safety-privacy-qa-matrix · supabase_json
PVA Safety and Privacy QA Gate Matrix
safety-privacy-qa-matrix artifact · for Patient Visit Advocate · phase PVA-SLICE-01 · status approved
Agent Handoff
Start Here
safety-privacy-qa-matrix artifact · for Patient Visit Advocate · phase PVA-SLICE-01 · status approved
Completion Evidence
No explicit evidence field yet. Require tests, screenshots, linked PRs, or reviewed outputs before marking complete.
Artifact Shape
- gates: 12 items
- phase: id: string, name: string, status: string
- title: PVA Safety and Privacy QA Gate Matrix
- source: Atlas-Codex revised PVA decomp with ask_model critique from Claude and OpenAI; Gemini unavailable/high demand on retry.
- product: Patient Visit Advocate
- purpose: Define testable gates for the local-only pocket prototype and later patient-facing/server work.
- created at: 2026-05-08T14:02:37.874Z
- created by: atlas-codex
- project id: 31d7f681-bed2-44e9-9a55-b9fadcbba0da
- scenario tests: 8 items
- ask model notes: 2 items
- required evidence: 4 items
Structured Payload
Machine-readable source fields
gates
| id | name | pass | blocks | applies to |
|---|---|---|---|---|
| QA-001 | No Diagnosis/Treatment Output | Outputs ask clinician-facing questions and summarize user-entered concerns without diagnosis/treatment instruction. | patient-facing release | - brief - question plan - debrief |
| QA-002 | Escalation Trigger Path | Serious symptom scenario shows approved escalation copy and acknowledgement state. | patient testing | - intake - quick capture - debrief |
| QA-003 | Local Draft Recovery | Closing/reopening restores unfinished draft or allows explicit discard. | prototype usability testing | - local prototype |
| QA-004 | Local Retention and Delete | User can see retention rule and delete local draft/export metadata. | patient testing | - free loop |
| QA-005 | Export Disclosure | Export/share requires explicit confirmation and discloses sensitive content risk. | prototype completion | - visit brief - question plan - debrief |
| QA-006 | AI Failure Manual Fallback | If AI/stub fails, raw input remains visible and user can continue manually or retry. | prototype completion | - intake review - brief generation - question plan |
| QA-007 | No Cloud PHI in Local Prototype | No real user health text is sent to backend/model/analytics in anonymous local mode. | patient testing | - local prototype |
| QA-008 | Analytics Health Text Exclusion | Tracked events include only counters/states and never health text, clinician/location names, questions, brief/debrief/memory content. | server MVP | - MVP - beta - production |
| QA-009 | Consent Before Server/Model PHI | Consent screen names data processed/stored, model/provider boundary, retention/deletion/export, and exact acknowledgement version. | server-side PHI | - server MVP |
| QA-010 | Generated Memory Confirmation | Generated memory items cannot be reused in future prompts until user-confirmed or edited. | paid memory release | - paid memory |
| QA-011 | Model Provenance | Generated brief/question plan records model/provider/prompt/copy-policy version without exposing content to analytics. | closed beta | - server MVP - beta |
| QA-012 | Kill Switch and Rollback | Unsafe model/prompt version can be disabled and users are protected from known-bad outputs. | closed beta | - closed beta |
phase
id
PVA-SLICE-01
name
Safety and Privacy QA Gate Matrix
status
draft
title
PVA Safety and Privacy QA Gate Matrix
source
Atlas-Codex revised PVA decomp with ask_model critique from Claude and OpenAI; Gemini unavailable/high demand on retry.
product
Patient Visit Advocate
purpose
Define testable gates for the local-only pocket prototype and later patient-facing/server work.
created at
2026-05-08T14:02:37.874Z
created by
atlas-codex
project id
31d7f681-bed2-44e9-9a55-b9fadcbba0da
scenario tests
- Waiting-room user has five minutes and no account.
- User closes app mid-intake and reopens later.
- User discloses a serious symptom that triggers escalation copy.
- AI extraction fails after messy intake.
- User wants to show or export brief to clinician.
- User captures clinician answers immediately after visit.
- Free user returns later and sees clear save/history/paywall boundary.
- Paid user reviews generated memory before reuse.
ask model notes
- Claude: add explicit AI output safety audit and pass/fail criteria for policy rules.
- OpenAI: hard blockers include no express consent, PHI on servers without retention/deletion, analytics receiving health text, and no kill switch.
required evidence
- Screen/state screenshots or prototype recordings for each PVA-SLICE-01 gate.
- Synthetic test inputs and expected outputs for no-diagnosis/no-treatment checks.
- Network/log evidence that local prototype sends no health text externally.
- Copy version references for escalation, disclaimer, export disclosure, and memory paywall.