Context
The demo stack (twh.os.mieweb.org / twh-api-ts.os.mieweb.org / the workwell-twh Neon project) is a public-URL, hardcoded-account, single-shared-database environment. It must never receive PHI (hard rule, see docs/PRODUCTION_READINESS_2026-07.md §1). Before any real WebChart/patient data can flow into WorkWell, a separate PHI-capable environment needs to exist: its own Neon project (or equivalent) provisioned under a confirmed BAA, real user accounts (not the hardcoded demo set), a durable access-controlled evidence bucket, network access restricted to MIE-authorized users, and a documented retention/deletion policy.
This is gated on MIE answering Q C14 in docs/MIE_INTEGRATION_QUESTIONS_2026-07-09.md (where WorkWell may run when handling PHI, and who owns the BAA chain) — standing up infrastructure ahead of a confirmed BAA chain would create exposure with no legal basis to operate it.
Spec to be written when scheduled — see docs/PRODUCTION_READINESS_2026-07.md.
Context
The demo stack (
twh.os.mieweb.org/twh-api-ts.os.mieweb.org/ theworkwell-twhNeon project) is a public-URL, hardcoded-account, single-shared-database environment. It must never receive PHI (hard rule, seedocs/PRODUCTION_READINESS_2026-07.md§1). Before any real WebChart/patient data can flow into WorkWell, a separate PHI-capable environment needs to exist: its own Neon project (or equivalent) provisioned under a confirmed BAA, real user accounts (not the hardcoded demo set), a durable access-controlled evidence bucket, network access restricted to MIE-authorized users, and a documented retention/deletion policy.This is gated on MIE answering Q C14 in
docs/MIE_INTEGRATION_QUESTIONS_2026-07-09.md(where WorkWell may run when handling PHI, and who owns the BAA chain) — standing up infrastructure ahead of a confirmed BAA chain would create exposure with no legal basis to operate it.Spec to be written when scheduled — see
docs/PRODUCTION_READINESS_2026-07.md.