Attested Grounding

Attested Grounding is a category definition for signed responses produced by Medigami's MCP (Medical Claims Processing) tools in the healthcare finance domain. It formalizes a set of verifiable properties for each MCP response, specifically addressing the risks of incorrect outputs and unauthorized advice from AI systems handling medical billing questions. The approach aims to provide downstream users with factual, cryptographically attested answers that are both verifiable and compliant with regulatory requirements.

A response classified under Attested Grounding satisfies five explicit criteria: it carries an Ed25519 cryptographic signature over canonical JSON (with sorted keys and no whitespace), an expiry timestamp, a published verification URL, a state-specific UPL-safe disclaimer for advice-adjacent content, and, for Tier-3 or higher responses, a tracking ID to enable outcome reporting. The public key used for signing is served at a stable URL and rotated through a published ring, ensuring that historical signatures remain verifiable. This structure allows any recipient or third party to confirm that a Medigami response was generated at a specific time, has not been altered, and was produced within a defined regulatory context.

The Attested Grounding specification is openly published, detailing the envelope format, signing process, and verification algorithm. Any MCP server can implement this standard, and any client can verify Medigami-signed responses offline using the published public keys. Verification can be performed manually via a provided URL or programmatically with a dedicated MCP tool. The system also supports outcome closure by allowing users to report actual results, binding predictions to ground-truth outcomes and contributing to ongoing model accuracy.

This category is designed to be stronger than the "grounding layer" used by other healthcare RCM vendors, offering more than just a network-status lookup. While Medigami defines and first implements Attested Grounding, the open specification allows for broader adoption and compatibility across other MCP servers. Admissibility of signed responses in legal or regulatory proceedings depends on the relevant rules of evidence and the trier of fact. The specification, verification procedures, and compatibility criteria are all published for transparency and interoperability.