Country Rollout & Offline Operations Readiness

Country & facility readiness · Offline operations · Human-approved deployment

Assess readiness first. Activate only with authorized human approval.

A readiness foundation for country, region, facility, infrastructure, connectivity, governance, staffing, training, and per-module readiness before platform capabilities are activated. Offline capability is a controlled deployment mode, not a security bypass: authorization, minimum-necessary access, and immutable audit remain active offline. AI surfaces gaps, blockers, and sync risks — but AI never approves or activates a deployment, waives requirements, or resolves conflicts. Deployment recommendations require authorized human approval.

You are viewing the Country Rollout & Offline Operations Readiness Dashboard — Synthetic non-identifiable data

Offline posture: Offline capability is a controlled deployment mode, not an excuse to bypass security. Local operation preserves authorization, audit logging, and minimum-necessary access. Queued offline transactions carry identity, timestamp, source device, and reconciliation status. Conflicts are never silently overwritten; synchronization requires authenticated and auditable reconciliation. Patient, laboratory, financial, asset, and restricted-locator data retain module-specific privacy controls. Prolonged offline operation triggers review, failed synchronization stays visible, and data loss, duplicate submissions, replay, stale records, and unauthorized device use are flagged. Local backups and recovery status are tracked. Deployment recommendations require authorized human approval.

Governance posture: No country or facility is activated without authorized human approval. Governance, privacy, security, and infrastructure requirements cannot be waived by AI. Readiness evidence is never silently modified, deployment blockers are never suppressed, and every assessment, corrective action, recommendation, approval, escalation, and override is auditable.

Countries assessed 3

In rollout scope

Regions assessed 3

Sub-national clusters

Facilities assessed 5

Across waves

Rollout waves 2

Sequenced deployment

Facilities ready 2

Go recommendation

Conditionally ready 1

Corrective actions pending

Not ready 2

Blocked

Offline-required sites 3

Controlled offline mode

Low-bandwidth sites 3

Constrained connectivity

Power-risk sites 3

Unstable power

Device/infra gaps 3

Infrastructure shortfalls

Training gaps 3

Below threshold

Governance/privacy gaps 2

Legal & policy

Data-residency restricted 2

In-country hosting

Integration gaps 2

DHIS2/eLMIS/OpenELIS

AI-governance gaps 2

AI sign-off pending

Open corrective actions 3

In progress / open

Overdue readiness actions 3

Past due

High-risk blockers 2

Deployment held

Prolonged-offline sites 2

Sync review triggered

Failed-sync sites 2

Visible, not hidden

Sync conflicts 1

Human reconciliation

Evidence completeness 83%

Readiness evidence present

Facility readiness

Each facility carries infrastructure, power, connectivity, offline requirement, gaps, deployment recommendation, and human approval status. No facility is activated without authorized human approval; blockers must be resolved first.

Facility	Country / wave	Readiness	Power / connectivity	Gaps	Recommendation / approval
ANDT-URBAN-REF-01 FAC-ANDT-001 · national-referral	CT-ANDT wave WAVE-1	ready	grid-stable broadband · high	—	go approved
ANDT-RURAL-HC-14 FAC-ANDT-014 · health-center	CT-ANDT wave WAVE-1	conditional offline	intermittent-generator cellular-2g-3g · low	power-stability, device-shortfall, training-below-threshold, recovery-untested	conditional-go pending approval
ANDT-REMOTE-DISP-27 FAC-ANDT-027 · dispensary	CT-ANDT wave WAVE-1	not ready offline	solar-limited none-most-days · offline	no-connectivity, device-shortfall, no-local-backup, staffing-gap, training-gap	no-go blocked escalated
BENV-URBAN-DH-03 FAC-BENV-003 · district-hospital	CT-BENV wave WAVE-1	ready	grid-stable broadband · high	—	go approved
CIRD-HIGHLAND-HC-09 FAC-CIRD-009 · health-center	CT-CIRD wave WAVE-2	not ready offline	intermittent-generator cellular-2g-3g · low	privacy-legal-gap, access-control-gap, no-local-backup, training-below-threshold	no-go blocked escalated

Per-module readiness coverage

Readiness is assessed for every existing platform module without coupling to MaxTrax EHR.

Facility	Fund Accountability	Stockpile & Logistics	Lab Operations	Patient Continuity	Restricted Patient Locator	Asset Management	Program Performance	AI Intelligence
ANDT-URBAN-REF-01	ready	ready	ready	ready	conditional	ready	ready	conditional
ANDT-RURAL-HC-14	conditional	ready	conditional	conditional	conditional	ready	conditional	conditional
ANDT-REMOTE-DISP-27	not ready	conditional	not ready	not ready	not ready	conditional	not ready	not ready
BENV-URBAN-DH-03	ready	ready	ready	ready	ready	ready	ready	ready
CIRD-HIGHLAND-HC-09	conditional	conditional	not ready	not ready	not ready	conditional	conditional	not ready

Offline & low-bandwidth operations

Queued offline transactions carry identity, timestamp, source device, and reconciliation status. Unauthorized devices are quarantined; conflicts are never silently overwritten; failed synchronization stays visible and prolonged offline triggers review.

