{ "ok": true, "scope": "MaxArc Global Health Impact Platform — Service Reliability, Operational Continuity, Backup, Recovery, and Observability Governance (synthetic demonstration)", "notice": "Synthetic, non-identifiable demonstration data. This is a governance and review demonstration only — not a production monitoring platform, live backup service, disaster-recovery system, cloud-control plane, network-management system, production incident-response engine, or automated failover service. No real telemetry, no live health polling, no real backups, no real restoration, no infrastructure mutation, no automated failover, and no autonomous recovery authorization are implemented.", "authorizedReviewOnlyLabel": "FOR GLOBAL FUND / CCM / AUTHORIZED PARTNER REVIEW ONLY", "permittedUse": "Authorized institutional review, governance demonstration, and operational-readiness discussion only. Not for production monitoring, real backup/restore, disaster-recovery execution, or infrastructure operations.", "summary": { "totalServices": 16, "criticalServices": 6, "availableServices": 12, "degradedServices": 1, "unavailableServices": 1, "servicesUnderMaintenance": 1, "unknownServices": 1, "activeSyntheticIncidents": 1, "unresolvedOutages": 2, "servicesOfflineMode": 14, "pendingSynchronizationRecovery": 4, "dependencyFailures": 3, "singlePointsOfFailure": 2, "servicesMissingContinuityPlan": 0, "continuityPlansPendingReview": 3, "activeContinuityPlans": 4, "expiredContinuityPlans": 1, "supersededContinuityPlans": 1, "backupPolicies": 3, "backupsCompleted": 6, "backupsFailed": 1, "backupsPartial": 1, "unverifiedBackups": 3, "backupsIntegrityConcern": 1, "expiredBackups": 8, "recoveryPointsCurrent": 3, "recoveryExercisesCompleted": 5, "recoveryExercisesPassed": 2, "recoveryExercisesPartial": 2, "recoveryExercisesFailed": 1, "recoveryExercisesBlocked": 1, "unmetRto": 1, "unmetRpo": 1, "unresolvedRecoveryGaps": 5, "observabilityGaps": 2, "unacknowledgedAlerts": 2, "staleAlerts": 1, "highSeverityAlerts": 2, "falsePositiveAlerts": 1, "overdueCorrectiveActions": 11, "pendingEffectivenessReviews": 1, "ineffectiveActions": 1, "resilienceRisks": 7, "missingEvidence": 1, "conflictingEvidence": 1, "staleEvidence": 1, "separationOfDutiesConflicts": 28, "separationOfDutiesRules": 28, "sloCount": 8, "sliCount": 6, "recoveryTimeObjectives": 1, "maintenanceWindows": 2, "aiSignalCount": 12, "auditEvents": 11, "servicesWithPlanCount": 10, "byModule": { "fund-accountability": 1, "stockpile-logistics": 1, "lab-operations": 1, "patient-continuity": 1, "restricted-patient-locator": 1, "asset-management": 1, "program-performance": 1, "ai-intelligence": 1, "country-rollout": 1, "authorized-review-room": 1, "executive-review-packet": 1, "identity-access-governance": 1, "data-quality-reconciliation": 1, "risk-incident-case-governance": 1, "policy-compliance-control-governance": 2 }, "byServiceTier": { "tier-0": 5, "tier-1": 5, "tier-2": 4, "tier-3": 2 }, "byServiceStatus": { "available": 12, "degraded": 1, "unavailable": 1, "unknown": 1, "maintenance": 1 }, "byCriticality": { "critical": 6, "high": 6, "medium": 4 }, "byDependencyType": { "module": 6, "data": 3, "network": 2, "identity": 3, "evidence": 2, "infrastructure": 1 }, "byContinuityState": { "active": 4, "approved": 1, "draft": 1, "superseded": 1, "expired": 1, "blocked": 1, "pending-review": 2, "withdrawn": 1 }, "byBackupCompletion": { "completed": 6, "partial": 1, "failed": 1 }, "byRecoveryResult": { "pass": 2, "partial": 2, "fail": 1, "blocked": 1, "not-tested": 1, "not-applicable": 1 }, "boundaryReminder": { "impactDomain": "impact.maxarchealth.com", "impactPort": "3201", "medicalLibraryBoundary": "library.maxarchealth.com remains separate (port 3101, not used here)", "maxTraxEhrBoundary": "MaxTrax EHR remains separate; this is not a full