# Source audit and corrections ## Source-verification audit — 28 October 2026 All 71 original source entries were revisited. Inspection depth varies. **No audit of every clause, attachment or product requirement is claimed.** Metadata inspection, selected-clause verification and actual product evidence are different states. A source marked M in a control does not establish contract adoption or implementation. Source URLs are provenance pointers; Copilot must not treat them as content it has fetched. | Source | Observed metadata | Inspection depth | Boundary / missing detail | |---|---|---|---| | [SRC-001](https://dsic-clinical-safety.pages.dev/sources/index.md#src-001) | Capability and Standards Structure | selected-clause-or-topic-check: lifecycle statuses; MUST/MAY Epics; all acceptance criteria; Additional Implementation Details; Supporting Information | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-002](https://dsic-clinical-safety.pages.dev/sources/index.md#src-002) | Standards Assurance | selected-clause-or-topic-check: BAS versus Further Requirements; contracting vehicle; solution category; non-overarching scope | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-003](https://dsic-clinical-safety.pages.dev/sources/index.md#src-003) | Overarching Standards | metadata-and-inventory: index children inventory | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-004](https://dsic-clinical-safety.pages.dev/sources/index.md#src-004) | S25 / 1.0.12 / Effective / 2026-10-19 | selected-clause-or-topic-check: GP-08.4.3.01; GP-MW-2.1-1 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-005](https://dsic-clinical-safety.pages.dev/sources/index.md#src-005) | S30 / 7.0.0 / Effective / 2026-10-23 | selected-clause-or-topic-check: GP-IG-2.3-1; GP-IG-2.3-1A; GP-IG-2.3-2; GP-IG-2.3-3; GP-IG-3-2; GP-IG-3-8; GP-IG-3-17; GP-IG-10-1; GP-IG-10-2; GP-IG-11-1; GP-IG-11-3; GP-IG-11-4; GP-IG-12-1; GP-IG-12-2B; GP-IG-12-3; GP-IG-12-4; GP-IG-12-5; GP-IG-12-7; GP-IG-12-8; GP-IG-12-9; GP-IG-12-10; GP-IG-12-13; GP-IG-13-1; GP-IG-13-2B; GP-IG-13-3; GP-IG-13-4; GP-IG-14.2-2; GP-IG-15.8; GP-IG-14.1-1; GP-IG-14.1-2; GP-IG-14.1-3 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-006](https://dsic-clinical-safety.pages.dev/sources/index.md#src-006) | S27 / 2.0.13 / Effective / 2026-10-19 | selected-clause-or-topic-check: DS01; SCT11; SCT3.7; SCT3.1; GP-REF-2.1.2; GP-REF-2.1.3; GP-REF-2.1.8; GP-03.1-01; MR2.4.01; SCT6; DS03; GP-03.2-09; SCT1; SCT2; SCT8; GP-12.6-01; GP-12.6-02; GP-13-01 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-007](https://dsic-clinical-safety.pages.dev/sources/index.md#src-007) | S26 / 2.1.10 / Effective / 2026-10-19 | selected-clause-or-topic-check: introduction scope/exclusion; DMI01; DMI02; DMI05; DMI06; DMI07; DMI27; DMI26; DMI09; DMI17; DMI18; DMI19; DMI20; DMI21; DMI22; DMI23 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-008](https://dsic-clinical-safety.pages.dev/sources/index.md#src-008) | S24 / 1.2.11 / Effective / 2026-10-19 | selected-clause-or-topic-check: BC-DR-1; BC-DR-16; BC-DR-16A; BC-DR-20 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-009](https://dsic-clinical-safety.pages.dev/sources/index.md#src-009) | S29 / 2.0.10 / Effective / 2026-10-19 | selected-clause-or-topic-check: CH1.0; SEC1.0; hosting boundary | SEC1.0 refers to a separate restricted security document; its clauses remain unreviewed. | | [SRC-010](https://dsic-clinical-safety.pages.dev/sources/index.md#src-010) | S65 / 3.0.11 / Effective / 2026-10-19 | selected-clause-or-topic-check: SM005; SM005a; SM006; SM006a; SM007; SM007a | Referenced service-management and service-level attachment contents not independently reviewed. | | [SRC-011](https://dsic-clinical-safety.pages.dev/sources/index.md#src-011) | S69 / 1.0.12 / Effective / 2026-10-19 | selected-clause-or-topic-check: ISO/IEC/IEEE 29119 reference-point wording; TEST-1; TEST-2; TEST-3; TEST-4; TEST-ENV-1 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-012](https://dsic-clinical-safety.pages.dev/sources/index.md#src-012) | S28 / 1.5.13 / Effective / 2026-10-19 | selected-clause-or-topic-check: TR-1.1; TR-2.1; TR-2.2 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-013](https://dsic-clinical-safety.pages.dev/sources/index.md#src-013) | S32 / 18.2.9 / Effective / 2026-10-23 | selected-clause-or-topic-check: ISNFR01; ISNFR03; ISNFR04; ISNFR06; ISNFR07; ASNFR01; ASNFR02 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-014](https://dsic-clinical-safety.pages.dev/sources/index.md#src-014) | S63 / 2.1.13 / Effective / 2026-10-19 | selected-clause-or-topic-check: introduction answer obligation; GP-NFQ-RS-5; GP-NFQ-RS-3 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-015](https://dsic-clinical-safety.pages.dev/sources/index.md#src-015) | S31 / 2.2.7 / Effective / 2026-10-19 | selected-clause-or-topic-check: introduction; C01 evidence ask; embedded requirement content not extracted | Commercial requirement body uses embedded content; only introduction and evidence-routing were reviewed. | | [SRC-016](https://dsic-clinical-safety.pages.dev/sources/index.md#src-016) | S109 / 1.0.2 / Effective / 2026-08-05 | selected-clause-or-topic-check: ACS001; ACS002; ACS003; ACS004; ACS005 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-017](https://dsic-clinical-safety.pages.dev/sources/index.md#src-017) | S109 / 2.0.0 / Draft / TBC; RM315 / 1.0.1 / Draft / TBC | metadata-and-inventory: Draft/TBC metadata on standard and roadmap | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-018](https://dsic-clinical-safety.pages.dev/sources/index.md#src-018) | C9 / 1.1.1 / Effective / 2026-09-08 | selected-clause-or-topic-check: E00409; E00410; E00411; E00412; E00413; E00418; E00419 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-019](https://dsic-clinical-safety.pages.dev/sources/index.md#src-019) | C13 / 10.0.3 / Effective / 2026-10-13 | selected-clause-or-topic-check: E00163; E00165; E00177 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-020](https://dsic-clinical-safety.pages.dev/sources/index.md#src-020) | C15 / 1.3.1 / Effective / 2026-10-13 | selected-clause-or-topic-check: E00135; E00137; E00138; E00139 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-021](https://dsic-clinical-safety.pages.dev/sources/index.md#src-021) | C14 / 3.0.5 / Effective / 2026-09-16 | selected-clause-or-topic-check: E00092; E00093 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-022](https://dsic-clinical-safety.pages.dev/sources/index.md#src-022) | C11 / 2.1.0 / Effective / 2026-09-22 | selected-clause-or-topic-check: E00148; E00149 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-023](https://dsic-clinical-safety.pages.dev/sources/index.md#src-023) | C5 / 1.5.0 / Effective / 2026-02-26 | selected-clause-or-topic-check: E00219 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-024](https://dsic-clinical-safety.pages.dev/sources/index.md#src-024) | Non-Overarching Standards | metadata-and-inventory: index children inventory | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-025](https://dsic-clinical-safety.pages.dev/sources/index.md#src-025) | R10 / 6.0.1 | selected-clause-or-topic-check: guidance does not supersede mandated standards; foundation capability mapping; dependent standards | Reference guidance only. Individual capabilities and standards control obligations. | | [SRC-026](https://dsic-clinical-safety.pages.dev/sources/index.md#src-026) | S43 / 6.0.2 / Effective / 2026-10-06 | selected-clause-or-topic-check: GP2GP00; GP2GP01; GP2GP02; GP2GP03; GP2GP04; GP2GP05; GP2GP06; GP2GP07; GP2GP08; GP2GP09 | Linked HL7/FHIR specifications, adaptors, attachments and schemas not exhaustively reviewed. | | [SRC-027](https://dsic-clinical-safety.pages.dev/sources/index.md#src-027) | S99 / 1.0.5 / Effective / 2026-10-07 | selected-clause-or-topic-check: GPCARS01; GPCARS02; PDS/Spine dependency | Payload profiles, datasets and all linked service specifications not exhaustively reviewed. | | [SRC-028](https://dsic-clinical-safety.pages.dev/sources/index.md#src-028) | S102 / 1.0.4 / Effective / 2026-10-06 | selected-clause-or-topic-check: GPCUR01; GPCUR02 | Linked sender/receiver ITK3 specifications not independently