Clinical Compliance Doc

Infrastructure Hooks

Use the tools in infrastructure/ to enforce compliance:

• Audit Logs: Reference infrastructure/audit/ for current logging schemas
• Hospital Deployment: Follow the patterns in infrastructure/hospital-deployment/ when drafting deployment plans

Code Review Checklist

When reviewing PRs for compliance:

• Check for hardcoded credentials or API keys
• Verify allow_list vs block_list configs for data tools
• Ensure error messages do not leak internal system paths or data snippets
• Gene names follow HUGO standards
• No PHI/PII in logs, comments, or test fixtures

Use this skill when:

• Drafting implementation plans for clinical features
• Reviewing infrastructure changes
• Writing security reports for funders or hospital partners
• Verifying scientific nomenclature in code or documentation