The "Ralph Wiggum loop" went viral in early 2026. Named after the Simpsons character, the idea is dead simple: run an AI agent in a loop until done, reset context each session, preserve progress externally. Plugins spawned. Twitter argued about token costs. I was skeptical. Then I watched Claude Opus 4.5 write…Fri, 03 Apr 2026 00:00:00 GMT2026-01-28T20:12:00.000Zhttps://joshuamandel.com/blog/posts/from-mcp-server-to-ai-skill-a-simpler-more-powerful-way-to-analyze-federal-regulation-commentshttps://joshuamandel.com/blog/posts/from-mcp-server-to-ai-skill-a-simpler-more-powerful-way-to-analyze-federal-regulation-commentsLast summer I shared an MCP server that let AI tools query public comments on federal regulations. It worked — but hosting and maintaining it was a pain. Today I'm replacing it with something better. The MCP problem The MCP server required a running backend (I hosted on Fly.io with a scale-to-zero VM), had payload size…Fri, 03 Apr 2026 00:00:00 GMT2026-03-09T18:26:00.000Zhttps://joshuamandel.com/blog/posts/granting-permission-to-yourself-american-medical-records-requests-are-often-absurdhttps://joshuamandel.com/blog/posts/granting-permission-to-yourself-american-medical-records-requests-are-often-absurdImagine walking into your local public library to check out a book, only to be handed a third-party disclosure form designed for an insurance company. You write your own name in the "Authorized Recipient" box. You declare your "Purpose" for wanting to read the book. You ask two strangers in the lobby to co-sign your re…Fri, 03 Apr 2026 00:00:00 GMT2026-02-20T14:45:00.000Zhttps://joshuamandel.com/blog/posts/health-skillz-why-i-built-my-own-health-record-connector-for-claude-ai-codexhttps://joshuamandel.com/blog/posts/health-skillz-why-i-built-my-own-health-record-connector-for-claude-ai-codexTL;DR: I built Health Skillz, a Claude Skill that fetches your health records directly from your patient portal using SMART on FHIR. It pulls all your structured data (labs, meds, conditions) plus the full text of clinical notes, encrypts everything end-to-end, and lets Claude analyze it. To try it: download the skill,…Fri, 03 Apr 2026 00:00:00 GMT2026-01-13T03:33:00.000Zhttps://joshuamandel.com/blog/posts/how-i-used-ai-agents-to-assess-the-state-of-ehi-exporthttps://joshuamandel.com/blog/posts/how-i-used-ai-agents-to-assess-the-state-of-ehi-exportThis is the technical companion to "I Graded Every EHR's Patient Data Export Documentation." That post says what I found; this one says how I found it. From 10,000 pages to 217 vendors Last year I built a tool to read 10,000 pages of public comments on the CMS Health Tech Ecosystem RFI. The approach was a feed-forward…Fri, 03 Apr 2026 00:00:00 GMT2026-02-18T01:18:00.000Zhttps://joshuamandel.com/blog/posts/hti-5-analysis-a-battle-is-brewing-over-ai-agents-as-ehr-usershttps://joshuamandel.com/blog/posts/hti-5-analysis-a-battle-is-brewing-over-ai-agents-as-ehr-usersGuest post from Gemini Pro analyzing HTI-5 comments on the theme of artificial intelligence / robotic process automation, sourced from my regulations.gov comment browser on HTI-5. For the past fifteen years, the undisputed center of gravity in American healthcare has been the Electronic Health Record (EHR). Following a…Fri, 03 Apr 2026 00:00:00 GMT2026-03-08T02:20:00.000Zhttps://joshuamandel.com/blog/posts/hti-5-deregulation-rhetoric-and-architectural-gapshttps://joshuamandel.com/blog/posts/hti-5-deregulation-rhetoric-and-architectural-gapsThe latest proposed rule from ASTP/ONC frames a significant deregulation of the Health IT Certification Program as a necessary pivot toward a "FHIR-forward future." The document uses the rhetoric of modernization to justify the removal of long-standing requirements for legacy standards like C-CDA and Direct, and I'm ge…Fri, 03 Apr 2026 00:00:00 