{
  "title": "Chart-initiated (EHR) SMART launch mechanics",
  "scope": "Local chart-initiated SMART source mechanics independently reviewed with scripted responses. This static page does not run the adapter or connect to Epic.",
  "evidence_sources": [
    {
      "original_relative_path": "review-epic-ehr-launch/revision3/ACCEPTANCE.json",
      "sha256": "d0cdd132fc682a36c941dfce00dce048b40aea9f72abd3bd646db93ee39804eb",
      "review_timestamp": "2026-10-07T23:08:07.283471+00:00",
      "timestamp_note": "Null means no review timestamp was recorded in this source.",
      "status": "ACCEPT_LOCAL_EHR_LAUNCH_R3_CHANGED_MECHANICS_ONLY"
    },
    {
      "original_relative_path": "epic-ehr-launch/revision3/HANDOFF.json",
      "sha256": "617750a56597d60a6acdf8a43154a194909bde320fea924ad622abf1b753aa35",
      "review_timestamp": null,
      "timestamp_note": "Author handoff; the acceptance above is the independent review.",
      "status": "FROZEN_FOR_INDEPENDENT_ACCEPTANCE_LOCALLY_TESTED_LIVE_UNVERIFIED"
    }
  ],
  "substantiated_claims": [
    "A public launch entry accepts exactly one issuer and one opaque launch token, validates the issuer against the single configured issuer, and stores the token server-side in a single-use ticket referenced by an HttpOnly, SameSite=Strict cookie.",
    "Staff sign-in continues to the sandbox page when a launch is pending; the authorization then carries the server-held launch token, aud = issuer, PKCE S256 and the EHR launch scope.",
    "A new chart launch supersedes the session's prior token context, review and pending authorization; invalid or foreign tickets are refused before any chart action.",
    "The independent R3 review recorded 26 passing focused checks and 48 loopback HTTP requests with scripted transport; it reused prior browser mechanics and did not rerun a browser in that revision."
  ],
  "limits": [
    "Local mechanics only, not real Epic OAuth/FHIR or delivered patient/visit context.",
    "The current sandbox app is saved at Test stage with an expected Draft label; LaunchPad setup is available (registration.json). No actual launch was demonstrated by those observations.",
    "Process-local stores and existing runtime/auth/privacy/resource/cleanup deployment gates remain separate.",
    "No current customer queue, chart writeback, payer submission, clinical accuracy or operational outcome follows from this static presentation."
  ],
  "excerpt_prepared_at_utc": "2026-10-13T19:36:04.513154+00:00",
  "excerpt_policy": "Curated claims and file hashes only. Original internal reports, tokens, private absolute paths and raw test logs are not copied.",
  "related_evidence": "registration.json"
}