SCRIMED TrustOps Intelligence Layer
Governed module scoring, synthetic signal detection, and recommendation-only remediation for SCRIMED agents.
SCRIMED TrustOps Intelligence Layer is a synthetic-only architecture layer that prepares SCRIMED for safe healthcare agent orchestration by combining module governance, signal detection, structured validation, semantic intelligence, and human-in-the-loop remediation recommendations.
Safety boundary
TrustOps can recommend and validate, but it cannot execute real-world healthcare actions.
Demo/synthetic only. SCRIMED TrustOps does not authorize live PHI, autonomous diagnosis, treatment, prescribing, patient outreach, payer submission, EHR writeback, billing submission, production connector use, certification claims, compliance completion claims, or customer go-live.
Scoring formula: total = safety*0.30 + governance*0.25 + evidence*0.18 + workflowValue*0.15 + interoperability*0.12 - riskPenalty*0.30
Module scoring
Every TrustOps module has trust scoring, governance scoring, interoperability readiness, evidence requirements, and automation-risk posture.
Patient Journey Memory
Purpose-bound synthetic memory for longitudinal journey context, handoff continuity, care-gap visibility, and reviewer-approved recall.
- Capabilities: Journey timeline synthesis, Handoff context recall, Care-gap context flags, Preference-safe memory scoping
- Structured outputs: journey_memory_brief, care_gap_context_packet, memory_scope_audit
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Bind synthetic journey memory to module brief validation with purpose, TTL, reviewer, and deletion-event fields.
Clinical Intelligence
Human-reviewed synthetic clinical reasoning support that surfaces evidence, uncertainty, missing data, and escalation criteria without clinical authority.
- Capabilities: Evidence synthesis, Missing-data risk flags, Clinical uncertainty reporting, Escalation criteria drafting
- Structured outputs: clinical_intelligence_brief, evidence_gap_report, human_review_packet
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Require ClinicalBench pass/fail evidence and Trust Score explanation before expanding any clinical-intelligence demo.
RCM / Denials
Synthetic denial-pattern intelligence for root-cause analysis, documentation packet readiness, and manual follow-up recommendations.
- Capabilities: Denial spike detection, Documentation gap mapping, Appeal packet draft requirements, RCM owner routing
- Structured outputs: denial_signal_report, documentation_gap_packet, manual_routing_recommendation
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Add no-submission denial packet generation with manual verification and payer-action hard stops.
Prior Authorization
Synthetic prior-authorization workflow intelligence for stalled tasks, missing packets, evidence requirements, and human-reviewed next steps.
- Capabilities: PA stall detection, Missing documentation checklist, Evidence packet regeneration, Manual verification queueing
- Structured outputs: prior_auth_status_packet, missing_packet_checklist, manual_review_queue_item
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Connect prior-auth recommendations to durable review packets without enabling payer submission.
Patient Access
Synthetic access operations intelligence for intake friction, eligibility-ready packets, scheduling handoffs, and service-line routing.
- Capabilities: Access bottleneck detection, Eligibility packet readiness, Service-line routing recommendation, Intake completeness scoring
- Structured outputs: access_readiness_score, intake_gap_packet, manual_routing_recommendation
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Add synthetic access-score trend view with owner assignment and escalation boundaries.
Scheduling
Synthetic scheduling intelligence for wait-time signals, capacity constraints, referral handoffs, and manual appointment-workflow recommendations.
- Capabilities: Wait-time signal detection, Capacity bottleneck summaries, Referral handoff readiness, Manual scheduling task routing
- Structured outputs: scheduling_signal_report, capacity_gap_packet, manual_queue_recommendation
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Create synthetic scheduling replay scenarios before any calendar or patient-facing integration is considered.
Referral Management
Synthetic closed-loop referral intelligence for leakage, delays, owner routing, wait-time risk, and feedback packet generation.
- Capabilities: Referral delay detection, Leakage risk scoring, Closed-loop status tracking, Provider-matching readiness
- Structured outputs: referral_signal_report, leakage_risk_packet, closed_loop_feedback_packet
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Bind referral intelligence to human-reviewed owner routing and no-outreach hard stops.
Imaging Intelligence
Synthetic imaging operations intelligence for turnaround delays, DICOM workflow status, report-readiness gaps, and manual escalation packets.
- Capabilities: Imaging turnaround detection, DICOM metadata readiness, Report-delay summaries, Radiology workflow escalation
- Structured outputs: imaging_signal_report, turnaround_delay_packet, radiology_review_queue_item
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Add imaging-operation fixtures for modality, site, report status, and reviewer escalation without image diagnosis.
