PHLEBOTOMY OPERATIONS · RELEASE R024

Command Center

Order intake, governed specimen rules, scheduling, and dispatcher-reviewed routes

Checking API
⚠
Development demonstration environmentSynthetic records only. Production authorization, BAA, key custody, vendor validation, and operational controls remain deployment responsibilities.
▤
New Orders—Awaiting intake
⌁
✓
Intake Review—Human decision queue
⌁
◈
Missing Information—Provider follow-up required
⌁
⚠
Extraction Reviews—AI suggestions pending
⌁

OPERATIONS OVERVIEW

Recent orders

AccessionPatientClientTestsStatusRisk
Sign in to load operational data.

AI OPERATIONS ASSISTANT

Intake recommendations

✦
◌
Waiting for sessionRecommendations are generated from approved internal records only.

INTAKE WORKFLOW

Order lifecycle

r020
New0
›
Missing info0
›
Intake review0
›
Ready to schedule0

SPECIMEN PRE-CHECK

Test-directory controls

r006
✓Controlled catalog sourcesImplemented
✓Specimen requirementsVersioned
✓Human publication gateEnforced

CENTRAL ORDER QUEUE

Orders

AccessionPatientClientTestsSourceStatusAlertsUpdated
Sign in to load orders.

AI EXTRACTION

Human review queue

Sign in to load extraction runs.

◈

Select an extraction

Review every uncertain value, correct it against the source document, then apply it to a new order.

PATIENT MATCHING

Patients

—

No data loaded.

ORDERING PROVIDERS

Providers

—

No data loaded.

CLIENT SERVICES

Clients

—

No data loaded.

PERFORMING LABS

Laboratories

—

No data loaded.

⌁
Catalog Sources—Controlled connections
◈
Review Queue—Imports requiring QA
⚗
Published Tests—Active requirements
⚠
Failed Imports—Connector exceptions

CONTROLLED INGESTION

Laboratory catalog sources

Sign in to load sources.

HUMAN GOVERNANCE

Import and publication queue

Review required
SourceStatusRecordsReviewedCatalog v.Created
No imports loaded.

APPROVED SOURCE OF TRUTH

Published test and specimen requirements

Source-referenced
Lab / VersionCode & AliasesTestSpecimenContainer / VolumeTemperature / StabilityRules
No published tests loaded.
♙
Active Phlebotomists—Available team profiles
◷
Unassigned Queue—Ready for safe placement
✓
Scheduled Today—Draft and confirmed
⚠
Risk-Protected Draws—Fasting, timed, or handling

CONSTRAINT-AWARE CALENDAR

Daily schedule

Sign in to load the schedule.

HUMAN-APPROVED OUTBOUND MESSAGES

Reminder drafts

Draft only · no delivery adapter

No reminder drafts loaded.

⌁
Active Routes—Planned and active
➜
En Route—Stops in motion
●
At Stop—Arrived collections
⚠
Exceptions—Open operational issues

ROUTE BOARD

Select a route

⌁Dispatcher-reviewed route planningSelect a route to see stops, ETA, and risk. No patient names are sent to routing providers.
Pending En route At stop TerminalCoordinates shown are synthetic in development.

STOP SEQUENCE & ETA

Operational route timeline

#AppointmentPatientLocationETAStatusRiskActions
Select a route.

EXCEPTION MANAGEMENT

Open issues

No route selected.

COURIER VISIBILITY

Lab handoff plans

No route selected.

UNASSIGNED

Confirmed appointments

—

No appointments loaded.

REGISTERED FIELD DEVICES

Mobile Team Operations

Monitor assigned field devices, last contact, synchronization state, and device revocation. The field PWA is assignment-scoped and uses server-confirmed patient-safety gates.

Open Field App ↗
◉
Registered Devices—Tenant registrations
●
Recently Seen—Contact within 15 minutes
↻
Synced Today—Field command receipt
⊘
Revoked—Credentials invalidated

DEVICE REGISTRY

Phlebotomist devices

PhlebotomistDevicePlatformStatusLast contactLast syncVersionAction
Sign in to load registered devices.

