{
  "ok": true,
  "scope": "Cross-module data-quality, evidence-provenance, reconciliation, correction, and discrepancy-governance demonstration for the MaxArc Global Health Impact Platform. Assesses records from all existing platform modules for completeness, consistency, timeliness, validity, duplication, provenance, evidence strength, reconciliation status, correction history, and human approval WITHOUT rewriting source records, live integrations, real database mutation, or autonomous correction.",
  "notice": "All data is synthetic and non-identifiable. No real patient identifiers, real names, real email addresses, credentials, secrets, precise locations, real financial account details, or real operationally restricted data are included. This is a synthetic governance demonstration, not a production master-data-management system, live national data warehouse, certification engine, autonomous correction service, or replacement for source-system records.",
  "authorizedReviewOnlyLabel": "FOR GLOBAL FUND / CCM / AUTHORIZED PARTNER REVIEW ONLY",
  "permittedUse": {
    "statement": "Materials are for authorized review only under minimum-necessary access; no anonymous or public access is implied. Review does not grant ownership or commercial reuse rights, and does not certify source-system data quality.",
    "prohibits": [
      "unauthorized copying",
      "redistribution",
      "derivative or commercial use",
      "representation as formal approval or production certification",
      "representation as a production master-data-management or data-warehouse system",
      "representation as proof that source-system records were updated"
    ],
    "excludes": [
      "real patient identifiers",
      "real names",
      "real email addresses",
      "credentials",
      "secrets",
      "precise location",
      "real financial account details",
      "real operationally restricted data"
    ]
  },
  "summary": {
    "totalCases": 16,
    "openCases": 7,
    "reconciledCases": 4,
    "blockedCases": 5,
    "escalatedCases": 6,
    "unresolvedDiscrepancies": 7,
    "missingRecords": 2,
    "duplicateRecords": 2,
    "staleRecords": 1,
    "conflictingRecords": 7,
    "crossModuleContradictions": 2,
    "evidenceCompletenessRate": 83,
    "evidenceVerificationRate": 50,
    "avgCompleteness": 89,
    "avgValidity": 95,
    "avgConsistency": 72,
    "avgTimeliness": 77,
    "correctionRequestsPending": 2,
    "rejectedCorrections": 1,
    "reversedCorrections": 1,
    "secondReviewQueue": 7,
    "sodConflicts": 5,
    "overdueReconciliations": 2,
    "highSeverityDiscrepancies": 4,
    "openEscalations": 6,
    "reconciliationRules": 15,
    "separationOfDutiesRules": 11,
    "aiSignalCount": 12,
    "auditEvents": 9,
    "byModule": {
      "fund-accountability": 2,
      "stockpile-logistics": 3,
      "lab-operations": 2,
      "patient-continuity": 1,
      "restricted-patient-locator": 1,
      "asset-management": 1,
      "program-performance": 1,
      "ai-intelligence": 1,
      "country-rollout": 1,
      "authorized-review-room": 1,
      "executive-review-packet": 1,
      "identity-access-governance": 1
    },
    "byCountry": {
      "CN-A": 15,
      "CN-B": 1
    },
    "byOrganization": {
      "ORG-MOH-A": 7,
      "ORG-IP-1": 6,
      "ORG-AUDIT-1": 1,
      "ORG-FUNDER-1": 2
    },
    "byFacility": {
      "FAC-A1": 11,
      "FAC-B1": 3,
      "FAC-A2": 2
    },
    "byProgram": {
      "PRG-HIV": 9,
      "PRG-MAL": 4,
      "PRG-TB": 3
    },
    "byReportingPeriod": {
      "RP-2025Q1": 3,
      "RP-2025Q2": 8,
      "RP-2025Q3": 5
    },
    "boundaryReminder": {
      "impactDomain": "impact.maxarchealth.com",
      "impactPort": "3201",
      "medicalLibraryBoundary": "library.maxarchealth.com remains separate (port 3101, not used here)",
      "maxTraxEhrBoundary": "MaxTrax EHR remains separate; this is not a full EHR"
    }
  },
  "positioning": {
    "isSyntheticGovernanceDemonstration": true,
