{"service":"scrimed-execution-attempt-envelope","route":"/workflows/execution-attempts","apiRoute":"/api/workflows/execution-attempts/envelope","briefRoute":"/api/workflows/execution-attempts/envelope/brief","status":"execution-attempt-envelope-active-no-phi","briefStatus":"execution-attempt-envelope-brief-ready-no-phi","contractVersion":"scrimed-execution-attempt-envelope-v1","boundary":"SCRIMED Execution Attempt Envelope v1 creates deterministic, metadata-only, no-PHI execution-attempt contracts with idempotency, replay metadata, model-route telemetry, human review, audit links, failure recovery, and no-PHI scorecards. It does not persist live attempts, authorize PHI processing, grant live clinical care authority, approve production model routing, submit payer or claim actions, write to EHRs, contact patients, or enable autonomous protected workflow execution.","readinessAssessment":"GO for synthetic, metadata-only execution-attempt envelopes, replay evidence, model-route telemetry review, and no-PHI scorecards. NO-GO for live clinical production, PHI, production persistence, protected workflow execution, payer submission, patient outreach, EHR writeback, or production connector use.","dataBoundary":"synthetic-and-metadata-only","phiAuthority":"not-authorized-production-phi","clinicalCareAuthority":"not-authorized-live-care","workflowExecutionAuthority":"envelope-contract-only-protected-execution-blocked","replayAuthority":"metadata-replay-only","modelRoutingAuthority":"telemetry-only-not-production-routing","envelopeCount":5,"acceptedEnvelopeCount":5,"idempotencyKeyCount":5,"replayReadyCount":5,"modelRouteTelemetryCount":5,"computeFabricTelemetryCount":5,"computeFabricHumanReviewRequiredCount":2,"computeFabricModelTierCount":3,"computeFabricPhiPolicyCount":1,"humanReviewGateCount":5,"auditTraceCount":5,"blockedCapabilityCount":10,"clinicalRobustnessLabRoute":"/clinical-robustness-lab","clinicalRobustnessScenarioBindingCount":8,"clinicalRobustnessPerturbationBindingCount":18,"clinicalRobustnessRequiredPerturbationCount":18,"clinicalRobustnessReviewerQueueCount":8,"evidenceAuditTrailCount":5,"scorecardCount":10,"passingScorecardCount":10,"releaseDecision":"pass-for-synthetic-contract","hardStops":["No live patient data or production PHI in envelope input, traces, scorecards, docs, or fixtures.","No autonomous diagnosis, treatment, prescribing, clinical triage, patient instruction, or patient outreach.","No payer submission, claim submission, final coding, billing action, appeal filing, or reimbursement assurance.","No EHR writeback, record mutation, connector write, production connector call, or customer go-live action.","No production model routing without approved provider terms, privacy/security review, telemetry, fallback, and human review.","No durable production execution store claim until tenant-scoped storage, idempotency TTL, locking, retry, and regional retention are approved."],"envelopes":[{"attemptId":"att_a1b4a5d1b714","contractVersion":"scrimed-execution-attempt-envelope-v1","buildStatus":"metadata-only-accepted","lifecycleState":"review-required","workflowSlug":"prior-auth-evidence-packet","workflowVersion":"2026.06.no-phi","idempotencyKey":"idem_a1b4a5d1b7141182c03dd057","createdAt":"2026-06-27","tenantReference":"tenant-ref-synthetic-atlas","tenantBoundary":"tenant-reference-only-no-customer-data","callerRole":"rcm-reviewer","agentRuntimeId":"agent-runtime-policy-synthesizer","agentPermissions":["read-synthetic-context","read-approved-evidence-references","write-draft-review-packet","append-metadata-audit-event"],"deniedCapabilities":["autonomous diagnosis","autonomous treatment","prescribing","patient outreach","payer submission","claim submission","final coding","EHR writeback","production connector write","clinical triage replacement"],"dataBoundary":"synthetic-and-metadata-only","phiAuthority":"not-authorized-production-phi","clinicalCareAuthority":"not-authorized-live-care","inputDigest":"2bc23681b71c325cad15f21048e5482d87c55dd93754a03a1a15714194151042","contextFingerprint":"0ca80b0f1f0fa1954d8fdedbb91c1804a1f2624a5f25e3af929b7b96b42ecfce","compressedContextRefs":["compressed:synthetic-context-prior-auth-gap-v1","compressed:synthetic-rcm-workqueue-v1"],"evidenceRefs":["payer-policy-source-ref-synthetic-v1","documentation-gap-ref-synthetic-v1"],"policyRefs":["org-policy-human-rcm-review-required-v1"],"requestedActionSummary":"Draft a reviewer-held prior authorization evidence packet from synthetic policy and documentation gap references.","modelRouteTelemetry":{"routeId":"route_fb15bb40cb","taskType":"prior authorization support","providerClass":"frontier-closed","providerName":"SCRIMED provider mesh frontier route","modelVersion":"frontier-closed:registered-version-required-before-production","fallbackProviderClass":"open-weight","routeProfile":"payer-policy-synthesis-human-review-gated","riskTier":"high","estimatedCostUsd":0.067,"latencyBudgetMs":5200,"confidence":0.64,"routingRationale":"Route metadata is logged for synthetic evaluation only; production provider selection remains blocked until contracts, privacy, telemetry, fallback, and review controls are approved.","telemetryBoundary":"telemetry-only-not-production-routing"},"computeFabricTelemetry":{"fabricVersion":"scrimed-compute-fabric-v2026-07-05","fabricStatus":"synthetic-routing-only-no-live-model-calls","selectedModel":"retrieval-embedding-synthetic-slot","modelTier":"EMBEDDING_MODEL","provider":"synthetic_no_call","deploymentMode":"SCRIMED_CLOUD","reason":"EMBEDDING_MODEL selected for RCM; SCRIMED_CLOUD deployment mode; text modality; high clinical risk; metadata-only-no-public-phi PHI policy; clinical outputs require human review and cannot become autonomous authority","riskLevel":"high","phiPolicy":"metadata-only-no-public-phi","requiresHumanReview":true,"fallbackModels":["pulsar-16b-compact-reasoning-synthetic-slot"],"estimatedCostClass":"LOW","estimatedLatencyClass":"REAL_TIME","auditTags":["scrimed-compute-fabric","scrimed-compute-fabric-v2026-07-05","task:RCM","modality:text","risk:high","deployment:SCRIMED_CLOUD","tier:EMBEDDING_MODEL","provider:synthetic_no_call","phi-policy:metadata-only-no-public-phi","human-review-required","no-live-model-call","no-autonomous-clinical-authority"],"auditHash":"scrimed-intel-0b93e75e","confidenceScore":0.74,"confidenceCorrectnessBoundary":"confidence-is-not-correctness","correctnessEvidenceRequired":["schema validation","source attribution","benchmarkModelForTask","compareModels","human review for clinical recommendations"],"uncertaintyReasons":["Confidence score is routing confidence, not proof of clinical correctness.","Clinical correctness requires evidence review, external validation, and human signoff.","Benchmark scores are synthetic metadata until a governed validation dataset is approved."],"safetyBoundary":"metadata-only-no-live-model-call"},"humanApprovalGate":{"required":true,"reviewStatus":"held-for-human-review","requiredReviewers":["domain reviewer","clinical governance","TrustOS"],"gateReason":"Protected healthcare workflow output requires accountable human review before any release, connector, payer, record, or patient-facing action.","releaseCondition":"Release requires approved reviewer identity, evidence card, clinical-risk label, audit event, and retained no-PHI boundary.","deniedUntil":"Durable attempt store, customer authority, connector approval, PHI controls, and production review workflow are approved."