Identity HA
Central OIDC identity must be redundant, monitored and recovery-tested.
UNIFIED SCIENTIFIC ECOSYSTEM
Phase 8B takes a Phase 8A-qualified staging release candidate into provider-neutral external production-like qualification. HA/PITR, external secrets and KMS/HSM, WAF/TLS, SIEM, encrypted storage, disaster recovery and independent penetration evidence must be proven. REAL PATIENT DATA LOCKED; Phase 8A staging evidence is retained but never converted automatically into production PASS evidence.
Identity, tenancy, subscription and entitlement controls are deliberately modeled centrally.
PHASE 8B EXTERNAL PRODUCTION-LIKE QUALIFICATION
Central OIDC identity must be redundant, monitored and recovery-tested.
Dedicated tenant databases keep identity fingerprinting, TLS, HA and restore proof.
Production secrets and encryption keys remain external to source code and MADOMIC databases.
Default-deny service networking; only explicit flows may be opened.
OpenTelemetry-compatible telemetry with clinical-data minimization and SIEM routing.
Staging LOCAL_PASS remains staging evidence and never becomes production PASS automatically.
Phase 8B requires reviewed, hashed external evidence; independent penetration testing is mandatory.
Phase 8B can only reach READY_FOR_PHASE9_REVIEW and cannot authorize the real clinical pilot.
DEPLOYMENT PATH