Governance enabled the build. It did not block it.

Regulatory work fails in two directions. One is theatre: binders, delays, and a process nobody can explain. The other is reckless automation: a model that writes the decision and a human who rubber-stamps it.

Vigil-MODI was framed the other way. Modular Orchestrated Digital Intelligence — privacy-first anonymisation, document intelligence, regulation-as-code, FHIR-native architecture — with a person still accountable for the call. That is not a slogan. It is the product constraint.

If you are building in CDSCO, MHRA, or NHS-adjacent environments, the interesting question is not “can the model summarise this file?” It is “what does the reviewer still own when the summary is good?”