Sheet W-04 · Confidential records — isolation and audit · Healthcare
PrototypeA working prototype of the isolation and audit design needed where confidentiality is contractual rather than optional.
- Goes in
- A session note, in a practice that cannot treat records casually
- What we built
- Per-tenant scoping, encrypted notes, and an append-only audit trail
- Comes out
- A record whose history can be shown rather than asserted
- The line it does not cross
- A correction is a new entry. Nothing is overwritten.
Note 1 · The constraint
An independent practice carries a documentation burden but cannot accept a tool that treats patient records casually. The interesting question is not whether a model can draft a note. It is whether the surrounding system can prove who saw what, and when.
Note 2 · What transfers
The same design applies wherever confidentiality is a contractual obligation — legal files, HR records, financial casework, anything covered by a data processing agreement.
- Stage
- Prototype. Storage simulated.
- Audit model
- Append-only
- Isolation
- Per-tenant scoping
- Not claimed
- Production security