MOBILE GOVERNANCE

MDM policy & device attestation

Review managed-device policy evidence, platform/MDM attestations, compliance freshness, app and OS version floors, and lost-device response controls before field PHI access is trusted.

✓
Compliant Devices—Fresh attestation
◈
Review Required—Human decision queue
⊘
Blocked Devices—Lost or critical finding
▣
Active Policies—Reviewed controls
Governance boundarySign in to load mobile MDM controls.

POLICY REGISTRY

Managed-device policy reviews

—
PolicyStatusRequired controlsOS floorApp floorReviewUpdatedAction
Sign in to load MDM policies.

DEVICE ATTESTATIONS

Freshness and findings

—
RecordedDeviceSourceResultExpiresFindingsEvidenceStatus
Sign in to load mobile attestation evidence.

TEMPERATURE CONTROL

Temperature sensor calibration

Track approved sensor profiles, reference thermometer traceability, calibration deviation, next-due status, and excursion response evidence without granting raw gateway control.

✓
Current—Within tolerance window
◷
Due soon—Next 30 days
!
Overdue / failed—Requires review
℃
Recent events—Calibration records

GOVERNANCE

Calibration evidence boundary

r025

Temperature calibration governance note will load after sign-in.

SENSOR PROFILES

Approved devices and next-due state

—
SensorStatusCalibrationLocationToleranceNext dueCertificateAction
No temperature sensor profiles loaded.

CALIBRATION EVENTS

Deviation and excursion mapping

—
OccurredSensorExpectedObservedDeviationResultActionEvidence
No temperature calibration events loaded.

LIVE ROUTING GOVERNANCE

Live routing provider

Track reviewed routing provider profiles, PHI-minimized sandbox validation, rate-limit and fallback evidence without sending live PHI or switching production traffic.

✓
Active providers—Reviewed profiles
!
Attention—Suspended / failed
⌁
Validations—Sandbox evidence
◌
PHI-minimized—Minimum necessary

GOVERNANCE

Routing evidence boundary

r026

Routing provider governance note will load after sign-in.

PROVIDER PROFILES

Reviewed routing provider readiness

—
ProviderStatusPHIModeRateTimeoutLast resultAction
No routing provider profiles loaded.

SANDBOX VALIDATIONS

ETA, credential, PHI and fallback checks

—
OccurredProviderCheckExpectedObservedDeviationResultFallback
No routing provider validations loaded.

RETENTION & EXPORT GOVERNANCE

Audit/export/report retention policy

Record reviewed retention schedules, export scope minimization, legal-hold and destruction-approval evidence without executing deletion, exporting live PHI, or changing retention clocks.

✓
Active policies—Reviewed schedules
!
Blocked / hold—Legal/privacy review
⇧
Completed exports—Evidence packages
⚖
Legal-hold schedules—Requires review

GOVERNANCE

Retention evidence boundary

r027

Retention governance note will load after sign-in.

RETENTION POLICIES

Reviewed schedules and legal-hold controls

—
PolicyStatusTypeRetentionArchiveFormatLegal holdAction
No retention policies loaded.

EXPORT / REPORT REQUESTS

Scope minimization and immutable manifest evidence

—
CreatedReportPolicyPHI scopeDatasetDestinationStatusReview
No retention export/report requests loaded.

PILOT READINESS

Operational SOPs & Training

Evidence boundary for SOP inventory, role training, competency, custody, hardware workflow, incident drills, and supervisor sign-off.

✓
Approved—Supervisor sign-off
!
Attention—Blocked / failed
◷
Open—Drafts / checks
📋
Pilot packages—Role readiness

GOVERNANCE

SOP/training guardrail

SOP/training governance note will load after sign-in.

PACKAGES

Operational readiness packages

—
PackageStatusTypeCompletionCompetencyRiskLast checkAction
No SOP/training packages loaded.

