{ "ok": true, "scope": "Cross-module policy-governance, compliance-obligation, control-mapping, control-testing, exception, remediation, and human-attestation demonstration for the MaxArc Global Health Impact Platform. Demonstrates how institutional policies, grant conditions, program requirements, privacy safeguards, operational procedures, access restrictions, evidence expectations, control objectives, testing results, exceptions, remediation plans, attestations, and review decisions can be mapped across all existing platform modules WITHOUT legal advice, regulatory certification, formal accreditation, grant approval, external audit opinion, official compliance determination, production control enforcement, live external integration, real signatures, real evidence upload, real database mutation, or autonomous compliance determination.", "notice": "All data is synthetic and non-identifiable. No real legal opinions, real regulator correspondence, real grant agreements, real audit reports, real names, real email addresses, real signatures, real patient identifiers, credentials, secrets, precise locations, real restricted operational information, or real financial account details are included. This is a synthetic governance demonstration, not legal advice, regulatory certification, formal accreditation, grant approval, external audit opinion, official compliance determination, production controls-testing system, or replacement for authorized legal, regulatory, audit, funder, or ministry review.", "authorizedReviewOnlyLabel": "FOR GLOBAL FUND / CCM / AUTHORIZED PARTNER REVIEW ONLY", "permittedUse": { "statement": "Materials are for authorized review only under minimum-necessary access; no anonymous or public access is implied. Review does not grant ownership or commercial reuse rights, and does not constitute legal advice, certification, accreditation, grant approval, or an external audit opinion.", "prohibits": [ "unauthorized copying", "redistribution", "derivative or commercial use", "representation as legal advice or legal interpretation", "representation as regulatory certification, accreditation, or grant approval", "representation as an external audit opinion or official compliance determination", "representation as production compliance enforcement" ], "excludes": [ "real legal opinions", "real regulator correspondence", "real grant agreements", "real audit reports", "real names", "real email addresses", "real signatures", "patient identifiers", "credentials", "secrets", "precise locations", "real restricted operational information", "real financial account details" ] }, "summary": { "totalPolicies": 8, "currentPolicies": 4, "policiesPendingReview": 1, "expiredPolicies": 1, "supersededPolicies": 1, "withdrawnPolicies": 1, "totalObligations": 15, "applicableObligations": 13, "obligationsPendingInterpretation": 2, "mappedControls": 4, "unmappedObligations": 1, "partiallyMappedObligations": 1, "controlsTested": 13, "controlsNotTested": 2, "controlsPassed": 9, "controlsPartiallyPassed": 2, "controlsFailed": 1, "controlsBlocked": 1, "designDeficiencies": 1, "operatingDeficiencies": 2, "openExceptions": 2, "expiringExceptions": 0, "expiredExceptions": 1, "compensatingControls": 2, "remediationActionsOpen": 2, "overdueRemediationActions": 2, "effectivenessReviewsPending": 1, "residualHighRiskItems": 3, "attestationsPending": 2, "attestationsApproved": 1, "attestationsRejected": 1, "attestationsExpired": 1, "attestationsBlocked": 1, "waiverRequestsPending": 0, "secondReviewQueue": 8, "separationOfDutiesConflicts": 24, "separationOfDutiesRules": 24, "missingEvidence": 1, "conflictingEvidence": 1, "staleEvidence": 1, "aiSignalCount": 9, "auditEvents": 9, "bySourceModule": { "fund-accountability": 1, "stockpile-logistics": 1, "lab-operations": 1, "patient-continuity": 1, "restricted-patient-locator": 1, "asset-management": 2, "program-performance": 1, "ai-intelligence": 1, "risk-incident-case-governance": 2, "country-rollout": 1, "authorized-review-room": 1, "executive-review-packet": 1, "identity-access-governance": 1, "data-quality-reconciliation": 1 }, "byObligationCategory": { "financial-accountability": 1, "commodity-accountability": 1, "laboratory-quality": 1, "patient-continuity": 1, "restricted-access": 1, "asset-accountability": 1, "program-performance": 1, "ai-governance": 1, "rollout-readiness": 1, "packet-review": 1, "evidence-package": 1, "identity-access": 1, "data-quality": 1, "incident-investigation": 1, "operational": 1 }, "byCountry": { "CN-A": 