Population Health
Synthetic population-risk intelligence for care-gap patterns, outreach-ready-but-blocked tasks, stratification explainability, and reviewer queues.
- Capabilities: Care-gap signal detection, Synthetic cohort stratification, Population trend summaries, Manual intervention queueing
- Structured outputs: population_signal_report, care_gap_packet, manual_review_queue_item
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Add de-identification and consent-state placeholders before any non-synthetic population workflow design.
Quality / HEDIS / STAR
Synthetic quality intelligence for measure-gap detection, evidence readiness, denominator/numerator traceability, and reviewer-owned remediation queues.
- Capabilities: Measure-gap detection, Evidence readiness scoring, Quality packet drafting, Reviewer disposition tracking
- Structured outputs: quality_signal_report, measure_gap_packet, reviewer_disposition_item
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Create measure-specific synthetic validation packs with no payer submission or performance-guarantee claims.
Governance / Compliance
Synthetic governance intelligence for sensitive-task triage, audit readiness, policy gates, evidence completeness, and compliance escalation recommendations.
- Capabilities: Policy-gate enforcement, Sensitive-task detection, Evidence completeness checks, Compliance escalation packets
- Structured outputs: governance_decision_packet, compliance_escalation_packet, audit_readiness_report
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Make governance/compliance the required supervisor lane for every TrustOps recommendation.
Signal Detection
Synthetic event analysis that detects operational issues, low-confidence outputs, integration drift, and safety-sensitive workflow conditions.
- Capabilities: Synthetic event rule evaluation, Severity assignment, Owner routing, Human-review recommendation generation
- Structured outputs: synthetic_signal, owner_routing_packet, review_required_flag
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Promote signal rules into versioned policy-controlled fixtures with replayable synthetic traces.
Self-Healing Operations
Recommendation-only remediation planning for retry, validation, investigation, review, duplicate reconciliation, and automation pause workflows.
- Capabilities: Recommendation-only remediation, Human-review gating, Blocked-action enforcement, Operational owner routing
- Structured outputs: self_healing_recommendation, manual_verification_task, automation_pause_packet
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Connect recommendation outputs to human-run packets and keep all real-world execution disabled.
Semantic Intelligence Graph
Synthetic semantic graph linking modules, signals, evidence requirements, safety controls, workflow owners, and remediation recommendations.
- Capabilities: Module-signal graphing, Evidence lineage, Safety-boundary traversal, Owner and workflow mapping
- Structured outputs: semantic_graph_node, evidence_lineage_packet, trustops_dependency_map
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Use graph nodes to make every TrustOps output traceable to module, signal, evidence, and governance-control sources.
Secure Middleware Gateway
Governed middleware abstraction for future MCP/tool access, authorization, schema validation, rate limits, audit logs, and no-direct-system access.
- Capabilities: Tool authorization map, Schema validation boundary, No direct LLM-to-system access, Audit and revocation readiness
- Structured outputs: tool_authorization_decision, middleware_audit_event, blocked_action_packet
- Evidence: Synthetic input fixture, Structured output schema validation, Safety-boundary statement, Human-review disposition placeholder, Evidence and audit trace reference
- Next step: Require middleware authorization decisions for every future tool call before real connector evaluation.
Signal Engine
Synthetic-only signals identify operational risk without touching PHI, EHRs, payers, outreach systems, or production connectors.
denied_claim_spike
Synthetic denial volume exceeded the configured threshold and may indicate documentation or coding workflow friction. Observed 22 denials per synthetic hour; threshold 10.
- Owner: Revenue Cycle Lead
- Action: Open a synthetic denial-pattern investigation packet for manual review.
- Eligibility: manual-review-required
- Human review required: yes
referral_delay
Synthetic referral queue time exceeded the threshold and could become leakage risk in a governed pilot. Observed 9 days in synthetic queue; threshold 4.
- Owner: Referral Operations Lead
- Action: Request human review of delayed synthetic referrals and owner routing.
- Eligibility: manual-review-required
- Human review required: yes
prior_auth_stalled
Synthetic authorization tasks remained unresolved beyond the safe review threshold. Observed 6 synthetic business days; threshold 2.
- Owner: Prior Authorization Lead
- Action: Queue stalled synthetic prior-auth packets for manual verification.