CHECKS

Required training and drill evidence

—
DomainStatusSeverityFindingHumanRecordedEvidence
Select a package to see SOP/training checks.

PILOT READINESS

Pilot Readiness Consolidation

Owner-reviewed go/no-go evidence rollup across release integrity, connected validation, identity, hardware, mobile, temperature, routing, retention/legal/security, SOP/training, observability/incident response, and owner sign-off.

✓
Ready—Owner reviewed
!
Attention—Blocked / failed
◷
Open—Drafts / checks
%
Average score—Connected validation

GOVERNANCE

Pilot readiness guardrail

Pilot readiness governance note will load after sign-in.

PACKAGES

Readiness packages

—
PackageStatusTypeReleaseValidationCritical gatesOwner sign-offRiskLast checkAction
No pilot readiness packages loaded.

CHECKS

Required go/no-go evidence

—
DomainStatusSeverityFindingHumanRecordedEvidence
Select a package to see pilot readiness checks.

FUTURE HARDENING

External Custody Anchoring

Evidence boundary for hash-chain integrity, manifest scope, signer custody, timestamp authority, ledger receipt, replay verification, metadata minimization, owner approval, and recovery validation.

✓
Approved—Human reviewed
!
Attention—Blocked / failed
◷
Open—Drafts / checks
◇
Ledger anchors—Optional hardening

GOVERNANCE

External custody guardrail

External custody governance note will load after sign-in.

ANCHORS

Custody anchoring packages

—
AnchorStatusTypeHashVerificationProviderChainReplayRiskLast checkAction
No external custody anchors loaded.

CHECKS

Required anchoring evidence

—
DomainStatusSeverityFindingHumanRecordedEvidence
Select an anchor to see external custody checks.

PRODUCTION READINESS

Observability & Incident Response

Evidence boundary for telemetry coverage, alert routing, escalation, runbooks, downtime mode, audit monitoring, tabletop rehearsal, and post-incident review.

✓
Approved—Human reviewed
!
Attention—Blocked / failed
◷
Open—Drafts / checks
☊
Production plans—Feedback loops

GOVERNANCE

Observability/incident guardrail

Observability/incident governance note will load after sign-in.

PLANS

Monitoring and incident-response plans

—
PlanStatusTypeCoverageAlertsEscalationTabletopRiskLast checkAction
No observability/incident plans loaded.

CHECKS

Required monitoring and incident evidence

—
DomainStatusSeverityFindingHumanRecordedEvidence
Select a plan to see observability/incident checks.

SPECIMEN COLLECTION CONTROL

Labels & Collection

Operational visibility for printer readiness, server-rendered labels, barcode verification, tube evidence, and collected or partial-collected visits.

▣
Active Collections—Labels or collection in progress
✓
Collected—All required tubes completed
◫
Partial—Accountable missing-tube evidence
⌁
Printer Exceptions—Offline or failed print evidence

COLLECTION SESSIONS

Collection activity

AccessionPatientPhlebotomistStatusSpecimensPrinted / scannedStartedAction
Sign in to load collections.

PRINTER REGISTRY

Approved devices

—

No printers loaded.

LABEL PROFILES

Versioned templates

—

No templates loaded.

SPECIMEN CHAIN OF CUSTODY

Courier Handoff & Lab Receipt

Track collected specimens through courier batch sealing, handoff, transit, laboratory arrival, receipt, rejection, and redraw review.

⇄
Open Batches—Draft, sealed, or in transit
✓
Received—Specimens accepted by lab
⌁
At Risk—Stability warnings
!
Rejected—Needs review or redraw

COURIER BATCHES

Batch status

BatchLabStatusSpecimensReceived / RejectedStabilityUpdatedAction
Sign in to load courier batches.

RECEIPTS & REJECTIONS

Lab receiving log

—

No receipt records loaded.

PROVIDER & CLIENT PORTAL

Organization-scoped portal

Minimum-necessary visibility for provider offices and clients: order status, appointments, corrected-document uploads, secure messaging, and redraw/problem notifications.

