AirGappedHealth

How it works

From a stack of pages to a signed history

Seven stages. Each one reports what it could not do as clearly as what it could.

  1. 01

    Receive

    A fax package is split into single pages. Each page gets a number it keeps for good.

    1. Synthetic example01

      Fax cover sheet

      Family practice

    2. Synthetic example02

      Referral letter, page 1

      Family practice

    3. Synthetic example03

      Referral letter, page 2

      Family practice

    4. Synthetic example04

      MRI report, page 1

      Imaging clinic

    5. Synthetic example05

      MRI report, page 2

      Imaging clinic

    6. Synthetic example06

      Pharmacy list

      Pharmacy

    7. Synthetic example07

      Lab strip

      Family practice

    8. Synthetic example08

      Handwritten progress note

      Family practice

    9. Synthetic example09

      Fax transmission report

      Family practice

    10. Synthetic example10

      Insurer claim form

      Insurer

    11. Synthetic example11

      Blank reverse side

      Family practice

    12. Synthetic example12

      Hospital consult letter

      Hospital

    13. Synthetic example13

      X-ray report

      Imaging clinic

    14. Synthetic example14

      Page cut off in transmission

      Emergency department

    14 pages, in fax order. Every page keeps its identity.

    Stage 1

    The incoming package is split into individual pages and every page is given an identity that survives the rest of the pipeline. Nothing is discarded at this stage, including blank pages and cover sheets.

  2. 02

    Read every page

    A page is read line by line. For every line the engine keeps the words, the position and its own confidence.

    Synthetic example

    Family practice / 6 May 20XX / PAGE 03/14

    Referral letter, page 2

    Family practice

    injured at work on 3 March 20XX

    Synthetic example

    Kept for every line

    Words
    injured at work on 3 March 20XX
    Position
    Kept for every line
    Confidence
    Kept for every line
    Stage 2

    Each page is read by an optical character recognition engine, which records not only the text but where on the page each line sits and how confident it was. That geometry is what makes the later verification possible.

  3. 03

    Account for every page

    Every page lands in exactly one column of the ledger, and the columns add up to the number of pages received.

    Synthetic example

    Page ledger

    read
    10
    unreadable
    1
    no clinical content
    3
    accounted for
    14 of 14
    Stage 3

    Every page ends in exactly one line of a ledger: read, unreadable, or no clinical content. A page the software could not read is reported as unreadable and is never counted as read. The same report faxed three times is one document: copies are grouped and named rather than deleted, so a reviewer can see what was collapsed and why.

  4. 04

    Build the timeline

    Events are placed in date order. Each one is tied by a line to the page and the sentence it was taken from.

    Synthetic example

    Pharmacy / 10 May 20XX / PAGE 06/14

    Pharmacy list

    Pharmacy

    Synthetic example

    The history it becomes

    1. Injury, two dates recordedReferral letter, p. 2
      Insurer claim form, p. 10
    2. Referral recordedReferral letter, page 1, packet p. 2
    3. Imaging report, first pageMRI report, page 1, packet p. 4
    4. Imaging report, second pageMRI report, page 2, packet p. 5
    5. Pharmacy list recordedPharmacy list, packet p. 6
    6. Lab strip recordedLab strip, packet p. 7
    7. Hospital consult recordedHospital consult letter, packet p. 12
    8. X-ray report recordedX-ray report, packet p. 13
    Stage 4

    Imaging, procedures, medication trials, consults, surgery and diagnoses are pulled out with their dates. Every item carries a quotation, and that quotation is checked against the page's own text before it is stored. A quotation that cannot be located is not stored at all; the gap is recorded instead. Where a page carries several dates that disagree, the pipeline ranks them by what they mean and states which one it used.

  5. 05

    Show contradictions

    Two pages make opposite statements. Both are kept and marked as a conflict. Neither is removed.

    Synthetic example

    Family practice / 6 May 20XX / PAGE 03/14

    Referral letter, page 2

    Family practice

    injured at work on 3 March 20XX

    Conflict
    Both accounts kept

    Synthetic example

    Insurer / 6 May 20XX / PAGE 10/14

    Insurer claim form

    Insurer

    date of injury 3 May 20XX

    Stage 5

    Where two documents disagree, both statements are kept, each with its page, and the conflict is put in front of the reviewer. The software does not decide which one is correct.

  6. 06

    Review and sign

    A named reviewer signs. The signature is tied to the exact content that was on the screen.

    Synthetic example

    The signed packet

    • Page ledger
    • Timeline
    • Contradictions
    read
    10
    unreadable
    1
    no clinical content
    3
    accounted for
    14 of 14

    A. Reviewer (synthetic)

    Synthetic example

    Content changes

    Signature no longer stands

    Stage 6

    The output is a reconstruction, not a conclusion. A clinician reviews it, corrects what is wrong, excludes what does not belong, and signs. From that moment the document is theirs rather than the software's. The signature binds to the content, not to the run. If anything changes afterwards the signature no longer stands, and the packet says so.

  7. 07

    Export

    The signed packet is handed over inside the clinic. No copy goes anywhere else.

    Synthetic example

    Signed packet

    • Page ledger
    • Timeline
    • Contradictions
    • Sign-off

    Synthetic example

    Clinical record

    Inside the clinic

    Stage 7

    The signed history leaves the appliance as a packet for the clinical record, when someone in the clinic exports it and to wherever the clinic sends it. Nothing is sent anywhere by the software on its own.

Synthetic examples Every page, name and date drawn in these stages is invented.

08The limits

What it does not do

  • It does not diagnose, triage, or recommend treatment.
  • It does not replace the clinician's review of the record.
  • It does not decide which conflicting statement is correct. It shows the conflict.
  • It does not report a page as read when it could not read it.

Where all of this happens: inside your building.