- Eligibility: manual-review-required
- Human review required: yes
missing_documentation
Required synthetic packet fields are missing and should not move forward without validation. Observed 7 missing packet fields; threshold 1.
- Owner: Clinical Documentation Lead
- Action: Regenerate the missing synthetic documentation packet for reviewer inspection.
- Eligibility: manual-review-required
- Human review required: yes
imaging_turnaround_delay
Synthetic imaging turnaround exceeded the configured threshold. Observed 48 synthetic hours; threshold 24.
- Owner: Imaging Operations Lead
- Action: Retry the synthetic imaging-status workflow and route the result to manual review.
- Eligibility: manual-review-required
- Human review required: yes
care_gap_detected
Synthetic care-gap signals require review before any patient-facing or outreach-adjacent workflow is considered. Observed 14 synthetic care gaps; threshold 3.
- Owner: Population Health Lead
- Action: Request human review of the synthetic care-gap packet.
- Eligibility: manual-review-required
- Human review required: yes
failed_api_sync
Synthetic middleware sync failures may indicate connector readiness or schema drift issues. Observed 5 synthetic sync failures; threshold 1.
- Owner: Platform Reliability Lead
- Action: Re-run synthetic middleware validation and inspect the failed sync trace.
- Eligibility: manual-review-required
- Human review required: yes
duplicate_patient_context
Duplicate context signals are safety-sensitive even in synthetic mode and must block automation. Observed 2 synthetic duplicate contexts; threshold 1.
- Owner: Data Governance Lead
- Action: Reconcile duplicate synthetic contexts through manual verification.
- Eligibility: manual-review-required
- Human review required: yes
low_confidence_agent_output
Low-confidence clinical-adjacent outputs must not continue without reviewer disposition. Observed 42 confidence score; threshold 70.
- Owner: Clinical QA Lead
- Action: Pause automation and route the synthetic agent output to qualified review.
- Eligibility: manual-review-required
- Human review required: yes
compliance_sensitive_task
Compliance-sensitive task classification requires explicit human review and retained hard stops. Observed 1 sensitive synthetic task; threshold 1.
- Owner: Compliance Lead
- Action: Escalate the synthetic sensitive task to compliance review.
- Eligibility: manual-review-required
- Human review required: yes
Self-Healing Workflow
Remediation is recommendation-only and always routed through a human review gate.
open investigation ticket
A human-reviewed open investigation ticket packet for RCM / Denials.
- Signal: denied_claim_spike
- Steps: Create an investigation ticket draft., Attach trend summary, threshold, and affected workflow., Assign the owner for manual investigation.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
request human review
A human-reviewed request human review packet for Referral Management.
- Signal: referral_delay
- Steps: Create a reviewer task with signal reason and source event., Attach the synthetic evidence packet., Block any downstream automation until disposition is recorded.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
queue for manual verification
A human-reviewed queue for manual verification packet for Prior Authorization.
- Signal: prior_auth_stalled
- Steps: Create a manual verification queue item., Attach the stalled workflow trace., Require owner disposition before any next step.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
regenerate missing packet
A human-reviewed regenerate missing packet packet for Clinical Documentation / RCM.
- Signal: missing_documentation
- Steps: Regenerate the synthetic evidence packet., Validate required schema fields., Queue the packet for human review.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
retry workflow
A human-reviewed retry workflow packet for Imaging Intelligence.
- Signal: imaging_turnaround_delay
- Steps: Replay the synthetic workflow trace., Re-run structured-output validation., Send the replay packet to the assigned owner.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
request human review
A human-reviewed request human review packet for Population Health.
- Signal: care_gap_detected
- Steps: Create a reviewer task with signal reason and source event., Attach the synthetic evidence packet., Block any downstream automation until disposition is recorded.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
re-run validation
A human-reviewed re-run validation packet for Secure Middleware Gateway.
- Signal: failed_api_sync
- Steps: Re-run schema validation against the synthetic trace., Capture validation errors., Route failures to platform reliability review.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
reconcile duplicate records
A human-reviewed reconcile duplicate records packet for Patient Journey Memory.
- Signal: duplicate_patient_context
- Steps: Create a duplicate-context reconciliation packet., Compare only synthetic context identifiers., Require data-governance review before any merge-like recommendation.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
pause automation
A human-reviewed pause automation packet for Clinical Intelligence.
- Signal: low_confidence_agent_output
- Steps: Mark the synthetic workflow as automation-paused., Attach the confidence or safety reason., Require qualified reviewer approval before continuing.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
escalate to compliance
A human-reviewed escalate to compliance packet for Governance / Compliance.
