VA production readiness — human E2E run log (2026-07-21)¶
Parallel track — NOT Gate 0.5 A1. Completes the human leg required for parallel-track exit. Scripted leg: E2E_RUN_LOG_2026-07-16_VA_PARALLEL_TRACK.md.
| Field | Value |
|---|---|
| Date | 2026-07-21 (local PT; TestFlight walk ~09:40–09:43) |
| Operator | Ryan Curry |
| Track | VA production readiness (parallel) |
| Environment | TestFlight · Production API (https://api.last.vet/api) |
| Build | Hardened iOS (P0.1–7 + Phase B) on TestFlight |
| Device | Physical iPhone (TestFlight) |
Veteran va_patient_id |
32000225 (VA sandbox — Sheba703 Harris789) |
| Recipient | Recognized provider in directory ("Test Provider") via secure link |
Device walk¶
| Step | Result | Notes |
|---|---|---|
| 1. Install TestFlight build | ✅ PASS | Hardened client |
2. Sign in (VA sandbox, patient 32000225) |
✅ PASS | |
| 3. Facilities → San Diego MH | ✅ PASS | |
| 4. Generate ROI (10-5345) | ✅ PASS | |
| 5. Sign + Part 2 scope | ✅ PASS | Provider search selected Test Provider |
| 6. Create secure link | ✅ PASS | |
7. Provider OTP verify (/r/[token]) |
✅ PASS | |
| 8. PDF download | ✅ PASS | Authorized document delivery UI |
| 9. Revoke link (app) | ✅ PASS | Revokes the secure link only; does not revoke the underlying consent grant(s). |
| 10. Post-revoke blocked | ✅ PASS | Single-grant / single-link revocation proof only (link unusable after revoke). |
Result: Full loop completed successfully on hardened iOS against AWS production API.
UX findings (non-blocking; fixes staged)¶
Observed during the walk; do not reopen the pass:
- Incomplete-record banner repeated the same offline sentence once per failed FHIR resource type.
- ROI provider search results sat below the sticky Back/Continue bar + keyboard with no cue to scroll.
- Secure-access PDF viewer stretched tall (
flex-1/min-h) around a short document. - Product note (not a defect): selecting an approved directory provider still uses secure-link OTP delivery only; portal document surface requires an active veteran connection. Dual delivery (link + portal) is future scope, not parallel-track exit.
Follow-up commits (same day): iOS banner dedupe + search scroll UX; provider secure-access viewer height; ROI display-name no longer doubles name/org when identical.
Sign-off¶
- [x] Scripted pass on hardened API (
E2E_RUN_LOG_2026-07-16_VA_PARALLEL_TRACK.md) - [x] Human pass on hardened iOS TestFlight (this log)
- [x] Inbox OTP / no
SECURE_LINK_E2E_LOG_OTP(proven on scripted leg) - [x] Parallel-track exit criterion met: both legs recorded on AWS / TestFlight against prod API