HIPAA-Compliant AI Agents with FHIR: Reference Architecture for PHI Security, Tool Access, Audit Logs & Human Approval

The most dangerous healthcare AI assumption in 2026 is that signing a BAA and encrypting data makes an agent “HIPAA-ready.” It does not. AWS’s latest healthcare agent guidance now focuses on a harder