Skip to content

Architecture

Jump to bottom
David Condrey edited this page Aug 8, 2026 · 2 revisions

Architecture

The project has three deliberately separated layers:

  1. Public static viewer: a self-contained map of composite/de-identified data, with browser-side verification, service-directory references, structured offers, and no backend.
  2. Signing pipeline: TypeScript CLI that validates consent and location boundaries, transforms raw notes under a no-fabrication prompt, signs deterministic JSON/CBOR, and emits COSE/DID provenance.
  3. Future private service layer: an encrypted, access-controlled API for real intake, provider workflows, moderation, and audit events. It does not exist in the current demo.

See docs/protocol.md for the signed format and docs/limitations.md for what the current system cannot prove.

On Record is a prototype. Do not enter real protected information. Guidance should be reviewed before each pilot or distribution. Return to Home · Report a security issue

On Record handbook

About the site

Audience guides

Commitments and tools

Governance and technical

Participation

Clone this wiki locally