Trust · how evidence moves
The Evidence Network
The model beneath VitalCV: how a clinician’s career evidence is gathered from named sources, carried in a clinician-owned record, shared by consent, and recognized by employers as a head start.
- Sources read → record
- Access-gated lane
- Consented proof packet
- Opportunity
- Bounded employer Recognition
A system diagram — every mark is a concept, not a person. The detail is in the sections below.
The center
Clinician-owned identity
One NPI anchors the record. The clinician owns it: what is shared, with whom, and for how long is the clinician’s choice, with access history visible.
Boundary — Ownership does not change who decides hiring or privileging.
Inputs
Primary sources, named honestly
NPPES is read live per request. OIG / LEIE exclusions refresh on a monthly snapshot and CMS PECOS enrollment on a quarterly one — real sources, but not realtime, and labelled that way. State license boards are access-gated — VitalCV does not read them without agreements, and says so rather than implying coverage.
Boundary — A source that was not read is shown as not read — never inferred.
Artifacts
Consented proof packet
Evidence a clinician chooses to share travels as a sealed, versioned packet: claims, source checks, and their limitations — frozen at the moment of sharing so a review stays replayable.
Boundary — A packet is a head start for review, not a completed decision.
Demand side
Opportunity requirements
Roles carry their real requirements. Matching explains why an opportunity is shown and which requirements remain unproven — an explanation, never a verdict.
Boundary — Missing information lowers confidence; it is never treated as a rejection.
Recognition
Employer head start
An employer may accept defined, source-attributed evidence as a head start — recorded, scoped, and replayable — so the clinician does not re-prove what was already accepted.
Boundary — Final credentialing, privileging, and hiring authority remain with the institution.
Vocabulary
Every status names its source and time
- CheckedNPPES · A source returned a usable payload for this fact. The only state that earns the word.
- GatedDEA · access requiredThe source is reachable but blocked behind an agreement or authorization. Honest, not hidden.
- StaleState board · 214d agoWas checked once; aged past its freshness window. A refresh is one request away.
- UnavailableNPDB · no payloadThe source did not return a payload on this attempt. A system condition, not a finding.
- RevokedIssuer · · fails closedWithdrawn at the source and failed closed — content blocks; the custody history stays visible.
- Self-attestedentered by holderEntered by the holder and unverified. Rendered apart so it can never read as source-checked.
Where the explorable graph went
An earlier version of this page showed an interactive network built from sample data. Because person-like nodes do not belong on a public page of a healthcare trust product — even as illustrations — that view was retired. Relationship views of real records are signed-in product surfaces, scoped to the viewer’s own record and role.