FRAME v1.0 · batch #1
FRAME / Batch #1 · May 28, 2026
FOUNDATIONAL
23/24

Tula

realactivity/tula

Most governance-mature patient AI agent in open source — frontier patterns, working evals, self-hosted, open-core commercial path. Missing explicit AI evidence contract.

CreatorPaul Swider / RealActivity
LicenseApache 2.0
Stars★ 26
FHIRYes
Self-hostedYes
Write opsNo
Stack OpenClaw, SMART on FHIR, Microsoft Waza, OpenTelemetry, multi-LLM
self-hostedSMART-on-FHIROpenClawWaza-evalspatient-agentopen-corefrontier-agenthealthcare-AIHITL
§ 01 / FRAME dimension scores eight axes · zero to three
PAI
3/3
Patient Agency
AI
3/3
Architecture Integrity
TM
3/3
Technical Maturity
SDP
3/3
Safety & Disclaimer
IS
3/3
Interoperability Stack
CA
2/3
CLAIM Alignment
SM
3/3
Sustainability Model
SH
3/3
Scope Honesty
§ 02 / Recommendation analyst-facing
TRACK + ENGAGE

Most technically mature entry in batch. Worth monitoring for CLAIM alignment development. Aria commercial path makes it worth engaging for potential PRISM-N or partnership framing.

§ 03 / Installation curator’s notes · try it locally
intermediate ~ 20–40 min source ↗
Prerequisites
  • Node.js 20+ and pnpm (or npm)
  • An OpenClaw runtime — install separately from openclaw.ai
  • An LLM provider key (OpenAI, Anthropic, or compatible)
  • Optional: SMART-on-FHIR-capable portal account for live record ingest
Steps
  1. 01
    Install OpenClaw globally
    npm install -g openclaw@latest

    Tula is a skill layer that runs on top of OpenClaw. Install the host runtime first.

  2. 02
    Onboard OpenClaw
    openclaw onboard

    Walks you through gateway, workspace, channels, and LLM keys interactively. Pick a local workspace, not a shared cloud one, to preserve Tula's local-first posture.

  3. 03
    Clone Tula and install its skills
    git clone https://github.com/realactivity/tula.git && cd tula && pnpm install
  4. 04
    Register the Tula skill bundle with OpenClaw
    openclaw skills add ./

    Loads the Tula skills, prompts, and FHIR connectors into your OpenClaw workspace. See docs/frontier-agent.md for what each skill does.

  5. 05
    Start the agent and ask the first question
    openclaw run

    Open the local OpenClaw UI in your browser. Tula will be available as an agent. Start with a low-stakes question ("summarize my last lipid panel") before delegating anything consequential.

Apache 2.0 means you can use Tula commercially, but RealActivity also offers Aria as a hosted commercial path — read OPEN_CORE.md to understand the boundary. Tula has working evals (docs/safety-and-disclaimer.md); run them after install to see how the agent behaves on your data shape before trusting outputs.

Curator's guide adapted from the repo's README. Always verify against the upstream source before running. This site does not host or operate any of these tools.

§ 04 / Full audit narrative + CLAIM

FRAME Audit: Tula

URL: https://github.com/realactivity/tula
Date: 2026-05-28
Analyst: FRAME v1.0 / Synambix
Documents reviewed: README.md, docs/frontier-agent.md (referenced), docs/safety-and-disclaimer.md (referenced), OPEN_CORE.md (referenced)


One-Line Verdict

FOUNDATIONAL | Score: 23/24 | The most governance-mature entry in this batch — frontier agent patterns, working evals, and a safety posture that backs up its patient agency claims.


Dimension Scores

DimensionScoreEvidence
Patient Agency Index3/3Self-hosted VM reference deployment; PHI bounded to agent workspace; portal messages drafted, never auto-sent; least-permission skills; patient owns data from first principle
Architecture Integrity3/3OTel-shaped traces; append-only logs; reproducible workspace snapshots; regex secret-scan gates in CI; scope-contained skills; Exchange sender allowlist before model sees email
Technical Maturity3/3Five live skills; Waza compliance in CI; 8/10 tasks passed eval aggregate score 0.97; capability table with Live/In Progress/Planned status; multi-model routing documented
Safety & Disclaimer Posture3/3Dedicated safety-and-disclaimer.md; “not a medical device, not FDA-cleared” explicit; “not a replacement for professional medical advice”; HITL on portal messages documented as architectural constraint
Interoperability Stack3/3SMART on FHIR live; medical PDF and image capture live; EHR portal integration live; multi-backend model routing (Azure, OpenAI, Anthropic, Google, xAI, Mistral, DeepSeek, Cohere, open-weight)
CLAIM Alignment2/3Patient agency language is strong and architecturally backed; HITL design is correct; but no explicit citation/evidence contract for AI outputs; no “interrogative stance” tooling visible from available docs; framework is governance-first, literacy-second
Sustainability Model3/3Apache 2.0 open-source; commercial Aria platform as funding path; two named founding contributors; Discussions channel; Contributing guide; enterprise pilot pipeline documented
Scope Honesty3/3Capability table with Live/In Progress/Planned columns; “not a medical device” prominent; open-core split clearly documented; enterprise vs personal use cases separated; roadmap distinguished from product
TOTAL23/24

