Healthcare organizations are approving AI deployments on foundations they know are incomplete — identity gaps unresolved, vendor integrations unevaluated, data ownership questions deferred. TEFCA is moving patient data nationally at speed while the governance layer is still being assembled, and the CMS policy agenda is accelerating pressure the infrastructure isn't ready to absorb. The patient is sitting in that gap — and the question is whether anyone upstream has checked the water.