},"auditTrail":{"auditEventId":"audit_f96b2b4e211e","traceId":"trace_ea75b4ae703efe6d","eventHash":"6229cabbe6e1569d68a727b8e61f253332705ade220257d5c23ac962691de9ce","immutableEventType":"execution-attempt-envelope-created","retainedFields":["attemptId","idempotencyKey","workflowSlug","tenantReference","callerRole","contextFingerprint","modelRouteTelemetry","computeFabricTelemetry","humanApprovalGate","replayMetadata","failureRecovery"],"prohibitedFields":["patient identifiers","raw chart text","member identifiers","production connector payloads","secrets","credentials"]},"replayMetadata":{"replayToken":"replay_c1552eead2ab4068b6e0c3dc","replayEligible":true,"idempotencyScope":"tenant-reference + workflow slug + workflow version + caller role + input digest","ttlHours":72,"deterministicInputs":["workflowSlug","workflowVersion","tenantReference","callerRole","agentRuntimeId","inputDigest","contextFingerprint","policyRefs"],"replayPolicy":"Replay returns the retained metadata envelope only and cannot repeat protected external actions.","conflictResponse":"Return conflict when the same idempotency key maps to a different input digest, context fingerprint, or caller role.","expirationBehavior":"Expired metadata-only keys require a new envelope and cannot revive protected execution."},"toolPlan":{"toolRegistryVersion":"scrimed-tool-registry-no-phi-v1","allowedTools":["synthetic-context-reader","evidence-card-builder","review-packet-drafter","metadata-audit-appender"],"blockedTools":["ehr-writeback","patient-messaging","payer-submission","claims-submission","production-connector-write"],"noConnectorAccess":true,"noRecordMutation":true},"failureRecovery":{"retryPolicy":"Retry metadata envelope creation only when validation, hash generation, or audit-link assembly fails before any protected action.","quarantineTriggers":["PHI-like input","protected action request","missing reviewer gate","missing context fingerprint","model route telemetry absent","idempotency conflict"],"fallbackBehavior":"Return a deny-by-default review packet and require human operator triage.","rollbackBehavior":"No external side effect exists to roll back; retain denial metadata and preserve prior workflow state.","deadLetterOwner":"TrustOS and platform reliability"},"evidenceAuditTrail":{"attempt_id":"att_a1b4a5d1b714","user_session_tenant_context":{"tenantReference":"tenant-ref-synthetic-atlas","callerRole":"rcm-reviewer","agentRuntimeId":"agent-runtime-policy-synthesizer","sessionReference":"metadata-only-no-live-session"},"timestamp":"2026-06-27","route":"/api/workflows/execution-attempts/envelope","action":"Draft a reviewer-held prior authorization evidence packet from synthetic policy and documentation gap references.","allowed_blocked_decision":"allowed","policy_version":"scrimed-safety-governance-v2026-06-29","input_classification":"synthetic-no-phi","phi_detected":false,"synthetic":true,"model_provider_selected":"synthetic-fallback","model_tier_selected":"FAST_LOW_COST","compute_fabric_audit_hash":"scrimed-intel-0b93e75e","compute_fabric_selected_model":"retrieval-embedding-synthetic-slot","compute_fabric_model_tier":"EMBEDDING_MODEL","compute_fabric_provider":"synthetic_no_call","compute_fabric_deployment_mode":"SCRIMED_CLOUD","compute_fabric_phi_policy":"metadata-only-no-public-phi","compute_fabric_human_review_required":true,"output_hash":"dab53778ee143ebd6bb2065cb1973a10b486b87a1efed2370f1558e383f9e550","evidence_envelope_hash":"174ee5f02deb7b2fe38dc03399ea2869f39adb0da0fa93986d80c8b92629f8ea","status":"review-required","failure_reason":null},"evaluationBindings":{"syntheticScenarioRefs":["agent-scorecard-runtime-permission","hallucination-uncited-guideline","clinical-safety-prohibited-action","evidence-quality-stale-policy","regression-workflow-result-diff","synthetic-patient-missing-data","adversarial-prompt-injection-tool-override","perfect-chart-conflict-unit-completeness","clinical-copilot-unit-abbreviation-citation"],"scorecardRefs":["scorecard-idempotency-replay","scorecard-no-phi-boundary","scorecard-route-telemetry","scorecard-human-review","scorecard-audit-linkage","scorecard-protected-capability-denial","scorecard-failure-recovery","scorecard-context-fingerprint","clinical-robustness-scorecard-perfect-chart-conflict-unit-completeness","clinical-robustness-scorecard-clinical-copilot-unit-abbreviation-citation"],"clinicalRobustness":{"labRoute":"/clinical-robustness-lab","scenarioRefs":["perfect-chart-conflict-unit-completeness","clinical-copilot-unit-abbreviation-citation"],"scorecardRefs":["clinical-robustness-scorecard-perfect-chart-conflict-unit-completeness","clinical-robustness-scorecard-clinical-copilot-unit-abbreviation-citation"],"perturbationRefs":["missing-data","missing-labs-risk","missing-imaging-risk","conflicting-data","wrong-units","incomplete-records","data-freshness","abbreviations","hallucination-risk","citation-reference-quality","guideline-grounding","model-disagreement"],"averageClinicalReadinessScore":97,"reviewerQueues":["cdi-review","clinical-copilot-review"],"dataBoundary":"synthetic-no-phi-only","clinicalAuthority":"not-authorized-live-care","phiAuthority":"not-authorized-production-phi","reviewerGate":"human-review-required"}},"retainedBoundary":"This envelope is a metadata-only, no-PHI, replayable contract. It is not live workflow execution, not production persistence, not model routing approval, and not clinical or payer authority."},{"attemptId":"att_49ff8508346b","contractVersion":"scrimed-execution-attempt-envelope-v1","buildStatus":"metadata-only-accepted","lifecycleState":"review-required","workflowSlug":"clinical-documentation-draft-review","workflowVersion":"2026.06.no-phi","idempotencyKey":"idem_49ff8508346b6770c3dd43ed","createdAt":"2026-06-27","tenantReference":"tenant-ref-synthetic-atlas","tenantBoundary":"tenant-reference-only-no-customer-data","callerRole":"clinical-reviewer","agentRuntimeId":"agent-runtime-doc-quality","agentPermissions":["read-synthetic-context","read-approved-evidence-references","write-draft-review-packet","append-metadata-audit-event"],"deniedCapabilities":["autonomous diagnosis","autonomous treatment","prescribing","patient outreach","payer submission","claim submission","final coding","EHR writeback","production connector write","clinical triage replacement"],"dataBoundary":"synthetic-and-metadata-only","phiAuthority":"not-authorized-production-phi","clinicalCareAuthority":"not-authorized-live-care","inputDigest":"99741b71712a7521dc768174ae5b60048e34d7b9921f93861b8e3c99e65c3588","contextFingerprint":"f5be59a7281dd0e258a054e43fa2f242e2ae9dcb1e95aad7475ff76390305b37","compressedContextRefs":["compressed:synthetic-documentation-gap-v1","compressed:synthetic-care-stage-v1"],"evidenceRefs":["synthetic-guideline-source-ref-v1","trust-card-doc-quality-v1"],"policyRefs":["org-policy-clinician-review-required-v1"],"requestedActionSummary":"Prepare a synthetic documentation quality draft and route it to a clinician reviewer without chart writeback.","modelRouteTelemetry":{"routeId":"route_fb21f84068","taskType":"clinical documentation support","providerClass":"frontier-closed","providerName":"SCRIMED provider mesh frontier route","modelVersion":"frontier-closed:registered-version-required-before-production","fallbackProviderClass":"open-weight","routeProfile":"clinical-evidence-draft-human-review-gated","riskTier":"high","estimatedCostUsd":0.067,"latencyBudgetMs":5200,"confidence":0.64,"routingRationale":"Route metadata is logged for synthetic evaluation only; production provider selection remains