GMT2026-01-14T17:04:00.000Zhttps://joshuamandel.com/blog/posts/i-built-an-ai-skill-to-help-patients-request-their-ehi-exporthttps://joshuamandel.com/blog/posts/i-built-an-ai-skill-to-help-patients-request-their-ehi-exportEvery patient in the US has the right to a complete electronic copy of their medical record. Since December 2023, every certified EHR system has been required to support a feature called “EHI Export” that produces exactly this: a bulk export of all structured data in a patient’s chart. This is different from (deeper th…Fri, 03 Apr 2026 00:00:00 GMT2026-03-02T14:34:00.000Zhttps://joshuamandel.com/blog/posts/i-graded-265-ehrs-on-the-export-everything-requirement-median-grade-was-dhttps://joshuamandel.com/blog/posts/i-graded-265-ehrs-on-the-export-everything-requirement-median-grade-was-dA caveat up front: Evaluating EHI export documentation is hard. Vendors' published specs are often limited, cryptic, or use product-specific terminology that's unfamiliar even to domain experts. AI-assisted analysis facilitates best-effort understanding, but it can be wrong in the details. I can't manually review all 6…Fri, 03 Apr 2026 00:00:00 GMT2026-02-17T18:46:00.000Zhttps://joshuamandel.com/blog/posts/i-registered-health-skillz-at-500-epic-sites-then-couldn-t-connecthttps://joshuamandel.com/blog/posts/i-registered-health-skillz-at-500-epic-sites-then-couldn-t-connectThis is a follow-up to 7,000+ Clicks to Register a FHIR App. That post covered the work of getting a confidential SMART on FHIR client registered at 500 Epic organizations. This post covers what happened next. --- My automation script ran; the management portal said "Keys enabled" for Health Skillz at 496 organizations…Fri, 03 Apr 2026 00:00:00 GMT2026-02-12T22:58:00.000Zhttps://joshuamandel.com/blog/posts/initial-analysis-of-diagnostic-imaging-rfi-response-market-failures-and-regulatory-blind-spotshttps://joshuamandel.com/blog/posts/initial-analysis-of-diagnostic-imaging-rfi-response-market-failures-and-regulatory-blind-spotsFor the full analysis of 97 submissions to regulations dot gov, see my Regulatory Comment Browser. Guest post by Gemini Pro. Executive Summary Our initial analysis of the 97 public comments submitted in response to RFI HHS-ONC-2026-0067 indicates that the U.S. diagnostic imaging ecosystem is suffering from a profound r…Fri, 03 Apr 2026 00:00:00 GMT2026-03-19T15:45:00.000Zhttps://joshuamandel.com/blog/posts/open-data-agents-and-the-next-era-of-prior-authorization-in-cms-0057-fhttps://joshuamandel.com/blog/posts/open-data-agents-and-the-next-era-of-prior-authorization-in-cms-0057-fThe CMS Interoperability and Prior Authorization Final Rule (CMS-0057-F) sets the right goals: reduce administrative burden, speed access to care, and save an estimated $15 billion over ten years. The required functionality (looking up a member's plan; identifying documentation requirements; submitting prior authorizat…Fri, 03 Apr 2026 00:00:00 GMT2026-01-16T16:22:00.000Zhttps://joshuamandel.com/blog/posts/patient-directed-notifications-in-nationwide-health-data-networkshttps://joshuamandel.com/blog/posts/patient-directed-notifications-in-nationwide-health-data-networks(Guest post authored by ChatGPT 5.2 Pro -- if you think this slop, call me out!) Legal, Trust, and Architectural Considerations Executive summary There is growing interest in enabling patient-directed applications to receive notifications (e.g., “new data available,” “new encounter occurred”) across all sites where an…Fri, 03 Apr 2026 00:00:00 GMT2026-01-23T21:16:00.000Zhttps://joshuamandel.com/blog/posts/real-time-notifications-at-scale-a-brokered-approach-for-cms-aligned-networkshttps://joshuamandel.com/blog/posts/real-time-notifications-at-scale-a-brokered-approach-for-cms-aligned-networksThe CMS Interoperability Framework asks CMS-Aligned Networks to deliver appointment and encounter notifications using FHIR Subscriptions. While provider-level FHIR Subscriptions would be great (and I hope to see them land in HTI-6!), they aren't a solution to this