Synthesis of existing local research
Local research synthesis
The user's existing local knowledge bases provided a substantial starting taxonomy and several useful evidence distinctions. Their conclusions were treated as research leads. A local page is not a new NHS requirement, and its original source IDs are not interchangeable with this pack's IDs. The companion provenance manifest records exact files, hashes and repository revisions inspected on 28 October 2026.
| Local knowledge base | Incorporated contribution | Qualification retained |
|---|---|---|
| InterSystems | Foundation capability map; resource management; C13 historical record and registration transfer; separate diagnostic request/result/reconciliation functions; separate commercial, service and local assurance. | A middleware, shared-care viewer or FHIR component does not itself establish assessed GP foundation coverage. Older cited versions were rechecked. |
| COPPER TIGER | Requirement terminology; buyer/contract, product assurance, connection permission and local workflow as separate questions; migration versus GP2GP versus aggregation. | Defence continuity analysis is not evidence of a particular product's DSIC compliance or an authorised NHS connection. |
| UK Digital Health compliance | Statutory applicability, preserved 2018 DCB standards and the distinction between mandatory scope and a voluntary equivalent safety baseline. | Legal scope must be resolved for the particular organisation and activity; later legislation does not automatically rewrite old standards. |
| DShCR | Provider/consumer boundaries, clinical safety evidence and the distinction between a shared view and responsibility for clinical action. | A service architecture or option is not implementation, onboarding or deployment evidence. |
The local InterSystems notes identified diagnostic Epic E00431. The current C8 page does not contain it. This pack therefore uses the current inspected E00432/E00433 and conditional E00434 instead of carrying forward the older identifier. This is why local synthesis includes source reconciliation, not just text aggregation. 064
The most useful additional questions are operational: who owns an outstanding result; what happens after a document is received; who accepts a transferred supplier control; and whether an imported record is complete enough for its stated use. They become explicit review controls or proposed hazard causes, not assertions that a defect exists.
Local research contributions: 091, 092, 093, 094.
Local safety knowledge synthesis
Checked: 28 October 2026, Europe/London. Sibling repositories were read only. Existing local research was used as a discovery and synthesis source, with current primary-source checks for material statutory and clinical-safety points. A local wiki's conclusion is not itself legislation, supplier assurance or deployment evidence.
Retrieval record
In UK Digital Health compliance (the trailing space is part of the directory name), the Graphify query DCB0129 DCB0160 applicability equivalent baseline non-NHS Defence returned 184 nodes, truncated to 50. It surfaced the two intended concepts, their source register and applicability decision tree. Canonical concept files and relevant source-register rows were then read; the graph was navigation only.
In DShCR, the Graphify query GP Connect clinical safety DCB0129 DCB0160 evidence assurance deployment returned 15 nodes about Standard proposal records, with no useful clinical subject recall. This was recorded as poor retrieval. Scoped canonical fallback read GP Connect capabilities, onboarding and internal Defence implementation, then source-register and evidence-matrix rows. No rendered page or generated graph was promoted to evidence.
Findings incorporated into the DSIC synthesis
| Local finding | DSIC use | Status and limit |
|---|---|---|
| Pre-7 July 2025 information standards have a saved statutory framework. | Add a separate statutory-route field to applicability decisions; distinguish it from the standards' internal MUST clauses and contract obligations. | Rechecked directly against SI 2025/807 regulation 3. Does not establish an exemption for every private or Defence deployment. |
| DCB-equivalent safety lifecycle is described as a policy proposal. | Useful governance recommendation where a DCB obligation is not established; label R or policy recommendation. | Preserve the concept's policy-proposal state. Do not present it as an enacted universal requirement. |
| Later information standards require notice-specific dates and duty wording. | Read effective date, addressees, comply/have-regard wording and consequences before a formal finding. | SI 2025/950 regulation 6 independently inspected. Current Act section 250 retrieval failed; do not claim a fresh full statutory-map audit. |
| Internal reuse of GP Connect specifications and access to the national service are distinct. | Add separate interface-baseline and national-service-admission questions for closed-network/Defence variants. | Sibling architectural analysis. Repository-licence provenance is pinned locally; its licence was not independently reread in this pass. No project-specific NHS approval inferred. |
| Product support, product assurance, local enablement and measured use differ. | Keep these as separate evidence states for each interface and clinical domain. | Sound synthesis from sibling canonical records; specific current supplier deployments were not revalidated here. |
| Version labels differ across catalogue, implementation-guide and data-model pages. | Do not treat a mutable current link as an implementation pin. Record artefact, hash, role, package and supplier build. |
Sibling reports Structured 1.5.0/1.6.2 and data-model1.0.0/1.1.0 differences. Retain as dated research leads unless rechecked individually. |
| Unsigned GP Connect JWT context does not itself authenticate callers. | Explain context, transport trust, service identity and user identity separately in interface safety challenges. | Direct audit page still shows alg:none; exact adopted trust model controls. Do not transplant legacy examples as a new security design. |
| Transport acceptance, patient match, filing and clinical review differ. | Expand evidence states and exception worklists for Send Document/Update Record. | Original applied review recommendation informed by sibling synthesis; no deployment acceptance tests performed. |
| Supplier and deployment clinical-safety responsibilities apply at different boundaries. | Link manufacturer evidence and local workflow assurance without replacing either. | Rechecked GP Connect data-model clinical-safety page, displayed 1.0.0; it is under review with release TBC. Do not upgrade its design text into a settled new release. |
| Internal network operation does not itself create disconnected capability. | If offline/deployed operation is relevant, request freshness, retained-content, synchronisation, conflict and endpoint-protection evidence. | Conditional architecture question, not a fact about the user's GP system. The user's Copilot itself is available with web access disabled. |
Primary sources rechecked from these local leads
- 083 — SI 2025/807: Regulation 3 preserves the pre-amendment 2012 Act framework for standards in effect immediately before 7 July 2025. The explanatory note specifically identifies continued section 250(6) have-regard duties. Read the actual notice and contract before deciding a particular organisation's obligation. Official PDF.
