I'm not an expert in cardiatric medicine or anything, but couldn't patient risk be determined by objective factors like patient age and history of previous heart issues?
(And besides that, although software estimation is notoriously inaccurate, it is still done and written into contracts all the time, because it serves a useful purpose that outweighs its inaccuracy)