J Junior design system v0.1

A1 Website home

The hero states the partner thesis, not a feature list. The visual is a live render of the actual product shell, not a mock screenshot. The logo wall sits under the hero, never inside it.

J Junior SolutionsForms catalogPartners DevelopersPricingSecurity

Healthcare forms your partners can sell without you.

Junior launches from the EHR, prefills from FHIR, and goes live the same afternoon. No HL7. No interface engine. No services engagement.

Surgical Consent J 1 proposal
JJunior proposes
Add conditional section: tobacco use follow-up
Launches inside Epic Meditech Oracle Health athenahealth

You can see what the AI did.

Junior drafts forms, translations, metadata, and functions. Everything it authors stays in agent ink until a qualified human accepts it. Approval is the moment the color changes.

Autonomy tiers

Three tiers, enforced in code

Autonomous actions are logged and reversible. Content changes to a consent are gated before the write, never after. Clinical risk language is human-only.

J

Agent ink

One reserved color, one meaning, on every surface.

Prefill from FHIR

Patient and Encounter map to one flat dictionary. Designers never touch FHIRPath.

Patient.firstnameEncounter.admit

Governed catalog

Nine standard collections. Review cycles tracked. Outdated regulatory forms flagged on sight.

7 due in 10 days

Live in an hour

Trial, register, link by Issuer ID, pay, provision, first form launched.

No HL7No QIE

Browse the catalog. Collection titles are open, form contents are not.

Collection names, counts, languages, and revision currency are public, so the catalog earns search traffic. The forms themselves open after a work email. No competitor publishes a library at all.

Informed consents

Surgical Consent

Rev 2026.02 with laterality, CPT lookup, and dual signature.

Current4 languages
CMS forms

Medicare Outpatient Notice

Tracked against CMS revision schedule.

Current2 languages
Admissions

Conditions of Admission

Demographic prefill plus financial responsibility.

Review due6 languages
See all 312 forms

One work email opens the full catalog. No call, no demo booking, and no card. You land in the trial from here.

Personal email domains are asked for an organization name. Lead lands in the marketing engine with source attribution.

A22 Link your EHR, and A25v provisioning rollback

The funnel spec requires that a failed payment or provision rolls back cleanly with no half-provisioned or double-charged tenant. That failure state is a designed screen, not an error toast, and it says plainly that no charge was taken.

JLink your EHR Step 3 of 6

Junior delegates identity and PHI access to your EHR. We never become a second place your patient data lives.

Found in your EHR app registration. We verify the endpoint before charging anything.
Verified2.1s
Reached the sandbox endpoint and read a test Patient resource. Scopes granted: patient/*.read encounter/*.read
Provisioning stopped and rolled back

You have not been charged. The card authorization was released at 14:22. No tenant was created, and no partial configuration was left behind.

Payment authorizedReleased
Tenant recordNot created
Starter collectionNot deployed
Causeregion capacity
JJunior
Your region is at capacity for about 20 minutes. I can retry automatically and email you when the tenant is live, or you can pick a different region now.

Funnel event emitted: funnel_stalled

B1 Portal home

The rail, the canvas, and the thread. The overnight summary is the honest answer to "what did the AI do while I was gone," which is the question that decides whether staff trust the platform.

Today

Tuesday, 3 August
Forms live312+14 this week
Instances today1,847avg 1,690
Completion88.4%+2.1 pts
Review due72 within 10 days
JWhile you were away03:00 to 08:00
J AutonomousTagged 41 imported forms and flagged 3 likely duplicates.
logged, reversible
J Waiting on youDrafted Spanish and Vietnamese variants for 6 consents.
not published until approved
Human onlyCMS revised the Outpatient Observation Notice. I did not change it.
regulatory content, human decision
Your review tasks7 open
FormReasonAuthorDue
Surgical ConsentConditional section addedJJunior draft2 days
Conditions of AdmissionScheduled review, TJC cycleDana Okonkwo9 days
Home Health Consent (es)New language variantJJunior draft4 days

B5 Forms library, natural language search

The query is the one from PRD section 15.2. Results render as the real library grid with the matching gap called out, not as a chat answer about the library. Literal filters stay available beside the AI result so nobody is trapped in the conversation.

Forms library

312 forms across 9 collections
J 23 forms matched Language: zh-Hans missing Status: published
FormCollectionForm no.LanguagesGovernanceRev
Surgical ConsentInformed consentsCON-0114en es viApproved2026.02
Conditions of AdmissionAdmissionsADM-0002en esReview due2025.11
Release of InformationReleasesREL-0031enApproved2026.01
Medicare Outpatient NoticeCMS formsCMS-10611en esOutdated2024.07
Pediatric Immunization ConsentVaccinationVAC-0077en esApproved2026.02

Showing 5 of 23. Junior surfaced the match. It has not changed anything.