CMS requirement because... You can't subscribe individu…Fri, 03 Apr 2026 00:00:00 GMT2026-01-31T19:20:00.000Zhttps://joshuamandel.com/blog/posts/smart-permission-tickets-argonaut-launchhttps://joshuamandel.com/blog/posts/smart-permission-tickets-argonaut-launchTomorrow, we are launching a new Argonaut project: SMART Permission Tickets. The goal is to define a standard way for authorization decisions to travel to data holders in a portable, machine-readable, and verifiable form. The friction we are trying to solve Today, SMART on FHIR authorization requires deep involvement a…Fri, 03 Apr 2026 00:00:00 GMT2026-03-24T16:10:00.000Zhttps://joshuamandel.com/blog/posts/sub-agents-are-getting-easierhttps://joshuamandel.com/blog/posts/sub-agents-are-getting-easierWhen a task is too big for one context window, the answer (in mid-January 2026) is more agents, not a bigger window. I needed to prepare for an HL7 workgroup meeting with 208 open ballot issues. Realistically, nobody reviews all of these ahead of time; you triage on the fly during the meeting. With eleven agents runnin…Fri, 03 Apr 2026 00:00:00 GMT2026-01-23T16:03:00.000Zhttps://joshuamandel.com/blog/posts/the-battle-for-health-data-moves-to-the-fine-printhttps://joshuamandel.com/blog/posts/the-battle-for-health-data-moves-to-the-fine-printTo unleash healthcare innovation, the federal government is targeting “unconscionable” contracts. But in trying to slay tech Goliaths, regulators may accidentally upend the entire system. Generated from all comments mentioning "unconscionable terms." In the modern healthcare economy, the most formidable barrier to your…Fri, 03 Apr 2026 00:00:00 GMT2026-03-09T00:49:00.000Zhttps://joshuamandel.com/blog/posts/the-value-was-never-the-frameworkhttps://joshuamandel.com/blog/posts/the-value-was-never-the-frameworkBack in 2016, I pushed back against the idea of "Custom Resources" in FHIR. My objection wasn't about chaos or control. It was about using the right tool for the job. If your wanted to design a new API outside of the standards process, technologies like OpenAPI and JSON Schema were simply better. They were purpose-buil…Fri, 03 Apr 2026 00:00:00 GMT2026-01-22T20:56:00.000Zhttps://joshuamandel.com/blog/posts/your-c-cda-is-exquisitely-unlikely-to-be-a-satisfactory-ehi-exporthttps://joshuamandel.com/blog/posts/your-c-cda-is-exquisitely-unlikely-to-be-a-satisfactory-ehi-exportUnder §170.315(b)(10), certified health IT must be able to export all electronic health information stored by the product. Not a summary/highlights, but everything: billing, insurance, specialty clinical data, administrative records used for decision-making, anything in the Designated Record Set that's stored electroni…Fri, 03 Apr 2026 00:00:00 GMT2026-02-16T15:33:00.000Zhttps://joshuamandel.com/blog/posts/authorization-as-a-network-scaling-problemhttps://joshuamandel.com/blog/posts/authorization-as-a-network-scaling-problemWhen we designed the SMART Backend Services specification, we deliberately left flexibility for implementers to handle authorization logic below the OAuth layer. There were good reasons for this - we needed to get the standard through, we needed to accommodate different deployment models, and frankly we didn't have con…Sun, 23 Nov 2025 00:00:00 GMT2025-11-19T17:35:00.000Zhttps://joshuamandel.com/blog/posts/beyond-the-care-gap-list-outreach-lotteryhttps://joshuamandel.com/blog/posts/beyond-the-care-gap-list-outreach-lotteryA thought experiment on making healthcare outreach smarter and more balanced. --- Every Monday morning, clinics across the country print out the "care gaps" list—a long spreadsheet of patients overdue for screenings, check-ins, or medication reviews. Dedicated professionals work diligently to address these gaps, aiming…Sun, 23 Nov 2025 00:00:00 GMT2025-09-19T19:27:00.000Zhttps://joshuamandel.com/blog/posts/can-50b-for-rural-health-drive-a-new-wave-of-interoperabilityhttps://joshuamandel.com/blog/posts/can-50b-for-rural-health-drive-a-new-wave-of-interoperabilityThe