    "isNotProductionMasterDataManagement": true,
    "isNotLiveDataWarehouse": true,
    "isNotCertificationEngine": true,
    "isNotAutonomousCorrectionService": true,
    "isNotReplacementForSourceRecords": true,
    "noLiveExternalIntegration": true,
    "noRealDatabaseMutation": true,
    "noAutonomousCorrection": true,
    "noRealFileDelivery": true,
    "sourceModuleRecordsAuthoritative": true,
    "notAnEhr": true,
    "coversModules": [
      "fund-accountability",
      "stockpile-logistics",
      "lab-operations",
      "patient-continuity",
      "restricted-patient-locator",
      "asset-management",
      "program-performance",
      "ai-intelligence",
      "country-rollout",
      "authorized-review-room",
      "executive-review-packet",
      "identity-access-governance"
    ]
  },
  "dataQualityPosture": {
    "statement": "Source-module records remain authoritative. This module assesses and reconciles but never silently rewrites source records. Every quality case identifies its source module, source record, owner, reporting period, dimensions assessed, evidence, status, reviewer, and audit reference. Quality scoring remains explainable, and source data and derived quality signals remain distinguishable.",
    "sourceModuleRecordsAuthoritative": true,
    "doesNotSilentlyRewriteSourceRecords": true,
    "everyCaseIdentifiesSourceOwnerPeriodEvidenceReviewerAudit": true,
    "scoringExplainable": true,
    "dimensionsRemainDistinct": true,
    "lowConfidenceNotRepresentedAsVerifiedFact": true,
    "missingDataRemainsVisible": true,
    "duplicateCandidatesRemainCandidatesUntilHumanReview": true,
    "outliersNotAutomaticallyFraudOrError": true,
    "conflictingEvidenceRemainsVisible": true,
    "unsupportedReconciliationClaimsRemainBlocked": true,
    "unresolvedCasesNotReportedAsReconciled": true,
    "expiredOrStaleEvidenceNotSupportCurrentVerificationWithoutReview": true,
    "sourceAndDerivedRemainDistinguishable": true,
    "everyCorrectionAttributableJustifiedReviewedAuditable": true
  },
  "evidenceProvenancePosture": {
    "statement": "Evidence presence is not the same as evidence verification. Verified evidence may still conflict with other verified evidence. Superseded evidence remains historically visible. Missing evidence blocks final reconciliation where required. Evidence must not be fabricated, silently replaced, or deleted. Source evidence remains authoritative within its source module.",
    "presenceIsNotVerification": true,
    "verifiedEvidenceMayConflict": true,
    "supersededEvidenceRemainsVisible": true,
    "missingEvidenceBlocksFinalReconciliation": true,
    "evidenceNotFabricatedReplacedOrDeleted": true,
    "sourceEvidenceAuthoritative": true,
    "noProductionCryptographicEvidenceSealing": true
  },
  "reconciliationPosture": {
    "statement": "Reconciliation compares records across authorized source modules against explicit rules, tolerances, and evidence requirements. Unresolved or unsupported reconciliations remain blocked or open and are never reported as reconciled. Every reconciliation requires a human reviewer role and, where high-risk, a second review.",
    "unsupportedReconciliationsRemainBlocked": true,
    "unresolvedNotReportedAsReconciled": true,
    "humanReviewerRequired": true,
    "secondReviewForHighRisk": true,
    "escalationThresholdsExplicit": true
  },
  "correctionGovernancePosture": {
    "statement": "Every correction is attributable, justified, reviewed, and auditable. The requestor cannot approve their own correction. The original record is never silently overwritten in this demonstration model; corrections require linked audit events. Correction approval does not prove a source-system update occurred; source-system update remains a future integration responsibility.",
    "requestorCannotApproveOwnCorrection": true,
    "originalNeverSilentlyOverwritten": true,
    "rejectedCorrectionsRemainVisible": true,
    "withdrawnCorrectionsRemainVisible": true,
    "reversedCorrectionsRemainVisible": true,
