Evidence changes after approval.

Missing and partial coverage remain visible while generated artifacts are gated by the approved remediation event.

Missing & partial coverage

Northstar Patient Portal

Missing or partial

No tenant isolation test attached to the storage policy evidence.

Missing or partial

No encryption-in-transit check recorded for the patient-documents endpoint.

Missing or partial

Human review record is missing for the generated policy change.

Missing or partial

Signed Data Processing Agreement for the storage subprocessor is not on file.

Artifacts appear only after the fix is approved.

Approval required

Patient-scoped storage policy diffPolicy diffGated by approval

Tenant isolation test outputTest outputGated by approval

Encryption-in-transit checkControl checkGated by approval

DPA gap noteControl noteGated by approval