Key Strengths

  • Governance architecture is the best in class. OTel tracing, append-only audit logs, Waza compliance gates in CI, reproducible snapshots — these are enterprise health governance patterns applied to patient-agent infrastructure. No other repo in this batch comes close.
  • HITL as an architectural constraint, not a disclaimer. Portal messages are drafted, never auto-sent. This is enforced in the skill design, not just mentioned in a README.
  • Working evals with quantitative output. “8 of 10 tasks passed, aggregate score 0.97” is the only repo in this batch where technical maturity is expressed in numbers.
  • Open-core model is coherent. The Tula/Aria split is clearly documented, commercially defensible, and doesn’t cannibalize the open-source layer.
  • Multi-model routing. Eight backend options including open-weight models — privacy mode is architecturally real, not aspirational.

Key Gaps

  • No explicit evidence contract for AI outputs. OwnChart defines five labeled output classes (Source-backed, User-canonical, Inferred, Statistical, Unknown). Tula’s AI output is governed by Waza compliance (technical correctness) but the README shows no patient-facing epistemic contract — no “why do you think that?” traceable path.
  • CLAIM literacy dimension is underdeveloped. The system is well-governed but governance-first. There is no visible mechanism for patients to interrogate the AI’s reasoning, see the evidence behind a claim, or build interrogative capacity over time.
  • Patient-facing UX is sparse in docs. The README reads as developer-first and enterprise-facing. How a patient actually uses Tula day-to-day is not shown.
  • Wearables, imaging, genomics listed as “planned” with no timeline. These are significant capability gaps for complex chronic disease patients.

CLAIM Assessment

Contextual Grounding: Strong. Tula grounds all output in the user’s specific health records — SMART on FHIR pulls, PDF uploads, longitudinal memory diffing. The architecture explicitly bounds PHI to the user’s workspace. The system is producing personalized output, not generic health information.

Interrogative Stance: Weak. The current README and skill descriptions do not show mechanisms for patients to question AI outputs, trace claims to sources, or understand what the system does not know. Waza compliance checks correctness from a governance perspective, not from the patient’s epistemic standpoint. A patient using Tula gets governed outputs, not necessarily transparent ones.

Associative Integration: Moderate. Multi-model routing and self-hosted architecture mean the patient could, in principle, connect outputs to other tools they control. But there is no documented path for connecting Tula’s outputs to external knowledge sources or enabling patients to integrate evidence from multiple contexts.

Judgment Layer Activation: Strong by design. HITL constraints mean the patient makes the consequential decisions — portal messages are drafted, not sent; the human confirms before action. This is the right architecture. Whether it builds judgment capacity over time or just adds a confirmation step is not addressed.

Methodological Transfer: Absent. There is no visible mechanism for patients to learn how to reason about their health data through Tula, rather than just receiving its outputs. This may be intentional (the system is focused on coordination, not health literacy), but it represents a gap relative to CLAIM’s full vision.


Patient Agency Verdict

Tula advances patient agency in the narrow and important sense: the patient’s data stays under their control, AI cannot act consequentially without human confirmation, and the governance architecture is built to resist institutional capture. These are real structural advances over consumer health apps that extract and retain data.

Where Tula falls short of the full patient agency vision is in empowerment depth. The system is built to help patients manage and coordinate their health information efficiently, and it does this with impressive technical rigor. But it does not yet help patients build the reasoning capacity to interrogate their own care — to notice when the AI is confident but wrong, to challenge institutional categories embedded in their records, or to use AI output as a starting point for deeper engagement rather than an end point.

This is not a fatal gap — it may reflect a deliberate staging decision. But it means Tula as documented is a strong coordination tool with governance discipline, not yet a full critical health literacy platform.


Evidence Flags

None. The README makes no unsubstantiated capability claims. All features are status-labeled. The commercial/open-source split is clearly documented. The Waza eval score is specific and falsifiable.


Recommendation

TRACK + ENGAGE. The most technically mature entry in this batch. Worth monitoring for CLAIM alignment development — if Tula adds an evidence contract and patient-facing interrogative tooling, it becomes the most comprehensive patient AI platform in the open-source space. The commercial Aria path makes it worth engaging for potential partnership framing in PRISM-N or related work.