Notes from the tech team at Trusted, where we're building an AI-first operating system to (em)power the healthcare workforce.https://trusted.works/https://trusted.works/posts/agent-ready-manifesto/https://trusted.works/posts/agent-ready-manifesto/There are two kinds of company being built under the 'AI-first' banner. One bolts model calls onto the existing product. The other treats AI as a forcing function to redesign the company so a software agent can do real work, under the same constraints, permissions, and accountability as a human teammate. This is the manifesto for the second kind.Thu, 07 May 2026 00:00:00 GMTThinkinghttps://trusted.works/posts/every-open-shift/https://trusted.works/posts/every-open-shift/Healthcare staffing has spent a decade arguing whether it's a relationship business or a quantifiable one. Every services-heavy industry has had this argument, and they've all resolved it the same way: the relationship layer moves out of the broker and into the infrastructure. This is the operating system we've spent nearly a decade building, and how AI is accelerating the head start.Thu, 07 May 2026 00:00:00 GMTThinkinghttps://trusted.works/posts/submission-speed-story/https://trusted.works/posts/submission-speed-story/Submission speed in travel nursing usually gets framed as one number. It isn't. Three clocks run at once, each gated by a different bottleneck. The pipeline itself now runs under ten minutes for a pre-qualified clinician on Auto Apply, and the population median still reads in days. Here's why both are true.Wed, 22 Apr 2026 00:00:00 GMTBuildinghttps://trusted.works/posts/the-form-pattern/https://trusted.works/posts/the-form-pattern/Job curation used to be a queue of humans normalizing raw VMS snapshots into postable shifts. Now it's four specialized agents filling out the same form a human would, hitting the same validations, with a feedback loop that keeps them honest in production. Cost is around thirteen cents per curated job.Wed, 08 Apr 2026 00:00:00 GMTBuildinghttps://trusted.works/posts/built-for-the-next-model/https://trusted.works/posts/built-for-the-next-model/We gave a small team thirty days to rebuild Trusted's core clinician journey from an empty repo, with one architectural rule: assume the models keep getting better, and build for that. Here are the five choices that came out of it: what we'd do again, what shifts when most of the code is written by AI, and what stays the same.Tue, 31 Mar 2026 00:00:00 GMTBuildinghttps://trusted.works/posts/irontrail/https://trusted.works/posts/irontrail/There's a class of Rails bug where a record changed and paper_trail saw nothing: an `update_columns` bypass, a console fix at 2am, an agent issuing raw SQL. IronTrail does change capture at the Postgres trigger layer instead of the ActiveRecord callback layer, so the audit catches every write. MIT licensed, on RubyGems, running in production at Trusted for over a year.Wed, 18 Mar 2026 00:00:00 GMTSharinghttps://trusted.works/posts/auto-apply-retro/https://trusted.works/posts/auto-apply-retro/Auto-Apply inverts clinical job search: the clinician opts in once, and the system applies to matching shifts on a preference profile. It took a manual spreadsheet pilot and four product iterations before it was safe to leave on. Every guardrail traces back to a specific failure in production. The deeper lesson: an opt-in preference is a weaker intent signal than a per-job tap.Wed, 25 Feb 2026 00:00:00 GMTBuildinghttps://trusted.works/posts/mission-control/https://trusted.works/posts/mission-control/VMS program managers have been running their work out of spreadsheets, Slack threads, and email chains. None of those screens were designed for the job. Mission Control is the surface we built around their actual unit of work (the program), backed by an integration-status dashboard and in-product messages that keep the live state of every connection visible.Wed, 18 Feb 2026 00:00:00 GMTBuildinghttps://trusted.works/posts/ukg-integration/https://trusted.works/posts/ukg-integration/UKG is the HR and timekeeping backbone for many large hospital systems, which means integrating with it is less of a vendor connection and more of a sustained engineering project. This is the multi-read cache that took ~67,000 redundant API calls a day off our floor, the mTLS credential management per environment, and the worker-sync pipeline that handles the messy parts.Tue, 02 Dec 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/conversational-validation/https://trusted.works/posts/conversational-validation/Onboarding used to be a twelve-page form that asked humans to fit their lives into our schema. We rebuilt the validation flow as a chat that drives the same structured form underneath, then extended the pattern to an agent that greets stalled signups already knowing who they are.Wed, 29 Oct 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/megazord/https://trusted.works/posts/megazord/Shift ingestion is the hot path under every decision Works makes: pricing, balancing, fill-rate analytics, dashboards. Megazord is the rewrite that decoupled ingestion from query, normalized demand into 15-minute blocks, and made a year of fill-rate data queryable in sub-250ms. This post is the design and what it unlocked.Wed, 22 Oct 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/rules-engine-ai-qualification/https://trusted.works/posts/rules-engine-ai-qualification/Qualifying a clinician against a job used to be an advocate reading prose requirements in