Rural Health Transformation Program (part of the “One Big Beautiful Bill,” Public Law 119–21) dedicates $50 billion over five years. States must apply by the end of 2025 with a detailed plan. CMS will distribute half the money equally across approved states and half using a formula based on rural population, facili…Sun, 23 Nov 2025 00:00:00 GMT2025-09-18T18:58:00.000Zhttps://joshuamandel.com/blog/posts/fixing-the-all-or-nothing-problem-in-health-data-sharing-experiments-with-selective-disclosure-for-fhir-sd-jwthttps://joshuamandel.com/blog/posts/fixing-the-all-or-nothing-problem-in-health-data-sharing-experiments-with-selective-disclosure-for-fhir-sd-jwtThe IETF recently published RFC 9901, standardizing Selective Disclosure for JSON Web Tokens (SD-JWT). This is a significant technical milestone for how we handle verifiable clinical information. I’ve focused throughout my career on the mechanics of sharing health data. As the lead author on the SMART Health Cards and…Sun, 23 Nov 2025 00:00:00 GMT2025-11-21T16:06:00.000Zhttps://joshuamandel.com/blog/posts/fulfilling-the-cures-act-conversational-interop-as-a-successor-technologyhttps://joshuamandel.com/blog/posts/fulfilling-the-cures-act-conversational-interop-as-a-successor-technologyThe 21st Century Cures Act set a clear north star: a patient’s electronic health information must be reachable “without special effort” through “APIs or their successor technologies.” Congress did not freeze the future on any single standard; it obligated the industry to keep removing friction from health data exchange…Sun, 23 Nov 2025 00:00:00 GMT2025-10-17T15:43:00.000Zhttps://joshuamandel.com/blog/posts/let-s-talk-about-appropriate-use-criteriahttps://joshuamandel.com/blog/posts/let-s-talk-about-appropriate-use-criteriaFew initiatives represent the gap between promise and reality quite like the Appropriate Use Criteria (AUC) program for advanced diagnostic imaging. The goal was unimpeachable: ensure that when a clinician orders a costly or high-radiation scan like a CT or MRI, the decision is backed by solid, evidence-based medicine.…Sun, 23 Nov 2025 00:00:00 GMT2025-10-17T20:44:00.000Zhttps://joshuamandel.com/blog/posts/privacy-reviews-in-big-tech-and-tefcahttps://joshuamandel.com/blog/posts/privacy-reviews-in-big-tech-and-tefcaBig tech companies spend a lot of time thinking about privacy design before they release anything that touches personal information. They don't just check if the data are secure; they look at everything from logs to links – even tiny clues that could in aggregate reveal too much. This post explores industry practices i…Sun, 23 Nov 2025 00:00:00 GMT2025-10-07T20:58:00.000Zhttps://joshuamandel.com/blog/posts/proposal-smart-health-check-in-protocolhttps://joshuamandel.com/blog/posts/proposal-smart-health-check-in-protocolThe CMS Interoperability Framework aims to "Kill the Clipboard," enabling patients to digitally share health records, insurance data, and other paperwork with providers. We already have robust data standards for this: SMART Health Cards (SHC) and SMART Health Links (SHL). These standards excel at modeling the data and…Sun, 23 Nov 2025 00:00:00 GMT2025-11-18T16:48:00.000Zhttps://joshuamandel.com/blog/posts/speeding-spec-development-by-making-ais-arguehttps://joshuamandel.com/blog/posts/speeding-spec-development-by-making-ais-argueSpeeding Spec Development by Making AIs Argue ============================================= Standards are supposed to bring clarity. Writing them is hard, getting them right is harder, and the feedback loop from implementation is the only thing that truly proves them out. The faster we can automate and accelerate that…Sun, 23 Nov 2025 00:00:00 GMT2025-10-14T18:42:00.000Zhttps://joshuamandel.com/blog/posts/an-order-to-harmhttps://joshuamandel.com/blog/posts/an-order-to-harmBased on