blocked until contracts, privacy, telemetry, fallback, and review controls are approved.","telemetryBoundary":"telemetry-only-not-production-routing"},"computeFabricTelemetry":{"fabricVersion":"scrimed-compute-fabric-v2026-07-05","fabricStatus":"synthetic-routing-only-no-live-model-calls","selectedModel":"gpt-class-frontier-synthetic-slot","modelTier":"FRONTIER_MODEL","provider":"gpt_class_frontier","deploymentMode":"SCRIMED_CLOUD","reason":"FRONTIER_MODEL selected for clinical_reasoning; SCRIMED_CLOUD deployment mode; FHIR modality; high clinical risk; metadata-only-no-public-phi PHI policy; clinical outputs require human review and cannot become autonomous authority","riskLevel":"high","phiPolicy":"metadata-only-no-public-phi","requiresHumanReview":true,"fallbackModels":["claude-class-frontier-synthetic-slot","gemini-class-frontier-synthetic-slot"],"estimatedCostClass":"HIGH","estimatedLatencyClass":"STANDARD","auditTags":["scrimed-compute-fabric","scrimed-compute-fabric-v2026-07-05","task:clinical_reasoning","modality:FHIR","risk:high","deployment:SCRIMED_CLOUD","tier:FRONTIER_MODEL","provider:gpt_class_frontier","phi-policy:metadata-only-no-public-phi","human-review-required","no-live-model-call","no-autonomous-clinical-authority"],"auditHash":"scrimed-intel-6a209b65","confidenceScore":0.74,"confidenceCorrectnessBoundary":"confidence-is-not-correctness","correctnessEvidenceRequired":["schema validation","source attribution","benchmarkModelForTask","compareModels","human review for clinical recommendations"],"uncertaintyReasons":["Confidence score is routing confidence, not proof of clinical correctness.","Clinical correctness requires evidence review, external validation, and human signoff.","Benchmark scores are synthetic metadata until a governed validation dataset is approved."],"safetyBoundary":"metadata-only-no-live-model-call"},"humanApprovalGate":{"required":true,"reviewStatus":"held-for-human-review","requiredReviewers":["domain reviewer","clinical governance","TrustOS"],"gateReason":"Protected healthcare workflow output requires accountable human review before any release, connector, payer, record, or patient-facing action.","releaseCondition":"Release requires approved reviewer identity, evidence card, clinical-risk label, audit event, and retained no-PHI boundary.","deniedUntil":"Durable attempt store, customer authority, connector approval, PHI controls, and production review workflow are approved."},"auditTrail":{"auditEventId":"audit_ea0ef25fd534","traceId":"trace_4ae41e0822564e70","eventHash":"ff2d945a2cd93231dd66e09f898a1659881ec52f74b8fc60877244e0b6c0bdb0","immutableEventType":"execution-attempt-envelope-created","retainedFields":["attemptId","idempotencyKey","workflowSlug","tenantReference","callerRole","contextFingerprint","modelRouteTelemetry","computeFabricTelemetry","humanApprovalGate","replayMetadata","failureRecovery"],"prohibitedFields":["patient identifiers","raw chart text","member identifiers","production connector payloads","secrets","credentials"]},"replayMetadata":{"replayToken":"replay_54b10f0d1ea07e11625de8e7","replayEligible":true,"idempotencyScope":"tenant-reference + workflow slug + workflow version + caller role + input digest","ttlHours":72,"deterministicInputs":["workflowSlug","workflowVersion","tenantReference","callerRole","agentRuntimeId","inputDigest","contextFingerprint","policyRefs"],"replayPolicy":"Replay returns the retained metadata envelope only and cannot repeat protected external actions.","conflictResponse":"Return conflict when the same idempotency key maps to a different input digest, context fingerprint, or caller role.","expirationBehavior":"Expired metadata-only keys require a new envelope and cannot revive protected execution."},"toolPlan":{"toolRegistryVersion":"scrimed-tool-registry-no-phi-v1","allowedTools":["synthetic-context-reader","evidence-card-builder","review-packet-drafter","metadata-audit-appender"],"blockedTools":["ehr-writeback","patient-messaging","payer-submission","claims-submission","production-connector-write"],"noConnectorAccess":true,"noRecordMutation":true},"failureRecovery":{"retryPolicy":"Retry metadata envelope creation only when validation, hash generation, or audit-link assembly fails before any protected action.","quarantineTriggers":["PHI-like input","protected action request","missing reviewer gate","missing context fingerprint","model route telemetry absent","idempotency conflict"],"fallbackBehavior":"Return a deny-by-default review packet and require human operator triage.","rollbackBehavior":"No external side effect exists to roll back; retain denial metadata and preserve prior workflow state.","deadLetterOwner":"TrustOS and platform reliability"},"evidenceAuditTrail":{"attempt_id":"att_49ff8508346b","user_session_tenant_context":{"tenantReference":"tenant-ref-synthetic-atlas","callerRole":"clinical-reviewer","agentRuntimeId":"agent-runtime-doc-quality","sessionReference":"metadata-only-no-live-session"},"timestamp":"2026-06-27","route":"/api/workflows/execution-attempts/envelope","action":"Prepare a synthetic documentation quality draft and route it to a clinician reviewer without chart writeback.","allowed_blocked_decision":"allowed","policy_version":"scrimed-safety-governance-v2026-06-29","input_classification":"synthetic-no-phi","phi_detected":false,"synthetic":true,"model_provider_selected":"synthetic-fallback","model_tier_selected":"CLINICAL_REVIEW_SYNTHETIC","compute_fabric_audit_hash":"scrimed-intel-6a209b65","compute_fabric_selected_model":"gpt-class-frontier-synthetic-slot","compute_fabric_model_tier":"FRONTIER_MODEL","compute_fabric_provider":"gpt_class_frontier","compute_fabric_deployment_mode":"SCRIMED_CLOUD","compute_fabric_phi_policy":"metadata-only-no-public-phi","compute_fabric_human_review_required":true,"output_hash":"e5e38e9b922c2dfa84b53d93907710dcc41eb505ea7d2901fcc3d3fea97e26eb","evidence_envelope_hash":"810493def878b5866b1373ba4e71c819a0d433e17c0f14d4883bddd662b86d25","status":"review-required","failure_reason":null},"evaluationBindings":{"syntheticScenarioRefs":["agent-scorecard-runtime-permission","hallucination-uncited-guideline","clinical-safety-prohibited-action","evidence-quality-stale-policy","regression-workflow-result-diff","synthetic-patient-missing-data","adversarial-prompt-injection-tool-override","docutwin-noisy-incomplete-draft","ambient-scribe-noise-multilingual-injection"],"scorecardRefs":["scorecard-idempotency-replay","scorecard-no-phi-boundary","scorecard-route-telemetry","scorecard-human-review","scorecard-audit-linkage","scorecard-protected-capability-denial","scorecard-failure-recovery","scorecard-context-fingerprint","clinical-robustness-scorecard-docutwin-noisy-incomplete-draft","clinical-robustness-scorecard-ambient-scribe-noise-multilingual-injection"],"clinicalRobustness":{"labRoute":"/clinical-robustness-lab","scenarioRefs":["docutwin-noisy-incomplete-draft","ambient-scribe-noise-multilingual-injection"],"scorecardRefs":["clinical-robustness-scorecard-docutwin-noisy-incomplete-draft","clinical-robustness-scorecard-ambient-scribe-noise-multilingual-injection"],"perturbationRefs":["noisy-notes","note-only-blind-spot","incomplete-records","missing-data","missing-labs-risk","human-review-requirement","multilingual-notes","hallucination-risk"],"averageClinicalReadinessScore":98,"reviewerQueues":["documentation-review","ambient-documentation-review"],"dataBoundary":"synthetic-no-phi-only","clinicalAuthority":"not-authorized-live-care","phiAuthority":"not-authorized-production-phi","reviewerGate":"human-review-required"}},"retainedBoundary":"This envelope is a metadata-only, no-PHI, replayable contract. It is not live workflow execution, not production persistence, not model routing approval, and not clinical or payer authority."