one tab and clicking through credential tabs in another. We rebuilt the layer. Every requirement is a typed JobRule, every credential is structured data, and an AI layer at temperature 0.0 handles the ambiguous cases, with a human feedback record captured on every execution.Tue, 30 Sep 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/nursys-license-verification/https://trusted.works/posts/nursys-license-verification/Our first Nursys integration shipped in 2018 as a one-time upfront call. For seven years a back-office team still read the results, pasted screenshots, and re-checked on a slow clock. In August 2025 we made verification a real-time rule inside the submission pipeline: compact-license logic across 40 NLC states as a graph, structured disciplinary handling, and a Trusted-branded Quick Confirm report.Tue, 23 Sep 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/load-balancer/https://trusted.works/posts/load-balancer/A nurse manager runs eight hundred constraint checks in her head between 6 and 7 AM every Tuesday. That's the work we're replacing: not her judgment, the mechanical part. This is how we wrapped a constraint solver in a pipeline she can trust: the constraint model, the run loop, the worker-sync prerequisite, and what gets handed back as output.Tue, 09 Sep 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/fte-linked-incentives/https://trusted.works/posts/fte-linked-incentives/Flat shift bonuses pay everyone the same premium for the same hard shift, whether they're a core nurse covering for the unit or a per-diem chasing the highest-paying slot. That sends the wrong signal and leaks dollars. This walks through how we gated premium pay on FTE attainment, the snapshot model underneath it, and the payroll plumbing that keeps it auditable.Wed, 23 Jul 2025 00:00:00 GMTBuildinghttps://trusted.works/posts/vendor-reconciliation/https://trusted.works/posts/vendor-reconciliation/Every week, fifty-plus VMSs send us invoice data in their own dialect. The vendor knows a worker by name string; we know her by UUID. One system calls a unit 'ICU-MED-3W'; we have a clinical unit ID. This walks through the four-step pipeline, the identity bridge, and the two design moves we keep reaching for: derived state, and query-enforced idempotency.Tue, 12 Nov 2024 00:00:00 GMTBuildinghttps://trusted.works/posts/interactions-layer/https://trusted.works/posts/interactions-layer/For years, every channel between Trusted and a clinician lived in a different vendor's console. We pulled all of it onto the clinician record as a single interaction event. The interesting problem wasn't ingestion. It was identity resolution: phone numbers and emails aren't people, and a person is a record with a history.Wed, 23 Oct 2024 00:00:00 GMTBuildinghttps://trusted.works/posts/glados-llm-layer/https://trusted.works/posts/glados-llm-layer/Most Rails apps grow five different patterns for the same five LLM problems: retries, logging, validating shape, surfacing failures, chaining calls. GLaDOS is the single internal pack we built to handle all of it: prompts as first-class objects, structured-output validation, async execution, audit logs, and a multi-turn agentic loop with tool calling.Wed, 18 Sep 2024 00:00:00 GMTBuildinghttps://trusted.works/posts/submission-packet/https://trusted.works/posts/submission-packet/Every VMS wants the packet built differently: which documents, in what order, in what format, by which channel. We modeled that variation as three rule tables resolved hierarchically against job, program, and global defaults. Adding a new client is now a config change instead of a code change.Wed, 14 Aug 2024 00:00:00 GMTBuildinghttps://trusted.works/posts/reference-automation/https://trusted.works/posts/reference-automation/A travel nurse needs two professional references to submit to most jobs. Until recently, getting them was almost entirely manual: a person sitting between the clinician, the contact, and the submission deadline. This walks through what we automated, what we left alone, and why the design decisions that mattered most were operational rather than architectural.Tue, 20 Feb 2024 00:00:00 GMTBuildinghttps://trusted.works/posts/curation-foundation/https://trusted.works/posts/curation-foundation/Curation isn't a quality step on top of an existing job record. It's the step that makes the record exist. This post unpacks the four tasks curation is really made of and the domain model underneath them. Get the model right and autocuration follows. Skip it and you automate a screen instead of a domain.Tue, 22 Aug 2023 00:00:00 GMTBuildinghttps://trusted.works/posts/vms-ingestion/https://trusted.works/posts/vms-ingestion/Thirty-plus VMS platforms sit in our ingestion path, each with its own dialect. The naive answer (one importer per vendor) turns into code nobody wants to touch. This walks through the pipeline we built instead and the design decision that did the most work: pushing classification into a rule table so adding a new vendor is a small PR, not a rewrite.Tue, 30 May 2023 00:00:00 GMTBuildinghttps://trusted.works/posts/comp-calculator-v2/https://trusted.works/posts/comp-calculator-v2/Three places in the codebase computed nurse pay packages. They had drifted from each other and none kept a record of what produced a given number. Comp Calculator v2 collapsed them into one engine backed by immutable snapshots, plus a migration bug that taught us what semantic drift between V1 and V8 actually costs.Mon, 01 May 2023 00:00:00 GMTBuilding