https://joshuamandel.com/regulations.gov-comment-browser/AHRQ-2025-0002-0001//themes/4.4 "This will kill people." A physician at a community health center said this. He wasn't being dramatic. "I’m sick to my stomach," wrote another provider, "knowing I have to turn away my patients because of their 'legal stat…Mon, 15 Sep 2025 00:00:00 GMT2025-08-15T03:54:00.000Zhttps://joshuamandel.com/blog/posts/conversational-interoperability-takes-shape-a-read-out-from-the-hl7-connectathonhttps://joshuamandel.com/blog/posts/conversational-interoperability-takes-shape-a-read-out-from-the-hl7-connectathonImagine two AI agents, one representing a clinician buried in paperwork, the other a remote registry for a rare disease, exchanging messages in plain English to figure out exactly what patient data needs to be shared—and in what format—before a report can be filed. No endless meetings, no custom APIs hammered out over…Mon, 15 Sep 2025 00:00:00 GMT2025-09-15T14:58:00.000Zhttps://joshuamandel.com/blog/posts/my-latest-regulations-gov-comment-analysis-everyone-rejects-hhss-personal-responsibility-and-work-opportunity-reinterpretationhttps://joshuamandel.com/blog/posts/my-latest-regulations-gov-comment-analysis-everyone-rejects-hhss-personal-responsibility-and-work-opportunity-reinterpretationA July 2025 HHS reinterpretation of PRWORA (8 U.S.C. §1611) reverses nearly three decades of practice by newly classifying programs like Federally Qualified Health Centers and Head Start as “federal public benefits.” In practice, this would bar non‑qualified immigrants from those services except for narrow statutory ex…Mon, 15 Sep 2025 00:00:00 GMT2025-08-14T16:22:00.000Zhttps://joshuamandel.com/blog/posts/next-wave-ai-for-public-commentshttps://joshuamandel.com/blog/posts/next-wave-ai-for-public-commentsThe Problem with Form Letters In prior work, I built a tool to analyze thousands of public comments. A core feature is a simple clustering algorithm that groups nearly identical submissions. This is crucial for dealing with "form letter" campaigns, where thousands of people submit the same templated text. By clustering…Mon, 15 Sep 2025 00:00:00 GMT2025-08-16T17:18:00.000Zhttps://joshuamandel.com/blog/posts/the-prior-auth-api-is-a-traphttps://joshuamandel.com/blog/posts/the-prior-auth-api-is-a-trapThe Da Vinci DTR Implementation Guide aims to reduce prior authorization friction by standardizing the format for asking and answering clinical questions. It is a well-engineered specification for a "computable clipboard," a significant improvement over the fax machines and proprietary portals in use today. The core pr…Mon, 15 Sep 2025 00:00:00 GMT2025-07-17T03:58:00.000Zhttps://joshuamandel.com/blog/posts/the-prior-authorization-de-regulation-paradoxhttps://joshuamandel.com/blog/posts/the-prior-authorization-de-regulation-paradoxHHS wants to deregulate. The White House is clear: slash the number of federal regulations. Executive Order 14192 demands a "10-for-1" repeal ratio. Another order aims to deconstruct the "overbearing and burdensome administrative state" (Ensuring Lawful Governance). So when HHS issued a Request for Information (AHRQ-20…Mon, 15 Sep 2025 00:00:00 GMT2025-07-15T22:21:00.000Zhttps://joshuamandel.com/blog/posts/which-healthcare-regulations-should-we-killhttps://joshuamandel.com/blog/posts/which-healthcare-regulations-should-we-killYesterday, the comment period closed on the Agency for Healthcare Research and Quality RFI titled "Ensuring Lawful Regulation and Unleashing Innovation to Make America Healthy Again." The RFI asked stakeholders to pinpoint specific regulations that: Increase costs without benefits Impede innovation or competition Are o…Mon, 15 Sep 2025 00:00:00 GMT2025-07-15T17:40:00.000Zhttps://joshuamandel.com/blog/posts/analysis-reducing-medically-unnecessary-delays-in-care-acthttps://joshuamandel.com/blog/posts/analysis-reducing-medically-unnecessary-delays-in-care-actPrior authorization imposes a