Internal
Release readiness
Real patient data collection and facial risk analysis remain blocked until every item is complete.
- Public site, screening wizard, report and PDFDone · Built
- Deterministic, versioned scoring module with testsDone · stop-bang 1.0.0-pending-approval
- On-device camera quality checks (no upload)Done · Built
- Inference adapter, fails closedDone · Enabled: no
- STOP-Bang licence for commercial use confirmedOpen · Owner action
- Clinician approval of instrument wording, thresholds and safety messagesOpen · Owner action
- Secure database for screenings, notes, amendments, care events, audit logOpen · Database setup pending
- Organization isolation and least-privilege roles enforced server-sideOpen · Depends on database setup
- Staff MFAOpen · Not configured
- Secure report sharing and booking integrationOpen · Not connected
- Privacy/security review, vendor agreements (e.g. BAA), retention policyOpen · Owner action
- Deletion/access request workflowOpen · Not built
- Regulatory assessment of intended useOpen · Owner action
- Validated facial model: documentation, version pinning, sign-offOpen · Not available — keep disabled
Setup
Environment variables (names only): VITE_SUPABASE_URL, VITE_SUPABASE_PUBLISHABLE_KEY, SUPABASE_URL, SUPABASE_PUBLISHABLE_KEY. Future: a facial-inference service endpoint and credential, held server-side only.
Validation plan requirements: pre-defined endpoints (e.g. PSG-confirmed OSA at stated AHI thresholds), representative consented datasets, patient-level splits, external and prospective testing, and reporting of sensitivity, specificity, PPV, NPV, ROC-AUC, calibration, confidence intervals, subgroup results and usable-scan rate.