reviewed. | | [SRC-029](https://dsic-clinical-safety.pages.dev/sources/index.md#src-029) | S36 / 4.0.3 / Effective / 2026-10-23 | selected-clause-or-topic-check: EPSP01; EPSP02; EPSP05 | Linked FHIR/HL7 API specifications and signing package internals not reviewed. | | [SRC-030](https://dsic-clinical-safety.pages.dev/sources/index.md#src-030) | S34 / 1.0.2 / Effective / 2025-12-04 | selected-clause-or-topic-check: DDP03; DDP05; legacy pathology scope | Direct/adaptor boundary inspected; linked message specifications not exhaustively reviewed. | | [SRC-031](https://dsic-clinical-safety.pages.dev/sources/index.md#src-031) | S47 / 2.1.2 / Effective / 2026-10-06 | selected-clause-or-topic-check: IM1 role/type scope; im1_resp_001; im1_auth_001; im1_auth_002; im1_auth_003; im1_auth_004; im1_context_001; im1_context_002 | Supplier-specific schemas, licensed interfaces and local onboarding evidence unavailable. | | [SRC-032](https://dsic-clinical-safety.pages.dev/sources/index.md#src-032) | Page edited 2026-10-16 | direct_scoped | Service introduction, policy and product/onboarding sections inspected; no end-to-end API or supplier assurance audit. | | [SRC-033](https://dsic-clinical-safety.pages.dev/sources/index.md#src-033) | Unversioned live guidance | direct_scoped | Audit/governance/provenance and demographic checks inspected; legacy GPSoC references require adopted interface baseline; JWT detail not audited. | | [SRC-034](https://dsic-clinical-safety.pages.dev/sources/index.md#src-034) | Amd24/2018; publication 2018-06-07 | direct_page | Publication body inspected; review notice does not supersede listed standard. | | [SRC-035](https://dsic-clinical-safety.pages.dev/sources/index.md#src-035) | Amd25/2018; publication 2018-06-07 | direct_page | Publication body inspected; review notice does not supersede listed standard. | | [SRC-036](https://dsic-clinical-safety.pages.dev/sources/index.md#src-036) | Specification v4.2; issue2018-05-02 | direct_scoped | Sections2-7 inspected for seed governance/control summaries. Preserve5.1.2 exception and MUST/SHOULD. Broad grouped rows not atomic requirement coverage. | | [SRC-037](https://dsic-clinical-safety.pages.dev/sources/index.md#src-037) | Specification v3.2; issue2018-05-02 | direct_scoped | Sections2-7 inspected. Preserve5.1.2 exception, top-management acceptance2.2.2 and local customisation7.1.1. No project assurance. | | [SRC-038](https://dsic-clinical-safety.pages.dev/sources/index.md#src-038) | Implementation guidance v3.2;2018-05-02 | direct_scoped | Cover, contents, hazard-log examples and initial/existing-control interpretation inspected; not all61pages. | | [SRC-039](https://dsic-clinical-safety.pages.dev/sources/index.md#src-039) | Implementation guidance v4.2;2018-05-02 | direct_scoped | Cover, contents and selected risk/control/acceptance text inspected; not all60pages. | | [SRC-040](https://dsic-clinical-safety.pages.dev/sources/index.md#src-040) | v2.0;2018-09-27 | direct_scoped | Document control confirmsv2.0; data-type/property tables and guidance purpose inspected. Not whole37page analysis. | | [SRC-041](https://dsic-clinical-safety.pages.dev/sources/index.md#src-041) | Live guidance; no separate edition claimed | direct_scoped | Patient/professional amendment guidance inspected; statement about audit availability is guidance, not product evidence. | | [SRC-042](https://dsic-clinical-safety.pages.dev/sources/index.md#src-042) | Online code; landing edited2026-10-14 | direct_page | Landing page marks PDF out of date. Live retention appendix not yet audited, so no specific retention periods verified. | | [SRC-043](https://dsic-clinical-safety.pages.dev/sources/index.md#src-043) | Keep U03; no verified6.02 baseline | inaccessible_with_search_only_alternative | Exact landing returned JavaScript bot challenge. Different official search result describesv6May2026, ICB Practice Agreementv3.0 and enabling-services templatev6.7; underlying documents uninspected. | | [SRC-044](https://dsic-clinical-safety.pages.dev/sources/index.md#src-044) | 2026revision; former form not used