1. Cloud seed
Set ADMIN_SEED_SECRET and the Medplum client credentials in Vercel. Open /admin/seed and run one seed. Confirm solo-practice-1-sgv (Jane Doe, Sarah Doe) and solo-practice-2-arcadia (Michael Chen), plus the primary-care master formulary.
2. Compartment check
Every clinical read stays on _compartment=%organization. After create, call $set-accounts so the organization is on meta.accounts. An Arcadia user must not read a San Gabriel Valley chart.
3. Voice chart
On /chart, dictate a SOAP note with section labels and leave it unsigned. Dictate a Box 5 Rx override. Leave “Save to my personal template” off and confirm the override is today-only.
4. Pharmacy Center
Triage network e-Rx, run 3-way sync to the SOAP chart, clinic profile, and myuscarehealth.com/phr, and build a draft NDC line only from an 11-digit or 5-4-2 NDC. Only MEDICAL_PHARMACIST_DIRECTOR approves PHARMACY_CENTER_MASTER.
5. Vaccines and APCM
Decrement VFC and private lots only when the funding source matches. On /phr, collect APCM consent once. G0556, G0557, G0558, and G0570 still require the monthly service elements and the duplicate guard.
6. Confidential vault
Restricted rows carry meta.security = R. The patient can see their own vault item. Ordinary staff in the same practice cannot. Another practice cannot.