▤
Visible Orders—Scoped by grant
◷
Scheduled Draws—Appointment visibility
⇧
Documents—Corrections in review
!
Problems—Missing info/redraw

ORDER VISIBILITY

Portal order status

AccessionPatientClientStatusAppointmentSpecimensAlertsAction
Sign in to load portal orders.

DOCUMENT CORRECTIONS

Uploads

No portal documents loaded.

SECURE MESSAGING

Threads

—

No message threads loaded.

PROBLEM NOTIFICATIONS

Missing info, redraws, and corrections

—

No portal notifications loaded.

GOVERNED AI OPERATIONS ASSISTANT

Recommendation inbox

Source-grounded summaries and drafts for operations staff. Every sensitive recommendation requires a human decision; accepted recommendations never mutate order, clinical, scheduling, routing, or messaging records by themselves.

✦
Pending Review—Human decision required
!
High / Critical—Prioritize evidence review
✓
Accepted, Action Pending—Execute normal workflow
⇧
Escalated—Named accountable owner

REVIEW QUEUE

Sourced recommendations

Sign in to load recommendations.

✦

Select a recommendation

Review sources, uncertainty, drafts, policy checks, and proposed actions before recording a human decision.

APPEND-ONLY MODEL ACTIVITY

AI run log

Prompt + model versioned
StartedAgentStatusPromptModel configurationMade / Suppressed
No AI runs loaded.

GOVERNANCE CONFIGURATION

Prompt, model, and action policy

Fail closed

Sign in with AI settings permission.

QA/QC REPORTING & ANALYTICS

Daily quality cockpit

Read-only analytics for redraw trends, specimen quality, staff/client/provider performance, turnaround, and high-priority review findings. Reports preserve evidence snapshots without changing clinical/order workflow records.

—
▤
Orders—Reporting period intake
!
Missing Info Rate—Blockers / orders
↻
Redraw Required—Receiving-driven follow-up
⚗
Specimen Rejection—Rejected / receipt decisions

PRIORITY REVIEW

High-priority findings

Read-only

Sign in to load QA/QC findings.

TREND WINDOW

Redraw, rejection, late, and warning trend

Daily buckets

No trend loaded.

STAFF PERFORMANCE

Phlebotomist / courier quality indicators

StaffActivityCollectedPartialRejectedRedrawRisk
No staff analytics loaded.

CLIENT / PROVIDER

Ordering-source quality

EntityOrdersCollectedPartialRejectedRedrawRisk
No client/provider analytics loaded.

SPECIMEN QUALITY

Container and specimen problem patterns

SpecimenActivityCollectedPartialRejectedRedrawRisk
No specimen analytics loaded.

SAVED EVIDENCE

Generated report snapshots

Audit + outbox

No report snapshots loaded.

SMS / EMAIL NOTIFICATION DELIVERY

Governed delivery cockpit

Consent-aware delivery for approved reminders and provider/client communications. Templates, review evidence, retries, receipts, and opt-out decisions are audited; external provider delivery remains a configured deployment boundary.

✉
Queued—Ready for delivery worker
⇢
Sending / Failed—Retry-governed attempts
✓
Delivered—Provider receipt recorded
!
Blocked / Opted out—Consent gate enforced

DELIVERY QUEUE

Reviewed messages

Human review required
UpdatedChannelPurposeRecipientStatusAttemptsAction
Sign in to load notification messages.

TEMPLATES

Versioned approved copy

—

No templates loaded.

CONSENT / OPT-OUT

Recipient controls

—

GOVERNANCE BOUNDARY

What this module does and does not do

Fail closed

Notification governance note will load after sign-in.

LIS / HL7 INTERFACE

Governed LIS integration cockpit

Bidirectional interface evidence for order exports, acknowledgements, inbound result/status messages, accession matching, and human reconciliation. Interface events are auditable and do not silently mutate clinical order/result state.