12, "CN-B": 6 }, "byOrganization": { "ORG-IP-1": 5, "ORG-MOH-A": 5, "ORG-CCM-A": 1, "ORG-FUNDER-1": 2, "ORG-AUDIT-1": 1 }, "byProgram": { "PRG-HIV": 10, "PRG-TB": 4, "PRG-MAL": 3 }, "byControlType": { "detective": 5, "preventive": 8, "corrective": 1, "compensating": 1 }, "byTestResult": { "pass": 9, "partial": 2, "fail": 1, "not-tested": 1, "blocked": 1, "not-applicable": 1 }, "byRemediationStatus": { "in-progress": 2, "completed": 1 }, "boundaryReminder": { "impactDomain": "impact.maxarchealth.com", "impactPort": "3201", "medicalLibraryBoundary": "library.maxarchealth.com remains separate (port 3101, not used here)", "maxTraxEhrBoundary": "MaxTrax EHR remains separate; this is not a full EHR" } }, "positioning": { "isSyntheticGovernanceDemonstration": true, "isNotLegalAdvice": true, "isNotRegulatoryCertification": true, "isNotFormalAccreditation": true, "isNotGrantApproval": true, "isNotExternalAuditOpinion": true, "isNotOfficialComplianceDetermination": true, "isNotProductionControlsTestingSystem": true, "isNotReplacementForAuthorizedReview": true, "noLiveExternalIntegration": true, "noRealDatabaseMutation": true, "noRealSignatures": true, "noRealEvidenceUpload": true, "noRealFileDelivery": true, "noAutonomousComplianceDetermination": true, "noAutonomousApprovalWaiverCertificationAttestation": true, "sourceModuleRecordsAuthoritative": true, "notAnEhr": true, "coversModules": [ "fund-accountability", "stockpile-logistics", "lab-operations", "patient-continuity", "restricted-patient-locator", "asset-management", "program-performance", "ai-intelligence", "country-rollout", "authorized-review-room", "executive-review-packet", "identity-access-governance", "data-quality-reconciliation", "risk-incident-case-governance" ] }, "policyGovernancePosture": { "statement": "Policy records have owners, versions, effective dates, review dates, approval status, and audit references. Draft, approved, effective, expired, withdrawn, and superseded states remain distinct. Expired or superseded policies are never represented as current, but remain historically visible. Policy approval is attributable. Policy publication is not represented as production enforcement. Policies identify affected modules and scopes. Policy history is never silently rewritten or deleted. Material changes require a new version and a linked approval event. Missing approval blocks effective status. Conflicting policy versions remain visible until resolved. Policy interpretation requires authorized human review, and AI-generated policy summaries are not authoritative legal interpretations.", "policiesHaveOwnersVersionsDatesApprovalAudit": true, "statesRemainDistinct": true, "expiredOrSupersededNotCurrent": true, "supersededRemainHistoricallyVisible": true, "policyApprovalAttributable": true, "publicationIsNotProductionEnforcement": true, "policiesIdentifyAffectedModulesAndScopes": true, "noSilentRewriteOrDeletionOfPolicyHistory": true, "materialChangesRequireNewVersionAndLinkedApproval": true, "missingApprovalBlocksEffectiveStatus": true, "conflictingVersionsRemainVisible": true, "interpretationRequiresHumanReview": true, "aiSummariesNotAuthoritativeLegalInterpretation": true }, "obligationPosture": { "statement": "Obligation mapping is a governance aid, not legal advice. Applicability remains explicit; unknown applicability remains unresolved. Obligations are not marked satisfied solely because a control exists. An obligation may map to multiple controls and a control may support multiple obligations. Unmapped obligations remain visible; partially mapped obligations remain partial. Conflicting interpretations remain visible. External authoritative source documents remain outside this synthetic demonstration, and formal legal interpretation remains the responsibility of authorized counsel or institutions.", "mappingIsGovernanceAidNotLegalAdvice": true, "applicabilityExplicit": true, "unknownApplicabilityRemainsUnresolved": true, "notSatisfiedSolelyBecauseControlExists": true, "obligationMayMapToMultipleControls": true, "controlMaySupportMultipleObligations": true, "unmappedObligationsRemainVisible": true, "partiallyMappedObligationsRemainPartial": true, "conflictingInterpretationsRemainVisible": true, "externalAuthoritativeSourcesOutsideScope": true, "formalLegalInterpretationIsAuthorizedCounselResponsibility": true }, "controlPosture": { "statement": "Every control identifies its objective, description, type, execution mode, frequency, owner, performer, reviewer, source modules, applicable