Integration architecture

!EHR integration architecture

The existing integration control plane is the source of truth for connection governance.

Connection lifecycle

CONTRACT
 → REVISION
 → SECRET BINDING
 → VALIDATION
 → ACTIVATION APPROVAL
 → SYNC
 → HEALTH
 → RECONCILIATION

A connection is resolved from its customer context. The runtime does not choose one environment-global EHR vendor for every customer.

Source boundaries

The adapter produces source envelopes and canonical records. Vendor-specific payloads should not flow directly into core denial logic.