Implemented and verified.
18 implemented capabilitiesResponsive privacy-minimized custody desk · Complete ten-event exception-aware journey · Exact role-scoped commands · Confirmed clinical-entrance revision · Bounded transport eligibility and stability window · Assigned-courier custody enforcement · Independent condition-exception review · Arrival separated from completion · Custody-bound receiver acceptance · Independent quality reconciliation · Rejected receipt retention and rework · Patient and clinical evidence rejection · Idempotent commands · Optimistic concurrency · Append-only audit events · Transactional outbox · Atomic restart recovery · Credential-free zero-network fixture mode
Browser application
A responsive operations console backed by the included JSON API.
Durable domain
Aggregate snapshots, audit events, idempotency records, evidence, and outbox entries are committed together.
Fixture adapter
A credential-safe provider boundary aligned to named Mappls endpoint contracts.
Executable tests
17 tests covering lifecycle, HTTP, replay, conflicts, domain recovery, and restart behavior.
Architecture notes
Trust boundaries, aggregate invariants, adapter ownership, evidence lineage, and recovery design.
Deployment guide
Database, identity, secrets, outbox, privacy, observability, migration, and rollback work.