    "supersededCorrectionsRemainVisible": true,
    "correctionsRequireLinkedAuditEvents": true,
    "approvalIsNotProofOfSourceSystemUpdate": true,
    "correctionsNotEffectiveWithoutHumanApproval": true,
    "highRiskCorrectionsRequireSecondReview": true,
    "conflictingCorrectionsRemainBlocked": true,
    "sourceSystemUpdateIsFutureIntegrationResponsibility": true
  },
  "separationOfDutiesPosture": {
    "statement": "Data-quality, reconciliation, and correction duties are separated. Case creators, correction requestors, evidence capturers, source-data owners, and module preparers cannot independently approve, certify, close, or reconcile their own work where independent review is required. Violations remain blocked or pending, identify the violated rule, require reassignment or second review, remain auditable, and are never silently overridden.",
    "violationsRemainBlockedOrPending": true,
    "violationsIdentifyRule": true,
    "violationsRequireReassignmentOrSecondReview": true,
    "violationsAuditable": true,
    "neverSilentlyOverridden": true
  },
  "auditPosture": {
    "statement": "Audit events are append-only in this demonstration model. Historical states remain visible. Corrections and reversals require new linked events. Deletion is not an allowed correction method. Source-module audit records remain authoritative. This task does not implement a production cryptographic audit ledger.",
    "appendOnly": true,
    "historicalStatesRemainVisible": true,
    "correctionsRequireNewLinkedEvent": true,
    "reversalsRequireNewLinkedEvent": true,
    "deletionNotAnAllowedControl": true,
    "sourceModuleRecordsAuthoritative": true,
    "notProductionCryptographicLedger": true
  },
  "confidentialityPosture": {
    "authorizedReviewOnly": true,
    "noAnonymousOrPublicAccess": true,
    "minimumNecessaryAccess": true,
    "noPatientIdentityLocationSecretsOrRestrictedOperationalData": true,
    "noSilentRewritingOrDeletionOfHistory": true
  },
  "aiPosture": {
    "statement": "AI is assistive only. It surfaces quality signals, comparisons, and candidates for authorized human reviewers and never changes source records, approves reconciliation or corrections, certifies quality, or closes escalations.",
    "assists": [
      "detect missing, stale, duplicate, inconsistent, or outlier records",
      "compare values across authorized source modules",
      "identify evidence gaps",
      "identify conflicting evidence",
      "prioritize high-risk quality cases",
      "suggest reconciliation rules",
      "suggest correction candidates",
      "detect expired evidence",
      "identify unresolved dependencies",
      "summarize case history for authorized reviewers",
      "recommend cases for second review or escalation",
      "reconcile metadata and reference mappings"
    ],
    "mustNot": [
      "autonomously change source records",
      "autonomously approve reconciliation",
      "autonomously approve corrections",
      "autonomously certify data quality",
      "autonomously classify an outlier as fraud or misconduct",
      "autonomously suppress conflicting evidence",
      "autonomously delete missing, duplicate, or stale records",
      "autonomously fabricate evidence",
      "autonomously resolve disputed values",
      "autonomously close escalations",
      "bypass human approval, second review, separation of duties, evidence, expiration, or audit controls"
    ]
  },
  "humanControls": {
    "humanApprovalMandatory": true,
    "secondReviewForHighRisk": true,
    "separationOfDutiesEnforced": true,
    "reviewersAttributable": true
  },
  "boundary": {
    "impactDomain": "impact.maxarchealth.com",
    "impactPort": "3201",
    "medicalLibraryBoundary": "library.maxarchealth.com remains separate (port 3101, not used here)",
    "maxTraxEhrBoundary": "MaxTrax EHR remains separate; this is not a full EHR and implements no live integration or real database mutation",
    "protectedStaging": "/opt/operations-catch-them-young-staging remains untouched"
