An AI product team is developing a generative AI system that will produce patient education materials for a hospital. The team proposes releasing the system without formal validation because 'it's just generating text, not making medical decisions.' How should the AI risk manager respond?

B is correct because patient education materials that contain incorrect medical information can directly harm patients — patients may make incorrect health decisions based on AI-generated content about medication, symptoms, or treatment. The label 'text generation rather than medical decision-making' does not eliminate the patient harm risk. The validation must specifically address medical accuracy, hallucination rates, and comprehension. Agreeing without validation (A) ignores the patient harm risk. Standard IT release procedures (C) are insufficient for AI systems with patient safety implications. Restricting to administrative content (D) eliminates the clinical utility without addressing the governance question.