{"service":"scrimed-qa-buyer-proof-release","route":"/qa-buyer-proof-release","apiRoute":"/api/qa-evidence/buyer-proof-release","briefRoute":"/api/qa-evidence/buyer-proof-release/brief","protectedReleaseRoute":"/api/pilot-workspaces/{workspaceSlug}/qa-evidence/buyer-proof-release","buyerDiligencePacketRoute":"/api/pilot-workspaces/{workspaceSlug}/buyer-room/packet","status":"manual-aal2-qa-buyer-proof-release-gate-ready","proofStackStatus":"manual-aal2-qa-buyer-proof-release-retained-packet-gate","briefProofStackStatus":"manual-aal2-qa-buyer-proof-release-brief-no-public-release","boundary":"SCRIMED QA Buyer Proof Release decides whether protected buyer diligence may reference retained no-secret manual AAL2 synthetic QA evidence. Public checks validate candidate metadata only. Protected release requires tenant-governed AAL2 access, visible retained packet metadata, Proof Promotion, Activation Seal, Claim Guard, and unchanged clinical/PHI/security/reimbursement boundaries.","decision":{"state":"locked-retained-packet-required","protectedVerificationRequired":true,"buyerDiligenceExportAllowed":false,"externalDistributionAllowed":false,"publicClaimAllowed":false,"clinicalAuthorityGranted":false,"phiAuthorityGranted":false,"reimbursementAuthorityGranted":false,"securityCertificationGranted":false,"packetCount":0,"auditSignalCount":0,"latestPacketHash":"pending","latestWorkflowRunId":"pending","latestWorkflowKind":"pending","latestPacketAuditEventId":"pending","latestCreatedAt":"pending","proofPromotionState":"pending-retained-packet","activationSealState":"unsealed-human-aal2-required","claimDecisionState":"requires-retained-packet","releaseCriteria":[{"id":"retained-packet","name":"Retained protected packet visible","status":"blocked","evidence":"No protected packet SHA-256 is visible to the release gate.","nextAction":"Persist safe metadata through protected Manual QA Evidence after the human AAL2 run."},{"id":"proof-promotion","name":"Proof Promotion permits buyer diligence","status":"blocked","evidence":"Proof Promotion state: pending-retained-packet.","nextAction":"Use /qa-run-control, complete one human AAL2 synthetic QA workflow, persist the no-secret packet, then promote after packet hash visibility."},{"id":"activation-seal","name":"Activation Seal allows buyer use","status":"blocked","evidence":"Activation Seal state: unsealed-human-aal2-required.","nextAction":"Complete Launch Kit, validate dispatch through Human Run Packet, validate through Completion Bridge, persist protected no-secret metadata, confirm Proof Promotion, then run Claim Guard before buyer use."},{"id":"claim-guard","name":"Claim Guard keeps language bounded","status":"passed","evidence":"Claim Guard state: requires-retained-packet.","nextAction":"Complete Launch Kit, validate dispatch through Human Run Packet, validate through Completion Bridge, persist protected metadata, then confirm Proof Promotion before using this claim."},{"id":"external-authority","name":"External authority remains separately gated","status":"passed","evidence":"External distribution, public claims, live clinical care, PHI processing, reimbursement, certification, connector, and production authority remain false.","nextAction":"Route external-use claims through qualified release, legal, privacy, security, clinical, reimbursement, regional, connector, and customer go-live controls."}],"missingEvidence":["Retained protected packet visible","Proof Promotion permits buyer diligence","Activation Seal allows buyer use"],"requiredEvidence":["protected Manual QA Evidence packet SHA-256","protected packet audit event UUID","workflow run ID and run URL","synthetic target or workspace label","human AAL2 no-secret operator attestation","temporary token deleted or rotated","Proof Promotion ready-for-buyer-diligence decision","Activation Seal sealed-for-buyer-diligence decision","Claim Guard safe or retained-packet-gated language result","protected Buyer Diligence packet route","external distribution remains separately gated","clinical, PHI, reimbursement, certification, connector, and production authority remain blocked"],"hardStops":["bearer token or refresh token submitted","API key, password, credential, or production secret submitted","PHI, patient identifier, payer member identifier, medical record, claim, image, or regulated clinical content submitted","public release requested without qualified approval","live clinical care authorization claimed","PHI processing authorization claimed","HIPAA, SOC 2, security, FDA, regional, or legal approval claimed","reimbursement certainty or payer submission authority claimed","production connector approval claimed","autonomous diagnosis, treatment, patient outreach, or clinical execution claimed"],"blockedClaims":["SCRIMED is authorized for live clinical care","SCRIMED can process production PHI","SCRIMED is HIPAA certified or SOC 2 certified","SCRIMED guarantees reimbursement or payer approval","SCRIMED has FDA, regional regulatory, or legal approval","SCRIMED production connectors are approved","SCRIMED can autonomously diagnose, treat, submit claims, or contact patients","public claims can reference retained AAL2 proof without qualified review"],"buyerSafeClaim":"SCRIMED remains activation-ready; retained