- 084 — SI 2025/950: Regulation 6 requires published standards to state publication/effective dates, comply-or-have-regard status, consequences and other specified information. This is a reason to inspect the applicable notice, not a finding that every current standard creates an identical duty. Official PDF.
- 079 — NHS applicability guide: Existing guidance distinguishes public funding/commissioning, direct-care use, wholly private use and device/infrastructure circumstances. It strongly recommends DCB practice outside some mandatory routes. Its 2022 date and saved statutory context should stay visible. Step-by-step guide.
- GP Connect safety principles (local DShCR
SRC-234; this pack 085): Direct page review confirms separate supplier/deployment responsibilities and patient-demographic discrepancy checking, while displaying active-review and release-TBC qualifications. Official NHS Connect guide. Proposed new source alias only; 085 remains available for root allocation.
The legislation HTML endpoints returned unsupported-content errors; the official PDFs were inspected instead. This is a targeted source check, not a legal opinion on an identified product/deployment.
Local provenance snapshots
These hashes identify the local research bytes used for scoped synthesis. They do not establish primary-source truth or product assurance. No sibling research was changed.
| Local file | Repository revision | SHA-256 | File state when recorded |
|---|---|---|---|
InterSystems/docs/knowledge-base/modules/dsic-standards-and-national-services.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
1cf5c045cdbe940b3c75e8dbae24c61525bf6d7f30d582d30ce989ffd77ee4b5 |
clean |
InterSystems/docs/knowledge-base/modules/dsic-healthshare-compliance-map.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
afa8aa6a86f8d3f5b798a6a8970286bd68831fb6e5beb5afe97ba437178aa6eb |
clean |
InterSystems/docs/knowledge-base/modules/dsic-digital-services-for-integrated-care.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
0c119d238a1bb9475c59f33c96535619b968c4617117433ea5ed9de1bdf2e365 |
clean |
InterSystems/docs/knowledge-base/modules/dsic-gp-foundation-capabilities.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
cdb632852d7bd29bca775d54ca1e84eeae2aec6f05507bc653413b68ec560b4c |
clean |
InterSystems/docs/knowledge-base/modules/dsic-capability-standard-crosswalk.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
a12b5804126d040dcb5e371e0e7de6c02f15c19db98de2d7ae07f0ba73c48dc7 |
clean |
InterSystems/docs/knowledge-base/modules/dsic-procurement-assurance-and-migration.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
15df5f11874b00a81000e55178ffa083482ca17c5abd4674a68b757ce39a7d36 |
clean |
InterSystems/docs/sources.md |
32fc2fb2071a36fdc3c07eb2e403b20d46d17bc8 |
ca8fd88c4b9868774227dd51e358c4fbb44f5db71924208613ec747ba112b58c |
clean |
COPPER TIGER/wiki/docs/dsic.md |
6de2a0174d2880ac4360ecdae434c56c911e5441 |
7410def091f6fcba13166a382c1aff92841e37329c9ee24d78d4f244cb6aeaf4 |
clean |
COPPER TIGER/wiki/docs/sources.md |
6de2a0174d2880ac4360ecdae434c56c911e5441 |
a458552aeba6e44fdad74a55c87a4a24f72579b574d8c108a8666cee6e91baab |
clean |
UK Digital Health compliance /knowledge/concepts/dcb-applicability.md |
ddc72986f56d5b427c8130ac5605149bb84d04a1 |
67468e35216d56419ab70bed9f9e1a07241bc251d915ca08c282da2bc730fb5c |
clean |
UK Digital Health compliance /knowledge/concepts/dcb-equivalent-baseline.md |
ddc72986f56d5b427c8130ac5605149bb84d04a1 |
ae292f8b6c1e672b5f92f9fb662b0c2c74e14648be5d2129679e4e3b809eb2ff |
clean |
UK Digital Health compliance /docs/sources.md |
ddc72986f56d5b427c8130ac5605149bb84d04a1 |
164b39d685a462a0696fa66640f5e0a75e2dac4a95dcfe0f4e3a26fe89e32d72 |
clean |
DShCR/knowledge/gp-connect-capabilities.md |
fdc7e567bda7683151539e1d4997d2995d6fd1a5 |
a4d18e9ca98c4329ab587f7a4935935c5194d427b9a0328259cb32b2eba61a5a |
clean |
DShCR/knowledge/gp-connect-onboarding.md |
fdc7e567bda7683151539e1d4997d2995d6fd1a5 |
5423080a013eed44008810071c97f9f611427714dbea3fcd597788c042c8b080 |
clean |
DShCR/knowledge/defence-internal-implementation.md |
fdc7e567bda7683151539e1d4997d2995d6fd1a5 |
9bdbf9612e4436179f6d09515945d882136d7249ae0a60015c8fe3f35b1407a7 |
clean |
DShCR/docs/sources.md |
fdc7e567bda7683151539e1d4997d2995d6fd1a5 |
b9d929050479310010ac895244fe889fd0713e974e6e2860a883644a81c95756 |
clean |
DShCR/docs/evidence-matrix.md |
fdc7e567bda7683151539e1d4997d2995d6fd1a5 |
a0711ae87cc66b2744f884f4af4e0409c34cec908f1606bf8beee3af329eb4fc |
clean |