Feature depth
Accountability is the architecture.
Critical controls live inside the transaction itself: identities, signatures, locations, expected state, timestamps, serialized medication, and the resulting ledger event.
01 / LEDGER
Inventory derived from immutable events
Every received package becomes a serialized container with a ledger-derived balance. Completed events are not edited or deleted.
- SHA-256 chained medication events
- Product-version, lot, and expiration grouping
- Corrections create linked events
02 / SIGNATURES
Independent people sign the same action
Configured workflows require a different authenticated user and retain both identity snapshots, the signed payload hash, and separate signatures.
- Actor cannot witness their own action
- Witness access revalidated at commit
- Signed confirmation visible from history
03 / RECEIVING
Atomic multi-lot acquisition
Receive up to 50 medication and lot lines and 250 vials in one batch while still serializing every vial and creating every ledger event.
- Shipment-level details entered once
- One invalid line rejects the full batch
- Idempotency prevents duplicate receipt
04 / CUSTODY
Physical location and human custody stay distinct
A vault handoff includes a complete medication count, explicit verification of every expected vial, recipient reauthentication, and two signatures.
- Person-to-person responsibility change
- Signed storage-location movements
- Required destination count after movement
05 / USE & WASTE
Account for the entire vial
Select eligible serialized items from one location and record separate administered and wasted amounts for the shared patient-care event.
- Expired medication blocked from administration
- Atomic stale-balance protection
- Post-action full-location verification required
06 / COUNTS
Physical counts do not silently change inventory
Users enter medication totals before seeing serial prompts, verify every expected vial, review mismatches, and sign the exact snapshot.
- Contradictory or incomplete counts rejected
- Mismatch opens a discrepancy case
- Resolution states its ledger effect before commit
07 / NARCOTIC BOXES
Expected loadouts without fictitious inventory
Version box loadouts, compare expected to actual serialized contents, replenish shortages from eligible stock, and retain placement and seal history.
- Portable sealed or internal-storage mode
- Two-person seal verification
- Complete-box placement movement
08 / DISPOSITION
Quarantine through final disposition
Move serialized vials through quarantine, release, destruction holding, witnessed destruction, or reverse distribution in controlled batches.
- Lifecycle-state validation at commit
- Dual authentication and signatures
- Certificate or manifest evidence with digest