🔒 Price guard: the assistant quotes only figures from your price list. Any other number and the whole reply is discarded, booking marker included. 📅 Booking: patients pick from slots your calendar publishes; seven classes of bad booking marker are rejected before an appointment exists. 👤 Live takeover: staff grab any chat mid-reply; the half-generated answer is dropped at send time. One click hands it back. 🎙 Voice notes transcribed by a local Whisper worker - audio never leaves your machine. 🌍 7 languages, 4 staff roles, per-patient export and erasure. Pilot-ready, not in production.