},{"attemptId":"att_6158a14f1292","contractVersion":"scrimed-execution-attempt-envelope-v1","buildStatus":"metadata-only-accepted","lifecycleState":"review-required","workflowSlug":"referral-queue-administrative-summary","workflowVersion":"2026.06.no-phi","idempotencyKey":"idem_6158a14f1292a091335537c7","createdAt":"2026-06-27","tenantReference":"tenant-ref-synthetic-atlas","tenantBoundary":"tenant-reference-only-no-customer-data","callerRole":"operations-lead","agentRuntimeId":"agent-runtime-ops-summarizer","agentPermissions":["read-synthetic-context","read-approved-evidence-references","write-draft-review-packet","append-metadata-audit-event"],"deniedCapabilities":["autonomous diagnosis","autonomous treatment","prescribing","patient outreach","payer submission","claim submission","final coding","EHR writeback","production connector write","clinical triage replacement"],"dataBoundary":"synthetic-and-metadata-only","phiAuthority":"not-authorized-production-phi","clinicalCareAuthority":"not-authorized-live-care","inputDigest":"6f56206ad18fb1a612b09bd7c55046a3a8a7224a673791d51a83340fdb546518","contextFingerprint":"bcf7d214d875514e9a05162ad35fba0e9323178d066dfa61160373bcee02ffd3","compressedContextRefs":["compressed:synthetic-referral-queue-v1","compressed:synthetic-sla-window-v1"],"evidenceRefs":["queue-metric-source-ref-synthetic-v1"],"policyRefs":["org-policy-no-patient-outreach-v1"],"requestedActionSummary":"Summarize synthetic referral queue metadata and produce a no-outreach operations handoff.","modelRouteTelemetry":{"routeId":"route_d5408bccf0","taskType":"low-risk administrative summarization","providerClass":"open-weight","providerName":"SCRIMED local or open-weight route","modelVersion":"open-weight:registered-version-required-before-production","fallbackProviderClass":"frontier-closed","routeProfile":"administrative-summarization-human-review-gated","riskTier":"moderate","estimatedCostUsd":0.028,"latencyBudgetMs":3200,"confidence":0.78,"routingRationale":"Route metadata is logged for synthetic evaluation only; production provider selection remains blocked until contracts, privacy, telemetry, fallback, and review controls are approved.","telemetryBoundary":"telemetry-only-not-production-routing"},"computeFabricTelemetry":{"fabricVersion":"scrimed-compute-fabric-v2026-07-05","fabricStatus":"synthetic-routing-only-no-live-model-calls","selectedModel":"private-sglang-compact-runtime-slot","modelTier":"COMPACT_REASONING_MODEL","provider":"scrimed_private_sglang","deploymentMode":"CUSTOMER_VPC","reason":"COMPACT_REASONING_MODEL selected for operations; CUSTOMER_VPC deployment mode; text modality; moderate clinical risk; metadata-only-no-public-phi PHI policy","riskLevel":"moderate","phiPolicy":"metadata-only-no-public-phi","requiresHumanReview":false,"fallbackModels":["pulsar-16b-compact-reasoning-synthetic-slot","llama-mistral-qwen-glm-open-routing-slot"],"estimatedCostClass":"LOW","estimatedLatencyClass":"INTERACTIVE","auditTags":["scrimed-compute-fabric","scrimed-compute-fabric-v2026-07-05","task:operations","modality:text","risk:moderate","deployment:CUSTOMER_VPC","tier:COMPACT_REASONING_MODEL","provider:scrimed_private_sglang","phi-policy:metadata-only-no-public-phi","human-review-not-required-for-metadata-only","no-live-model-call","no-autonomous-clinical-authority"],"auditHash":"scrimed-intel-16825452","confidenceScore":0.86,"confidenceCorrectnessBoundary":"confidence-is-not-correctness","correctnessEvidenceRequired":["schema validation","source attribution","benchmarkModelForTask","compareModels","human review for clinical recommendations"],"uncertaintyReasons":["Confidence score is routing confidence, not proof of clinical correctness.","Clinical correctness requires evidence review, external validation, and human signoff.","Benchmark scores are synthetic metadata until a governed validation dataset is approved."],"safetyBoundary":"metadata-only-no-live-model-call"},"humanApprovalGate":{"required":true,"reviewStatus":"held-for-human-review","requiredReviewers":["domain reviewer","TrustOS"],"gateReason":"Protected healthcare workflow output requires accountable human review before any release, connector, payer, record, or patient-facing action.","releaseCondition":"Release requires approved reviewer identity, evidence card, clinical-risk label, audit event, and retained no-PHI boundary.","deniedUntil":"Durable attempt store, customer authority, connector approval, PHI controls, and production review workflow are approved."},"auditTrail":{"auditEventId":"audit_dce91786127a","traceId":"trace_82f85eb8cf79f42b","eventHash":"69add68f612e06b592b2449d66ac79e05dce3dc1a4dc4186966274946f84d5a9","immutableEventType":"execution-attempt-envelope-created","retainedFields":["attemptId","idempotencyKey","workflowSlug","tenantReference","callerRole","contextFingerprint","modelRouteTelemetry","computeFabricTelemetry","humanApprovalGate","replayMetadata","failureRecovery"],"prohibitedFields":["patient identifiers","raw chart text","member identifiers","production connector payloads","secrets","credentials"]},"replayMetadata":{"replayToken":"replay_ab1d10a31eb91039d9944159","replayEligible":true,"idempotencyScope":"tenant-reference + workflow slug + workflow version + caller role + input digest","ttlHours":72,"deterministicInputs":["workflowSlug","workflowVersion","tenantReference","callerRole","agentRuntimeId","inputDigest","contextFingerprint","policyRefs"],"replayPolicy":"Replay returns the retained metadata envelope only and cannot repeat protected external actions.","conflictResponse":"Return conflict when the same idempotency key maps to a different input digest, context fingerprint, or caller role.","expirationBehavior":"Expired metadata-only keys require a new envelope and cannot revive protected execution."},"toolPlan":{"toolRegistryVersion":"scrimed-tool-registry-no-phi-v1","allowedTools":["synthetic-context-reader","evidence-card-builder","review-packet-drafter","metadata-audit-appender"],"blockedTools":["ehr-writeback","patient-messaging","payer-submission","claims-submission","production-connector-write"],"noConnectorAccess":true,"noRecordMutation":true},"failureRecovery":{"retryPolicy":"Retry metadata envelope creation only when validation, hash generation, or audit-link assembly fails before any protected action.","quarantineTriggers":["PHI-like input","protected action request","missing reviewer gate","missing context fingerprint","model route telemetry absent","idempotency conflict"],"fallbackBehavior":"Return a deny-by-default review packet and require human operator triage.","rollbackBehavior":"No external side effect exists to roll back; retain denial metadata and preserve prior workflow state.","deadLetterOwner":"TrustOS and platform reliability"},"evidenceAuditTrail":{"attempt_id":"att_6158a14f1292","user_session_tenant_context":{"tenantReference":"tenant-ref-synthetic-atlas","callerRole":"operations-lead","agentRuntimeId":"agent-runtime-ops-summarizer","sessionReference":"metadata-only-no-live-session"},"timestamp":"2026-06-27","route":"/api/workflows/execution-attempts/envelope","action":"Summarize synthetic referral queue metadata and produce a no-outreach operations