0000000000000000000000000000000000000000 68c41e5b60d743a5a857f310052874227d4d5a3e Nathan Ogden 1783688256 +0000 clone: from github.com:dragon260701/metaflow-access-data-infra.git 68c41e5b60d743a5a857f310052874227d4d5a3e b7e194935e027cb4ead10108e01d800b1d77d079 Nathan Ogden 1784058543 +0000 commit: copied tech docs in, added my technical assessment, added draft database schema, added cognito field mapping, added sample cognito form entry, added xlsx to json script b7e194935e027cb4ead10108e01d800b1d77d079 b451847390de57bb730a167a5dab9b44985d3d75 Nathan Ogden 1784126608 +0000 commit: refine assessment doc, update recommended architecture b451847390de57bb730a167a5dab9b44985d3d75 953414327afb117cf8942d9e6be4991b35ef3301 Nathan Ogden 1784148991 +0000 commit: move schema draft to doc/architecture, update recommended architecture 953414327afb117cf8942d9e6be4991b35ef3301 0fd9b03106ebe7589d9e6e96a3e58cc14971c44f Nathan Ogden 1784326489 +0000 commit: update database schema and technical assessment based on feedback 0fd9b03106ebe7589d9e6e96a3e58cc14971c44f 066004631c1bc0cc84f7995f18348bd7712aec3f Nathan Ogden 1784346773 +0000 commit: added additional docs and sample data 066004631c1bc0cc84f7995f18348bd7712aec3f c560a22163d7bb4f34e045f92022b1ae5a57f981 Nathan Ogden 1784666540 +0000 commit: add svg diagrams and replace markdown text diagrams, update documents with healthie api research (webhook pointers and graphql api) c560a22163d7bb4f34e045f92022b1ae5a57f981 893502b2038e890602864166d5a4982850583eb0 Nathan Ogden 1784672581 +0000 commit: fix overflow in svg diagrams 893502b2038e890602864166d5a4982850583eb0 c010cc4de12b2510f262593ef93dc8f350f7dc2d Nathan Ogden 1784694954 +0000 commit: fix issues in docs c010cc4de12b2510f262593ef93dc8f350f7dc2d 0f0445e3a7ad4fc95b79aed2d40ab18fa7590b9e Nathan Ogden 1784764867 +0000 commit: update docs to ellaborate further on lack of details about cognito api, propose healthie as intake 0f0445e3a7ad4fc95b79aed2d40ab18fa7590b9e 9021df0b6c2aa9c52fd504e5a5a2e399ef71d0ac Nathan Ogden 1784843837 +0000 commit: update archtecture docs with healthie first approach, added cognito to healthie form mapping 9021df0b6c2aa9c52fd504e5a5a2e399ef71d0ac 5fd31edfad9a44686ffe134499f7441c3651e14b Nathan Ogden 1784923616 +0000 commit: update docs, django scaffolding 5fd31edfad9a44686ffe134499f7441c3651e14b 4d45420e9a1bc51fc7b2b43ba8fb22b487ae27c0 Nathan Ogden 1785172375 +0000 commit: fixed invalid model reference errors 4d45420e9a1bc51fc7b2b43ba8fb22b487ae27c0 5ae5c4f0e8fc177912ba30ebb8f391f684debb40 Nathan Ogden 1785448205 +0000 commit: django migrations, healthie form builder script, intake app 5ae5c4f0e8fc177912ba30ebb8f391f684debb40 3ded72b9f911249396eafb6285adf007d681ebde Nathan Ogden 1785514943 +0000 commit: clean up, update docs 3ded72b9f911249396eafb6285adf007d681ebde b8f200f0d22f54264bcd5fb7923f7c0d72371607 Nathan Ogden 1785515276 +0000 commit: fix sample data path in docker compose b8f200f0d22f54264bcd5fb7923f7c0d72371607 c36aa426c9df38b9d32c04f482c1c3f9cc9f9506 Nathan Ogden 1785516392 +0000 commit: removed note about migrating cognito submissions c36aa426c9df38b9d32c04f482c1c3f9cc9f9506 890b7e13165c5375bbaad94da9113b95b5415c79 Nathan Ogden 1785519216 +0000 commit: clean up imports in code and type hinting, removed references to cognito intake in docs 890b7e13165c5375bbaad94da9113b95b5415c79 55b60ff9a9c802b6c930d44c70ce47c86c61a0f4 Nathan Ogden 