06.13
Patient Mode and aftercare
Executive summary
Patient Mode turns the chairside screen toward the patient and shows exactly one released artifact, nothing else; aftercare hands patients their instructions through a single-use link. Both are containment problems: a patient must never be able to navigate from what they were shown to anything they were not. Aftercare content is derived only from work that was actually performed.
Overview
- ProductionOperate · Patient Mode and aftercareShare information with patients without an account and without any path into the clinical application.
Pipeline
- The clinician releases a specific artifact version to Patient Mode; containment binds that artifact and version, not the patient (PM-01).
- Every disclosure is recorded as evidence before it is shown (PM-04).
- Exiting requires the clinician to authenticate, and survives anything that destroys client state (PM-05/07).
- Aftercare: performed work produces directives; a single-use QR link with a 192-bit token, of which only a SHA-256 hash is stored, delivers them.
Data owned
- Patient Mode sessions and disclosures
- Holds
- What was shown, to whom, when
- Aftercare hand-offs
- Holds
- Token hashes and the directives they carry
| Store | Holds |
|---|---|
| Patient Mode sessions and disclosures | What was shown, to whom, when |
| Aftercare hand-offs | Token hashes and the directives they carry |
Models and engines
This module makes no model calls. Everything it computes is deterministic code.
Guardrails
- Only one source of content is renderable in Patient Mode (PM-08).
- Tokens are stored as hashes and are single-use.
- Aftercare is derived from performed work only, never from plans or drafts.
Rollout and status
- ProductionAftercare linksPublic route outside the application
- PilotPatient ModeEnabled per clinic
Interfaces
- Consumes
- What
- Signed clinical documents
- Consumes
- What
- Performed work
- Emits
- What
- Disclosure evidence
| Direction | What |
|---|---|
| Consumes | Signed clinical documents |
| Consumes | Performed work |
| Emits | Disclosure evidence |
Invariants
- PM-01…08
Known limits
- Summative human-factors validation of Patient Mode is an open item in its invariant document.
SOURCE OF TRUTH
server/services/patientMode/server/services/clinical/PatientAftercareHandoffService.tsdocs/clinical-invariants/patient-mode.md