The Sovereign Execution Manifesto · DeskGate

Decision engines are not
execution engines.

Every major enterprise platform builds to the edge of its clean APIs and stops. When an API does not exist, software does not solve the problem—it pushes the residual clicks, attachments, phone trees, and portal logins onto human operators. DeskGate exists to finish the work they leave behind.

1. Why Do We Exist? THE RESIDUAL TAX

To take the residual labor tax enterprise software leaves on the desk.

EHRs, revenue cycle platforms, and CRMs are built to store records and render clinical determinations. In live desks, a material share of administrative volume still has no partnered API — commonly the last 15% to 30% on mixed-payer worklists, not a universal constant.

When an authorization packet must go to a regional insurer with no clearinghouse connection, or a medical-necessity chart must be split and attached on a legacy portal, systems such as Epic or Waystar — used here as examples of record/decision platforms, not as partners or integrations — reach their structural boundary.

We exist because knowing what should happen is only half the battle. We do not ask hospitals to rip out their systems. We integrate underneath to execute the leftover work.

2. Why Now? THE RPA GRAVEYARD VS. AI UNLOCK

Why portal automation failed for 15 years—and why the floor is different now.

Automating web portals is not a new desire; healthcare and enterprise operators have attempted it for two decades. It failed previously because legacy RPA tools were structurally brittle:

1. Legacy RPA Failed (2010–2023)

  • Relied on rigid static HTML XPaths that broke whenever a portal changed layout.
  • Cloud scraper farms were blocked by bot-mitigation (Akamai, Cloudflare, and equivalents), hospital VPNs, and MFA — those names describe the barrier class, not a claimed bypass of any one vendor.
  • Sold unattended autonomy. That is the liability a desk owner cannot sign.

2. The Advanced AI Unlock (2024–2026)

  • Multimodal VLMs: Models can ground against a live screen, so a moved field is a re-bind instead of a dead XPath.
  • Fast chart-to-field staging: Structured extraction from a chart into form fields in a few seconds on a typical case — timed per lane in the pilot, not promised as a constant.
  • WebRTC voice assist: Low-latency audio models can traverse IVR trees and hand off when a live representative answers.

3. How DeskGate is built to be onboarded

  • Client-side session (embed.js): Runs inside the operator's already-authenticated browser. MFA and VPN are the operator's, not a farm's.
  • Hands, not a second brain: Execution under the EHR/RCM you already use. No competing clinical decision engine.
  • Mandatory human gate: Staging is automatic. Submit stays with the coordinator. Liability is contained by design, not declared gone.
3. How Do We Exist? HOW IT MOUNTS

A script tag in the operator session. Submit stays human.

One embed.js tag mounts into the operator’s already-authenticated browser. Work stays in that session. The operator reviews staged fields and clicks submit. Under that gate, four layers do the residual work:

L1 · Multi-Rail Mesh

Accesses locked, rate-limited, or geofenced policy and cadastre surfaces via automated failover (Bright Data, Exa, public registries).

L2 · Autonomous Ops

Plans the exact sequence of residual form inputs and synthesizes clinical necessity justification narratives in real time.

L3 & L4 · Optic & Last-Mile DOM

Visual grounding binds actions to the live viewport. In-DOM staging typically covers most fields on a known portal in a few seconds; coverage is measured per lane, not assumed.

HIPAA ZERO-RETENTION MODE (ZRM) & CRYPTOGRAPHIC PROVENANCE
In zero-retention client mode, PHI is processed in local workstation RAM for the active session and is not written to DeskGate servers as a case store. Each completed transaction can emit a SHA-256 hashed Residual Evidence Artifact (REA v1.2) PDF so the desk keeps an audit file of what was staged and submitted.
4. Is Our Price Fair? WORKED EXAMPLE · TESTED IN 14 DAYS

Priced against recovered desk hours—not speculative seats.

Most enterprise software asks for a large commitment on a long procurement cycle before anyone has watched a live lane. DeskGate starts as access subscription + optional implementation, with a 14-day measurement window on one residual lane: record handling time and rework against the desk's own baseline. The ledger is published. There is no minutes-SLA and no automatic fail-closed refund tied to a 60% bar.

The table below is an illustrative model for a 20-FTE billing desk, not a guaranteed outcome. Assumptions are stated so a buyer can substitute their own loaded cost, residual hours, and license.

Metric Dimension Model input (20-FTE desk) What the model shows if the pilot hits target
Residual labor baseline 20 FTEs × 3 hrs/day on portal residue ~15,000 operator hours/year at $32/hr loaded ≈ $480,000
Handling-time target Manual portal entry often 18–25 mins/case Measurement target to discuss — not a warranty (example observed range if the lane is thick: 5–8 mins/case)
Capacity if target is hit Hours return to coordinators / stop overflowing offshore ≈ $312,000 / year gross capacity at those assumptions
DeskGate platform license Annual platform fee (Schedule A) S-Agency example $70,000 / year, or S-Network $120,000 / year ($15–25k implementation 50% credited if converted)
Modeled net (not a promise) Replace these rows with the pilot ledger ≈ $192,000 net in this example (~2.6x on license). Real ROI is the 14-day number.

Substitute your FTE count, residual hours, and loaded rate. If the 14-day ledger is thin, that is usually a parameter miss (cohort, exceptions, portal family) — not a product-SLA breach. Fairness is measured access, not a guaranteed cut.

5. Value Beyond Minutes FIVE COMPOUNDING VECTORS

Even if minute-savings vary, the desk still buys structural control.

Handling minutes in the 14-day pilot are the first quantitative bar. Desks that stay usually stay because the same runtime also tightens five other failure modes:

VECTOR 01
Denial Avoidance
Pre-submit completeness checks on required fields and attachments, so missing packets are caught before they become appeal rework.
VECTOR 02
Audit Provenance
SHA-256 hashed REA v1.2 dossiers record what was staged and submitted, so a “we never received it” dispute has a file.
VECTOR 03
Staff Retention
Removes the worst copy-paste load from the coordinator day. Churn in this work is high industry-wide; the bet is retention of the people you already trained.
VECTOR 04
Cash-Flow Velocity
Shrinks queue time from multi-day backlog toward same-day submit on the piloted lane, which is how DSO actually moves.
VECTOR 05
Zero-Drop Continuity
Keeps living case context with the work item so a complex prior-auth is less likely to drop between shift change or PTO.
6. Will A Desk Actually Onboard It? THE THREE KILL-REASONS

It survives review because it answers the three reasons healthcare kills AI.

Healthcare leaders reject most AI pitches for the same three reasons: clinical liability, rip-and-replace of the EHR/RCM, and PHI leaving the perimeter. DeskGate is built to fail those kill-reasons closed:

1. Fear of Disruption

Our answer: We do not replace the system of record (Epic, Waystar, or the equivalent you already run). A script tag attaches under the screens your operators already use.

2. Fear of Liability

Our answer: Human-in-command. The runtime stages fields; the coordinator reviews and clicks submit. No unattended clinical or payer submission.

3. Fear of PHI Leaks

Our answer: Zero-retention client mode. PHI is processed in local client RAM for the session and is not kept as a DeskGate case store. The audit artifact stays with the operator desk.