handoff.","allowed_blocked_decision":"allowed","policy_version":"scrimed-safety-governance-v2026-06-29","input_classification":"synthetic-no-phi","phi_detected":false,"synthetic":true,"model_provider_selected":"synthetic-fallback","model_tier_selected":"FAST_LOW_COST","compute_fabric_audit_hash":"scrimed-intel-16825452","compute_fabric_selected_model":"private-sglang-compact-runtime-slot","compute_fabric_model_tier":"COMPACT_REASONING_MODEL","compute_fabric_provider":"scrimed_private_sglang","compute_fabric_deployment_mode":"CUSTOMER_VPC","compute_fabric_phi_policy":"metadata-only-no-public-phi","compute_fabric_human_review_required":false,"output_hash":"3d37d46ede14a9826791e3c0205935675365d92139935f334cde47a8da029b9f","evidence_envelope_hash":"4261ba57ca3419224dbd165037985774fa4a85f195bbb93429b28bcae47c6b26","status":"review-required","failure_reason":null},"evaluationBindings":{"syntheticScenarioRefs":["agent-scorecard-runtime-permission","hallucination-uncited-guideline","clinical-safety-prohibited-action","evidence-quality-stale-policy","regression-workflow-result-diff","synthetic-patient-missing-data","adversarial-prompt-injection-tool-override","sanar-conflict-temporal-escalation","careexplain-multilingual-education-boundary"],"scorecardRefs":["scorecard-idempotency-replay","scorecard-no-phi-boundary","scorecard-route-telemetry","scorecard-human-review","scorecard-audit-linkage","scorecard-protected-capability-denial","scorecard-failure-recovery","scorecard-context-fingerprint","clinical-robustness-scorecard-sanar-conflict-temporal-escalation","clinical-robustness-scorecard-careexplain-multilingual-education-boundary"],"clinicalRobustness":{"labRoute":"/clinical-robustness-lab","scenarioRefs":["sanar-conflict-temporal-escalation","careexplain-multilingual-education-boundary"],"scorecardRefs":["clinical-robustness-scorecard-sanar-conflict-temporal-escalation","clinical-robustness-scorecard-careexplain-multilingual-education-boundary"],"perturbationRefs":["missing-data","missing-labs-risk","conflicting-data","temporal-inconsistencies","data-freshness","human-review-requirement","multilingual-notes","hallucination-risk","citation-reference-quality","guideline-grounding","demographic-bias-risk"],"averageClinicalReadinessScore":97,"reviewerQueues":["clinical-safety-review","education-review"],"dataBoundary":"synthetic-no-phi-only","clinicalAuthority":"not-authorized-live-care","phiAuthority":"not-authorized-production-phi","reviewerGate":"human-review-required"}},"retainedBoundary":"This envelope is a metadata-only, no-PHI, replayable contract. It is not live workflow execution, not production persistence, not model routing approval, and not clinical or payer authority."},{"attemptId":"att_1b0731ae0518","contractVersion":"scrimed-execution-attempt-envelope-v1","buildStatus":"metadata-only-accepted","lifecycleState":"review-required","workflowSlug":"organization-policy-route-check","workflowVersion":"2026.06.no-phi","idempotencyKey":"idem_1b0731ae05183c88be751df5","createdAt":"2026-06-27","tenantReference":"tenant-ref-synthetic-atlas","tenantBoundary":"tenant-reference-only-no-customer-data","callerRole":"governance-owner","agentRuntimeId":"agent-runtime-policy-router","agentPermissions":["read-synthetic-context","read-approved-evidence-references","write-draft-review-packet","append-metadata-audit-event"],"deniedCapabilities":["autonomous diagnosis","autonomous treatment","prescribing","patient outreach","payer submission","claim submission","final coding","EHR writeback","production connector write","clinical triage replacement"],"dataBoundary":"synthetic-and-metadata-only","phiAuthority":"not-authorized-production-phi","clinicalCareAuthority":"not-authorized-live-care","inputDigest":"0e0e38b53b10f2652c61b9a2e84fa2e474984aa80622f0cf2ea6cfb1e8f032e1","contextFingerprint":"d8e8943d94a91244d1f78d58a2a9536efcfd71e62553006d193df8dcc467c323","compressedContextRefs":["compressed:synthetic-policy-scope-v1","compressed:synthetic-region-gate-v1"],"evidenceRefs":["policy-version-ref-synthetic-v1","route-denial-ref-synthetic-v1"],"policyRefs":["org-policy-most-restrictive-route-v1"],"requestedActionSummary":"Compare synthetic organization policy references and return the most restrictive route decision.","modelRouteTelemetry":{"routeId":"route_fdb60aeb43","taskType":"organization policy route review","providerClass":"open-weight","providerName":"SCRIMED local or open-weight route","modelVersion":"open-weight:registered-version-required-before-production","fallbackProviderClass":"regional-specialist","routeProfile":"organization-policy-review-human-review-gated","riskTier":"moderate","estimatedCostUsd":0.028,"latencyBudgetMs":3200,"confidence":0.78,"routingRationale":"Route metadata is logged for synthetic evaluation only; production provider selection remains blocked until contracts, privacy, telemetry, fallback, and review controls are approved.","telemetryBoundary":"telemetry-only-not-production-routing"},"computeFabricTelemetry":{"fabricVersion":"scrimed-compute-fabric-v2026-07-05","fabricStatus":"synthetic-routing-only-no-live-model-calls","selectedModel":"private-sglang-compact-runtime-slot","modelTier":"COMPACT_REASONING_MODEL","provider":"scrimed_private_sglang","deploymentMode":"CUSTOMER_VPC","reason":"COMPACT_REASONING_MODEL selected for operations; CUSTOMER_VPC deployment mode; text modality; moderate clinical risk; metadata-only-no-public-phi PHI policy","riskLevel":"moderate","phiPolicy":"metadata-only-no-public-phi","requiresHumanReview":false,"fallbackModels":["pulsar-16b-compact-reasoning-synthetic-slot","llama-mistral-qwen-glm-open-routing-slot"],"estimatedCostClass":"LOW","estimatedLatencyClass":"INTERACTIVE","auditTags":["scrimed-compute-fabric","scrimed-compute-fabric-v2026-07-05","task:operations","modality:text","risk:moderate","deployment:CUSTOMER_VPC","tier:COMPACT_REASONING_MODEL","provider:scrimed_private_sglang","phi-policy:metadata-only-no-public-phi","human-review-not-required-for-metadata-only","no-live-model-call","no-autonomous-clinical-authority"],"auditHash":"scrimed-intel-b1c053f5","confidenceScore":0.86,"confidenceCorrectnessBoundary":"confidence-is-not-correctness","correctnessEvidenceRequired":["schema validation","source attribution","benchmarkModelForTask","compareModels","human review for clinical recommendations"],"uncertaintyReasons":["Confidence score is routing confidence, not proof of clinical correctness.","Clinical correctness requires evidence review, external validation, and human signoff.","Benchmark scores are synthetic metadata until a governed validation dataset is approved."],"safetyBoundary":"metadata-only-no-live-model-call"},"humanApprovalGate":{"required":true,"reviewStatus":"held-for-human-review","requiredReviewers":["domain reviewer","TrustOS"],"gateReason":"Protected healthcare workflow output requires accountable human review before any release, connector, payer, record, or patient-facing action.","releaseCondition":"Release requires approved reviewer identity, evidence card, clinical-risk label, audit event, and retained no-PHI boundary.","deniedUntil":"Durable attempt store, customer authority, connector approval, PHI controls, and production review workflow are approved."