{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-25T00:44:04.075Z",
  "record_id": "VXI-EXT-ADMINISTRATION-FHIR-CONSENT-SOURCE-REFERENCE-AVAILABILITY-01-v1",
  "record_kind": "external_reference",
  "title": "FHIR R5 consent source and external references",
  "system": "HL7 FHIR R5 5.0.0 — consent",
  "evidence_family": "vendor_evidence_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does a FHIR Consent sourceReference contain the original consent document?",
  "near_questions": [
    "Does a Consent sourceReference include the original document?",
    "Can consent evidence live in another repository?",
    "What must be retained when consent points to external material?",
    "Does a linked source establish that the original remains accessible?"
  ],
  "supported_claims": [
    {
      "claim": "R5 Consent supports source material through attachments or references to other records, including repository documents. A sourceReference is a pointer rather than a guarantee that the original document is present in the returned resource or remains retrievable. Establish the source identity and availability separately before relying on it.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "No clinical advice, patient-safety validation, legal compliance or confirmation of insurance cover.",
    "No independent proof of a live access decision, completed workflow, physical action or settled payment.",
    "The published R5 definition does not establish support or conformance in a buyer implementation.",
    "Buyer deployment testing, live runtime enforcement, certification or permission to act",
    "Expanded capabilities or licences for existing INDEX executables"
  ],
  "public_summary": "R5 Consent supports source material through attachments or references to other records, including repository documents. A sourceReference is a pointer rather than a guarantee that the original document is present in the returned resource or remains retrievable. Establish the source identity and availability separately before relying on it.",
  "related_record_ids": [],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "HL7 FHIR R5 5.0.0 — consent definitions",
    "source_url": "https://hl7.org/fhir/R5/consent-definitions.html",
    "checked_on": "2026-10-25",
    "candidate_record_id": "VXI-EXT-ADMINISTRATION-FHIR-CONSENT-SOURCE-REFERENCE-AVAILABILITY-01-v1",
    "candidate_record_sha256": "e819e7ae72fa00f952fdd65706e7cb4a159236676b46577820ff7021f2bf6ccb",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "R5 Consent supports source material through attachments or references to other records, including repository documents. A sourceReference is a pointer rather than a guarantee that the original document is present in the returned resource or remains retrievable. Establish the source identity and availability separately before relying on it.",
    "required_buyer_context": "Consent source attachment or reference; Resolved original source and version; Source availability and identity evidence. Buyer deployment not inspected.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "decision_profile": {
    "schema": "varexis-vendor-evidence-review/1",
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-25",
    "claim_to_check": "Does a FHIR Consent sourceReference contain the original consent document?",
    "documented_statement": {
      "status": "documented",
      "statement": "R5 Consent supports source material through attachments or references to other records, including repository documents. A sourceReference is a pointer rather than a guarantee that the original document is present in the returned resource or remains retrievable. Establish the source identity and availability separately before relying on it.",
      "source_ids": [
        "fhir-consent-definitions"
      ]
    },
    "review_inference": {
      "status": "review_inference",
      "statement": "Identify missing original material behind a consent assertion. This is a documentation-review judgment, not an observed outcome.",
      "source_ids": [
        "fhir-consent-definitions"
      ]
    },
    "buyer_evidence_required": [
      "Consent source attachment or reference",
      "Resolved original source and version",
      "Source availability and identity evidence"
    ],
    "review_condition": {
      "status": "varexis_review_policy",
      "statement": "Refuse original-document availability from a source pointer alone."
    },
    "unknowns": "The applicable implementation guide, live system and actual administrative outcome were not inspected.",
    "unknown_finding": {
      "status": "unknown",
      "statement": "The applicable implementation guide, live system and actual administrative outcome were not inspected."
    },
    "evidence_sources": [
      {
        "source_id": "fhir-consent-definitions",
        "url": "https://hl7.org/fhir/R5/consent-definitions.html",
        "final_url": "https://hl7.org/fhir/R5/consent-definitions.html",
        "status": 200,
        "captured_at_utc": "2026-10-25T00:21:10.744Z",
        "sha256": "7c42c4128cf540f3691ff4711a06309911e53ba2bd6fbffab38ccafd53f3b747",
        "bytes": 50607,
        "title": "HL7 FHIR R5 5.0.0 — consent definitions",
        "hash_basis": "SHA-256 of unmodified HTTP response body bytes",
        "rights_review": "Original factual paraphrase of the HL7 FHIR core specification under CC0. Third-party terminology and trademarks have separate terms; no document, schema, code or modified standard is redistributed. No endorsement or patient data.",
        "checked_on": "2026-10-25",
        "capture_status": 200,
        "claim_review_completed": true,
        "reviewed_sections": [
          "Consent.provision.period; Consent.provision.dataPeriod",
          "Consent.decision; Consent.provision",
          "Consent.sourceAttachment; Consent.sourceReference"
        ],
        "version_context": "Permanent FHIR R5 5.0.0 publication. Resource-specific maturity and normative/Trial Use status apply; no universal normative or implementation-conformance claim."
      }
    ],
    "observed_deployment": false,
    "commercial_reliance_boundary": "Documentation review only; the buyer must establish applicability and actual outcomes. INDEX does not inspect or control the deployment.",
    "paid_value": {
      "decision_context": "Identify missing original material behind a consent assertion.",
      "free": "Complete review, sources, practical questions and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "A saved purchase does not recheck the source or buyer configuration.",
      "specific_watch": "Recheck the applicable FHIR version, implementation guide, resource profile and independent administrative outcome before relying on a current workflow."
    },
    "buyer_relevance": "Identify missing original material behind a consent assertion.",
    "refusal_conditions": [
      "Refuse original-document availability from a source pointer alone."
    ]
  },
  "niche": {
    "niche_id": "enterprise-ai-data-custody-exit-assurance",
    "label": "Enterprise AI Data Custody & Exit Assurance",
    "classification_id": "custody",
    "classification_label": "AI Data Custody, Retention & Exit Assurance",
    "topic_id": "custody",
    "buyer_intent": "Identify missing original material behind a consent assertion.",
    "comparison_role": "supplementary_discovery"
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#fhir-consent-source-reference-availability",
  "machine_readable_record": "/varexis-index/records/fhir-consent-source-reference-availability.json"
}