1785546395 +0000 commit: fixed tests that were in the wrong place 55b60ff9a9c802b6c930d44c70ce47c86c61a0f4 ba9d08744cbd87e80c6cb5477b9db18d9edbb85e Nathan Ogden 1785554973 +0000 commit: added healthie webhook fixtures ba9d08744cbd87e80c6cb5477b9db18d9edbb85e 8a8d929908f5c27d3fe96ac28a600e205264603c Nathan Ogden 1785599884 +0000 commit: fix answer-label matching, add daily checkin handler and management commands 8a8d929908f5c27d3fe96ac28a600e205264603c 9f8c42bc414d12677d5295714919f54c930e068f Nathan Ogden 1785633651 +0000 commit: intake: implement metric, symptom, and care plan normalization 9f8c42bc414d12677d5295714919f54c930e068f 7566d59933f3a06ddfdf09699085eabe2b1f92b5 Nathan Ogden 1785795986 +0000 commit: cms elighibility api implementation 7566d59933f3a06ddfdf09699085eabe2b1f92b5 ffac0ad44f2e9d46ef8bd915226c1000a9608547 Nathan Ogden 1785815999 +0000 commit: implement cms access alignment api calls ffac0ad44f2e9d46ef8bd915226c1000a9608547 933c7798a4ae04e9e9400378345180560067aee8 Nathan Ogden 1785955557 +0000 commit: fixed errors identified by ai agent 933c7798a4ae04e9e9400378345180560067aee8 782ae29b3945dd0fdeb8097541f2798321dd18c0 Nathan Ogden 1786044806 +0000 commit: removed PatientExecutionLog from syntheic model list 782ae29b3945dd0fdeb8097541f2798321dd18c0 47b9d985de870a3577824f30c96fbe73ac5f3387 Nathan Ogden 1786112987 +0000 commit: added doc on manual testing 47b9d985de870a3577824f30c96fbe73ac5f3387 351c25f8da64ae97aada147a4790e9dcd99e6e12 Nathan Ogden 1786155497 +0000 commit: fixed webhook intake and healthie signature verification 351c25f8da64ae97aada147a4790e9dcd99e6e12 d83b6d86e2ffad9ea85f373b914ce32452988096 Nathan Ogden 1786490263 +0000 commit: added mock cms api server d83b6d86e2ffad9ea85f373b914ce32452988096 a2838da5ff45359a7f53e60b518d44d4690dcd64 Nathan Ogden 1786564607 +0000 commit: add access fhir sandbox a2838da5ff45359a7f53e60b518d44d4690dcd64 3f5d7e6431ae7b0340f8a459db9ca2ae479f7531 Nathan Ogden 1786628082 +0000 commit: django integration tests 3f5d7e6431ae7b0340f8a459db9ca2ae479f7531 78bb0909eace6c8e75b480ab347c31275ea6daa8 Nathan Ogden 1786645138 +0000 commit: better error handling and resilence 78bb0909eace6c8e75b480ab347c31275ea6daa8 f99bebd55b0d4832f711978330bc26285d606f6e Nathan Ogden 1786686153 +0000 commit: demo access lifecycle script, staging configurations f99bebd55b0d4832f711978330bc26285d606f6e 38e0c8797d8facdb2a731f7be643a4884c829b8b Nathan Ogden 1786714778 +0000 commit: code audit fixes, pep8 styling, import sorting 38e0c8797d8facdb2a731f7be643a4884c829b8b 26afc34c37642b2a97fe0c91a796c0204eac12e3 Nathan Ogden 1786749098 +0000 commit: fix CI and compose tooling: unify cms-mock service name, pin FHIR mock to upstream commit 26afc34c37642b2a97fe0c91a796c0204eac12e3 c918cde25903ae7c1de50ce208fcfedb068638ab Nathan Ogden 1786859571 +0000 commit: PHI encryption foundation, pseudonymization design, cohort generator, Terraform infra c918cde25903ae7c1de50ce208fcfedb068638ab c918cde25903ae7c1de50ce208fcfedb068638ab Nathan Ogden 1787009897 +0000 reset: moving to HEAD c918cde25903ae7c1de50ce208fcfedb068638ab 27bffe312a1370865c7c0d18abd5ee1ad423befc Nathan Ogden 1787010765 +0000 commit: consistency fixes: align compose/Dockerfile/settings/env contracts, terraform wiring, and docs with implemented code 27bffe312a1370865c7c0d18abd5ee1ad423befc 354e2a68637284f834fd28eb0ad9e0dbd05924f4 Nathan Ogden 1787081994 +0000 commit: add