- Signal: compliance_sensitive_task
- Steps: Create a compliance escalation packet., Attach policy boundary and signal details., Pause related automation recommendations until compliance review completes.
- Blocked actions: Live PHI access, Autonomous diagnosis, Treatment recommendation, Prescribing, Patient outreach, Payer submission, EHR writeback, Billing submission, Production connector mutation
Durable evidence binding
TrustOps review packets are ready for AAL2 protected record, replay, and review-disposition persistence without public writes.
trustops_packet_0d2297849796c5f2
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: denied_claim_spike
- Recommendation: open investigation ticket
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: 0d2297849796c5f28bbad86a5dedf4a49d4522b09807305b63d4ba4aead9964e
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_c6d05d917a0835cd
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: referral_delay
- Recommendation: request human review
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: c6d05d917a0835cd150d2a92ff0c15904268f3990ced90b6947d4520bf1768cd
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_a6ca92303fa59d72
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: prior_auth_stalled
- Recommendation: queue for manual verification
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: a6ca92303fa59d72d27bb4c381467ec77e41ffa527328751357b5dabac235470
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_6990f626c58f9ec0
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: missing_documentation
- Recommendation: regenerate missing packet
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: 6990f626c58f9ec00c53dd985e5cecdd5dcb0f7a5f9f1bf690c2777f7cca0b67
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_e3e651ef8489601a
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: imaging_turnaround_delay
- Recommendation: retry workflow
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: e3e651ef8489601a71ee4c21721211b0bec1ad7e262a2e8399dc5e61c8acec6f
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_fca92ef681d81a90
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: care_gap_detected
- Recommendation: request human review
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: fca92ef681d81a9077107cd90cac0741a25bce9a96bad75267af1cb36e99367f
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_2ba402d0d6776b8b
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: failed_api_sync
- Recommendation: re-run validation
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: 2ba402d0d6776b8b4ae6ca8e349b4fe28d79d00b5e0cd3f294385be558e3813a
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_0a9a6b12099a08a4
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: duplicate_patient_context
- Recommendation: reconcile duplicate records
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: 0a9a6b12099a08a4f67848f6c2bc9e37f73e500452b936feb93a9bfb7501e941
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_66c9f6c71259c993
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: low_confidence_agent_output
- Recommendation: pause automation
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: 66c9f6c71259c99375e69bb53dd0fb7b0085089f368d579290f19575381bf1f2
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
trustops_packet_1c6f6133871dd400
Synthetic TrustOps review packet only. Recommendation-only remediation requires human review and does not authorize live PHI, autonomous clinical action, payer submission, billing submission, EHR writeback, patient outreach, production connector use, certification, clinical validation, or customer go-live.
- Signal: compliance_sensitive_task
- Recommendation: escalate to compliance
- Attempt: att_c457962a73ff
- Replay token: replay_b8c7009f50d041cc33d9967c
- Packet hash: 1c6f6133871dd400d8a2322fd8bb527ebd90f5453034635e27798e06cb0e18e0
- Review route: /api/workflows/execution-attempts/durable-store/review-disposition
Every TrustOps module is demo/synthetic only.
Every module brief must pass structured-output validation.
Every signal requires human review.
Every self-healing output is recommendation-only.
No live PHI, diagnosis, treatment, prescribing, outreach, payer submission, EHR writeback, billing submission, or production connector action is authorized.
Safety and governance carry the highest weights in TrustOps scoring.
Secure Middleware Gateway remains the required future path between agents and systems of record.
Semantic Intelligence Graph links modules, signals, evidence, owners, safety controls, and recommendations.
all-required-trustops-modules-registered
All 15 requested TrustOps capability modules must be present.
trust-score-ranges-valid
Every module trust score must stay within 0-100.
safety-and-governance-weighted
TrustOps scoring must weight safety and governance highest.
synthetic-only-boundaries-present
Every module must clearly state demo/synthetic only.
no-autonomous-production-actions
Every module must block autonomous real-world clinical, payer, billing, EHR, outreach, or connector actions.
module-briefs-schema-valid
Every generated module brief must pass lightweight structured-output validation.
synthetic-signal-schema-valid
Every synthetic operational signal must validate and require human review.
self-healing-recommendations-schema-valid
Every remediation recommendation must validate as recommendation-only.
trustops-review-packets-durable-binding-valid
Every TrustOps signal/recommendation review packet must carry valid durable record, replay, and no-PHI review-disposition payloads.