Every MVP requirement ID from the Product Requirements Document maps to an owning module and verification layer. Rows are grouped; IDs not individually listed inherit the family row. The CI traceability check fails if a requirement tag has no linked passing test.
| Requirement(s) | Owning Module (§) | Primary Verification | Notes |
|---|---|---|---|
| ENR-001…005 | episode, identity (§7.2, 9.1) | GS-01; integration timing test ≤15 min; enumeration probe | Override path ADM console |
| DPC-001…008 | ingestion, compiler (§10, 11) | Extraction benchmark; GS-01/02/03 | Hierarchy per ADR-009 |
| PAT-001…005 | episode, web (§6.3, 8.2) | Playwright Today/task flows; ETag 409 test | ≤3 primary actions server-enforced |
| MED-003/005/006/010 | medication (§6.3) | Unit invariants; GS-04/05; UI verified-badge snapshot | Dimension separation physical |
| APT-001/004/010 | scheduling (§8.2, 10.1) | GS-10; assisted-flow E2E | External booking excluded |
| EDU-002/007 | notification templates (§13.2) | Template lint (PHI + monitoring language); version audit | Teach-back trigger rules unit-tested |
| VIS-002/005/007 | brief (§14) | GS-06; step-up authz probe | Post-visit reprocess loop |
| CLN-001/004/008 | identity, brief (§9.3, 14) | OTP/device tests; 60 s usability exit; copy lint | Accountless access |
| CGV-001/004/007 | identity/consent (§9.2) | GS-07; revocation latency test ≤60 s | History preserved |
| ENG-002/004/012 | notification (§13) | Outbox timing test; GS-09; ladder simulation | Quiet hours tz-aware |
| AUT-001/006/009 | agents (§12) | Envelope enforcement units; kill-switch drill ≤10 s; GS-04/05 | Evidence-not-state pattern |
| ADM-004/007 | admin, analytics (§16.3) | Report snapshot tests incl. denominators + coverage footer | Config versioning test |
| INT-001 / INT-008 | ingestion / export (§10.2, 10.6) | Sandbox conformance; export behind flag (Later) | No other EHR write path exists |
| DQS-001/004/011 | compiler, audit (§11, 15.2) | Gate unit suite; lineage replay drill ≤5 min; similarity threshold tests | Deterministic + judge dual check |
| SEC-002/003/010 | identity, audit, consent (§9, 15) | Pen-test cases; WORM verification; Bedrock config assertion | BAA inventory Phase 0 |
| NFR-001…013 | platform-wide (§18) | Load, DR drill, axe scan, offline E2E (ADR-012) | Offline card = NFR-013 |