EHR" } }, "positioning": { "isSyntheticGovernanceDemonstration": true, "isSimulationOnly": true, "isNotProductionMonitoringPlatform": true, "isNotLiveBackupService": true, "isNotDisasterRecoverySystem": true, "isNotCloudControlPlane": true, "isNotNetworkManagementSystem": true, "isNotProductionIncidentResponseEngine": true, "isNotAutomatedFailoverService": true, "isNotReplacementForAuthorizedInfrastructureOrOperationalTeams": true, "noRealMonitoringAgents": true, "noLiveTelemetryCollection": true, "noProductionHealthPolling": true, "noRealBackupCreation": true, "noRealBackupRestoration": true, "noRealSnapshots": true, "noRealDatabaseExport": true, "noRealDisasterRecoveryExecution": true, "noRealInfrastructureMutation": true, "noAutomatedFailover": true, "noServiceRestartAutomation": true, "noProductionPagingOrNotification": true, "noExternalMonitoringIntegration": true, "noLiveCloudProviderIntegration": true, "noRealFileUploadOrDelivery": true, "noRealDatabaseMutation": true, "noAutonomousRecoveryAuthorization": true, "sourceModuleRecordsAuthoritative": true, "notAnEhr": true, "coversModules": [ "fund-accountability", "stockpile-logistics", "lab-operations", "patient-continuity", "restricted-patient-locator", "asset-management", "program-performance", "ai-intelligence", "country-rollout", "authorized-review-room", "executive-review-packet", "identity-access-governance", "data-quality-reconciliation", "risk-incident-case-governance", "policy-compliance-control-governance" ] }, "reliabilityPosture": { "statement": "Synthetic service status is not live production status; a dashboard indicator is not production telemetry. This module never restarts, stops, modifies, fails over, or recovers production services.", "syntheticStatusIsNotLiveStatus": true, "dashboardIndicatorIsNotProductionTelemetry": true, "availabilityClaimsIdentifySyntheticMeasurementBasis": true, "objectivesAreGovernanceTargetsNotContractualCommitments": true, "indicatorsRemainDistinctFromObjectives": true, "missingTelemetryRemainsVisible": true, "staleTelemetryNotRepresentedAsCurrent": true, "singleSuccessfulCheckDoesNotEstablishReliability": true, "degradedRemainsDistinctFromAvailable": true, "maintenanceRemainsDistinctFromOutage": true, "unknownRemainsDistinctFromAvailable": true, "sourceModuleRecordsAuthoritative": true, "doesNotRestartStopModifyFailoverOrRecoverProduction": true, "operationalDecisionsRequireHumanReview": true, "allMaterialDecisionsRemainAuditable": true }, "serviceDependencyPosture": { "statement": "Dependency existence does not prove dependency availability; fallback existence does not prove fallback effectiveness. Single points of failure remain visible.", "unknownDependencyStatusRemainsUnknown": true, "existenceDoesNotProveAvailability": true, "fallbackExistenceDoesNotProveFallbackEffectiveness": true, "singlePointsOfFailureRemainVisible": true, "criticalDependenciesRequireContinuityHandling": true, "downstreamImpactRepresented": true, "crossModuleDependenciesTraceable": true }, "continuityPosture": { "statement": "Plan existence does not prove readiness. Continuity activation requires an attributable human decision; expired or superseded plans are never current.", "missingApprovalBlocksActive": true, "expiredOrSupersededNotCurrent": true, "planExistenceDoesNotProveReadiness": true, "activationRequiresAttributableHumanDecision": true, "activationDecisionIdentifiesReasonApproverTimestampScopeAudit": true, "degradedAndOfflinePreserveAuthorizationMinimumNecessaryEvidenceAuditReconciliation": true, "restorationToNormalRequiresExplicitReview": true, "conflictingVersionsRemainVisible": true, "planHistoryNotSilentlyOverwritten": true }, "offlineSyncPosture": { "statement": "Offline operation is a controlled mode, not unrestricted access. Later-arriving data must not silently overwrite prior values; duplicates remain candidates until reviewed.", "offlineIsControlledModeNotUnrestrictedAccess": true, "synchronizationDelayRemainsVisible": true, "conflictResolutionRequiresHumanReviewedRules": true, "laterDataDoesNotSilentlyOverwrite": true, "duplicatesRemainCandidatesUntilReviewed": true, "expiredAuthorizationNotSilentlyValid": true, "syncSuccessDoesNotProveSemanticReconciliation": true, "missingAuditSyncBlocksFinalReconciliation": true, "recoveryFromOfflineRequiresEvidenceAndReview": true }, "backupPosture": { "statement": "This task creates no real backups. Backup presence is not verification; completion is not integrity proof; integrity is not restoration proof; an encryption-status label is not cryptographic verification.", "createsNoRealBackups": true, "presenceIsNotVerification": true, "completionIsNotIntegrityProof": true, "integrityIsNotRestorationProof": true, "encryptionStatusLabelIsNotCryptographicVerification": true, "failedPartialUnverifiedExpiredIntegrityConcernRemainVisible": true, "expiredBackupsNotCurrentRecoveryPoints": true, "missingEvidenceBlocksVerified": true, "neverContainsRealStorageLocationsCredentialsKeysOrPaths": true, "sourceSystemBackupProcessesAuthoritative": true }, "recoveryPosture": { "statement": "Exercises and restorations are synthetic simulations only. A successful exercise does not prove production recoverability; recovery approval does not authorize production restoration.", "simulationsOnly": true, "successfulExerciseDoesNotProveProductionRecoverability": true, "rtoAndRpoRemainDistinct": true, "observedRemainsDistinguishableFromTarget": true, "failedAndPartialRemainVisible": true, "laterSuccessDoesNotErasePriorFailures": true, "missingEvidenceBlocksPass": true, "restorationSimulationDoesNotChangeProductionData": true, "recoveryApprovalDoesNotAuthorizeProductionRestoration": true, "unresolvedGapsRemainVisible": true, "independentReviewRequiredForHighCriticality": true }, "observabilityPosture": { "statement": "Synthetic metrics, logs, and traces are not production telemetry. Alert generation is not incident confirmation; an alert is not proof of outage, attack, loss, or failure.", "syntheticTelemetryNotProduction": true, "alertGenerationIsNotIncidentConfirmation": true, "alertIsNotProofOfOutageAttackLossOrFailure": true, "staleAlertsRemainVisible": true, "falsePositivesRemainVisible": true, "unacknowledgedAlertsRemainVisible": true, "aiMayPrioritizeButNotRestartOrFailover": true, "alertClosureRequiresAttributableHumanReview": true }, "outagePosture": { "statement": "Outage records are synthetic. Outage declaration and restoration require human decisions; restoration is not complete until validation is reviewed.", "outageRecordsSynthetic": true, "declarationAndRestorationRequireHumanDecisions": true, "restorationNotCompleteUntilValidationReviewed": true, "partialRestorationRemainsPartial": true, "unresolvedDependencyFailuresRemainVisible": true, "restorationDoesNotEraseOutageHistory": true, "postIncidentReviewSeparateFromRestoration": true }, "correctiveActionPosture": { "statement": "Completion is not effectiveness. Overdue and ineffective actions remain visible; remediation does not erase prior outages, alerts, failed exercises, or evidence.", "completionIsNotEffectiveness": true, "overdueRemainVisible": true, "ineffectiveRemainVisible": true, "ownersCannotVerifyHighRiskEffectivenessWhereSecondReviewRequired": true, "unresolvedResidualRiskRemainsVisible": true, "remediationDoesNotEraseHistory": true }, "separationOfDutiesPosture": { "statement": "Separation-of-duties violations remain blocked or pending, identify the violated rule, require reassignment/independent review/second review, remain auditable, and are never silently overridden.", "violationsRemainBlockedOrPending": true, "violationsIdentifyRule": true, "violationsRequireReassignmentIndependentOrSecondReview": true, "violationsAuditable": true, "neverSilentlyOverridden": true }, "auditPosture": { "statement": "Audit events are append-only in this demonstration model. Deletion is not an allowed governance control; source-module audit records remain authoritative. This is not a production cryptographic evidence or audit ledger.", "appendOnly": true, "continuityPlanVersionsRequireLinkedEvent": true, "continuityActivationsAndDeactivationsRequireLinkedEvent": true, "backupVerificationDecisionsRequireLinkedEvent": true, "recoveryExercisesAndRetestsRequireLinkedEvent": true, "outageDeclarationAndRestorationRequireLinkedEvent": true, "alertAcknowledgementAndClosureRequireLinkedEvent": true, "correctiveActionEffectivenessRequiresLinkedEvent": true, "deletionNotAnAllowedControl": true, "sourceModuleRecordsAuthoritative": true, "notProductionCryptographicLedger": true }, "aiPosture": { "statement": "AI is assistive only. It may prioritize and summarize for authorized human reviewers, but never restarts, fails over, recovers, backs up, restores, certifies, or authorizes anything, and never bypasses human approval, independent review, second review, separation of duties, evidence, expiration, or audit controls.", "assists": [ "identify stale or missing continuity plans", "detect dependency concentration", "identify single points of failure", "detect missing backup evidence", "compare recovery objectives with synthetic exercise results", "identify unmet recovery