durable operation2–3 hr5 stages8 code languages

Operating journey: Coordinate time-critical care without losing custody

Shorter transfer and specimen journeys with fewer missed hand-offs and a complete chain of operational custody.

The real-world moment

A district hospital needs to transfer a patient to a tertiary campus while a laboratory specimen travels separately under a strict stability window. The coordinator must resolve the correct clinical entrance, choose eligible transport, retain custody at every hand-off, detect route and temperature delay, reveal only the minimum operational location, and close each journey only after the receiving team accepts it.

Make ownership visible before code.

Operate the full lifecycle with versioned state, hostile-path recovery, audit, and release evidence.

Application state
stateful
Planning calls
0
Credentials accepted
No
Write authority
None
01
Clinical and laboratory systems

Resolve the correct facility, campus, and entrance

Authoritative systems own patient or specimen identity, clinical priority, consent, custody policy, stability window and receiving acceptance; the location workflow stores only opaque operational references.

Transfer ↔ opaque clinical reference, priority, consent and accepted entrance

GETGeocode API/api/places/geocodeThis is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 1 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Search selects the public entrance instead of emergency receiving

Present approved campus entrances as explicit candidates, require coordinator confirmation, and retain the original query and selection revision.

02
Facility and entrance resolution

Select an eligible vehicle and bounded route

Search and governed campus data resolve a stable Mappls Pin or enterprise entrance identity while preserving candidate, confirmer and revision evidence.

Record stage 2 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Location or condition evidence becomes stale

Show last verified time and source, alert the responsible coordinator, and stop projecting an invented ETA or safe-condition claim.

03
Eligibility and dispatch

Track custody and freshness through every hand-off

Application policy filters vehicle, equipment, staff, service area and availability before network ETA ranks eligible options.

Record stage 3 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

The receiver cannot match the custody identity

Keep the journey at arrived-but-unaccepted, preserve both observations and escalate through a human reconciliation queue without exposing clinical data.

04
Privacy-minimized journey

Escalate delay or temperature exceptions

Event-time vehicle and custody observations derive progress and exceptions; role projections withhold clinical content and unnecessary precise history.

Condition exception ↔ sensor/source identity, threshold policy and reviewer outcome

GETThis API will get all the alarm configurations for a user./alarmThis is a supporting operation from the selected product stack, not proof of an exact provider contract for this stage. Resolve the stage through its product source or adapter boundary before live implementation.

Record stage 4 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Search selects the public entrance instead of emergency receiving

Present approved campus entrances as explicit candidates, require coordinator confirmation, and retain the original query and selection revision.

05
Acceptance and quality review

Reconcile arrival, acceptance, and retained evidence

Every hand-off is versioned and attributable; arrival is not completion until the authorized receiver accepts the matching custody identity.

Record stage 5 with the application identity, source fingerprint, request or aggregate identity, timestamp, and observable outcome.

Location or condition evidence becomes stale

Show last verified time and source, alert the responsible coordinator, and stop projecting an invented ETA or safe-condition claim.

Edit once. Generate eight trusted-runtime implementations.

The recipe starts from the normalized GET /api/places/geocode contract. Execute six deterministic fixture outcomes before an issued account is involved.

Local request composerCode stays local · fixtures are explicit
GETRequest inputs
6 editable · 0 protected
Generated in eight languages
Environment-backed credentials
GEThttps://atlas.mapmyindia.com/api/places/geocode?region=ind&address=237+Okhla+industrial+estate+phase+3+new+delhi%2C+delhi+110020&itemCount=1&bias=0&podFilter=example&bound=TAVI5S
Credential-free sandboxExecute this contract without a provider call
How fixtures work
Generated from your inputs
curl --request GET \
  --url 'https://atlas.mapmyindia.com/api/places/geocode?region=ind&address=237+Okhla+industrial+estate+phase+3+new+delhi%2C+delhi+110020&itemCount=1&bias=0&podFilter=example&bound=TAVI5S' \
  --header "Accept: application/json" \
  --header "Authorization: Bearer ${MAPPLS_ACCESS_TOKEN}"

Credential-safe by constructionSet MAPPLS_ACCESS_TOKEN only in your trusted runtime. Code generation stays local. Sandbox execution sends only bounded fixture inputs to this developer platform and never reads a credential or calls Mappls.

Break the journey before customers do.

These controls are required at this operating depth; deeper recipes add durable truth rather than merely more API calls.

Idempotent commandsOptimistic aggregate versionsEvent and receipt timeTransactional outboxUnknown-outcome reconciliationIndependent human decisionsRestart recoveryImmutable audit evidence

Definition of done

Every aggregate has an invariant, expected version, stable command identity, and attributable actor.

Duplicate, late, reordered, invalid, stale, timed-out, and restarted execution preserve one durable truth.

Unknown provider outcomes reconcile by original identity before replay or compensation.

Terminal decisions, human review, audit, outbox delivery, privacy, retention, and rollback remain independently evidenced.

Contracts, tutorials, and journeys stay linked.

Contract set

GETGeocode API/api/places/geocodeGETRouting API/{REST_KEY}/{resources}/{profile}/{geopositions}GETGets The List Of Alarm Config(s)/alarm/alarmLog/GETNearby API/api/places/nearby/jsonGETDistance Matrix Predictive ETA API/{REST_KEY}/distance_matrix_predictive/driving/{coordinates}GETThis API will get all the alarm configurations for a user./alarmGETAutoSuggest API/api/places/search/jsonGETRouting API with driving profile/{REST_KEY}/{resources}/driving/{geopositions}GETGets The List Of Alarm Config(s)/alarms/alarmlogs/GETText Search API/api/places/textsearch/jsonGETDistance Matrix API/{rest-key}/{resources}/{profile}/{geopositions}GETThis API will get all the alarm configurations for a user./alarms

Durable state machines

statefulConnected fleet trip6 states · 7 transitionsstatefulFleet geofence exception6 states · 5 transitionsstatefulCoordinated incident response7 states · 8 transitionshybridRecoverable navigation session6 states · 6 transitionshybridGoverned spatial analysis7 states · 6 transitionshybridDurable multi-stop itinerary6 states · 9 transitionsstatefulConsented address verification9 states · 11 transitionshybridiOS direction planning and navigation handoff8 states · 8 transitionshybridiOS geofence draft and publication boundary6 states · 6 transitionshybridiOS feedback report and review9 states · 9 transitionshybridConsent-bound location capture evidence8 states · 9 transitionsstatefulGoverned place contribution and publication7 states · 8 transitions

Care Transfer Desk

Confirm the correct receiving entrance, assign eligible transport, preserve courier custody, review condition exceptions, and reconcile receiver acceptance without retaining patient or clinical data.

Source-grounded, not authority-granting

This recipe composes source-derived contracts, application architecture, fixtures, and maintained learning evidence. It does not prove package availability, provider payload shape, account entitlement, regional behavior, production compatibility, or release approval.