barrier to timely care. While tech solutions (including conversational AI agents using FHIR, as I discussed last week) offer potential paths to streamline this, policy sets the operational parameters. The newly (re-)introduced "Reducing Medically Unnecessary Delays in Care Act of 2025" bil…Fri, 04 Jul 2025 00:00:00 GMT2025-03-29T16:51:00.000Zhttps://joshuamandel.com/blog/posts/better-browser-apis-for-sharing-smart-health-cards-fhir-bundles-and-other-digital-credentialshttps://joshuamandel.com/blog/posts/better-browser-apis-for-sharing-smart-health-cards-fhir-bundles-and-other-digital-credentialsJosh Mandel Explores New Presentation APIs for Digital Health Data. To hear my real voice, watch the YouTube demo below :-) This third-person article is an experiment working with LLM-prompted "objective analysis" of the full audio + video content. I think it's pretty cool, but I'd love your feedback on the format as w…Fri, 04 Jul 2025 00:00:00 GMT2025-05-15T21:52:00.000Zhttps://joshuamandel.com/blog/posts/cms-rfi-mcp-now-it-s-your-turn-to-analyze-10k-pageshttps://joshuamandel.com/blog/posts/cms-rfi-mcp-now-it-s-your-turn-to-analyze-10k-pagesA few weeks ago, I shared an interactive dashboard summarizing public comments on the CMS Health Tech Ecosystem RFI. Now for the next step: make the underlying data more amenable to new, dynamic analyses. Toward this end, I'm sharing a data set, a tool, some sample prompts, and lessons learned along the way. 1. AI-Read…Fri, 04 Jul 2025 00:00:00 GMT2025-07-02T04:22:00.000Zhttps://joshuamandel.com/blog/posts/conversational-interop-for-prior-auth-demohttps://joshuamandel.com/blog/posts/conversational-interop-for-prior-auth-demoWhat if, instead of pre-specifying every data field and every possible workflow step, we could enable conversations between capable systems? Today's live demo explores early steps toward this vision – using LLM agents with protocols like Agent-to-Agent (A2A) and Model Context Protocol (MCP) to connect directly to real…Fri, 04 Jul 2025 00:00:00 GMT2025-04-25T15:38:00.000Zhttps://joshuamandel.com/blog/posts/connect-the-dots-for-prior-auth-a2a-mcphttps://joshuamandel.com/blog/posts/connect-the-dots-for-prior-auth-a2a-mcpAnother day, another open protocol! In previous posts, we explored how agents can use MCP tools (grep, query, eval) to analyze EHR data fetched via SMART on FHIR (Theory to Practice), and envisioned a more conversational prior authorization (PA) workflow (Prior Auth is Friction). Today, perhaps a new puzzle has emerged…Fri, 04 Jul 2025 00:00:00 GMT2025-04-09T16:56:00.000Zhttps://joshuamandel.com/blog/posts/creating-a-living-manual-for-ehi-exporthttps://joshuamandel.com/blog/posts/creating-a-living-manual-for-ehi-exportIt is a significant undertaking to maintain and document a modern EHR database spanning diverse clinical domains and workflows. It's no surprise that a database optimized for clinical care and hospital operations contains thousands of tables. In its native context, that complexity is a feature. But for patients, develo…Fri, 04 Jul 2025 00:00:00 GMT2025-06-26T17:27:00.000Zhttps://joshuamandel.com/blog/posts/deregulation-of-certified-health-it-cuts-to-real-world-testinghttps://joshuamandel.com/blog/posts/deregulation-of-certified-health-it-cuts-to-real-world-testingPersonal note: The value proposition of regulation and deregulation is full of trade-offs. My personal take is that the Real World Testing cuts are a reasonable, pragmatic place to ease off on requirements, opening up time and attention for Certified Health IT products to focus on more pressing concerns. Still, I would…Fri, 04 Jul 2025 00:00:00 GMT2025-07-02T21:07:00.000Zhttps://joshuamandel.com/blog/posts/ehr-association-s-proposal-would-deregulate-the-foundations-of-patient-access-and-population-managementhttps://joshuamandel.com/blog/posts/ehr-association-s-proposal-would-deregulate-the-foundations-of-patient-access-and-population-managementA