{"id":"sec-hc-badge-access-review","audience":"healthcare","category":"security","track":"security","technique":"constraints","title":"Review badge access to the medication room","free":false,"task":"As the unit's admin coordinator, review who has badge access to the medication room. Policy: only current unit nurses, pharmacy techs assigned to the unit, and the nurse manager; float or agency staff get access only for their shift dates. List only badges to remove, numbered, as 'name - reason'. Today is Nov 6, 2026. Plain text, under 70 words.","materialLabel":"Badge access export and staffing notes (attached to your prompt automatically)","material":"Medication room (4 West) - badge access export, Nov 6, 2026\n\nname           | role                     | access ends\nAna Lopez      | RN, 4 West               | none\nBen Carter     | RN, moved to 5 East Oct 1 | none\nChloe Nguyen   | Pharmacy tech, 4 West    | none\nDev Shah       | Agency RN                | Nov 3, 2026\nErin Walsh     | Nurse manager, 4 West    | none\nFarah Ali      | Float RN                 | Nov 9, 2026\nGus Moreno     | Unit secretary, 4 West   | none\nHana Kim       | Pharmacy tech, 3 North   | none\n\nStaffing notes:\n- Farah is floating to 4 West Nov 6-9.\n- Gus says he needs access \"to restock supplies faster\". Supplies are in the supply room, not the medication room.\n- Hana covered 4 West once in August.","rules":[{"type":"numberedItems","count":4},{"type":"plainText"},{"type":"maxWords","max":70}],"mistakes":[{"title":"Not giving the policy","why":"The AI judges by who seems trustworthy and keeps Gus because he gave a reason.","fix":"Say: \"Only unit nurses, unit pharmacy techs, the nurse manager, and float staff on their dates.\"","checks":["r0","r1"]},{"title":"Missing the dates","why":"Without today's date, the AI can't tell Dev's access should have ended.","fix":"Add: \"Today is Nov 6, 2026.\"","checks":["r1"]},{"title":"Reviewing everyone","why":"The AI writes a line for all 8 people.","fix":"Ask: \"List only badges to remove.\"","checks":["numberedItems","r2"]},{"title":"Trusting the AI to count words","why":"AI is bad at counting. Ask for \"under 70 words\" and it often lands well over.","fix":"Ask for less than the limit and cap each line: \"each line under 15 words, under 50 words total.\"","checks":["maxWords"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in the access review form they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Gives the policy","patterns":["policy","unit nurses","pharmacy tech","float"]},{"label":"Gives today's date","patterns":["today","nov(ember)? 6"]},{"label":"Lists only removals","patterns":["only (the )?badges","remove","only (the )?(people|names)"]},{"label":"Sets a word limit","patterns":["\\d+\\s*words","word (limit|count)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Access reviews follow the policy, not who asked nicely. Give the AI the allowed roles, today's date, and ask only for the badges to remove.","rubricLabels":["Lists exactly Ben Carter, Dev Shah, Gus Moreno and Hana Kim, and not Ana Lopez, Chloe Nguyen, Erin Walsh or Farah Ali","The reasons match: Ben moved to 5 East, Dev's agency dates ended Nov 3, Gus is a unit secretary (not an allowed role), Hana is assigned to 3 North","Every line follows 'name - reason'"]}