The working A prototype: use its controls to test the build question.
Find where responsibility, evidence, consent and accountability disappear between organizations.
RN conceived the question, structured the evidence boundaries, designed the experience, implemented the prototype and documented its limits.
This independent prototype demonstrates an approach; it is not a deployed client system, professional advice or proof of real-world outcomes.
Work through the controls with a situation of your own rather than the sample values. The tool responds to what you put in, so the useful output comes from real input, and everything is processed in your browser as you go. Any sample content you find already loaded is there to show the shape of a filled-in state, and you can clear it and start again at any point.
The build overview sets out the question, the purpose, the role and the evidence status in one place, and the public record behind it states what changed, what another person can reuse and what supports the system. If you want to judge how far this build should be trusted, the record is the page to read, not this one.
BUILD 017-A
Regulated-Market Handoff Mapper
Expose the responsibility, evidence, permission, acceptance, incident, record, and recourse controls hidden between organizations.
CHAIN STATUS
ACCOUNTABILITY INTACT
100% controlled · inherited workflow MAPPED AND ACCOUNTABLEProduct owner
Own the regulated product, market authorization, and quality system
Named quality and regulatory ownerContract operation
Perform the bounded manufacturing, testing, processing, or regulated service
Named site quality ownerData service
Receive and process only the authorized minimum regulated information
Named privacy and security ownerAuthorized provider
Use verified product, evidence, and instructions in the authorized service context
Named licensed or otherwise authorized professionalAffected person
Receive the product or service, notice, choices, and a usable response path
Named organizational contact responsible for responseX01
Product owner → Contract operation
- Responsibility
- Each party retains its applicable obligations; the owner oversees quality and the contractor controls compliant execution
- Evidence package
- Current specification, validated method, training, supplier status, deviation history, and approved quality agreement
- Permission
- Executed quality agreement and approved work order define the bounded activity
- Acceptance
- Contractor confirms capacity, current documents, trained personnel, material status, and unresolved exceptions
- Incident duty
- Stop affected work, contain risk, preserve evidence, and notify named quality owners within the defined period
- Recourse
- Escalation, investigation, corrective action, rejection, termination, recall, or other applicable remedy
X02
Contract operation → Data service
- Responsibility
- Contractor verifies the result; data service preserves authorized use, integrity, security, availability, and traceability
- Evidence package
- Validated result, source record, transmission manifest, access rule, checksum or integrity control, and exception status
- Permission
- Documented legal and contractual basis limits purpose, recipients, fields, retention, and further disclosure
- Acceptance
- Data service validates sender, schema, integrity, authorization, minimum fields, destination, and exception handling
- Incident duty
- Detect, contain, preserve, report, and support investigation of unauthorized use, loss, corruption, or disclosure
- Recourse
- Correction, access restriction, downstream notice, return or destruction, termination, and rights-request response
X03
Data service → Authorized provider
- Responsibility
- Data service preserves the record; provider determines whether the information is sufficient and appropriate for authorized use
- Evidence package
- Human-readable result, provenance, currency, limitations, unresolved exceptions, and applicable instructions
- Permission
- Authorized purpose and recipient are verified before release
- Acceptance
- Provider confirms identity, completeness, currency, limitations, authority, and the decision or action the result may support
- Incident duty
- Pause reliance and notify named owners when results conflict, arrive late, appear corrupted, or lack necessary evidence
- Recourse
- Reverification, corrected result, alternative pathway, professional escalation, complaint, or other applicable remedy
X04
Authorized provider → Affected person
- Responsibility
- Provider communicates within authority; organization ensures rights and response processes are real and reachable
- Evidence package
- Current approved information, person-specific context, material limitations, alternatives, and contact or complaint route
- Permission
- Applicable authorization, consent, notice, professional duty, and emergency exception are distinguished
- Acceptance
- Confirm recipient, language or access needs, comprehension opportunity, questions, instructions, and next step
- Incident duty
- Recognize and route adverse events, errors, complaints, access needs, and urgent safety issues
- Recourse
- Accessible contact, complaint, correction, appeal, adverse-event report, emergency support, and regulator route where applicable