Initial guardrails
- Collect only the minimum information needed to respond.
- Process file uploads only after secure storage, access, retention, and deletion controls are approved.
- Treat health-related messages as sensitive.
- Publish case media only after consent and de-identification review.