},"auditTrail":{"auditEventId":"audit_0c453fa3fee0","traceId":"trace_91b542569c4a01aa","eventHash":"25a3e71e4708f1e20f2b4e031d531a71f11b06ed54301357ace24ea6ea19635a","immutableEventType":"execution-attempt-envelope-created","retainedFields":["attemptId","idempotencyKey","workflowSlug","tenantReference","callerRole","contextFingerprint","modelRouteTelemetry","computeFabricTelemetry","humanApprovalGate","replayMetadata","failureRecovery"],"prohibitedFields":["patient identifiers","raw chart text","member identifiers","production connector payloads","secrets","credentials"]},"replayMetadata":{"replayToken":"replay_5baa3594a4f08a86eb1a00e7","replayEligible":true,"idempotencyScope":"tenant-reference + workflow slug + workflow version + caller role + input digest","ttlHours":72,"deterministicInputs":["workflowSlug","workflowVersion","tenantReference","callerRole","agentRuntimeId","inputDigest","contextFingerprint","policyRefs"],"replayPolicy":"Replay returns the retained metadata envelope only and cannot repeat protected external actions.","conflictResponse":"Return conflict when the same idempotency key maps to a different input digest, context fingerprint, or caller role.","expirationBehavior":"Expired metadata-only keys require a new envelope and cannot revive protected execution."},"toolPlan":{"toolRegistryVersion":"scrimed-tool-registry-no-phi-v1","allowedTools":["synthetic-context-reader","evidence-card-builder","review-packet-drafter","metadata-audit-appender"],"blockedTools":["ehr-writeback","patient-messaging","payer-submission","claims-submission","production-connector-write"],"noConnectorAccess":true,"noRecordMutation":true},"failureRecovery":{"retryPolicy":"Retry metadata envelope creation only when validation, hash generation, or audit-link assembly fails before any protected action.","quarantineTriggers":["PHI-like input","protected action request","missing reviewer gate","missing context fingerprint","model route telemetry absent","idempotency conflict"],"fallbackBehavior":"Return a deny-by-default review packet and require human operator triage.","rollbackBehavior":"No external side effect exists to roll back; retain denial metadata and preserve prior workflow state.","deadLetterOwner":"TrustOS and platform reliability"},"evidenceAuditTrail":{"attempt_id":"att_1b0731ae0518","user_session_tenant_context":{"tenantReference":"tenant-ref-synthetic-atlas","callerRole":"governance-owner","agentRuntimeId":"agent-runtime-policy-router","sessionReference":"metadata-only-no-live-session"},"timestamp":"2026-06-27","route":"/api/workflows/execution-attempts/envelope","action":"Compare synthetic organization policy references and return the most restrictive route decision.","allowed_blocked_decision":"allowed","policy_version":"scrimed-safety-governance-v2026-06-29","input_classification":"synthetic-no-phi","phi_detected":false,"synthetic":true,"model_provider_selected":"synthetic-fallback","model_tier_selected":"FAST_LOW_COST","compute_fabric_audit_hash":"scrimed-intel-b1c053f5","compute_fabric_selected_model":"private-sglang-compact-runtime-slot","compute_fabric_model_tier":"COMPACT_REASONING_MODEL","compute_fabric_provider":"scrimed_private_sglang","compute_fabric_deployment_mode":"CUSTOMER_VPC","compute_fabric_phi_policy":"metadata-only-no-public-phi","compute_fabric_human_review_required":false,"output_hash":"c44e49f8411535e7532e38bc023272dd2d6ca48ec1aa418db36a099e8a312150","evidence_envelope_hash":"094602eb866ea08713be758fbec195cbe7614c8e01af4b2a56638f4644edc18c","status":"review-required","failure_reason":null},"evaluationBindings":{"syntheticScenarioRefs":["agent-scorecard-runtime-permission","hallucination-uncited-guideline","clinical-safety-prohibited-action","evidence-quality-stale-policy","regression-workflow-result-diff","synthetic-patient-missing-data","adversarial-prompt-injection-tool-override","trialcore-eligibility-temporal-evidence","oncoid-abbreviation-guideline-conflict"],"scorecardRefs":["scorecard-idempotency-replay","scorecard-no-phi-boundary","scorecard-route-telemetry","scorecard-human-review","scorecard-audit-linkage","scorecard-protected-capability-denial","scorecard-failure-recovery","scorecard-context-fingerprint","clinical-robustness-scorecard-trialcore-eligibility-temporal-evidence","clinical-robustness-scorecard-oncoid-abbreviation-guideline-conflict"],"clinicalRobustness":{"labRoute":"/clinical-robustness-lab","scenarioRefs":["trialcore-eligibility-temporal-evidence","oncoid-abbreviation-guideline-conflict"],"scorecardRefs":["clinical-robustness-scorecard-trialcore-eligibility-temporal-evidence","clinical-robustness-scorecard-oncoid-abbreviation-guideline-conflict"],"perturbationRefs":["incomplete-records","temporal-inconsistencies","hallucination-risk","data-freshness","model-disagreement","abbreviations","conflicting-data","citation-reference-quality","guideline-grounding","human-review-requirement"],"averageClinicalReadinessScore":97,"reviewerQueues":["research-review","oncology-review"],"dataBoundary":"synthetic-no-phi-only","clinicalAuthority":"not-authorized-live-care","phiAuthority":"not-authorized-production-phi","reviewerGate":"human-review-required"}},"retainedBoundary":"This envelope is a metadata-only, no-PHI, replayable contract. It is not live workflow execution, not production persistence, not model routing approval, and not clinical or payer authority."},{"attemptId":"att_c457962a73ff","contractVersion":"scrimed-execution-attempt-envelope-v1","buildStatus":"metadata-only-accepted","lifecycleState":"review-required","workflowSlug":"trustops-signal-remediation-review","workflowVersion":"2026.06.no-phi","idempotencyKey":"idem_c457962a73ff77a59c0f5b5f","createdAt":"2026-06-27","tenantReference":"tenant-ref-synthetic-atlas","tenantBoundary":"tenant-reference-only-no-customer-data","callerRole":"trustops-reviewer","agentRuntimeId":"agent-runtime-trustops-supervisor","agentPermissions":["read-synthetic-context","read-approved-evidence-references","write-draft-review-packet","append-metadata-audit-event"],"deniedCapabilities":["autonomous diagnosis","autonomous treatment","prescribing","patient outreach","payer submission","claim submission","final coding","EHR writeback","production connector write","clinical triage replacement"],"dataBoundary":"synthetic-and-metadata-only","phiAuthority":"not-authorized-production-phi","clinicalCareAuthority":"not-authorized-live-care","inputDigest":"cab5bad92f6d33cdc6a05290ee1724fa095d033528d7f9c2991398328adbeeb4","contextFingerprint":"d7f0ab098482ad9655bb7e9961dd93d852690f9a2cfb552cd5091dbe7c27fff1","compressedContextRefs":["compressed:synthetic-trustops-signal-set-v1","compressed:synthetic-self-healing-recommendation-set-v1"],"evidenceRefs":["trustops-module-registry-v1","trustops-structured-validation-v1"],"policyRefs":["org-policy-human-trustops-review-required-v1"],"requestedActionSummary":"Create a reviewer-held TrustOps signal and recommendation packet with durable evidence binding for synthetic operations review.","modelRouteTelemetry":{"routeId":"route_cfb561cfa2","taskType":"trustops signal remediation review","providerClass":"open-weight","providerName":"SCRIMED local or open-weight route","modelVersion":"open-weight:registered-version-required-before-production","fallbackProviderClass":"frontier-closed","routeProfile":"workflow-planning-human-review-gated","riskTier":"moderate","estimatedCostUsd":0.028,"latencyBudgetMs":3200,"confidence":0.78,"routingRationale":"Route metadata is logged for synthetic evaluation only; production provider selection remains blocked until contracts, privacy, telemetry, fallback, and review controls are