Evidence Hub

Safe Deployment of a Generative AI Assistant for Traditional-Medicine Education: Defense-in-Depth Architecture, Domain-Calibrated Safety Evaluation, and a Proposed Minimum Safety Stack

Hong TB, Linh TT, Oanh LH, Giang NTT, Tang T, Tien LTT, Bui TNA

2026

Abstract

Abstract Deploying generative AI safely in traditional-medicine education requires more than model alignment: it demands layered architecture and a definition of ‘unsafe’ that reflects clinical and pedagogical standards, not only information-security criteria. We describe TLAS-YHCT, a Socratic chatbot for traditional-medicine students built around non-overridable guardrails, retrieval-augmented generation over a vetted clinical corpus, a standardised system prompt, and an independent LLM-as-judge verifier. A structured red-team of 206 attacks—constructed by domain-expert clinician-educators independent of system developers, scored blind by the same experts under a dual IT-security and clinical-education safety criterion—yielded a 100% safe-response rate versus 88.9% and 78.7% for two commercial baselines. Critically, several attack scenarios were judged safe by IT-security standards but clinically unsafe by clinical-education standards, and vice versa, demonstrating that safety definitions must be domain-calibrated. We propose a minimum safety stack—combining RAG, a standardised system prompt, and LLM-as-judge verification—as a transferable framework for AI safety in traditional-medicine and allied clinical-education settings.

Read the paper

Related studies

Go deeper in Evidence Hub

Evidence Hub adds a study data sheet (design, sample size, evidence level, key numbers), an AI summary and a chat grounded in the paper's text.

Open this study Sign up free