B16 and B-D6 Designer, with a Junior proposal on the canvas

The signature screen of the system. Junior answered in the thread, but the change itself renders as a diff over the real form, and the approve control lives next to the change rather than inside the chat. Try Approve. The commit is the color moving from agent ink to human ink.

Surgical Consent

CON-0114 · rev 2026.02 · web form
Page 2 of 3 Patient context J 1 proposal pending

Social history

J Junior proposes a conditional section Human approved tier
Shows only when tobacco use is Yes
Number only. Required when visible.
Becomes required when years is filled. Function: tobaccoPacksRequired
What this touches
2 fields added. 1 visibility condition. 1 function reused from the library. No consent or risk language changed.
Nothing is written until you choose

Attestation

I have been informed of the nature of the procedure, the risks and benefits, and reasonable alternatives, and I consent to the procedure described above.

Locked by signatureJunior may never edit this block

B33 and B-D13 Governance review

A diff, never a transcript. The research is explicit that an approval surface which dumps the agent's reasoning defeats itself. Rejection requires a documented reason, and the picklist answers the free-text problem raised in PRD section 11.3.

Review: Home Health Consent

CON-0208 · Spanish variant · requires 2 of 3 approvers
J Junior drafted
Current, publishedLive
Autorizo a los profesionales de salud a domicilio a proporcionar los servicios descritos en mi plan de atencion.
Approved by Dana Okonkwo2025.11
ProposedJ Not published
Autorizo a los profesionales de salud a domicilio a proporcionar los servicios descritos en mi plan de atencion, incluyendo la administracion de medicamentos y el cuidado de heridas.
Source: English rev 2026.02
This change alters clinical scope language
Junior drafted a translation of new scope wording. A qualified Spanish reviewer owns this decision. Two of three approvers required, and this variant is blocked until all language variants clear.
1 of 2 approvals recorded
Governance journey
03 Aug 06:12JJunior drafted es variantAutonomous draft
03 Aug 09:41Marisol Vergara approvedApproved
03 Aug 09:44Awaiting second approverPending

B51 and B52 Analytics, with the natural language report builder

Charts follow the visualization rules: fixed categorical order, a single axis, thin marks, recessive grid, legend plus selective direct labels so identity is never color alone. The series palette is deliberately not derived from agent magenta, because series identity must never be mistaken for agent attribution.

Completion and drop-off

Last 14 days · all facilities
Completion rate88.4%+2.1 pts vs prior 14
Median time to sign4m 12sdown 38s
Abandoned1,98361% at one step
Completion by delivery channel
Patient device Front desk tablet Second monitor
10095 908580 88.4% 21 Jul28 Jul3 Aug

Patient device closed a 17 point gap after the intake redesign. Sample data.

JInsightSurfaced, not acted on
Insurance card upload accounts for 61% of mobile abandonment, concentrated in one facility. Three forms in the Admissions collection ask for the card separately, which means some patients upload it twice.
Any change goes through governance

C5 Patient viewer, with the required-field error and the skip ribbon

Progressive disclosure, one idea per screen, 17px question type, 48px targets. The ribbon on the right is the DocuSign pattern called for in PRD section 10.9. Junior is present but subordinate, and it explains rather than fills.

North Kansas City Hospital
Surgical Consent, 2 of 4

About your health

Do you currently use tobacco products?
Enter a number of years so we can continue.
An estimate is fine.
JWhy are we asking?

Tobacco use changes how your body heals after surgery, so your care team needs it before your procedure. It is not shared with your insurer by this form.

Next required

C25 and C-D4 Voice fill, with the consent gate

Voice is an optional component. This surface only exists because the health system turned it on and executed a BAA covering the speech path. Two gates therefore: the tenant accepts the risk in AI settings, and then the patient sees exactly where their voice goes before they speak. Push and hold, no wake word, and the transcript maps to fields for review. Nothing is committed by speaking.

Before you speak

You can say your answers instead of typing them. North Kansas City Hospital turned this on for their patients. Here is exactly what happens to your voice.

On this deviceSpeech is converted to text on your phone.
CoveredText goes to a processor under a signed business associate agreement, in the United States.
Not keptAudio is not stored. The transcript is deleted when the form is submitted.

You will see everything Junior heard, and where it wants to put it, before anything is filled in.

Patient details
Voice input active
Listening. Release to stop.
"My name is Alma Restrepo, born March fourteenth nineteen fifty two, I live at four one seven Birchwood Lane."
Junior heard this. Check it before it is filled in.
First name
Alma
Last name
Restrepo
Date of birth
1952-03-14
Street address, not confident
417 Birchwood Lane
Junior could not tell if this is Lane or Line. Please confirm.

C13, C17 and B44 Signature capture and governance

The designer sets the regulatory tier per signature, which is the edge described in PRD section 10.6. Patient signatures are simple electronic signatures upgraded with a field hash so tampering is detectable. Staff signatures are advanced, keyed to a PIN or a device passkey that Junior can validate but never generate.

