Finding–requirement–test crosswalk

This generated route connects the seven finding pages and nine sociotechnical codes to the 13 candidate Defence requirements and 13 designed assurance tests. It is derived from the canonical requirements register and assurance-test register; it is not a parallel source of truth.

Authority and transferability boundary

A code match shows a controlled analytical route from a civilian hazard mechanism to a candidate Defence control. It does not make the requirement a coronial recommendation, establish that the mechanism exists in DMICP or CORTISONE, validate a Defence requirement, or show that an assurance test has passed.

Requirements can appear under more than one finding because mechanism codes are non-exclusive. Repetition in this table is navigational and must not be treated as causal weight, prevalence or independent corroboration.

Finding and mapped code(s)	Candidate requirement	Requirement status and trace basis	Designed assurance and execution status	Traceability and validation boundary
Information visibility and decision support `ALERT`	REQ-002 — Population visibility and accountable recall	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-002 — `designed_not_executed`	Ross directly supports the missing computable non-response mechanism; Defence population completeness remains untested. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `VIS`	REQ-003 — Longitudinal minimum record and source completeness	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-003 — `designed_not_executed` AST-006 — `designed_not_executed`	Cassidy supports unavailable allergy information and Jordan supports omitted recent temporary-practice care; the minimum dataset and supported boundaries require Defence agreement. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `VIS`, `ALERT`	REQ-004 — Critical-result delivery and clinical closure	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-009 — `designed_not_executed`	Caliel Smith-Kwami directly supports the distinction between passive EHR availability and active result notification, while preserving the wider analyser, discharge and follow-up context; Rhodes supports salience and filing risk; Thompson supports accountable delivery and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `VIS`, `ALERT`	REQ-005 — Auditable message, referral and task routing	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Stringer directly supports routing and record-incorporation risk; Rhodes and Thompson support action ownership and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `VIS`, `ALERT`	REQ-007 — Safe hybrid record operation	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-007 — `designed_not_executed`	Drewell directly supports a safety-critical handwritten instruction not reaching the electronic prescribing view, with causal uncertainty preserved; King supports hybrid-record reconciliation and an owned medication review. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `VIS`	REQ-008 — Provenance and amendment clarity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-008 — `designed_not_executed`	Braund directly supports divergence between audit and exported views; Lunt supports attributable authorship for temporary staff; report 2018-0405 supports visibility of original content and amendment state. The latter two reports are future-risk concerns rather than digital causal findings. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `VIS`, `ALERT`	REQ-009 — Actionable and proportionate decision support	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Grant directly supports decision-point timing and persistence of an alert, while the root-cause wording remains attributable to the Trust analysis; Rhodes, Ross, King and Thompson support other salience or alerting mechanisms. Defence thresholds and workflow remain unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Information visibility and decision support `ALERT`	REQ-010 — Safety-control migration	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-010 — `designed_not_executed`	Spencer directly supports follow-up loss during an IT-system introduction, with migration, training and administrative input jointly implicated; Hughes supports preserving local prescribing safety controls during replacement. Applicability to CORTISONE remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-002 — Population visibility and accountable recall	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-002 — `designed_not_executed`	Ross directly supports the missing computable non-response mechanism; Defence population completeness remains untested. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-004 — Critical-result delivery and clinical closure	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-009 — `designed_not_executed`	Caliel Smith-Kwami directly supports the distinction between passive EHR availability and active result notification, while preserving the wider analyser, discharge and follow-up context; Rhodes supports salience and filing risk; Thompson supports accountable delivery and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-005 — Auditable message, referral and task routing	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Stringer directly supports routing and record-incorporation risk; Rhodes and Thompson support action ownership and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-006 — Transfer and handover record delivery	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-006 — `designed_not_executed`	Welch directly supports urgent cross-jurisdiction image transfer and the failure of the manual fallback; Reddington supports inaccessible ePRF handover; Cassidy supports safety-critical information stranded across a receiving boundary. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-007 — Safe hybrid record operation	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-007 — `designed_not_executed`	Drewell directly supports a safety-critical handwritten instruction not reaching the electronic prescribing view, with causal uncertainty preserved; King supports hybrid-record reconciliation and an owned medication review. