{
  "schema": "https://universalhx.com/.well-known/uhx-registry.schema.json",
  "updated": "2026-09-11",
  "publisher": {
    "id": "universalhx",
    "name": "UniversalHX",
    "url": "https://universalhx.com",
    "contact": "https://universalhx.com"
  },
  "apps": [
    {
      "id": "universalhx",
      "name": "UniversalHX App Hub",
      "audience": "public-and-patient",
      "base_url": "https://universalhx.com",
      "launch_url": "https://universalhx.com",
      "record_preview_url": "https://universalhx.com/record-concept",
      "allowed_redirect_paths": [
        "/",
        "/record-concept",
        "/bridge"
      ],
      "scope_vocabulary": [
        "registry.read",
        "launcher.read"
      ],
      "contains_phi": false,
      "notes": "Public app hub, PWA shell, registry, and launcher. No PHI is rendered here."
    },
    {
      "id": "uhx-record",
      "name": "UHX Personal Record",
      "audience": "patient",
      "base_url": "https://record.universalhx.com",
      "launch_url": "https://record.universalhx.com/personal",
      "allowed_redirect_paths": [
        "/",
        "/personal",
        "/login",
        "/emergency"
      ],
      "scope_vocabulary": [
        "personal-record.read",
        "personal-record.write",
        "documents.read",
        "sharing.request"
      ],
      "contains_phi": true,
      "notes": "The patient-owned personal health record: labs, medications, conditions, documents, sharing, and the emergency card."
    },
    {
      "id": "ecosera",
      "name": "Ecosera",
      "audience": "workforce-and-patient",
      "base_url": "https://ecosera.io",
      "launch_url": "https://ecosera.io",
      "allowed_redirect_paths": [
        "/",
        "/personal",
        "/patient",
        "/docs",
        "/trials"
      ],
      "scope_vocabulary": [
        "personal-record.read",
        "clinical-trials.read",
        "documents.read",
        "sharing.request"
      ],
      "contains_phi": true,
      "notes": "Clinical research operations: trial matching, documents, ePRO, visits, and consent workflows."
    },
    {
      "id": "medhx",
      "name": "MedHX Pro",
      "audience": "workforce",
      "base_url": "https://medhx.universalhx.com",
      "launch_url": "https://medhx.universalhx.com",
      "fhir_base_url": "https://medhx.universalhx.com/api/fhir/r4",
      "smart_configuration_url": "https://medhx.universalhx.com/api/fhir/r4/.well-known/smart-configuration",
      "allowed_redirect_paths": [
        "/",
        "/dashboard"
      ],
      "scope_vocabulary": [
        "patient/*.read",
        "patient/*.write",
        "launch",
        "openid",
        "fhirUser",
        "offline_access"
      ],
      "contains_phi": true,
      "notes": "EHR, clinical charting, claims, eligibility, ERA, billing, and revenue cycle workflows."
    }
  ],
  "invariants": [
    "UniversalHX must not store or cache live PHI until HIPAA role, BAA, audit, consent, and identity controls are formally approved.",
    "Universal login tokens must authenticate only; authorization stays inside each application.",
    "Personal health record data lives in the UHX Personal Record (record.universalhx.com); the Ecosera copy is retained only until it is retired.",
    "Clinical content flows from MedHX Pro to Ecosera for research use only through explicit consented bridges.",
    "Launcher paths must be derived from allowed_redirect_paths and must drop query strings and fragments before redirecting."
  ]
}