recent letter from the HIMSS Electronic Health Record (EHR) Association to ONC outlines recommendations ostensibly aimed at "Smart Deregulation in Health IT." While streamlining regulation is beneficial when done thoughtfully, the letter includes proposals that would dismantle critical data access capabilities mandat…Fri, 04 Jul 2025 00:00:00 GMT2025-04-30T15:04:00.000Zhttps://joshuamandel.com/blog/posts/designing-for-delay-a-liaison-ux-for-prior-auth-and-other-asynchronous-clinical-taskshttps://joshuamandel.com/blog/posts/designing-for-delay-a-liaison-ux-for-prior-auth-and-other-asynchronous-clinical-tasksClinical workflows are full of necessary steps that don't happen instantly. Think about prior authorization (PA) – a classic example – but also tasks like matching a patient to eligible clinical trials, or coordinating a complex specialty consult requiring information exchange. These processes are often asynchronous, i…Fri, 04 Jul 2025 00:00:00 GMT2025-04-14T13:09:00.000Zhttps://joshuamandel.com/blog/posts/evaluating-fhir-s-evolution-ai-assisted-analysis-of-r4-r6-changeshttps://joshuamandel.com/blog/posts/evaluating-fhir-s-evolution-ai-assisted-analysis-of-r4-r6-changesAs the FHIR community steers towards our R6 release, a key objective is to provide stable, mature resources. With the first normative ballot in the R6 publication sequence anticipated this fall, let's assess how FHIR is evolving. This post describes a quick experiment to automate analysis of FHIR's evolution from R4 to…Fri, 04 Jul 2025 00:00:00 GMT2025-05-09T18:38:00.000Zhttps://joshuamandel.com/blog/posts/healthcare-s-high-tech-future-forgets-one-thing-the-humanshttps://joshuamandel.com/blog/posts/healthcare-s-high-tech-future-forgets-one-thing-the-humansThis is the first in a short series of articles drawing on themes, attestations, and conflicts surfaced in the CMS Health Tech Ecosystem RFI, which closes in two days. The article comes from the LLM-based analysis pipeline I'm putting together at https://github.com/jmandel/regulations.gov-comment-browser -- I'll have m…Fri, 04 Jul 2025 00:00:00 GMT2025-06-14T20:27:00.000Zhttps://joshuamandel.com/blog/posts/how-to-read-10000-pages-of-public-commentshttps://joshuamandel.com/blog/posts/how-to-read-10000-pages-of-public-commentsBuild a Tool When the government asks for public comment on a new policy, it can get an overwhelming response. The recent CMS RFI on a "Digital Healthcare Ecosystem" is a case in point. The result is a pile of O(1000) submissions—a mix of metadata, attachments, and web form entries. The raw material is a heap of expres…Fri, 04 Jul 2025 00:00:00 GMT2025-06-16T18:52:00.000Zhttps://joshuamandel.com/blog/posts/mcp-in-your-browser-secure-local-llm-tools-with-postmessage-transporthttps://joshuamandel.com/blog/posts/mcp-in-your-browser-secure-local-llm-tools-with-postmessage-transportWe want agentic AI systems to handle real work (e.g., kick off a prior authorization or summarize glucose management history). Model Context Protocol (MCP) provides a standardized specification for these agent-to-tool interactions. But MCP's standardized transports (stdio and Streamable HTTP) present limitations when t…Fri, 04 Jul 2025 00:00:00 GMT2025-05-05T16:18:00.000Zhttps://joshuamandel.com/blog/posts/mcp-practical-considerations-for-llm-and-ehr-integration-conversation-with-farzad-aledade-teamhttps://joshuamandel.com/blog/posts/mcp-practical-considerations-for-llm-and-ehr-integration-conversation-with-farzad-aledade-teamYesterday I had the pleasure of joining Farzad Mostashari and the Aledade, Inc. team (Nicholas Gerner, Ashok Srinivasan, and Jonas Goldstein) to explore the application of Model Context Protocols (MCPs) in healthcare IT. Our conversation began by examining the fundamental challenge of how Large Language Models (LLMs) a…Fri, 04 Jul 2025 00:00:00 