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-009 — Actionable and proportionate decision support	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Grant directly supports decision-point timing and persistence of an alert, while the root-cause wording remains attributable to the Trust analysis; Rhodes, Ross, King and Thompson support other salience or alerting mechanisms. Defence thresholds and workflow remain unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-011 — Distributed transaction integrity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-011 — `designed_not_executed` AST-012 — `designed_not_executed`	Billings directly supports observable cancellation and reissue state across pharmacy endpoints; Gibson directly supports reconciliation across dispensing and administration systems. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Closed-loop work and action ownership `LOOP`	REQ-012 — Degraded-operation resilience and safe synchronisation	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-007 — `designed_not_executed` AST-012 — `designed_not_executed`	Welch directly supports failed cross-system transfer fallback, and Price directly supports loss of a promised callback during a system outage; Reddington, Thompson and King support other fragile transfer, escalation or hybrid mechanisms. Conflict-safe offline synchronisation remains a Defence hypothesis, so the trace basis remains a partial scope extension. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`, `IDPOP`	REQ-001 — Identity and current care responsibility	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-001 — `designed_not_executed` AST-002 — `designed_not_executed` AST-003 — `designed_not_executed`	Jordan directly supports the record-source hazard; Ross supports dependence on computable status; CLM-007 is an explicitly low-confidence Defence analogy, not a DMICP finding. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`, `IDPOP`	REQ-002 — Population visibility and accountable recall	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-002 — `designed_not_executed`	Ross directly supports the missing computable non-response mechanism; Defence population completeness remains untested. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`, `IDPOP`	REQ-003 — Longitudinal minimum record and source completeness	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-003 — `designed_not_executed` AST-006 — `designed_not_executed`	Cassidy supports unavailable allergy information and Jordan supports omitted recent temporary-practice care; the minimum dataset and supported boundaries require Defence agreement. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`	REQ-006 — Transfer and handover record delivery	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-006 — `designed_not_executed`	Welch directly supports urgent cross-jurisdiction image transfer and the failure of the manual fallback; Reddington supports inaccessible ePRF handover; Cassidy supports safety-critical information stranded across a receiving boundary. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`	REQ-011 — Distributed transaction integrity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-011 — `designed_not_executed` AST-012 — `designed_not_executed`	Billings directly supports observable cancellation and reissue state across pharmacy endpoints; Gibson directly supports reconciliation across dispensing and administration systems. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`	REQ-012 — Degraded-operation resilience and safe synchronisation	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-007 — `designed_not_executed` AST-012 — `designed_not_executed`	Welch directly supports failed cross-system transfer fallback, and Price directly supports loss of a promised callback during a system outage; Reddington, Thompson and King support other fragile transfer, escalation or hybrid mechanisms. Conflict-safe offline synchronisation remains a Defence hypothesis, so the trace basis remains a partial scope extension. Defence applicability remains unvalidated; linked tests remain unexecuted.
Interoperability, identity and continuity `INT`	REQ-013 — Clinical and operational boundary control	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-013 — `designed_not_executed`	Thornton directly supports role-appropriate clinical-operational alerts and formal handover; the Binfield, Richards and Karbauskas cluster directly supports shared risk information across prison, healthcare and transition boundaries. Purpose, proportionality, access-control and excessive-sharing controls are Defence governance extensions not established by those claims, so the trace remains partial and Defence applicability unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Record integrity and provenance `PROV`	REQ-005 — Auditable message, referral and task routing	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Stringer directly supports routing and record-incorporation risk; Rhodes and Thompson support action ownership and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Record integrity and provenance `PROV`	REQ-007 — Safe hybrid record operation	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-007 — `designed_not_executed`	Drewell directly supports a safety-critical handwritten instruction not reaching the electronic prescribing view, with causal uncertainty preserved; King supports hybrid-record reconciliation and an owned medication review. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Record integrity and provenance `PROV`	REQ-008 — Provenance and amendment clarity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-008 — `designed_not_executed`	Braund directly supports divergence between audit and exported views; Lunt supports attributable authorship for temporary staff; report 2018-0405 supports visibility of original content and amendment state. The latter two reports are future-risk concerns rather than digital causal findings. Defence applicability remains unvalidated; linked tests remain unexecuted.