approved.","telemetryBoundary":"telemetry-only-not-production-routing"},"computeFabricTelemetry":{"fabricVersion":"scrimed-compute-fabric-v2026-07-05","fabricStatus":"synthetic-routing-only-no-live-model-calls","selectedModel":"private-sglang-compact-runtime-slot","modelTier":"COMPACT_REASONING_MODEL","provider":"scrimed_private_sglang","deploymentMode":"CUSTOMER_VPC","reason":"COMPACT_REASONING_MODEL selected for operations; CUSTOMER_VPC deployment mode; text modality; moderate clinical risk; metadata-only-no-public-phi PHI policy","riskLevel":"moderate","phiPolicy":"metadata-only-no-public-phi","requiresHumanReview":false,"fallbackModels":["pulsar-16b-compact-reasoning-synthetic-slot","llama-mistral-qwen-glm-open-routing-slot"],"estimatedCostClass":"LOW","estimatedLatencyClass":"INTERACTIVE","auditTags":["scrimed-compute-fabric","scrimed-compute-fabric-v2026-07-05","task:operations","modality:text","risk:moderate","deployment:CUSTOMER_VPC","tier:COMPACT_REASONING_MODEL","provider:scrimed_private_sglang","phi-policy:metadata-only-no-public-phi","human-review-not-required-for-metadata-only","no-live-model-call","no-autonomous-clinical-authority"],"auditHash":"scrimed-intel-9abbb131","confidenceScore":0.86,"confidenceCorrectnessBoundary":"confidence-is-not-correctness","correctnessEvidenceRequired":["schema validation","source attribution","benchmarkModelForTask","compareModels","human review for clinical recommendations"],"uncertaintyReasons":["Confidence score is routing confidence, not proof of clinical correctness.","Clinical correctness requires evidence review, external validation, and human signoff.","Benchmark scores are synthetic metadata until a governed validation dataset is approved."],"safetyBoundary":"metadata-only-no-live-model-call"},"humanApprovalGate":{"required":true,"reviewStatus":"held-for-human-review","requiredReviewers":["domain reviewer","TrustOS"],"gateReason":"Protected healthcare workflow output requires accountable human review before any release, connector, payer, record, or patient-facing action.","releaseCondition":"Release requires approved reviewer identity, evidence card, clinical-risk label, audit event, and retained no-PHI boundary.","deniedUntil":"Durable attempt store, customer authority, connector approval, PHI controls, and production review workflow are approved."},"auditTrail":{"auditEventId":"audit_61069a3ed8f7","traceId":"trace_2188d604f39a781b","eventHash":"2d8e3525e9c56c814b33d3d8bbe7568aeb4c3477a2a1372c7cdd3f0984a23647","immutableEventType":"execution-attempt-envelope-created","retainedFields":["attemptId","idempotencyKey","workflowSlug","tenantReference","callerRole","contextFingerprint","modelRouteTelemetry","computeFabricTelemetry","humanApprovalGate","replayMetadata","failureRecovery"],"prohibitedFields":["patient identifiers","raw chart text","member identifiers","production connector payloads","secrets","credentials"]},"replayMetadata":{"replayToken":"replay_b8c7009f50d041cc33d9967c","replayEligible":true,"idempotencyScope":"tenant-reference + workflow slug + workflow version + caller role + input digest","ttlHours":72,"deterministicInputs":["workflowSlug","workflowVersion","tenantReference","callerRole","agentRuntimeId","inputDigest","contextFingerprint","policyRefs"],"replayPolicy":"Replay returns the retained metadata envelope only and cannot repeat protected external actions.","conflictResponse":"Return conflict when the same idempotency key maps to a different input digest, context fingerprint, or caller role.","expirationBehavior":"Expired metadata-only keys require a new envelope and cannot revive protected execution."},"toolPlan":{"toolRegistryVersion":"scrimed-tool-registry-no-phi-v1","allowedTools":["synthetic-context-reader","evidence-card-builder","review-packet-drafter","metadata-audit-appender"],"blockedTools":["ehr-writeback","patient-messaging","payer-submission","claims-submission","production-connector-write"],"noConnectorAccess":true,"noRecordMutation":true},"failureRecovery":{"retryPolicy":"Retry metadata envelope creation only when validation, hash generation, or audit-link assembly fails before any protected action.","quarantineTriggers":["PHI-like input","protected action request","missing reviewer gate","missing context fingerprint","model route telemetry absent","idempotency conflict"],"fallbackBehavior":"Return a deny-by-default review packet and require human operator triage.","rollbackBehavior":"No external side effect exists to roll back; retain denial metadata and preserve prior workflow state.","deadLetterOwner":"TrustOS and platform reliability"},"evidenceAuditTrail":{"attempt_id":"att_c457962a73ff","user_session_tenant_context":{"tenantReference":"tenant-ref-synthetic-atlas","callerRole":"trustops-reviewer","agentRuntimeId":"agent-runtime-trustops-supervisor","sessionReference":"metadata-only-no-live-session"},"timestamp":"2026-06-27","route":"/api/workflows/execution-attempts/envelope","action":"Create a reviewer-held TrustOps signal and recommendation packet with durable evidence binding for synthetic operations review.","allowed_blocked_decision":"allowed","policy_version":"scrimed-safety-governance-v2026-06-29","input_classification":"synthetic-no-phi","phi_detected":false,"synthetic":true,"model_provider_selected":"synthetic-fallback","model_tier_selected":"FAST_LOW_COST","compute_fabric_audit_hash":"scrimed-intel-9abbb131","compute_fabric_selected_model":"private-sglang-compact-runtime-slot","compute_fabric_model_tier":"COMPACT_REASONING_MODEL","compute_fabric_provider":"scrimed_private_sglang","compute_fabric_deployment_mode":"CUSTOMER_VPC","compute_fabric_phi_policy":"metadata-only-no-public-phi","compute_fabric_human_review_required":false,"output_hash":"25637661bf746a6c51014d4f4ef9a5675acb8c6076f93b44d5817abc05fd4049","evidence_envelope_hash":"590ff91776c7eec0932a1dbffbcded47b4d9aa86de36d2c4db5f08f9e93fe131","status":"review-required","failure_reason":null},"evaluationBindings":{"syntheticScenarioRefs":["agent-scorecard-runtime-permission","hallucination-uncited-guideline","clinical-safety-prohibited-action","evidence-quality-stale-policy","regression-workflow-result-diff","synthetic-patient-missing-data","adversarial-prompt-injection-tool-override","sanar-conflict-temporal-escalation","clinical-copilot-unit-abbreviation-citation"],"scorecardRefs":["scorecard-idempotency-replay","scorecard-no-phi-boundary","scorecard-route-telemetry","scorecard-human-review","scorecard-audit-linkage","scorecard-protected-capability-denial","scorecard-failure-recovery","scorecard-context-fingerprint","clinical-robustness-scorecard-sanar-conflict-temporal-escalation","clinical-robustness-scorecard-clinical-copilot-unit-abbreviation-citation"],"clinicalRobustness":{"labRoute":"/clinical-robustness-lab","scenarioRefs":["sanar-conflict-temporal-escalation","clinical-copilot-unit-abbreviation-citation"],"scorecardRefs":["clinical-robustness-scorecard-sanar-conflict-temporal-escalation","clinical-robustness-scorecard-clinical-copilot-unit-abbreviation-citation"],"perturbationRefs":["missing-data","missing-labs-risk","conflicting-data","temporal-inconsistencies","data-freshness","human-review-requirement","abbreviations","wrong-units","hallucination-risk","citation-reference-quality","guideline-grounding","model-disagreement"],"averageClinicalReadinessScore":96,"reviewerQueues":["clinical-safety-review","clinical-copilot-review"],"dataBoundary":"synthetic-no-phi-only","clinicalAuthority":"not-authorized-live-care","phiAuthority":"not-authorized-production-phi","reviewerGate":"human-review-required"}},"retainedBoundary":"This envelope is a metadata-only, no-PHI, replayable contract. It is not live workflow execution, not production persistence, not model routing approval, and not clinical or payer authority."