{
  "title": "Standalone SMART authentication and chart-launch mechanics",
  "scope": "Locally implemented and independently reviewed using synthetic/offline inputs; not an Epic-hosted demonstration",
  "evidence_sources": [
    {
      "original_relative_path": "review-smart/ACCEPTANCE-R2.json",
      "sha256": "74294b6aabbf197a8ab770a8074a13078b390595f9b544c08bebfba2bbefaa8f",
      "review_timestamp": null,
      "timestamp_note": "Null means no review timestamp was recorded in this source.",
      "status": "accepted_offline_smart_transport_and_state_only"
    }
  ],
  "substantiated_claims": [
    "Offline tests exercised state/session/callback binding, replay rejection and mandatory PKCE.",
    "Synthetic transport checks rejected wrong patient/encounter and untrusted origins."
  ],
  "limits": [
    "No real vendor network was used.",
    "No real Epic SMART launch or sandbox patient retrieval demonstrated.",
    "The original standalone review predates the separately accepted chart-launch R3 correction; see ehr-launch.json.",
    "Local source acceptance does not establish current registered-client runtime, real Epic context, OAuth/FHIR success or customer enablement."
  ],
  "excerpt_prepared_at_utc": "2026-10-07T22:08:07.499619+00:00",
  "excerpt_policy": "Curated claims and file hashes only. Original internal reports, tokens, private absolute paths and raw test logs are not copied.",
  "coordinator_update_at_utc": "2026-10-13T19:36:04.513154+00:00",
  "related_evidence": "ehr-launch.json"
}