Record integrity and provenance `PROV`	REQ-011 — Distributed transaction integrity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-011 — `designed_not_executed` AST-012 — `designed_not_executed`	Billings directly supports observable cancellation and reissue state across pharmacy endpoints; Gibson directly supports reconciliation across dispensing and administration systems. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Record integrity and provenance `PROV`	REQ-012 — Degraded-operation resilience and safe synchronisation	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-007 — `designed_not_executed` AST-012 — `designed_not_executed`	Welch directly supports failed cross-system transfer fallback, and Price directly supports loss of a promised callback during a system outage; Reddington, Thompson and King support other fragile transfer, escalation or hybrid mechanisms. Conflict-safe offline synchronisation remains a Defence hypothesis, so the trace basis remains a partial scope extension. Defence applicability remains unvalidated; linked tests remain unexecuted.
Record integrity and provenance `PROV`	REQ-013 — Clinical and operational boundary control	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-013 — `designed_not_executed`	Thornton directly supports role-appropriate clinical-operational alerts and formal handover; the Binfield, Richards and Karbauskas cluster directly supports shared risk information across prison, healthcare and transition boundaries. Purpose, proportionality, access-control and excessive-sharing controls are Defence governance extensions not established by those claims, so the trace remains partial and Defence applicability unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Resilience and degraded operation `RES`	REQ-004 — Critical-result delivery and clinical closure	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-009 — `designed_not_executed`	Caliel Smith-Kwami directly supports the distinction between passive EHR availability and active result notification, while preserving the wider analyser, discharge and follow-up context; Rhodes supports salience and filing risk; Thompson supports accountable delivery and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Resilience and degraded operation `RES`	REQ-006 — Transfer and handover record delivery	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-006 — `designed_not_executed`	Welch directly supports urgent cross-jurisdiction image transfer and the failure of the manual fallback; Reddington supports inaccessible ePRF handover; Cassidy supports safety-critical information stranded across a receiving boundary. Defence applicability remains unvalidated; linked tests remain unexecuted.
Resilience and degraded operation `RES`	REQ-011 — Distributed transaction integrity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-011 — `designed_not_executed` AST-012 — `designed_not_executed`	Billings directly supports observable cancellation and reissue state across pharmacy endpoints; Gibson directly supports reconciliation across dispensing and administration systems. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Resilience and degraded operation `RES`	REQ-012 — Degraded-operation resilience and safe synchronisation	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-007 — `designed_not_executed` AST-012 — `designed_not_executed`	Welch directly supports failed cross-system transfer fallback, and Price directly supports loss of a promised callback during a system outage; Reddington, Thompson and King support other fragile transfer, escalation or hybrid mechanisms. Conflict-safe offline synchronisation remains a Defence hypothesis, so the trace basis remains a partial scope extension. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-001 — Identity and current care responsibility	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-001 — `designed_not_executed` AST-002 — `designed_not_executed` AST-003 — `designed_not_executed`	Jordan directly supports the record-source hazard; Ross supports dependence on computable status; CLM-007 is an explicitly low-confidence Defence analogy, not a DMICP finding. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-002 — Population visibility and accountable recall	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-002 — `designed_not_executed`	Ross directly supports the missing computable non-response mechanism; Defence population completeness remains untested. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-003 — Longitudinal minimum record and source completeness	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-003 — `designed_not_executed` AST-006 — `designed_not_executed`	Cassidy supports unavailable allergy information and Jordan supports omitted recent temporary-practice care; the minimum dataset and supported boundaries require Defence agreement. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-004 — Critical-result delivery and clinical closure	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-009 — `designed_not_executed`	Caliel Smith-Kwami directly supports the distinction between passive EHR availability and active result notification, while preserving the wider analyser, discharge and follow-up context; Rhodes supports salience and filing risk; Thompson supports accountable delivery and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-005 — Auditable message, referral and task routing	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Stringer directly supports routing and record-incorporation risk; Rhodes and Thompson support action ownership and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-006 — Transfer and handover record delivery	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-006 — `designed_not_executed`	Welch directly supports urgent cross-jurisdiction image transfer and the failure of the manual fallback; Reddington supports inaccessible ePRF handover; Cassidy supports safety-critical information stranded across a receiving boundary. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-008 — Provenance and amendment clarity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-008 — `designed_not_executed`	Braund directly supports divergence between audit and exported views; Lunt supports attributable authorship for temporary staff; report 2018-0405 supports visibility of original content and amendment state. The latter two reports are future-risk concerns rather than digital causal findings. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-009 — Actionable and proportionate decision support	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Grant directly supports decision-point timing and persistence of an alert, while the root-cause wording remains attributable to the Trust analysis; Rhodes, Ross, King and Thompson support other salience or alerting mechanisms. Defence thresholds and workflow remain unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-010 — Safety-control migration	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-010 — `designed_not_executed`	Spencer directly supports follow-up loss during an IT-system introduction, with migration, training and administrative input jointly implicated; Hughes supports preserving local prescribing safety controls during replacement. Applicability to CORTISONE remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-011 — Distributed transaction integrity	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-011 — `designed_not_executed` AST-012 — `designed_not_executed`	Billings directly supports observable cancellation and reissue state across pharmacy endpoints; Gibson directly supports reconciliation across dispensing and administration systems. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-012 — Degraded-operation resilience and safe synchronisation	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-007 — `designed_not_executed` AST-012 — `designed_not_executed`	Welch directly supports failed cross-system transfer fallback, and Price directly supports loss of a promised callback during a system outage; Reddington, Thompson and King support other fragile transfer, escalation or hybrid mechanisms. Conflict-safe offline synchronisation remains a Defence hypothesis, so the trace basis remains a partial scope extension. Defence applicability remains unvalidated; linked tests remain unexecuted.
Governance and assurance `GOV`	REQ-013 — Clinical and operational boundary control	`candidate_partial_trace_defence_unvalidated` Trace basis: `partial_scope_extension`	AST-013 — `designed_not_executed`	Thornton directly supports role-appropriate clinical-operational alerts and formal handover; the Binfield, Richards and Karbauskas cluster directly supports shared risk information across prison, healthcare and transition boundaries. Purpose, proportionality, access-control and excessive-sharing controls are Defence governance extensions not established by those claims, so the trace remains partial and Defence applicability unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Human-factors lens `HF`	REQ-004 — Critical-result delivery and clinical closure	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-009 — `designed_not_executed`	Caliel Smith-Kwami directly supports the distinction between passive EHR availability and active result notification, while preserving the wider analyser, discharge and follow-up context; Rhodes supports salience and filing risk; Thompson supports accountable delivery and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Human-factors lens `HF`	REQ-005 — Auditable message, referral and task routing	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Stringer directly supports routing and record-incorporation risk; Rhodes and Thompson support action ownership and closure. Defence applicability remains unvalidated; linked tests remain unexecuted.
Human-factors lens `HF`	REQ-006 — Transfer and handover record delivery	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-006 — `designed_not_executed`	Welch directly supports urgent cross-jurisdiction image transfer and the failure of the manual fallback; Reddington supports inaccessible ePRF handover; Cassidy supports safety-critical information stranded across a receiving boundary. Defence applicability remains unvalidated; linked tests remain unexecuted.
Human-factors lens `HF`	REQ-007 — Safe hybrid record operation	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-007 — `designed_not_executed`	Drewell directly supports a safety-critical handwritten instruction not reaching the electronic prescribing view, with causal uncertainty preserved; King supports hybrid-record reconciliation and an owned medication review. Defence applicability remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Human-factors lens `HF`	REQ-009 — Actionable and proportionate decision support	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-004 — `designed_not_executed` AST-005 — `designed_not_executed` AST-009 — `designed_not_executed`	Grant directly supports decision-point timing and persistence of an alert, while the root-cause wording remains attributable to the Trust analysis; Rhodes, Ross, King and Thompson support other salience or alerting mechanisms. Defence thresholds and workflow remain unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.
Human-factors lens `HF`	REQ-010 — Safety-control migration	`candidate_trace_complete_defence_unvalidated` Trace basis: `direct_case_claims`	AST-010 — `designed_not_executed`	Spencer directly supports follow-up loss during an IT-system introduction, with migration, training and administrative input jointly implicated; Hughes supports preserving local prescribing safety controls during replacement. Applicability to CORTISONE remains unvalidated. Defence applicability remains unvalidated; linked tests remain unexecuted.

How to use this view

Open the finding to understand the bounded cross-case mechanism and its limitations.
Open the candidate requirement to inspect its included reports, stable claims, applicability and traceability qualification.
Open the assurance scenario to inspect the proposed method and pass evidence.
Do not promote a requirement or report a pass until Defence workflow evidence, representative execution and an authorised clinical-risk decision are registered.