⇆
Active connections—Reviewed interface profiles
⇢
Queued exports—Worker-governed sends
✓
Acknowledged today—LIS receipt evidence
!
Results needing review—Human reconciliation gate

INTERFACE PROFILES

Connections

—

Sign in to load LIS connections.

CONTROL BOUNDARY

Governance notes

No silent mutation

LIS governance note will load after sign-in.

OUTBOUND ORM / STATUS

Order export queue

Human reviewed
UpdatedAccessionKindConnectionStatusAttemptsAction
No LIS exports loaded.

INBOUND ORU / STATUS

Result and status reconciliation

Review required
ReceivedExternal IDAccessionMatchSummaryStatusAction
No inbound LIS results loaded.

PRODUCTION OCR

Governed OCR intake cockpit

OCR profiles, document evidence, extraction candidates, and human review. OCR can surface accession, patient, provider, test, and diagnosis candidates, but it never silently changes order, result, billing, notification, portal, or LIS state.

▣
Active profiles—Reviewed OCR configurations
⇢
Queued documents—Awaiting worker claim
✓
Reviewed today—Human evidence decisions
!
Needs review—Candidate review gate

OCR PROFILES

Reviewed configurations

—

Sign in to load OCR profiles.

CONTROL BOUNDARY

Governance note

No silent mutation

OCR governance note will load after sign-in.

DOCUMENT QUEUE

OCR document evidence

Encrypted source text
UpdatedFileHashSourceStatusRun
No OCR documents loaded.

EXTRACTION RUNS

Candidate review queue

Review required
UpdatedProviderStatusCandidatesAvg confidenceAction
No OCR runs loaded.

CANDIDATES

Selected run details

—

Select an OCR run to inspect candidate evidence.

LAB CATALOG CONNECTORS

Governed source adapters and review staging

Approved connector profiles can retrieve source evidence and stage catalog imports into the existing human review queue. They cannot publish, overwrite, or clinically validate specimen rules without reviewer, approver, and publisher workflow.

⇣
Active connectors—Reviewed source profiles
◷
Queued runs—Worker-governed fetches
◌
Staged for review—No auto-publish path
!
Failed runs—Safe error evidence

CONNECTOR PROFILES

Reviewed source adapters

—

Sign in to load catalog connectors.

CONTROL BOUNDARY

Governance note

Review only

Connector governance note will load after sign-in.

CONNECTOR RUNS

Source evidence staging

Human review required
UpdatedConnectorStatusProviderRecordsWarningsImportAction
No connector runs loaded.

RUN DETAIL

Review staging evidence

—

Select a connector run to inspect import evidence and the no-auto-publish boundary.

MANAGED OBJECT STORAGE & KMS

Storage, key custody, migration evidence, and integrity checks

Reviewed storage/KMS profiles document production-ready object storage, encryption, retention, migration, and integrity evidence. This screen does not move, delete, re-key, decrypt, or publish PHI-bearing objects.

◍
Active storage—Reviewed profiles
◆
Active KMS keys—Key custody profiles
⇄
Pending migrations—Dry-run evidence
!
Failed integrity—Needs review

OBJECT STORAGE

Reviewed storage profiles

—

Sign in to load storage profiles.

KEY MANAGEMENT

KMS/HSM key profiles

—

Sign in to load KMS key profiles.

CONTROL BOUNDARY

Governance note

Evidence only

Storage governance note will load after sign-in.

MIGRATION PLANS

Dry-run migration evidence

Human reviewed
UpdatedPlanStatusSourceTargetObjectsReviewAction
No migration plans loaded.

INTEGRITY CHECKS

Inventory, checksum, retention, and access evidence

No auto-cleanup
CreatedStatusKindProfileObjectsFindingsEvidence
No integrity checks loaded.

POSTGRESQL PRODUCTION VALIDATION

Migration, RLS, backup/restore, performance, and concurrency evidence

Production database validation records deployment evidence and human review. This screen does not run migrations, alter roles, move PHI, restore backups, or change production traffic.

