{
  "product": "Hospital in a Box",
  "updated": "2026-10-31",
  "honesty": "Connectors listed here are architecture and config stubs for professionals. Do not treat as a live full clinical stack unless a backend is verified in this repository.",
  "bridge_platform_verified_in_repo": [
    {
      "id": "control-api",
      "path": "control-api/",
      "status": "In development",
      "notes": "FastAPI OIDC tenant control plane; not HIAB clinical EMR."
    },
    {
      "id": "gateway",
      "path": "gateway/",
      "status": "In development",
      "notes": "Reference task/evidence gateway; operational:false catalog."
    },
    {
      "id": "keycloak",
      "path": "identity/taurus-realm.json",
      "status": "In development",
      "notes": "Realm import present; HIAB static pages do not claim live SSO wiring."
    },
    {
      "id": "nocobase",
      "path": "compose.yaml",
      "status": "In development",
      "notes": "CMS/control plane container; not clinical production."
    },
    {
      "id": "paypal",
      "path": "docs/audit/2026-10-31-connection-audit.md",
      "status": "Planned",
      "notes": "Runtime PayPal stubs documented elsewhere; credentials via env only."
    }
  ],
  "clinical_connectors": [
    {
      "id": "emr-hl7-fhir",
      "name": "EMR / HL7 / FHIR",
      "status": "Not available",
      "required": ["BAAs or POPIA contracts", "FHIR R4 mapping", "audit logging", "clinical safety review"]
    },
    {
      "id": "pharmacy",
      "name": "Pharmacy / stock",
      "status": "Not available",
      "required": ["Inventory master", "controlled-substance controls", "pharmacist oversight"]
    },
    {
      "id": "billing",
      "name": "Billing / medical schemes",
      "status": "Not available",
      "required": ["Scheme rules", "PCI scope if cards", "finance reconciliation"]
    },
    {
      "id": "telemed",
      "name": "Telemedicine",
      "status": "Not available",
      "required": ["Licensed clinicians", "secure video", "consent workflows"]
    },
    {
      "id": "imaging-ai",
      "name": "Imaging / AI diagnostics",
      "status": "Not available",
      "required": ["Clinical validation", "regulatory pathway", "human oversight", "separate product governance"]
    }
  ],
  "compliance_checklist_not_certification": [
    "Lawful basis and purpose limitation (POPIA / HIPAA-class framing)",
    "Data minimisation — no PHI in public demos",
    "Role-based access and audit trails",
    "Encryption in transit (TLS) and at rest (platform dependent)",
    "Retention and breach response procedures",
    "Vendor BAAs / operator agreements before live clinical data"
  ]
}