manual AAL2 QA proof cannot be used in buyer diligence until the protected release gate passes.","nextAction":"Complete the human AAL2 run, persist no-secret metadata, then verify Proof Promotion, Activation Seal, Claim Guard, and this release gate before Buyer Diligence export.","protectedReleaseRoute":"/api/pilot-workspaces/{workspaceSlug}/qa-evidence/buyer-proof-release","buyerDiligencePacketRoute":"/api/pilot-workspaces/{workspaceSlug}/buyer-room/packet","boundary":"SCRIMED QA Buyer Proof Release decides whether protected buyer diligence may reference retained no-secret manual AAL2 synthetic QA evidence. Public checks validate candidate metadata only. Protected release requires tenant-governed AAL2 access, visible retained packet metadata, Proof Promotion, Activation Seal, Claim Guard, and unchanged clinical/PHI/security/reimbursement boundaries."},"releaseDecisionState":"locked-retained-packet-required","buyerDiligenceExportAllowed":false,"protectedVerificationRequired":true,"externalDistributionAllowed":false,"publicClaimAllowed":false,"clinicalAuthorityGranted":false,"phiAuthorityGranted":false,"reimbursementAuthorityGranted":false,"securityCertificationGranted":false,"requiredEvidence":["protected Manual QA Evidence packet SHA-256","protected packet audit event UUID","workflow run ID and run URL","synthetic target or workspace label","human AAL2 no-secret operator attestation","temporary token deleted or rotated","Proof Promotion ready-for-buyer-diligence decision","Activation Seal sealed-for-buyer-diligence decision","Claim Guard safe or retained-packet-gated language result","protected Buyer Diligence packet route","external distribution remains separately gated","clinical, PHI, reimbursement, certification, connector, and production authority remain blocked"],"requiredEvidenceCount":12,"hardStops":["bearer token or refresh token submitted","API key, password, credential, or production secret submitted","PHI, patient identifier, payer member identifier, medical record, claim, image, or regulated clinical content submitted","public release requested without qualified approval","live clinical care authorization claimed","PHI processing authorization claimed","HIPAA, SOC 2, security, FDA, regional, or legal approval claimed","reimbursement certainty or payer submission authority claimed","production connector approval claimed","autonomous diagnosis, treatment, patient outreach, or clinical execution claimed"],"hardStopCount":10,"blockedClaims":["SCRIMED is authorized for live clinical care","SCRIMED can process production PHI","SCRIMED is HIPAA certified or SOC 2 certified","SCRIMED guarantees reimbursement or payer approval","SCRIMED has FDA, regional regulatory, or legal approval","SCRIMED production connectors are approved","SCRIMED can autonomously diagnose, treat, submit claims, or contact patients","public claims can reference retained AAL2 proof without qualified review"],"blockedClaimCount":8,"rules":[{"id":"retained-packet","name":"Retained protected packet visible","status":"blocked","evidence":"Manual QA Evidence packet SHA-256 must be visible from the protected workspace.","nextAction":"Persist safe metadata through protected Manual QA Evidence after the human AAL2 run."},{"id":"proof-promotion","name":"Proof Promotion permits buyer diligence","status":"blocked","evidence":"Proof Promotion must be ready-for-buyer-diligence.","nextAction":"Confirm Proof Promotion after retained packet metadata appears."},{"id":"activation-seal","name":"Activation Seal allows buyer use","status":"blocked","evidence":"Activation Seal must be sealed-for-buyer-diligence inside the protected workspace.","nextAction":"Run the protected release check after packet persistence."},{"id":"claim-guard","name":"Claim Guard keeps language bounded","status":"blocked","evidence":"Claim Guard must avoid clinical, PHI, reimbursement, security-certification, connector, and public-release overclaims.","nextAction":"Use current-state or retained-packet-gated wording only."},{"id":"external-authority","name":"External authority remains separately gated","status":"review","evidence":"Buyer proof release does not grant public distribution, clinical authority, PHI authority, reimbursement certainty, certification, or production authorization.","nextAction":"Route public, legal, privacy, security, clinical, reimbursement, regional, connector, and customer go-live claims through protected authority controls."}],"ruleCount":5,"sourceActivationSealRoute":"/qa-activation-seal","sourceActivationSealStatus":"manual-aal2-qa-activation-seal-ready","sourceProofPromotionRoute":"/qa-proof-promotion","sourceProofPromotionStatus":"manual-aal2-qa-proof-promotion-gate-ready","sourceClaimGuardRoute":"/qa-claim-guard","sourceClaimGuardStatus":"manual-aal2-qa-claim-guard-ready","buyerSafeCurrentLanguage":"SCRIMED has a governed synthetic QA path and a protected release gate; retained packet proof remains unavailable for buyer diligence until the gate passes inside the tenant workspace.","nextRecommendedBuildStep":"After the approved human AAL2 run is persisted, run the protected Buyer Proof Release gate, then export Buyer Diligence only when the gate returns ready-for-protected-buyer-diligence-export.","updated":"2026-06-22"}