code review guide: per-file walkthrough, test/doc map, risk checklist 354e2a68637284f834fd28eb0ad9e0dbd05924f4 8f4e22db754bb2fd80c1c19ab119acdfcc11803e Nathan Ogden 1787239225 +0000 commit: run ruff format on access_core 8f4e22db754bb2fd80c1c19ab119acdfcc11803e 92a93b5ae0d9dc7155943035d9077057d2c144ee Nathan Ogden 1787250447 +0000 commit: document CMS polling behavior per ops manual v0.9.12: 5-min window, resume requirement unmet; clarify BCDA vs ACCESS endpoint 92a93b5ae0d9dc7155943035d9077057d2c144ee ae43d7b9cf6e9e89dadcfa3a64388ae1794a51f4 Nathan Ogden 1788269268 +0000 commit: fhirclient patient builders, durable cms submission tracking with resumable polling ae43d7b9cf6e9e89dadcfa3a64388ae1794a51f4 23523086574b805f7cf85b198218f79685043d2d Nathan Ogden 1788273545 +0000 commit: parse and validate cms fhir responses with fhirclient models, keep raw fallbacks for unvalidated bodies 23523086574b805f7cf85b198218f79685043d2d b30133e7317bcf600c7333381d79caf60c681d7b Nathan Ogden 1788356524 +0000 commit: delete fhir_test command as it was just to test the fhirclient lib, added pyproject.toml and pyrightconfig.json b30133e7317bcf600c7333381d79caf60c681d7b c36c93b4c19a605d2af9b6ed819d67c5d19e13e1 Nathan Ogden 1788357266 +0000 commit: ruff check --fix access_core c36c93b4c19a605d2af9b6ed819d67c5d19e13e1 aad8f4fcc92d857da981ff925572096d50bd2d1f Nathan Ogden 1788364656 +0000 commit: fix all ruff lint findings for ci, ignore ruf012 django class attrs, pin ruff in workflow aad8f4fcc92d857da981ff925572096d50bd2d1f 1f4979f6a0c7df835f2e2d2073b98b8b5f041c04 Nathan Ogden 1788368109 +0000 commit: fix invalid compose interpolation default for webhook signature verify flag 1f4979f6a0c7df835f2e2d2073b98b8b5f041c04 436f0ee25afaef97ad126c951574633e4762a688 Nathan Ogden 1788381645 +0000 commit: convert cms parameter builders to typed fhirclient models, serialize once at transport boundary 436f0ee25afaef97ad126c951574633e4762a688 97345c0d0015bfa836983065bbd4d632ee129323 Nathan Ogden 1788443186 +0000 commit: remove python 3.12 matrix from ci, test single job on 3.13 to avoid port conflicts 97345c0d0015bfa836983065bbd4d632ee129323 ff902f66913a6ee8e75374219b3cbb8dd6012ad0 Nathan Ogden 1788446280 +0000 commit: remove python version env var from github ci workflow ff902f66913a6ee8e75374219b3cbb8dd6012ad0 c88b88ef406ff0708073e82eea983edae0d6556a Nathan Ogden 1788543638 +0000 commit: add cms polling worker loop command and single-instance fargate worker service, add egress-only nat for private subnets to reach the cms api c88b88ef406ff0708073e82eea983edae0d6556a 6c73b58b53c4d7efc784ec22ae56998d47ee91b5 Nathan Ogden 1788546855 +0000 commit: reuse actions service postgres in ci integration step, stop starting compose db that collides on port 5432 6c73b58b53c4d7efc784ec22ae56998d47ee91b5 6c73b58b53c4d7efc784ec22ae56998d47ee91b5 Nathan Ogden 1788624460 +0000 reset: moving to HEAD 6c73b58b53c4d7efc784ec22ae56998d47ee91b5 6c73b58b53c4d7efc784ec22ae56998d47ee91b5 Nathan Ogden 1788624492 +0000 reset: moving to HEAD 6c73b58b53c4d7efc784ec22ae56998d47ee91b5 b224671b676943336a944050ad5326b514f4dc00 Nathan Ogden 1788624597 +0000 commit: comment out docker build step in Github workflow until we have AWS setup b224671b676943336a944050ad5326b514f4dc00 83ff1b2622fa0fc4b01440beeee89cf9ec0a7c7c Nathan Ogden 1788736343 +0000 commit: add reviewer-driven eligibility requests with per-track icd-10 