GMT2025-05-07T14:59:00.000Zhttps://joshuamandel.com/blog/posts/o3-meets-the-enigma-a-tale-of-ai-puzzles-and-prompt-engineeringhttps://joshuamandel.com/blog/posts/o3-meets-the-enigma-a-tale-of-ai-puzzles-and-prompt-engineeringI accidentally hoarded OpenAI o3 query credits this month (the psychology of scarcity in the ChatGPT "Plus" tier!). Fortuitously, this left me with 50 queries to burn on testing o3's new vision and reasoning capabilities. The goal? A task I've tried on many vision language models over the years without success: "Turn t…Fri, 04 Jul 2025 00:00:00 GMT2025-05-01T21:24:00.000Zhttps://joshuamandel.com/blog/posts/prior-auth-is-friction-can-t-we-just-talkhttps://joshuamandel.com/blog/posts/prior-auth-is-friction-can-t-we-just-talkPrior authorization is friction. We try to automate it with structured data, through consensus-based standards like HL7 Da Vinci's Burden Reduction FHIR IGs. Consensus is slow and bound by compromise, leading to rigid technical integrations. Better interoperability patterns are coming. Consider an LLM agent embedded in…Fri, 04 Jul 2025 00:00:00 GMT2025-03-28T03:23:00.000Zhttps://joshuamandel.com/blog/posts/real-trust-in-tefca-why-individual-transparency-and-control-can-t-be-an-afterthoughthttps://joshuamandel.com/blog/posts/real-trust-in-tefca-why-individual-transparency-and-control-can-t-be-an-afterthoughtThe ongoing rollout and evolution of the Trusted Exchange Framework and Common Agreement (TEFCA) – a framework designed to enable different health information networks to connect and share data across the country – brings patient data rights to the forefront. A recent Request for Information (RFI) from CMS, ONC, and AS…Fri, 04 Jul 2025 00:00:00 GMT2025-05-21T13:26:00.000Zhttps://joshuamandel.com/blog/posts/the-real-story-behind-epic-s-0-0000055-ehi-export-ratehttps://joshuamandel.com/blog/posts/the-real-story-behind-epic-s-0-0000055-ehi-export-rateEpic's Argument: Nobody Uses It, and Nobody Wants It In their recent response to CMS and ONC's "Health Technology Ecosystem" RFI, Epic Systems stated: "EHI Export has not achieved widespread adoption as a data-exchange mechanism and therefore may have limited utility regarding LLM adoption. Across our customer communit…Fri, 04 Jul 2025 00:00:00 GMT2025-06-21T15:58:00.000Zhttps://joshuamandel.com/blog/posts/theory-to-practice-llm-agents-using-mcp-tools-on-real-ehr-data-with-demohttps://joshuamandel.com/blog/posts/theory-to-practice-llm-agents-using-mcp-tools-on-real-ehr-data-with-demoLast week, I discussed how LLM agents embedded in EHRs could transform complex workflows like prior authorization by using tools to interact conversationally, rather than relying solely on rigid structured data exchange. The idea was to let agents handle the dialogue, using reliable data access standards like FHIR as t…Fri, 04 Jul 2025 00:00:00 GMT2025-04-08T19:10:00.000Zhttps://joshuamandel.com/blog/posts/voices-from-the-cms-rfi-attitudes-toward-the-health-systemhttps://joshuamandel.com/blog/posts/voices-from-the-cms-rfi-attitudes-toward-the-health-systemIn the summer of 2025, CMS sought public input on building a patient-centered digital health ecosystem. Patient voices reveal fundamental worldviews about trust, power, and survival in America's healthcare system. The Primary Narratives "Our Data, Our Lives, Our Choice" At one pole stands a community of patients who vi…Fri, 04 Jul 2025 00:00:00 GMT2025-07-02T20:11:00.000Zhttps://joshuamandel.com/blog/posts/you-should-respond-to-cms-s-health-tech-ecosystem-rfi-borrow-ideas-or-share-a-prhttps://joshuamandel.com/blog/posts/you-should-respond-to-cms-s-health-tech-ecosystem-rfi-borrow-ideas-or-share-a-prDisclaimer: The views and opinions expressed here and on the linked collaborative sites are my own and do not necessarily represent the views or positions of Microsoft. CMS and ASTP/ONC have released a significant Request for Information on the "Health Technology Ecosystem" (Document 2025-08701). The full document is p…Fri, 04 Jul 2025 00:00:00 GMT2025-05-16T18:29:00.000Z