health.hats.audit.log

The access ledger: grants, break-glass records, derived grants, and legal disclosure records. The coordinator never reads it; each grant reaches the coordinator when it's made.

Repository @hats.health did:plc:uvvhtareovj2oaregs7vsibv not from the namespace authority
Details · space
Kindspace
Authorityaudit.hats.health
Indexed

Space

space · key any

Shown at sign-in

name

string

Access ledger

Collections

collections

array · nsid

The record collections clients of this space type use. A space: scope covers these unless it names its own.

Asking for it

OAuth scope

A client asks for access to spaces of this type with this scope. On its own it covers your own spaces, with any key, and reading, creating, updating and deleting records in the collections above; authority, skey, collection, action and manage narrow or widen that. From the Atproto Spaces proposal (0016).

Similar lexicons

semantic match

Lexicons whose schemas describe something close to this one. Check them before publishing a new one that overlaps.

  • Clinical consents (to treatment, to procedures). Access and sharing grants live in health.hats.audit.log, not here. The skey is the HL7 confidentiality code, lowercase (n, r, v), or 42cfrpart2 for 42 CFR Part 2 records.

  • health.hats.audit.breakGlass

    record not from the namespace authority

    A break-glass record: clinician DID, institution, reason, sections, and window. Written by the institution node that requested emergency access, into its own repo in the patient's health.hats.audit.log space; signed by the clinician, with a transparency receipt. The coordinator logs the same decision before granting and never writes into spaces.