conditions, drop cli --track from check_cms_eligibility, support multi-track intakes 83ff1b2622fa0fc4b01440beeee89cf9ec0a7c7c 83ff1b2622fa0fc4b01440beeee89cf9ec0a7c7c Nathan Ogden 1788919145 +0000 reset: moving to HEAD 83ff1b2622fa0fc4b01440beeee89cf9ec0a7c7c d1789e8e59c331650360498f1e022ec638877c52 Nathan Ogden 1788928764 +0000 commit: add icd-10-cm typeahead to eligibility request admin via nlm clinical tables proxy, hand-rolled vanilla js widget since select2 input compat shim breaks ajax, init inline rows on formset:added via django.jQuery, viewport-relative dropdown positioning with scroll tracking d1789e8e59c331650360498f1e022ec638877c52 74c70b78b9dcda99414d031d9b8587ad47abfa36 Nathan Ogden 1788963673 +0000 commit: mock healthie client in form signed webhook test, stop depending on ambient api key for graphql fetch). 74c70b78b9dcda99414d031d9b8587ad47abfa36 401aeade879cd59f9b72ca3ef245942fc4359e5f Nathan Ogden 1788976217 +0000 commit: replace nlm clinical tables proxy with local cdc icd-10-cm snapshot for admin typeahead, seed fy2027 codes via data migration, add load_icd10_codes command where wholesale snapshot replace tracks annual deletions, fix code regex that rejected valid l#l and ll# category codes such as c4a.0 and qa1.71 401aeade879cd59f9b72ca3ef245942fc4359e5f 63cfddd9f84336818eeac6170ca69b85220d73a4 Nathan Ogden 1788987107 +0000 commit: add audit trail writer for phi and decision models, capture request actor context via middleware, swap auditevent user fk to auth user since identity user is not the login model, harden auditevent admin to append-only 63cfddd9f84336818eeac6170ca69b85220d73a4 84f75e633466b2a25b3e620f5e1a5d86549520c9 Nathan Ogden 1788988307 +0000 commit: pin all requirements to exact tested versions in root and intake_app, add bump policy comment, defer hashed lockfile as follow-up 84f75e633466b2a25b3e620f5e1a5d86549520c9 472ab15d5814e351ec0449e7f93c536cf2dba92c Nathan Ogden 1789013663 +0000 commit: gate synthetic mbi behind allow_synthetic_mbi setting with fail-closed default, redact patient phi from stored cms request and response payloads 472ab15d5814e351ec0449e7f93c536cf2dba92c 05e050cd446941532886e910d803ac37d5393ccb Nathan Ogden 1789048853 +0000 commit: handle healthie webhook transport failures in graphql fetch, classify permanent 4xx as failed ingestion with 200 ack, keep transient errors propagating to 500 for healthie retry 05e050cd446941532886e910d803ac37d5393ccb d166702b6ddca452a5a1f1cd398507aaccf4e41e Nathan Ogden 1789063915 +0000 commit: add retry_failed_ingestions command and admin reprocess action to recover webhook records after healthie api key rotation, add stable failure log token, wire cloudwatch alerting for permanent healthie fetch failures via sns topic module with alarm actions on staging and prod alarms d166702b6ddca452a5a1f1cd398507aaccf4e41e 2dc60d0b6ec4a3fbc0ab1d9acdc718153bcd0ff4 Nathan Ogden 1789154017 +0000 commit: make cms api url shapes configurable via post and submission status path templates, remove mock server localhost sniffing from cms client, set mock query param status path defaults in dev local and test settings 2dc60d0b6ec4a3fbc0ab1d9acdc718153bcd0ff4 f80375093c54cbcb3c97220aa1137741c4c3f576 Nathan Ogden 1789415054 +0000 commit: make all cms services submit-only so signals no longer block on submission-status polls, route every poll through the polling worker and poll_cms_submissions