{
  "ok": true,
  "notice": "Static foundation data for platform validation only. No real patient identity, no PHI, no public locator data, and no live facility lookup.",
  "locatorPolicies": [
    {
      "id": "locator-policy-no-public-search",
      "name": "No Public Patient Search",
      "status": "foundation",
      "rule": "Patient lookup must never be exposed as public search.",
      "requiredControls": [
        "role_restricted_access",
        "purpose_of_use_required",
        "audit_log_required",
        "minimum_necessary_metadata",
        "human_review_for_sensitive_lookup"
      ]
    },
    {
      "id": "locator-policy-continuity-only",
      "name": "Continuity-only Locator Use",
      "status": "foundation",
      "rule": "Locator workflow exists only for authorized continuity of care and program follow-up.",
      "requiredControls": [
        "authorized_program_context_required",
        "no_marketing_use",
        "no_public_identity_exposure",
        "facility_or_program_scope_required"
      ]
    },
    {
      "id": "locator-policy-transfer-confirmation",
      "name": "Transfer Confirmation Controls",
      "status": "foundation",
      "rule": "Transfer-related lookup must document authorized reason and receiving facility confirmation.",
      "requiredControls": [
        "transfer_reason_required",
        "receiving_facility_confirmation_required",
        "audit_log_required",
        "separation_of_duties_review_when_sensitive"
      ]
    }
  ]
}