VitalCV · Operational Status
External observability surface — independently verifiable
build f676e76
This is VitalCV’s technical status console — foundation flags, lane telemetry, and verification endpoints. For the plain-language status summary, see /status.
Foundation status preview
We publish the source of every field. We do not claim HIPAA, SOC 2, or NCQA certification.
Status surfaces are foundation previews. No uptime guarantee is implied. Incident notices and public changelogs are planned surfaces. Neither is wired today.
Access boundary. The matrix below describes what an anonymous visitor can obtain from each connector. Whether a lane is wired and returning data at all is a different question, answered by source lane operational telemetry further down this page and by /api/status. A lane can be fully operational here and still require something of the caller.
Connector matrix
Per-source state, last-checked context, and operator interpretation. Statically declared; build-evidence-backed.
| Connector | State | Observation | Interpretation |
|---|---|---|---|
| NPPES (Federal NPI Registry) | Source-backed | Identity lane. Read per request against the federal NPI registry, with no session required. | A returned identity is NPPES-backed as of the timestamp shown. NPPES describes registration, not licensure, standing, or fitness to practise. |
| OIG / LEIE (Federal Exclusion Lane) | Snapshot only | Reads a monthly HHS LEIE snapshot cache. Runs once NPPES returns an active identity match — no session required. Without that match it reports pending, not clear. | A clear result reflects the most recent monthly snapshot, not a live read, and is not a clearance. Do not treat the absence of an exclusion result as one. Institution review still applies. |
| CMS PECOS (Medicare Enrollment Lane) | Sign in to view | Pipeline calls the CMS data.gov dataset upstream. Results require an authenticated session. | Institution review may require separate enrollment evidence; this lane does not assert it. |
| State Medical Boards | Access required | Per-jurisdiction adapters; many require operator-side authorization before a read. | Some state-board adapters need operator credentials to query. Unavailable here is a workflow gate, not a finding about the clinician. |
| FSMB Practitioner Lookup | Connector not live | Adapter scoped but not wired in this build. | No FSMB result is asserted by VitalCV in this build. |
| Nursys (Nurse License Database) | Connector not live | Adapter scoped but not wired in this build. | No Nursys result is asserted by VitalCV in this build. |
Compliance evidence (foundation shape)
This report is a foundation shape for vendor risk assessments. It reflects planned controls, not enforced production policies.
- Data classification
- redactionLive: false
- 6 redaction rules
- Retention
- retentionEnforced: false
- 5 entity policies
- Authority adapters
- allAdaptersLive: false
- 1 adapters
Machine-readable shape: /api/compliance/evidence
Lane capability. Derived from the same source registry /api/status publishes, so the two always agree. This is whether a lane is wired and returning data — not what an anonymous visitor can retrieve, which is the connector matrix above.
| Lane | Lifecycle | Status |
|---|---|---|
| NPPES Identity | active | ● OPERATIONAL |
| OIG Exclusions | active | ● OPERATIONAL |
| State License | planned | ○ PENDING INTEGRATION |
| PECOS Enrollment | active | ● OPERATIONAL |
| Employment History | demo_only | ⚠ NON-PRODUCTION |
| Board Certification | unintegrated | — NOT IMPLEMENTED |
| Endpoint | Description | Auth |
|---|---|---|
| /.well-known/jwks.json | Public signing keys (ES256) | None |
| /.well-known/did.json | W3C DID document | None |
| /.well-known/trust.json | Trust manifest | None |
| /.well-known/trust-register | Machine-readable doctrine register | None |
| /.well-known/openid-configuration | OID4VCI discovery alias | None |
| /trust/graph | Verifier-readable trust graph | None |
| /trust/schema | Trust schema reference | None |
| /trust/doctrine | Replay contract doctrine | None |
| /api/receipts/verify | Verify a receipt JWT | None |
| /api/replay/[runId] | Replay inspection payload | None |
| /api/receipt/[lineageKey] | Receipt continuity payload | None |
| /api/status | This endpoint — operational truth payload | None |
All endpoints are public. No authentication required for verification. Source of truth: /api/status