| Blood bank — an ABO-incompatible transfusion is unrepresentable, and | 129 | a memory invariant, match, try / catch, lambdas |
| Lab chain of custody — a sample whose custody broke can never be reported, by construction A forensic toxicology or pathology result is only as trustworthy as the unbroken chain of custody behind it | 125 | a state machine, try / catch |
| Vaccine cold-chain — a temperature breach is PERMANENT, not "probably fine" | 126 | a state machine, a memory invariant, try / catch, lambdas |
| Controlled substance cabinet — the narcotic count must reconcile, always | 133 | a memory invariant, try / catch |
| Dialysis — fluid removal is capped, and a session always ends with the | 148 | a state machine, a memory invariant, try / catch |
| Infusion pump — the programmed rate can never exceed the drug's hard limit ("guardrails") A nurse programming an IV pump types the rate by hand | 113 | a memory invariant, try / catch, lambdas |
| Isolation precautions — a contagious patient cannot be discharged to a | 155 | a state machine, a memory invariant, try / catch |
| Medication administration — the "five rights" enforced by barcode, no scan no dose Wrong-patient and wrong-drug medication errors are among the most common causes of inpatient harm | 135 | a state machine, match, try / catch |
| Prescription interaction lockout — a lethal drug combination is refused | 142 | a memory invariant, try / catch, lambdas |
| Sepsis bundle — antibiotics never go in before the blood cultures are | 147 | a state machine, a memory invariant, try / catch |
| Autoclave sterilization — a failed cycle can never release instruments | 159 | a state machine, a memory invariant, try / catch, lambdas |
| Surgical safety checklist — no incision before time-out, and the count | 146 | a state machine, a memory invariant, match, try / catch |
| Organ allocation — one organ, one recipient, and no taking it back once | 145 | a state machine, try / catch |
| Emergency triage — the sickest patient is seen first, by construction | 123 | a memory invariant, try / catch |