obligations, design status, operating status, evidence requirements, testing frequency, last/next test dates, deficiency status, residual risk, second-review requirement, separation-of-duties status, and audit reference. An automated label does not mean autonomous approval. Control existence does not prove operation. Design adequacy and operating effectiveness remain distinct. Partially implemented controls remain partial; untested controls remain untested; failed controls remain failed until retested and approved. Compensating controls do not silently erase the primary deficiency. Control owners cannot independently provide final assurance where independent review is required, and source-module controls remain authoritative within their modules.", "automatedDoesNotMeanAutonomousApproval": true, "existenceDoesNotProveOperation": true, "designAndOperatingEffectivenessDistinct": true, "partialControlsRemainPartial": true, "untestedControlsRemainUntested": true, "failedControlsRemainFailedUntilRetestedAndApproved": true, "compensatingControlsDoNotErasePrimaryDeficiency": true, "ownersCannotIndependentlyProvideFinalAssurance": true, "sourceModuleControlsAuthoritative": true }, "controlTestingPosture": { "statement": "Every control test identifies its control reference, test period, objective, procedure, sample definition, synthetic sample references, tester role, independent reviewer role, evidence references, evidence completeness, result, exceptions identified, limitation notes, conclusion, review status, second-review requirement, separation-of-duties status, and audit reference. No test conclusion may exceed available evidence. Missing evidence blocks a pass where evidence is required. Conflicting evidence remains visible. A test performer cannot independently provide final approval where independent review is required. A failed test remains failed until a later linked retest supports a different result, and a retest must not overwrite prior test history. Not-tested and not-applicable remain distinct. Sample limitations remain visible. Control testing is not an external audit opinion or regulatory certification.", "noConclusionExceedsEvidence": true, "missingEvidenceBlocksPass": true, "conflictingEvidenceRemainsVisible": true, "testerCannotIndependentlyFinalApprove": true, "failedRemainsFailedUntilLinkedRetest": true, "retestDoesNotOverwriteHistory": true, "notTestedAndNotApplicableDistinct": true, "sampleLimitationsRemainVisible": true, "notAnExternalAuditOpinionOrCertification": true }, "deficiencyExceptionRemediationPosture": { "statement": "Exceptions are explicit, time-bound, approved, revocable, monitored, and audited. Expired exceptions are not effective; unapproved exceptions remain blocked. An exception is not a permanent policy change, and exception owners cannot self-approve. Compensating controls are identified and reviewed. Remediation completion is not the same as effectiveness. Overdue and ineffective remediation remain visible. Deficiencies remain historically visible after remediation, and remediation does not erase failed tests or prior evidence. High-risk exceptions and remediation effectiveness require second review.", "exceptionsExplicitTimeBoundApprovedRevocableMonitoredAudited": true, "expiredExceptionsNotEffective": true, "unapprovedExceptionsRemainBlocked": true, "exceptionIsNotPermanentPolicyChange": true, "exceptionOwnersCannotSelfApprove": true, "compensatingControlsIdentifiedAndReviewed": true, "completionIsNotEffectiveness": true, "overdueRemediationRemainsVisible": true, "ineffectiveRemediationRemainsVisible": true, "deficienciesRemainVisibleAfterRemediation": true, "remediationDoesNotEraseFailedTestsOrEvidence": true, "highRiskExceptionsAndEffectivenessRequireSecondReview": true }, "attestationPosture": { "statement": "Attestations are synthetic human-review records only. They are not legal certifications, external audit opinions, or funder, ministry, regulator, or accreditation approval, and they do not authorize deployment or replace source evidence. Insufficient evidence blocks approval. Expired, revoked, rejected, and superseded attestations remain visible. The attesting role cannot independently provide final approval where second review is required. AI cannot sign, approve, certify, or attest.", "syntheticHumanReviewRecordsOnly": true, "notLegalCertification": true, "notExternalAuditOpinion": true, "notFunderMinistryRegulatorOrAccreditationApproval": true, "doesNotAuthorizeDeployment": true, "doesNotReplaceSourceEvidence": true, "insufficientEvidenceBlocksApproval": true, "expiredRevokedRejectedSupersededRemainVisible": true, "attesterCannotIndependentlyFinalApprove": true, "aiCannotSignApproveCertifyOrAttest": true, "supportedStates": [ "draft", "pending-review", "approved", "rejected", "expired", "revoked", "superseded", "blocked-insufficient-evidence" ] }, "separationOfDutiesPosture": { "statement": "Policy, obligation-mapping, control-design, control-testing, deficiency, exception, remediation, attestation, and waiver duties are separated. Authors, mappers, owners, performers, requestors, capturers, and module actors cannot independently approve, test, verify, close, certify, or attest their own work where independent or second review is required. Violations remain blocked or pending, identify the violated rule, require reassignment, independent review, or second review, remain auditable, and are never silently overridden.", "violationsRemainBlockedOrPending": true, "violationsIdentifyRule": true, "violationsRequireReassignmentIndependentOrSecondReview": true, "violationsAuditable": true, "neverSilentlyOverridden": true }, "waiverPosture": { "statement": "Waiver requests do not become effective without approval. Waivers are time-bound and revocable; expired waivers are not active. Denied waivers remain visible. Waivers do not rewrite the underlying policy or obligation. High-risk waivers require second review. Waiver requestors cannot approve their own request, and AI cannot grant or recommend automatic approval of a waiver.", "requestsNotEffectiveWithoutApproval": true, "timeBoundAndRevocable": true, "expiredWaiversNotActive": true, "deniedWaiversRemainVisible": true, "doNotRewriteUnderlyingPolicyOrObligation": true, "highRiskWaiversRequireSecondReview": true, "requestorsCannotApproveOwnRequest": true, "aiCannotGrantOrAutoRecommendWaiver": true }, "auditPosture": { "statement": "Audit events are append-only in this demonstration model. Policy-version changes require new linked events. Control-test retests require new linked events. Exception approvals, expirations, and revocations require new linked events. Remediation effectiveness decisions require new linked events. Attestation revocations and supersessions require new linked events. Waiver approvals, denials, expirations, and revocations require new linked events. Deletion is not an allowed governance control. Source-module audit records remain authoritative. This task does not implement a production cryptographic evidence or audit ledger.", "appendOnly": true, "policyVersionChangesRequireLinkedEvent": true, "retestsRequireLinkedEvent": true, "exceptionEventsRequireLinkedEvent": true, "remediationEffectivenessRequiresLinkedEvent": true, "attestationRevocationSupersessionRequiresLinkedEvent": true, "waiverEventsRequireLinkedEvent": true, "deletionNotAnAllowedControl": true, "sourceModuleRecordsAuthoritative": true, "notProductionCryptographicLedger": true }, "aiPosture": { "statement": "AI is assistive only. It may map policies and obligations to candidate controls, identify unmapped or partially mapped obligations, detect expired or superseded policies and stale reviews, detect control-design gaps and missing test evidence, compare test results across periods, flag inconsistent conclusions, identify overdue remediation and expiring exceptions and waivers, detect separation-of-duties conflicts, summarize evidence for authorized human reviewers, identify unsupported attestations, recommend items for independent or second review, reconcile module-control references, and identify potentially ineffective compensating controls. AI never determines compliance, certifies, approves, signs, or attests, and never bypasses human review, evidence, expiration, revocation, separation of duties, or audit controls.", "assists": [ "map policies and obligations to candidate controls", "identify unmapped or partially mapped obligations", "detect expired or superseded policies", "identify stale reviews", "detect control-design gaps", "identify missing test evidence", "compare test results across periods", "flag inconsistent conclusions", "identify overdue remediation", "identify expiring exceptions and waivers", "detect separation-of-duties conflicts", "summarize evidence for authorized human reviewers", "identify unsupported attestations", "recommend items for independent or second review", "reconcile module-control references", "identify potentially ineffective compensating controls" ], "mustNot": [ "provide legal advice", "determine