Listen & catch: stop the PHI leak

Goal: enforce the pre-data exchange gate before a public NPI and patient name can be used to extract eligibility, claims, or prior-auth data (PHI).

This is a race against impersonation latency (PDX-01) — the gap between call connection and clear non-human disclosure. Close it fast: identity must be disclosed in the first 5 seconds, before any PHI is exchanged, and late disclosure still blocks PHI on every turn.

This scenario demonstrates a control from the NHID-Clinical framework. It is practical simulation, not the framework itself.