Sign to continue
Surgical Consent, 4 of 4

Your signature

By signing you confirm you have read the consent above and had a chance to ask questions.

Alma Restrepo
Signing locks 6 fields on this page
Applies to 3 more forms
You can reuse this signature for the rest of today's paperwork. You will still see each form before it is signed.
Signature governanceForm design setting
Signature fieldSignerTierMethod
Patient consentPatientSESDrawn or typed, field hash
Patient initials, page 3PatientSESInitials, field hash
WitnessStaffAESDevice passkey
Surgeon attestationStaffAESPIN protected key
Integrity
Every signature hashes the fields it covers. If a value changes after signing, Junior marks the signature invalid on the form and in the export. We hold public keys only, so we can validate a staff signature and can never produce one.
JJunior, human only tier
I can lay out signature fields and set which fields they lock. I cannot set the regulatory tier or edit attestation language. A person owns both.

B55 AI settings, where voice is switched on

Voice ships as an optional component, off by default. A tenant turns it on only after an authorized signer accepts the risk and executes a BAA covering the speech path. Until then the mic is absent from the patient surface entirely, not disabled and greyed out.

AI settings

Providers, autonomy, and optional components
Optional componentsOff unless enabled
Voice form fillEnabled

Patients and staff can speak answers instead of typing. Speech is transcribed and mapped to fields for review. Nothing is written without confirmation.

RequirementStatusRecord
Risk acknowledgementAcceptedD. Okonkwo, 22 Jul
BAA covering the speech processorExecutedsigned in Junior
Data residencyUnited Statesus-east
Audio retentionNot storedtranscript only
Available to

Turning this off removes the microphone from every surface immediately. In-flight transcripts are discarded.

Insurance card readingOff

Extract member ID and group from a photographed card. Sends an image containing PHI to the configured model.

Needs risk acceptanceNeeds BAA
Providers and models
TaskModelPHI
Form designclaude-opus-5None
Library searchclaude-haiku-4-5None
Translationclaude-sonnet-5None
Voice transcriptionon-device, then BAA pathPossible

Self-managed partners point these at their own endpoints. Any task marked as possible PHI is unavailable until the matching optional component is enabled.

Autonomy tiers
J Autonomous
Search, tag, flag duplicates, apply branding to a draft. Logged and reversible.
J Human approved
Publish a collection, change form content, bulk deploy. Prepared by Junior, gated before the write.
Human only
Clinical content of a consent, regulatory risk language, signature tier. Junior may draft, a qualified person decides.

Design tokens

Everything is a token, which is how the white-label requirement is met structurally rather than by exception. Switch partner themes in the top bar and watch the human channel move while agent magenta holds. Switch the artifact theme and watch the dark palette, which is selected rather than inverted.

Ground and ink
--groundpage
--panelcards, canvas
--sunkwells, rail
--inkhuman authored
--ink2secondary
--linehairline
JThe agent channel, reserved and swappable
--agentJunior authored
--agent-tintproposal fill
--agent-lineproposal border

No component may use these for any other purpose. That rule is enforceable in code review with a single search, and it is what makes the autonomy tiers visible instead of merely documented.

Partners swap this channel along with the human one. What cannot be swapped is the fact that there are two channels and that they are tellable apart. Switch partner themes in the top bar to see it move.

Theme guardrail, blocks save

Because partners choose their own agent hue, a bad choice could make agent-authored content indistinguishable from an error, or from the partner's own brand. The branding screen runs a perceptual distance check before a theme can be saved.

CheckAgainstResult
Agent vs brand--brandPass
Agent vs critical--critPass
Agent vs warning--warnPass
Agent vs good--goodPass
Agent vs info--infoClose
Contrast on panel--panelAA

Run in both light and dark. A close result warns. A fail blocks the save.

Status, never reused as identity
Approved Review due Outdated Notice Draft J Junior

Each ships with an icon and a text label so state never rests on color alone.

Chart series, fixed order

Assigned in fixed order and never cycled. A ninth series folds into Other or becomes small multiples. Validate against both surfaces before shipping any chart.

Type
Surgical Consent
Social history
Body copy sets near 65 characters and never drops below 16px on a patient surface.
CON-0114 rev 2026.02
Form number, version, audit stamp

Production targets ABC Diatype or Sohne with a real mono. The prototype uses a system stack because the artifact sandbox blocks font CDNs and inlining faces as data URIs would add hundreds of kilobytes to a review build.

Shape, elevation, motion
4px inputs and chips
8px cards and sheets
999px status pills only

Two elevation steps, tinted to the ground rather than pure black. Motion is restrained by policy, because in a clinical product anything that pulls the eye off a consent field is a safety issue. Everything collapses under reduced motion, except the approve color change, which carries meaning and stays as an instant swap.