Roadmap
v1.1.0 — Consent Manager + ATNA Audit
Target: Q3 2025
Consent Manager (14 tasks, 5 phases)
| Phase | Tasks | What gets built |
|---|---|---|
| Foundation | T1–T4 | ConsentRecord JPA, ConsentService, FHIR Consent mapper, AuditService |
| Enforcement | T5–T6 | ConsentEnforcementInterceptor, SmartConsentCustomizer |
| OAuth2 screen | T7–T8 | requireAuthorizationConsent(true), Thymeleaf consent screen |
| Patient portal | T9–T11 | Dashboard, revocation flow, history + audit trail |
| API + admin | T12–T14 | FHIR REST API, org-level policy engine, integration tests |
Regulatory coverage: HIPAA, HTI-1/TEFCA, GDPR/EHDS, DISHA, My Health Record
ATNA Audit
- IHE ATNA-compliant FHIR AuditEvent logging
- Async
@EventListener— never blocks request path - Every auth event, consent decision, and FHIR access logged
- Queryable via FHIR API
v1.2.0 — Referral Module + Cerner
Target: Q4 2025
- FHIR ServiceRequest + Task referral workflow
- Cross-facility patient transfer with digital information
- Cerner Ignite sandbox testing — scope normalisation,
.readformat - Sri Lanka FHIR Implementation Guide profiles
v2.0.0 — SMART Backend Services + MPI
Target: 2026
- SMART Backend Services (machine-to-machine)
- Master Patient Index (IHE PDQ/PIXm)
- National Electronic Health Record (NeHR) foundation
- IHE MHD document sharing