objectives", "prioritize recovery gaps", "identify stale, duplicate, or conflicting alerts", "summarize synthetic outages and recovery chronology", "identify overdue resilience actions", "detect synchronization backlogs and conflicts", "recommend cases for independent or second review", "reconcile module, dependency, plan, backup, recovery, and evidence references", "suggest resilience improvements", "identify potentially ineffective corrective actions" ], "mustNot": [ "restart, stop, reload, fail over, or recover services", "create or restore backups", "alter production infrastructure", "change network, DNS, firewall, certificate, PM2, Apache, systemd, database, or environment configuration", "declare or close a production outage", "authorize continuity activation", "authorize restoration", "approve backup integrity", "certify recoverability", "certify continuity readiness", "suppress failed backups, alerts, outages, or recovery gaps", "fabricate telemetry or evidence", "notify external parties", "authorize deployment", "bypass human approval, independent review, second review, separation of duties, evidence, expiration, or audit controls" ] }, "humanControls": { "operationalDecisionsRequireHumanReview": true, "continuityActivationRequiresHumanApproval": true, "restorationRequiresHumanApproval": true, "backupVerificationRequiresHumanReview": true, "highCriticalityRequiresIndependentReview": true, "highRiskEffectivenessRequiresSecondReview": true }, "boundary": { "impactDomain": "impact.maxarchealth.com", "impactPort": "3201", "medicalLibraryBoundary": "library.maxarchealth.com remains separate (port 3101, not used here)", "maxTraxEhrBoundary": "MaxTrax EHR remains separate; this is not a full EHR and implements no live integration or real database mutation.", "noInfrastructureBoundary": "No Apache, PM2, systemd, firewall, DNS, TLS, production backup, production log, or production database is read, polled, or modified." }, "modules": [ { "id": "fund-accountability", "label": "Fund Accountability" }, { "id": "stockpile-logistics", "label": "Stockpile & Logistics" }, { "id": "lab-operations", "label": "Laboratory Operations" }, { "id": "patient-continuity", "label": "Patient Continuity" }, { "id": "restricted-patient-locator", "label": "Restricted Patient Locator" }, { "id": "asset-management", "label": "Asset Management" }, { "id": "program-performance", "label": "Program Performance" }, { "id": "ai-intelligence", "label": "AI Intelligence" }, { "id": "country-rollout", "label": "Country Rollout" }, { "id": "authorized-review-room", "label": "Authorized Review Room" }, { "id": "executive-review-packet", "label": "Executive Review Packet & Download Center" }, { "id": "identity-access-governance", "label": "Identity & Access Governance" }, { "id": "data-quality-reconciliation", "label": "Data Quality & Reconciliation" }, { "id": "risk-incident-case-governance", "label": "Risk, Incident & Case Governance" }, { "id": "policy-compliance-control-governance", "label": "Policy, Compliance & Control Governance" } ], "routes": [ "/service-reliability-continuity/services", "/service-reliability-continuity/dependencies", "/service-reliability-continuity/service-level-objectives", "/service-reliability-continuity/service-level-indicators", "/service-reliability-continuity/continuity-plans", "/service-reliability-continuity/degraded-mode", "/service-reliability-continuity/offline-operations", "/service-reliability-continuity/synchronization-recovery", "/service-reliability-continuity/backup-policies", "/service-reliability-continuity/backups", "/service-reliability-continuity/recovery-points", "/service-reliability-continuity/recovery-exercises", "/service-reliability-continuity/restoration-simulations", "/service-reliability-continuity/outages", "/service-reliability-continuity/maintenance-windows", "/service-reliability-continuity/observability", "/service-reliability-continuity/alerts", "/service-reliability-continuity/resilience-risks", "/service-reliability-continuity/post-incident-reviews", "/service-reliability-continuity/corrective-actions", "/service-reliability-continuity/effectiveness-reviews", "/service-reliability-continuity/approval-chains", "/service-reliability-continuity/evidence", "/service-reliability-continuity/audit-events", "/service-reliability-continuity/summary" ] }