Validating healthcare AI
Human in the Loop: Designing Clinical AI That Supports Judgment
The clinician stays in charge because accountability cannot be delegated to software, and good clinical AI is designed around that fact rather than against it. Human in the loop means a trained person reviews, can override, and owns the decision before it touches a patient, while the AI does the narrow work it is reliably good at, such as reading a chart fast and flagging the easy-to-miss.
The clinician stays in charge because accountability cannot be delegated to software, and good clinical AI is designed around that fact rather than against it. Human in the loop means a trained person reviews, can override, and owns the decision before it touches a patient, while the AI does the narrow work it is reliably good at, such as reading a chart fast and flagging the easy-to-miss. The goal is not a smarter autopilot. It is a system that makes the clinician's judgment faster and harder to fool, and that hands control back when a case leaves what the tool was built for.
A definition worth keeping: human-in-the-loop clinical AI is a system where the model produces a suggestion and a human clinician keeps the authority and the duty to accept, change, or reject it before it affects care. The human is the decision-maker; the AI is the well-read assistant who happened to speak first.
Why should the clinician stay in charge of clinical AI?
Because someone has to be answerable to the patient, and that someone has to be a person. A model can be accurate, calibrated, even better than the average reviewer on a benchmark, and still owe nobody an explanation when a case goes wrong. Cut the human out of that chain of responsibility and you have not removed the risk, only made it ownerless.
There is a quieter reason too. A model is strongest in the dense middle of its training data, among patients who resemble the patients it learned from. The patient who does not fit, the unusual case, is both hardest for the model and most in need of a thinking clinician. A person in charge puts human attention where the machine is weakest.
I learned to take this literally while building decision support. As Head of Medical and Science I co-developed EASY Diabetes, an AI clinical decision-support system for type 2 diabetes, and the rule was plain: the tool suggested and the clinician decided. It made the right next step easier to reach inside a normal visit, and easy to refuse when the clinician knew something the chart did not.
What does "human in the loop" actually mean in practice?
It means three things that are easy to say and easy to get wrong: a real review, a real override, and a real owner.
A real review means the clinician has the information and the time to disagree. A suggestion that arrives as one confident sentence with no reason behind it is not reviewable, only acceptable or ignorable. The system has to show its short reasoning so a busy person can check it at a glance: this suggestion, because of this value, against this guideline.
A real override means saying no is as fast and as blameless as saying yes. If overriding takes extra clicks, a written justification, and a flag in the record, the design has told the clinician that the safe move is to agree. That is how you get a loop with a human in it who has stopped functioning as one.
A real owner means it is unambiguous, before anything goes wrong, whose decision this was. When the clinician assumes the model checked it and the model checks nothing, the patient falls into the gap between them.
The trap of the human who has stopped looking
The most common failure of oversight is not rebellion against the machine. It is surrender to it. Automation bias, the well-documented tendency to trust a confident automated answer over the evidence in front of us, grows with every correct suggestion the system makes. A tool that is right almost all of the time trains its user to stop checking the rest, which is exactly when the rare wrong answer sails through.
This is a design problem, not a character flaw. A common trap is to measure oversight by whether a human signed off, when the real question is whether the human could have meaningfully disagreed and sometimes did.
How do you design the handoffs between AI and clinician?
You decide, in advance and on paper, which decisions the AI may draft, which it may only inform, and which it must never touch. Most of the safety lives in that handoff rather than in the model's accuracy.
A useful way to sort tasks is by what a wrong answer costs and how reversible it is. Low-stakes, easily reversed work is where AI can move fastest with light review: summarizing a long record, surfacing the lab value that breaks the pattern, drafting routine documentation the clinician then edits. High-stakes, hard-to-reverse decisions stay with the clinician, the AI strictly advisory. A chart summary and a suggested dose change deserve different amounts of trust.
The other half of good handoff design is knowing when to refuse. A well-built tool recognizes when a case sits outside what it was validated for, or when its own confidence is low, and the honest behavior then is to step back and say so rather than produce a smooth answer anyway. A model that always has an opinion is more dangerous than one that knows where its competence ends. This is a regulatory idea as much as a design one. The frameworks behind software as a medical device, which I studied while earning training in medical device regulations, keep asking the same thing: define the intended use and the role of human oversight, and do not let a tool sold as advisory drift into being the default answer.
Who is accountable when the AI gets it wrong?
The clinician who acted on the suggestion, the same as it has always been, which is exactly why the surrounding system has to make that responsibility fair to carry. Accountability without the means to exercise judgment is a person holding the bag for a black box. The duty to own a decision and the ability to understand and refuse it have to arrive together.
Builders carry a real share too. If a tool is opaque, nags clinicians out of overriding, or is marketed as more autonomous than its evidence supports, those are design choices that load risk onto the person at the bedside. Evidence earned where the tool will actually live is part of that duty. We ran the EASY-1 randomized controlled trial (NCT03258268) in real clinics, rather than rest on a benchmark, because a result earned in real settings is what lets a clinician adopt a tool without gambling on a vendor's confidence. A held-out accuracy score says the model matches data like its training set, which is not the same as a clinician being safe to trust it on a Tuesday afternoon.
This article is educational and is not medical advice. Decisions about your care should be made with your own clinician, who can weigh your full history.
So design for the human who stays in charge. Show the reasoning, make refusal easy, and name the owner before anything goes wrong. The best clinical AI does not ask to be trusted blindly; it makes a good clinician faster, and a tired one harder to fool.
References and sources
How this was researched. This explainer is built from the primary sources listed above and reflects Dr. Tojjar's own critical appraisal of that evidence. It explains and evaluates research and does not provide medical care.
This article is for general education and is not medical or professional advice. For guidance about your own health, talk with a qualified clinician.
Cite this article
Tojjar, D. (2026). Human in the Loop: Designing Clinical AI That Supports Judgment. Dr. Damon Tojjar. https://readingtheevidence.org/articles/human-in-the-loop-clinical-ai/
This article is part of Dr. Tojjar's guide to Validating healthcare AI.