SHIELD App Verification Checklist¶
Run these checks before releasing clinic data-sharing changes:
- Practitioner connect: redeem a valid invite code in the Onset app and confirm consent events are created.
- Consent toggle off: turn off adherence and labs, then confirm clinic patient detail no longer returns shared adherence or lab rows.
- Lab share blocked: attempt to share a lab while lab consent is off and confirm the client shows sharing is off.
- Adherence share blocked: attempt weekly adherence sync while adherence consent is off and confirm no new shared row is written.
- Disconnect: disconnect the practitioner and confirm assignments/shared clinic copies are removed while audit/consent events remain visible in export.
- Clinic access denied after revocation: sign in to the clinic portal and confirm revoked lab/adherence sections show the no-sharing state.
- Invite-code abuse: repeated bad invite-code lookups should fail without exposing patient or clinic data.
- Duplicate assignment prevention: assigning the same current protocol to the same patient should not create duplicate current rows.