Current capability status

The status vocabulary is intentionally strict.

Status	Meaning
IMPLEMENTED	Meaningful code exists.
RUNTIME-TESTED	Exercised against a real database/runtime, not only unit-mocked.
PARTIAL	Some behavior exists but the full capability is incomplete.
UNVALIDATED	Implemented but current evidence is incomplete.
SANDBOX	External sandbox capability has been validated.
CUSTOMER-UAT	Customer-specific validation completed.
PRODUCTION-ENABLED	Production activation evidence exists.
BLOCKED	An external dependency prevents completion.

Current high-value capabilities

Capability	Current status
Denial intake / case workflows	IMPLEMENTED
AI governed provider path	IMPLEMENTED / provider approval required
PHI classification and minimization	IMPLEMENTED / RUNTIME-TESTED
Row-level tenant isolation (database policies)	IMPLEMENTED / RUNTIME-TESTED
Runtime isolation gate (fails closed)	IMPLEMENTED / RUNTIME-TESTED
Audit-chain tamper evidence (chain + anchor)	IMPLEMENTED / RUNTIME-TESTED
Evidence artifact byte verification	IMPLEMENTED / RUNTIME-TESTED
Administrator sign-in throttling	IMPLEMENTED / RUNTIME-TESTED
Database and security suite in CI	IMPLEMENTED / RUNS IN CI
FHIR R4 connector runtime	IMPLEMENTED
Epic runtime	IMPLEMENTED / SANDBOX UNVALIDATED
Oracle Health profile/runtime	IMPLEMENTED / SANDBOX UNVALIDATED
athenahealth profile/runtime	IMPLEMENTED / SANDBOX UNVALIDATED
MEDITECH adapter foundation	PARTIAL / NOT PRODUCTION-PROVEN
Generic EHR write-back	DISABLED / GOVERNED
Voice agent	SIMULATION / DRY-RUN ONLY
Live telephony	NOT IMPLEMENTED / DISABLED
Public marketing site	IMPLEMENTED / DEPLOYED
Public documentation site	IMPLEMENTED / DEPLOYED
Lead capture	IMPLEMENTED / DATABASE + EMAIL DEPLOYMENT REQUIRED
Marketing analytics	IMPLEMENTED / DATABASE REQUIRED
Production deployment	LIVE — OWNER/PILOT USE; CLINIC DATA NOT YET ENABLED

the database/security suite contains 110 test files / 429 tests; the last full local run against PostgreSQL 16 as the isolated runtime role passed 428 with 1 skipped (a queue test that requires Redis, which the development machine does not run; a Redis service container is provided to the same suite in CI);
the row-level security suite passes 14/14 as a role that is neither superuser nor BYPASSRLS, covering every tenant table;
the isolation runtime gate is invoked on API boot, worker boot, and the serverless entrypoint, and a preflight command performs the same check before deployment.

Never upgrade a status based only on documentation, configuration, mock data, or an adapter-pack entry.