▦
Open runs—Needs evidence/review
✓
Approved runs—Human reviewed
!
Blocked runs—Blocking findings
◇
Required checks—Production gates

CONTROL BOUNDARY

Governance note

Evidence only

PostgreSQL validation governance note will load after sign-in.

VALIDATION RUNS

Production-readiness evidence

Human review required
UpdatedEnvironmentStatusHostMigrationMissingBlockingAction
No PostgreSQL validation runs loaded.

RUN DETAIL

Required check evidence

—

Select a validation run to inspect migration, RLS, backup/restore, performance, and concurrency evidence.

OIDC/SSO PRODUCTION VALIDATION

Issuer, JWKS, MFA, claims, session, and access-review evidence

Identity validation records target IdP evidence and human review. This screen does not create users, grant roles, bypass MFA, approve live PHI access, or alter the identity provider.

◐
Open runs—Needs evidence/review
✓
Approved runs—Human reviewed
!
Blocked runs—Blocking findings
◇
Required checks—Identity gates

CONTROL BOUNDARY

Governance note

Evidence only

OIDC/SSO validation governance note will load after sign-in.

VALIDATION RUNS

Production identity evidence

Human review required
UpdatedEnvironmentStatusIssuerAudienceMissingBlockingAction
No OIDC/SSO validation runs loaded.

RUN DETAIL

Required identity-control evidence

—

Select a validation run to inspect issuer, JWKS, MFA, claims, session, deprovisioning, and access-review evidence.

PHYSICAL PRINTER / SCANNER ADAPTERS

Approved bridge, scanner, camera, signed receipt, and failure mapping evidence

Adapters record governed physical-device evidence only. Core PhlebAgent keeps label content, barcode identity, custody state, and collection decisions server-authoritative and never sends raw printer or scanner commands from this screen.

▥
Active adapters—Signed receipt capable
!
Attention—Draft/suspended/retired
✓
Recent receipts—Evidence events
◇
Failed receipts—Mapped actions

GOVERNANCE

Evidence boundary

No raw commands

Physical hardware adapter governance note will load after sign-in.

ADAPTER REGISTRY

Printer bridges, barcode scanners, and camera scanners

Signed receipts required for active use
AdapterStatusSerialConnectionReceipt keyMappingLast evidenceAction
No physical hardware adapters loaded.

SIGNED RECEIPTS

Print, scan, camera, and bridge-status evidence

PHI-safe summary
OccurredReceiptStatusFailureCategoryActionReferenceEvidence
No physical adapter receipts loaded.

ADAPTER DETAIL

Activation review and recent receipts

—

Select an adapter to inspect signed receipt capability, activation evidence, and mapped failures.

PRODUCTION READINESS

Deployment Certification

Release artifact, environment, rollout, rollback, monitoring, and owner sign-off evidence.
◆
Open runs—Needs evidence/review
✓
Approved runs—Human reviewed
!
Blocked runs—Blocking findings
◇
Required checks—Release gates

GOVERNANCE

Evidence-only deployment gate

Deployment certification governance note will load after sign-in.

CERTIFICATION RUNS

Release readiness evidence

No traffic changes
UpdatedEnvironmentStatusArtifactTargetMissingBlockingAction
No deployment certification runs loaded.

RUN DETAIL

Required release-control evidence

—

Select a deployment certification run to inspect artifact integrity, manifests, configuration, rollout, monitoring, and rollback evidence.

TENANT ADMINISTRATION

Users and role assignments

UserExternal subjectRolesStatusCreated
Sign in with users.read permission.

APPEND-ONLY LOG

Tenant audit events

TimeActionResourceActorRequest
Sign in with audit.read permission.

RELIABLE DELIVERY

Transactional outbox

CreatedEventAggregateAttemptsDelivery state
Sign in with outbox.read permission.

DELIVERY TRACKER

Completed

—

Sign in to load status.

ROADMAP

Outstanding

—

Sign in to load status.

ENGINEERING RISK REGISTER

Open issues and validation gates

—

Sign in to load status.