  },
  "modules": [
    {
      "id": "fund-accountability",
      "name": "Fund Accountability"
    },
    {
      "id": "stockpile-logistics",
      "name": "Stockpile & Logistics"
    },
    {
      "id": "lab-operations",
      "name": "Laboratory Operations"
    },
    {
      "id": "patient-continuity",
      "name": "Patient Continuity"
    },
    {
      "id": "restricted-patient-locator",
      "name": "Restricted Patient Locator"
    },
    {
      "id": "asset-management",
      "name": "Asset Management"
    },
    {
      "id": "program-performance",
      "name": "Program Performance"
    },
    {
      "id": "ai-intelligence",
      "name": "AI Intelligence"
    },
    {
      "id": "country-rollout",
      "name": "Country Rollout"
    },
    {
      "id": "authorized-review-room",
      "name": "Authorized Review Room"
    },
    {
      "id": "executive-review-packet",
      "name": "Executive Review Packet & Controlled Download Center"
    },
    {
      "id": "identity-access-governance",
      "name": "Identity & Access Governance"
    }
  ],
  "qualityDimensions": [
    {
      "id": "completeness",
      "name": "Completeness",
      "description": "Required fields and records are present."
    },
    {
      "id": "validity",
      "name": "Validity",
      "description": "Values conform to defined formats and ranges."
    },
    {
      "id": "consistency",
      "name": "Consistency",
      "description": "Values agree across related records and modules."
    },
    {
      "id": "timeliness",
      "name": "Timeliness",
      "description": "Records are captured and reported within expected windows."
    },
    {
      "id": "uniqueness",
      "name": "Uniqueness",
      "description": "Records are free of unreviewed duplicates."
    },
    {
      "id": "conformity",
      "name": "Conformity",
      "description": "Records conform to reference standards and code sets."
    },
    {
      "id": "provenance",
      "name": "Provenance",
      "description": "Record origin and capture chain are attributable."
    },
    {
      "id": "evidenceStrength",
      "name": "Evidence strength",
      "description": "Supporting evidence is present, verified, current, and non-conflicting."
    }
  ],
  "policies": [
    {
      "id": "POL-DQ-01",
      "name": "Source-authoritative assessment",
      "statement": "This module assesses and reconciles but never silently rewrites source records."
    },
    {
      "id": "POL-DQ-02",
      "name": "Evidence presence versus verification",
      "statement": "Evidence presence is not evidence verification; verified evidence may still conflict."
    },
    {
      "id": "POL-DQ-03",
      "name": "Correction governance",
      "statement": "Corrections are attributable, justified, reviewed, and auditable; requestors cannot approve their own corrections."
    },
    {
      "id": "POL-DQ-04",
      "name": "Append-only audit",
      "statement": "Corrections and reversals require new linked events; deletion is not an allowed correction method."
    }
  ],
  "routes": [
    "/data-quality-reconciliation/cases",
    "/data-quality-reconciliation/dimensions",
    "/data-quality-reconciliation/discrepancies",
    "/data-quality-reconciliation/duplicates",
    "/data-quality-reconciliation/missing-records",
    "/data-quality-reconciliation/stale-records",
    "/data-quality-reconciliation/outliers",
    "/data-quality-reconciliation/cross-module-conflicts",
    "/data-quality-reconciliation/evidence",
    "/data-quality-reconciliation/reconciliation-rules",
    "/data-quality-reconciliation/correction-requests",
    "/data-quality-reconciliation/correction-decisions",
    "/data-quality-reconciliation/reversals",
    "/data-quality-reconciliation/escalations",
    "/data-quality-reconciliation/risk-signals",
    "/data-quality-reconciliation/audit-events",
    "/data-quality-reconciliation/summary",
    "/data-quality-reconciliation-dashboard"
  ]
}