At this level
health.hats.audit ยท 2- health.hats.audit.breakGlass record not from the namespace authority A break-glass record: clinician DID, institution, reason, sections, and window. Written by the institution node that requested emergency access, into its own repo in the patient's health.hats.audit.log space; signed by the clinician, with a transparency receipt. The coordinator logs the same decision before granting and never writes into spaces.
- health.hats.audit.log space not from the namespace authority The access ledger: grants, break-glass records, derived grants, and legal disclosure records. The coordinator never reads it; each grant reaches the coordinator when it's made.