Today: this page runs the ownership rules on an invented case, in your browser. No real person, nothing sent, nothing saved. The live review console still records one decision per case; the claim list is not in it yet. Passing every check does not make a claim true: the judgment is still a physician’s.
The familyattests to the facts of the person’s life. A false fact is theirs.
The checksare recorded with the rule and version. A wrong check is the platform’s.
The physiciansigns the judgment, on the facts they name. Nothing else.
1. The family attests to the facts
One fact per tap. Whoever answers says by what authority, because a caregiver often answers for a parent who cannot.
2. The checks run before a physician sees it
Deterministic, sourced, recorded. A question goes back to the family; a block stops every judgment that relies on that fact.
3. The physician decides each judgment
Sign is open only when the family has attested and nothing the claim relies on is flagged. Ask and Decline are always open.
4. The receipt: who carries what
One sealed record of all three. A correction never edits it: it opens a new receipt that names this one.
Why the order matters. The family attests first, the checks run second, and the physician signs last, over facts that were already checked. That is how a signature stops being the place all the risk lands. See the review drill, the chronic-illness certification it is built for, or check a receipt.