command with in-flight dedupe guards, move eligibility intake transitions to worker-side application, add cms-worker service to docker-compose, drive integration scripts with manual polling, update review guide resilience config and manual testing docs f80375093c54cbcb3c97220aa1137741c4c3f576 5ebc9bd83c4648e32e218458d929c4437bc8596f Nathan Ogden 1789415070 +0000 commit: fix encrypted date field to_python so model form and admin saves keep dob as a real date in memory instead of an iso string, add regression tests covering the post_save alignment crash 5ebc9bd83c4648e32e218458d929c4437bc8596f 84fcf22da53dc37805a5c16dc25e40cb9c963d11 Nathan Ogden 1789418944 +0000 commit: fix webhook signature verification for non-ascii payloads by re-serializing with ensure_ascii=False so content length matches healthie json.stringify, add regression test signing an accented-name payload like the js reference 84fcf22da53dc37805a5c16dc25e40cb9c963d11 38d29876f85515aeb5ec5f60195f5b0bb65edc6a Nathan Ogden 1789487059 +0000 commit: harden cms polling and reporting against concurrent runs by adding an atomic per-row claim to poll_cms_submissions with f-expression attempt counting, claiming oap observations before posting report-data with per-observation transient retry and terminal rejection, re-checking alignment completion under a row lock so duplicate beneficiaries are impossible, and making eligibility intake status transitions conditional updates that rescue derived rejections 38d29876f85515aeb5ec5f60195f5b0bb65edc6a 3db96f3fabe4224639f9b9ebc3483515997657ed Nathan Ogden 1790109767 +0000 commit: fix eligibility not-eligible text fallback, enforce unalignment in-flight blocking in service, mark intake inactive on applied unalignment with failed-outcome warning, add rejected oap observation resubmission command, link reporting resume payloads to their own audit rows, reject malformed webhook content-digest headers, mask phi in identifier str and crypto error messages, quote only param names from cms error responses, gate audit xff resolution on trusted proxies, bound the audit old-state cache, and harden intake app uploads required-field checks and recaptcha 3db96f3fabe4224639f9b9ebc3483515997657ed e3f33ee2fd4894ea79e6db57b6b4d95b8ef9235d Nathan Ogden 1790171622 +0000 commit: make auditevent user column swap migration safe by refusing to run when rows still reference identity.user and discovering sqlite fk auto-indexes via pragma instead of hardcoding index names, add unique constraint on documentversion (document, version_number) with a duplicate pre-check that lists offending pairs, and bind staging postgres port to loopback only e3f33ee2fd4894ea79e6db57b6b4d95b8ef9235d db99a3bac7008b50647822e26900b33689f8fd71 Nathan Ogden 1790187267 +0000 commit: share a single cms client instance across services and the polling worker to reuse oauth tokens and connection pools, record failed cms post attempts in the audit trail alongside successful ones, demote per-poll url logs to debug, remove dead old-status helpers and the unreachable mbi loop from unalignment, trim the django healthie client to its only used query method, exclude temp_uploads from docker builds, stop falling back to a hardcoded dev postgres password when loading settings and strip allowed_hosts entries, and clean up ruff findings in access_core and intake_app with a scoped b008 ignore for fastapi defaults