Clinical use prohibitedLocal-only importSponsor-isolatedPortable export
Site-level evidence intake

Bring the files the site actually has.

Drop de-identified CSV, JSON, NDJSON, Markdown certificate reports, PDFs, spreadsheets, or other source artifacts. Structured files are normalized into a portable site model. Unsupported files are still hashed and retained in the source manifest without pretending they were understood.

Boundary. This public static tool is not a HIPAA environment, validated clinical system, EDC, CTMS, EHR, eTMF, or safety database. Use synthetic or properly de-identified exports only.

Drop files here

CSV · JSON · NDJSON · Markdown · any sealed source artifact

Structured inputs stay in memory. Original file bytes are discarded after hashing and parsing.

Downloadable sample exports

These are the exact files loaded by the synthetic pack. Edit them, then drag them back into the tool.

Import manifest

Accepted object contracts

Operational source layer

The site creates the evidentiary facts.

The desk reconstructs protocol versions, active participants, visit bindings, source events, clocks, physical resources, and cross-protocol collisions. EHR, EDC, CRO, and sponsor views remain downstream projections.

Current obligations and findings

Resource collisions

Source events

Versioned operating law

Protocol versions govern work at the moment it occurs.

Visit bindings

Lineage findings

Action gate

A clean row cannot revive an expired delegation.

Test an internal action against role, protocol, action name, time, and the imported delegation record. The tool may prepare a result. It cannot create authority or transmit an external effect.

Attempt an action

Delegations

Permission-separated faces

One site view does not require sponsor cross-disclosure.

Choose a seat. Foreign-sponsor records are excluded from the projection data structure, not merely hidden by CSS. The site face sees shared operational conflicts without receiving another sponsor's narrative.

Discontinuation under constraint

Stopping pressure is not readiness.

MEC-6 records remain evidence and workflow objects. Missing evidence stays missing, self-report stays self-report, and a model certificate stays attached to the model. Nothing in this browser may emit safe_to_stop.

Participant assessment

GSK / formal-proof attack surface

Attached model certificates

Portable custody

Can another implementation reconstruct the site?

Run the admission cells, inspect conflicts and receipts, export the normalized packet, then re-import it. The packet contains customer-owned objects and source hashes, not original file bytes and not a hidden runtime.

Admission cells not run.

Conflicts and integrity findings

Session receipts

Detail