}],"scorecards":[{"scorecardId":"scorecard-idempotency-replay","scenarioSlug":"execution-attempt-idempotency-replay","category":"regression","status":"pass","checks":[{"check":"unique-idempotency-keys","passed":true,"detail":"Every synthetic envelope must have a stable, unique idempotency key."},{"check":"replay-token-present","passed":true,"detail":"Replay metadata must be present and addressable without repeating external side effects."},{"check":"metadata-only-replay-policy","passed":true,"detail":"Replay policy must return retained metadata only."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-no-phi-boundary","scenarioSlug":"execution-attempt-no-phi-boundary","category":"synthetic-patient","status":"pass","checks":[{"check":"no-phi-authority","passed":true,"detail":"Every envelope must keep production PHI authority blocked."},{"check":"synthetic-metadata-boundary","passed":true,"detail":"Every envelope must remain synthetic and metadata only."},{"check":"prohibited-fields-retained","passed":true,"detail":"Audit trail must explicitly prohibit raw chart text."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-model-route-telemetry","scenarioSlug":"execution-attempt-model-route-telemetry","category":"agent-scorecard","status":"pass","checks":[{"check":"route-telemetry-present","passed":true,"detail":"Every envelope must log route id, provider class, model version, cost, latency, confidence, and rationale."},{"check":"not-production-routing","passed":true,"detail":"Model routing telemetry must not become production routing approval."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-compute-fabric-binding","scenarioSlug":"execution-attempt-compute-fabric-binding","category":"agent-scorecard","status":"pass","checks":[{"check":"compute-fabric-telemetry-present","passed":true,"detail":"Every envelope must bind SCRIMED Compute Fabric model tier, provider, deployment mode, PHI policy, fallback path, and audit hash."},{"check":"compute-fabric-evidence-audit-bound","passed":true,"detail":"Evidence audit trails must retain Compute Fabric selection metadata for durable replay and review."},{"check":"high-risk-compute-fabric-human-review","passed":true,"detail":"High-risk execution attempts must require human review in both the envelope and Compute Fabric decision."},{"check":"confidence-is-not-correctness","passed":true,"detail":"Compute Fabric confidence metadata must not be treated as clinical correctness without evidence and human review."},{"check":"no-live-model-call-boundary","passed":true,"detail":"Execution attempts must keep Compute Fabric routing metadata-only with no live provider call."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-human-review-gate","scenarioSlug":"execution-attempt-human-review-gate","category":"clinical-safety","status":"pass","checks":[{"check":"human-review-required","passed":true,"detail":"Every envelope must require human review for protected healthcare workflows."},{"check":"clinical-care-blocked","passed":true,"detail":"Envelope must not create live clinical-care authority."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-clinical-robustness-binding","scenarioSlug":"execution-attempt-clinical-robustness-binding","category":"clinical-robustness","status":"pass","checks":[{"check":"clinical-robustness-scenarios-bound","passed":true,"detail":"Every envelope must bind to at least two Clinical Robustness Lab scenarios."},{"check":"clinical-robustness-scorecards-bound","passed":true,"detail":"Every robustness scenario binding must have a matching clinical readiness scorecard ref."},{"check":"clinical-robustness-no-phi-boundary","passed":true,"detail":"Clinical robustness bindings must retain no-PHI, no-live-care, and human-review boundaries."},{"check":"clinical-robustness-perturbations-covered","passed":true,"detail":"Durable execution attempts must cover all 18 required clinical robustness perturbation families."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-audit-linkage","scenarioSlug":"execution-attempt-audit-linkage","category":"evidence-quality","status":"pass","checks":[{"check":"audit-event-id-present","passed":true,"detail":"Every envelope must include an audit event id."},{"check":"trace-id-present","passed":true,"detail":"Every envelope must include a replayable trace id."},{"check":"evidence-refs-present","passed":true,"detail":"Every envelope must retain source or evidence references."},{"check":"evidence-audit-trail-present","passed":true,"detail":"Every envelope must bind attempt id, policy version, output hash, and evidence envelope hash."},{"check":"evidence-audit-trail-no-phi","passed":true,"detail":"Evidence audit trail must fail closed before PHI-like input can become retained evidence."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-protected-capability-denial","scenarioSlug":"execution-attempt-protected-capability-denial","category":"adversarial","status":"pass","checks":[{"check":"protected-actions-denied","passed":true,"detail":"Every envelope must deny patient outreach, payer submission, and EHR writeback."},{"check":"connector-write-blocked","passed":true,"detail":"Tool plan must block connector access and record mutation."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-failure-recovery","scenarioSlug":"execution-attempt-failure-recovery","category":"missing-data","status":"pass","checks":[{"check":"quarantine-triggers-present","passed":true,"detail":"Failure recovery must preserve quarantine triggers for unsafe or incomplete attempts."},{"check":"rollback-no-side-effects","passed":true,"detail":"Rollback behavior must acknowledge no external side effects exist."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."},{"scorecardId":"scorecard-context-fingerprint","scenarioSlug":"execution-attempt-context-fingerprint","category":"hallucination-check","status":"pass","checks":[{"check":"context-fingerprint-present","passed":true,"detail":"Every envelope must have a context fingerprint for evidence-bound replay."},{"check":"compressed-context-only","passed":true,"detail":"Every model-facing context reference must be compressed before use."},{"check":"policy-refs-present","passed":true,"detail":"Every envelope must bind to organization policy context."}],"hallucinationRisk":"low","clinicalSafetyStatus":"pass-review-gated","evidenceQualityStatus":"pass","promptInjectionStatus":"pass","missingDataStatus":"pass","regressionStatus":"pass","requiredHumanReview":true,"releaseDecision":"pass-for-synthetic-contract","retainedBoundary":"Scorecard validates synthetic, metadata-only envelope integrity. It does not authorize clinical production, PHI use, connector execution, or autonomous protected action."}],"nextImplementationSteps":["Extend the durable-store schema/RPC evidence projections with Compute Fabric selected model, tier, deployment mode, PHI policy, fallback path, and audit hash.","Add production model registry tables for provider, model version, cost, latency, privacy, risk tier, fallback, approval state, and Compute Fabric compatibility.","Wire scorecard execution into CI and release evidence so no-PHI eval failures block deployment before production promotion.","Add authenticated human-review disposition APIs before any protected workflow attempt can progress beyond metadata-only review.","Design dead-letter, retry, quarantine, and incident-review runbooks for future governed execution workers."],"updated":"2026-06-27"}