regulatory applicability autonomously", "certify compliance", "approve policies", "approve control design", "approve control-test results", "approve exceptions", "approve waivers", "approve remediation effectiveness", "sign or approve attestations", "convert missing evidence into a pass", "suppress failed tests, deficiencies, exceptions, or conflicting evidence", "alter source-module records", "fabricate evidence", "authorize deployment", "notify regulators, funders, ministries, auditors, or other external parties", "bypass human approval, independent review, second review, separation of duties, evidence, expiration, revocation, or audit controls" ] }, "humanControls": { "statement": "Every policy approval, obligation interpretation, control-design conclusion, control-test result, exception decision, remediation-effectiveness decision, attestation, and waiver decision requires an authorized human. AI output is advisory only and is always subject to human review.", "humanApprovalRequired": true, "secondReviewForHighRisk": true, "aiAdvisoryOnly": true }, "boundary": { "impactDomain": "impact.maxarchealth.com", "impactPort": "3201", "medicalLibraryBoundary": "library.maxarchealth.com remains separate (port 3101, not used here)", "maxTraxEhrBoundary": "MaxTrax EHR remains separate; this is not a full EHR and implements no live integration or real database mutation." }, "modules": [ { "id": "fund-accountability", "name": "Fund Accountability" }, { "id": "stockpile-logistics", "name": "Stockpile & Logistics" }, { "id": "lab-operations", "name": "Laboratory Operations" }, { "id": "patient-continuity", "name": "Patient Continuity" }, { "id": "restricted-patient-locator", "name": "Restricted Patient Locator" }, { "id": "asset-management", "name": "Asset Management" }, { "id": "program-performance", "name": "Program Performance" }, { "id": "ai-intelligence", "name": "AI Intelligence" }, { "id": "country-rollout", "name": "Country Rollout" }, { "id": "authorized-review-room", "name": "Authorized Review Room" }, { "id": "executive-review-packet", "name": "Executive Review Packet & Controlled Download Center" }, { "id": "identity-access-governance", "name": "Identity & Access Governance" }, { "id": "data-quality-reconciliation", "name": "Data Quality & Reconciliation" }, { "id": "risk-incident-case-governance", "name": "Risk, Incident & Case Governance" } ], "obligationCategories": [ "privacy", "security", "operational", "data-governance", "financial-accountability", "commodity-accountability", "laboratory-quality", "patient-continuity", "restricted-access", "asset-accountability", "program-performance", "ai-governance", "rollout-readiness", "evidence-package", "packet-review", "identity-access", "data-quality", "incident-investigation" ], "obligationSourceTypes": [ "institutional-policy", "grant-condition", "program-condition", "privacy-requirement", "security-requirement", "operational-procedure" ], "controlTypes": [ "preventive", "detective", "corrective", "compensating" ], "executionModes": [ "manual", "automated", "hybrid" ], "testResultStates": [ "pass", "partial", "fail", "blocked", "not-tested", "not-applicable" ], "attestationStates": [ "draft", "pending-review", "approved", "rejected", "expired", "revoked", "superseded", "blocked-insufficient-evidence" ], "routes": [ "/policy-compliance-control-governance/policies", "/policy-compliance-control-governance/policy-versions", "/policy-compliance-control-governance/obligations", "/policy-compliance-control-governance/obligation-mappings", "/policy-compliance-control-governance/control-objectives", "/policy-compliance-control-governance/controls", "/policy-compliance-control-governance/control-tests", "/policy-compliance-control-governance/test-results", "/policy-compliance-control-governance/deficiencies", "/policy-compliance-control-governance/exceptions", "/policy-compliance-control-governance/compensating-controls", "/policy-compliance-control-governance/remediation", "/policy-compliance-control-governance/effectiveness-reviews", "/policy-compliance-control-governance/attestations", "/policy-compliance-control-governance/waivers", "/policy-compliance-control-governance/approval-chains", "/policy-compliance-control-governance/evidence", "/policy-compliance-control-governance/risk-signals", "/policy-compliance-control-governance/audit-events", "/policy-compliance-control-governance/separation-of-duties", "/policy-compliance-control-governance/summary", "/policy-compliance-control-governance-dashboard" ] }