Queued txn	Type	Identity / device	Timestamp	Reconciliation
OQ-1001 FAC-ANDT-014 · stockpile-logistics	commodity-receipt	role:store-keeper#device-verified device: DEV-ANDT-014-03	2026-07-02T07:12:00Z	reconciled
OQ-1002 FAC-ANDT-014 · patient-continuity	follow-up-outcome privacy	role:continuity-nurse#device-verified device: DEV-ANDT-014-01	2026-07-02T08:40:00Z	pending
OQ-1003 FAC-ANDT-027 · program-performance	indicator-count	role:facility-reporter#device-verified device: DEV-ANDT-027-01	2026-07-01T15:05:00Z	conflict
OQ-1004 FAC-CIRD-009 · stockpile-logistics	stock-count	unregistered-device device: DEV-UNKNOWN-77 (unauthorized)	2026-07-03T06:20:00Z	quarantined

Synchronization status

FAC-ANDT-001 — healthy 0 pending · 11h since sync
FAC-ANDT-014 — degraded 12 pending · 32h since sync
FAC-ANDT-027 — failed 47 pending · 199h since sync prolonged offline — review triggered
FAC-BENV-003 — healthy 0 pending · 12h since sync
FAC-CIRD-009 — failed 33 pending · 153h since sync prolonged offline — review triggered

Sync conflicts (no silent overwrite)

SC-3001 (program-performance) — concurrent-edit on PP-COUNT-ANDT-027-w26. Silently overwritten: no; requires human reconciliation: yes.

AI readiness risk signals (human decision required)

RS-CR-001 (FAC-ANDT-027) — no connectivity, no local backup, staffing and training gaps high
conf 0.82 · human decision required · next: authorized reviewer holds deployment until infrastructure and backup corrective actions complete
RS-CR-002 (FAC-ANDT-027) — 199 hours since last successful sync; 47 pending transactions high
conf 0.9 · human decision required · next: authorized reviewer investigates failed synchronization and reconciles queued transactions
RS-CR-003 (FAC-CIRD-009) — privacy-legal and access-control gaps with overdue corrective action high
conf 0.86 · human decision required · next: governance board resolves privacy/access gaps before any activation
RS-CR-004 (FAC-CIRD-009) — stock-count submitted from unregistered device (quarantined) medium
conf 0.74 · human decision required · next: authorized reviewer verifies device provenance before accepting quarantined transaction
RS-CR-005 (FAC-ANDT-027) — concurrent-edit conflict on indicator count pending human reconciliation medium
conf 0.7 · human decision required · next: authorized reviewer reconciles conflicting records; no silent overwrite
RS-CR-006 (FAC-ANDT-014) — conditional readiness with untested recovery and below-threshold training medium
conf 0.66 · human decision required · next: authorized reviewer confirms corrective actions before conditional go-live

Corrective actions

CA-CR-001 — complete role-based training to >=80% before go-live in-progress
FAC-ANDT-014 · owner: implementation-partner-lead · due 2026-08-15 · evidence: EVD-CR-FAC-ANDT-014-training-plan
CA-CR-002 — install and test local backup and recovery before any offline operation open
FAC-ANDT-027 · owner: infrastructure-lead · due 2026-08-01 · evidence: —
CA-CR-003 — provision satellite/edge sync and deferred-sync policy overdue
FAC-ANDT-027 · owner: infrastructure-lead · due 2026-07-01 · evidence: —
CA-CR-004 — complete privacy/legal framework and access-control policy before deployment open
FAC-CIRD-009 · owner: governance-privacy-officer · due 2026-09-30 · evidence: —
CA-CR-005 — configure role-based access control and separation of duties overdue
FAC-CIRD-009 · owner: governance-privacy-officer · due 2026-06-30 · evidence: —

Deployment recommendation

go 2
conditional-go 1
no-go 2

Risk distribution

risk low 2
risk medium 1
risk high 2

By rollout wave

WAVE-1 4
WAVE-2 1

By facility level

national-referral 1
health-center 2
dispensary 1
district-hospital 1

Integration & data-migration readiness

DHIS2 conditional
CT-ANDT · program-performance reporting · migration: in-progress
eLMIS/OpenLMIS ready
CT-ANDT · stockpile-logistics sync · migration: ready
OpenELIS ready
CT-BENV · lab-operations results · migration: ready
DHIS2 gap
CT-CIRD · program-performance reporting · migration: not-started

AI posture — assistive only, non-autonomous

AI assists with

identify readiness gaps
prioritize facilities for remediation
detect inconsistent readiness assessments
identify likely deployment blockers
estimate operational risk
reconcile assessment evidence
flag prolonged offline or failed-sync patterns
identify training and staffing gaps
suggest rollout sequencing
summarize readiness evidence for authorized reviewers

AI must never

autonomously approve deployment
autonomously waive governance, privacy, security, or infrastructure requirements
autonomously activate a country or facility
autonomously change readiness evidence
autonomously resolve synchronization conflicts
autonomously disclose restricted data
autonomously suppress deployment blockers
bypass human approval or audit requirements

AI is assistive only. It surfaces readiness gaps, blockers, and offline/sync risks and prioritizes remediation for authorized reviewers, but it never approves or activates a deployment, waives requirements, changes evidence, resolves sync conflicts, discloses restricted data, suppresses blockers, or bypasses human approval and audit.

Runtime boundary & linkage

Impact runtime: impact.maxarchealth.com on 127.0.0.1:3201.
Assesses readiness for fund accountability, stockpile & logistics, lab operations, patient continuity, restricted locator, asset management, program performance, and AI intelligence without coupling to MaxTrax EHR.
Medical Library boundary remains separate at library.maxarchealth.com (port 3101) and is not used here.
MaxTrax EHR remains separate; this is not a full EHR.
Offline is a controlled deployment mode; authorization, minimum-necessary access, and immutable audit remain active offline.