health.hats.audit.breakGlass
A break-glass record: clinician DID, institution, reason, sections, and window. Written by the institution node that requested emergency access, into its own repo in the patient's health.hats.audit.log space; signed by the clinician, with a transparency receipt. The coordinator logs the same decision before granting and never writes into spaces.
Details · record, key tid
| Kind | record |
|---|---|
| Record key | tid |
| Authority | audit.hats.health |
| Indexed |
Record
record · key tidProperties
prev
refFHIR resource type of the body. Which FHIR resource carries a break-glass record is not yet decided.
signatures
refSimilar lexicons
semantic matchLexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.
-
A patient-signed pre-authorization of a sharing class: a FHIR R4 Consent (scope patient-privacy) under the HATS profile. Stored in the patient's health.hats.audit.log space; read by the coordinator when it answers checkUserAccess.
-
health.hats.provider.grant
recordA provider grant: a FHIR R4 Consent under the HATS profile (one flat provision: actor, class, code, securityLabel, action, purpose, period). Stored in the patient's health.hats.audit.log space. Counts only with an attestation from the patient or an act circle member; a grant carrying V counts only with the patient's own.
-
health.hats.fhir.auditEvent
recordA FHIR R4 AuditEvent resource. The record is the resource itself: its JSON fields as FHIR defines them, plus $type and the HATS integrity fields. Decimals are strings, since atproto has no floats; codes keep their code system's case.
-
The subject of the IPS document (FHIR Patient); required by Patient/$summary, so it opens with any emergency access. The skey is the HL7 confidentiality code, lowercase (n, r, v), or 42cfrpart2 for 42 CFR Part 2 records.
-
A FHIR R4 ClinicalImpression resource. The record is the resource itself: its JSON fields as FHIR defines them, plus $type and the HATS integrity fields. Decimals are strings, since atproto has no floats; codes keep their code system's case.