Platform
Server circuit: a module is not done until it passes
Every module is registered, and after each deploy the circuit runs a live self-test of every module on every tenant. If one fails, the deploy is marked failed and no installer is built.
Diagram: the deploy gate. Self-tests use hidden probe users and a hidden probe patient, never real records.
What it does Pilot
- A registry of every module, with its tables, routes and the specification items it covers.
- A live self-test per module, run on hidden probe users and a hidden probe patient.
- A deploy gate: the deploy script runs the circuit as its final step and refuses to continue on a failure.
- A system alert when a module fails, and status screens for administrators and in Packaging.
- The rule, in the build notes: a module is not done until it is in the circuit and its live self-test passes.
What it is not
- It is not a security test, a load test or an audit.
- A self-test proves the routes work with synthetic data. It does not prove an outside system exists.
- It runs on synthetic probe records and says nothing about real patient data.
- We publish no uptime or latency figure from it.
Its track record
At v0.5.0 the circuit was green with all 36 pieces on three tenants and 25 pieces on the Small Clinic tenant (11 switched off). The live deploy history shows the gate doing its job: several deploys of Waves 2, 3 and 4 were refused or failed and were fixed in the product before a release went through.
Common questions
Does a green circuit mean the system is safe for patients?
No. It means that every module’s routes work and its self-test passes with synthetic data on that deploy. It does not show that an outside system exists, that the data is right for real patients, or that the system is secure.
Has the circuit ever failed?
Yes, repeatedly, and that is the point. The first live deploy of Wave 2 was refused, and several later deploys of Waves 2, 3 and 4 failed on real bugs such as timing races between a self-test and the live-update timer. Each was fixed in the product. The gate was not weakened.