from2026-04-06; edited2026-09-21 | direct_page | Landing body inspected; current downloadable form not inspected. | | [SRC-045](https://dsic-clinical-safety.pages.dev/sources/index.md#src-045) | 2026/27v9;2026-10-02; deadline2027-06-30 | direct_page | Release notice inspected; spreadsheets not read. v1.1 category workbook linked. | | [SRC-046](https://dsic-clinical-safety.pages.dev/sources/index.md#src-046) | Landing updated2023-07-01; linked PDFv1.10g | direct_scoped | Publication page and selected main-PDF content; not all43pages/appendices, classification, CE/UKCA deadlines or future reform. | | [SRC-047](https://dsic-clinical-safety.pages.dev/sources/index.md#src-047) | ICO guidance under DUAA review | direct_scoped | At-a-glance, screening and review notice inspected; detailed linked guidance not audited. | | [SRC-048](https://dsic-clinical-safety.pages.dev/sources/index.md#src-048) | Live NHS guidance | direct_scoped | Definitions and determination sections inspected; detailed scenarios and research guidance not fully audited. | | [SRC-049](https://dsic-clinical-safety.pages.dev/sources/index.md#src-049) | Page edited2019-08-02 | direct_page | Page body inspected; full operational policy exceptions not transcribed. | | [SRC-050](https://dsic-clinical-safety.pages.dev/sources/index.md#src-050) | v4.0;release30/2025;approval2025-06-03;assurance end2027-06-30 | direct_page_plus_search_only_detail | Publication metadata directly inspected. Requirement/implementation detail from official search extracts because direct long-read pages returned bot challenge. | | [SRC-051](https://dsic-clinical-safety.pages.dev/sources/index.md#src-051) | PDFpublished2025-12-19;fullconformance2026-09-30 | direct_page_plus_scoped_pdf | Landing saysAmd24/2025; linked requirements PDF saysAmd41/2025v2.0Final30Nov2025. Metadata/phases/section9 inspected; not all80pages. | | [SRC-052](https://dsic-clinical-safety.pages.dev/sources/index.md#src-052) | v3.1;Amd59/2025;published2025-12-23;fullconformance2026-12-31 | direct_page | Publication body inspected; detailed requirements/proxy attachment uninspected. | | [SRC-053](https://dsic-clinical-safety.pages.dev/sources/index.md#src-053) | v2.01;NHS England ownership from2026-01-01 | direct_scoped | Version/purpose/local views/ownership inspected; spreadsheet,JSON,case and hazard log not inspected. | | [SRC-054](https://dsic-clinical-safety.pages.dev/sources/index.md#src-054) | ICO update2026-06-19 | direct_page | Summary overview says all DUAA data-protection provisions in force; detailed sections/interpretation not fully audited. | | [SRC-055](https://dsic-clinical-safety.pages.dev/sources/index.md#src-055) | Page edited2024-10-11 | direct_page | Documentation body inspected; template downloads/generic workbook not inspected. | | [SRC-056](https://dsic-clinical-safety.pages.dev/sources/index.md#src-056) | C13 / 14.0.0 / Published / 2027-04-20 | metadata-and-inventory: Published/future metadata | Metadata only; future version has not been clause-by-clause compared with effective version. | | [SRC-057](https://dsic-clinical-safety.pages.dev/sources/index.md#src-057) | C14 / 4.0.0 / Published / 2026-12-04 | metadata-and-inventory: Published/future metadata | Metadata only; future version has not been clause-by-clause compared with effective version. | | [SRC-058](https://dsic-clinical-safety.pages.dev/sources/index.md#src-058) | S30 / 6.0.4 / Retired / 2026-10-19 | metadata-and-inventory: Retired metadata | Historical retired reference; not a current baseline. | | [SRC-059](https://dsic-clinical-safety.pages.dev/sources/index.md#src-059) | S108 / 1.0.6 / Effective / 2026-10-19 | selected-clause-or-topic-check: BAS introduction and displayed contracting vehicles | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-060](https://dsic-clinical-safety.pages.dev/sources/index.md#src-060) | C50 / 1.1.0 / Effective / 2026-02-26 | selected-clause-or-topic-check: E00267; E00269; E00270 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-061](https://dsic-clinical-safety.pages.dev/sources/index.md#src-061) | C17 / 1.0.2 / Effective / 2023-05-22 | selected-clause-or-topic-check: E00406; E00407 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-062](https://dsic-clinical-safety.pages.dev/sources/index.md#src-062) | C6 / 1.0.2 / Effective / 2024-02-05 | selected-clause-or-topic-check: E00497; supporting triggers; MAY boundary E00498-E00504 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-063](https://dsic-clinical-safety.pages.dev/sources/index.md#src-063) | C7 / 1.2.0 / Effective / 2026-06-15 | selected-clause-or-topic-check: E00367; MAY channel/communication Epics; additional implementation detail distinction | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-064](https://dsic-clinical-safety.pages.dev/sources/index.md#src-064) | C8 / 1.0.2 / Effective / 2023-05-22 | selected-clause-or-topic-check: E00432; E00433; E00434; MAY boundary; E00431 not found in current canonical text | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-065](https://dsic-clinical-safety.pages.dev/sources/index.md#src-065) | C64 / 2.0.0 / Effective / 2026-05-13 | selected-clause-or-topic-check: MUST/MAY inventory; E00001; E00537; E00779 | Public page vehicle scope is Digital Pathways Solution Registry; not universal GP scope. Selected criteria only. | | [SRC-066](https://dsic-clinical-safety.pages.dev/sources/index.md#src-066) | C4 / 1.2.0 / Effective / 2025-09-19 | selected-clause-or-topic-check: MUST/MAY inventory; E00357-E00360 patient views; E00361-E00364 optional proxy views | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-067](https://dsic-clinical-safety.pages.dev/sources/index.md#src-067) | C39 / 1.0.2 / Effective / 2025-06-04 | selected-clause-or-topic-check: E00736 and source-information criterion; E00737/E00738 optional boundary | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-068](https://dsic-clinical-safety.pages.dev/sources/index.md#src-068) | DSIC Capabilities | metadata-and-inventory: index children inventory | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-069](https://dsic-clinical-safety.pages.dev/sources/index.md#src-069) | ICO guidance under DUAA review | direct_scoped | Core principles and checklists inspected; not all linked security guidance. | | [SRC-070](https://dsic-clinical-safety.pages.dev/sources/index.md#src-070) | ICO guidance under DUAA review | direct_scoped | Main principles and law-versus-guidance distinction inspected; not all subguidance. | | [SRC-071](https://dsic-clinical-safety.pages.dev/sources/index.md#src-071) | Statement2024-09;not substitute for2026/27categorybaseline | direct_scoped | Joint statement core sections inspected; not current organisation-specific assurance evidence. | | [SRC-072](https://dsic-clinical-safety.pages.dev/sources/index.md#src-072) | NHS England: Digital Services for Integrated Care | Source-specific scope in register | Programme scope and framework transition; direct page, 28 October 2026 | | [SRC-073](https://dsic-clinical-safety.pages.dev/sources/index.md#src-073) | NHS England: Clinical system migration guide | Source-specific scope in register | Purpose and planning boundary; landing page only | | [SRC-074](https://dsic-clinical-safety.pages.dev/sources/index.md#src-074) | NHS England: Tech Innovation Framework | Source-specific scope in register | Foundation-EPR route and extension to 30 September 2027; direct page | | [SRC-075](https://dsic-clinical-safety.pages.dev/sources/index.md#src-075) | Microsoft Learn: Copilot requirements | Source-specific scope in register | Required cloud service connectivity;web search configurable;updated22Oct2026; direct_page | | [SRC-076](https://dsic-clinical-safety.pages.dev/sources/index.md#src-076) | NHS England: Accessible Information Standard requirements | Source-specific scope in register | Sixth review stage; direct page bot challenge; official_search_only | | [SRC-077](https://dsic-clinical-safety.pages.dev/sources/index.md#src-077) | NHS England: Accessible Information Standard implementation guidance | Source-specific scope in register | Six steps and electronic review prompts; direct page bot challenge; official_search_only | | [SRC-078](https://dsic-clinical-safety.pages.dev/sources/index.md#src-078) | NHS England: DAPB4019 requirements specification | Source-specific scope in register | Amd41/2025v2.0;metadata,phases,section9; direct_scoped | | [SRC-079](https://dsic-clinical-safety.pages.dev/sources/index.md#src-079) | NHS England: DCB applicability step-by-step guide | Source-specific scope in register | Official applicability guide; linked step-by-step page selected sections; direct_scoped | | [SRC-080](https://dsic-clinical-safety.pages.dev/sources/index.md#src-080) | Introduction to Capabilities and Standards | selected-clause-or-topic-check: MUST/MAY Epics; all acceptance criteria; mandatory Additional Implementation Details; guidance-only Supporting Information | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-081](https://dsic-clinical-safety.pages.dev/sources/index.md#src-081) | Capability and Standards Overview | selected-clause-or-topic-check: historical six-foundation capability list; obsolete classification not adopted | Buyer guidance last updated 2020; historical context. Use current [SRC-001](https://dsic-clinical-safety.pages.dev/sources/index.md#src-001)/[SRC-080](https://dsic-clinical-safety.pages.dev/sources/index.md#src-080) for present classification. | | [SRC-082](https://dsic-clinical-safety.pages.dev/sources/index.md#src-082) | C12 / 1.0.3 / Effective / 2024-11-13 | selected-clause-or-topic-check: E00153; E00154 | Selected topics only; not an exhaustive assurance assessment. No product contract, implementation or workbook assessed. | | [SRC-083](https://dsic-clinical-safety.pages.dev/sources/index.md#src-083) | UK legislation: SI 2025/807 regulation 3 | Source-specific scope in register | Regulations 2-3 and explanatory note inspected: old statutory framework saved for standards effective before 7 July 2025; no blanket private/Defence exemption inferred; direct_scoped | | [SRC-084](https://dsic-clinical-safety.pages.dev/sources/index.md#src-084) | UK legislation: SI 2025/950 regulation 6 | Source-specific scope in register | Procedure regulations read; regulation6 published notice fields and 6 August2025 commencement confirmed; direct_full_document | | [SRC-085](https://dsic-clinical-safety.pages.dev/sources/index.md#src-085) | NHS GP Connect: Clinical safety principles | Source-specific scope in register | Selected safety roles; guide displays active review and release TBC | | [SRC-086](https://dsic-clinical-safety.pages.dev/sources/index.md#src-086) | Microsoft Support: File upload in Copilot | Source-specific scope in register | Markdown and Excel supported; tenant-dependent extraction must be checked | | [SRC-087](https://dsic-clinical-safety.pages.dev/sources/index.md#src-087) | Microsoft Support: Information used to answer prompts | Source-specific scope in register | Attachment grounding and explicit source selection; direct page | | [SRC-088](https://dsic-clinical-safety.pages.dev/sources/index.md#src-088) | Microsoft Support: Write a great prompt | Source-specific scope in register | Goal, context, source and expectations; direct page | | [SRC-089](https://dsic-clinical-safety.pages.dev/sources/index.md#src-089) | Microsoft Learn: Managing public web access | Source-specific scope in register | Web search is optional and separately controlled; direct page | | [SRC-090](https://dsic-clinical-safety.pages.dev/sources/index.md#src-090) | User-supplied ChatGPT research reference v1.0 | Source-specific scope in register | Seed only; not independent normative authority; preserved SHA-256 f6413605e681afdfe029fb80fbb2cafaeacc3784da93bb1ea181c15da5b78197 | | [SRC-091](https://dsic-clinical-safety.pages.dev/sources/index.md#src-091) | Local InterSystems knowledge base | Source-specific scope in register | DSIC taxonomy and crosswalk leads; current primary-source reconciliation; local provenance manifest | | [SRC-092](https://dsic-clinical-safety.pages.dev/sources/index.md#src-092) | Local COPPER TIGER knowledge base | Source-specific scope in register | DSIC, procurement and NHS–Defence evidence-boundary synthesis; local provenance manifest | | [SRC-093](https://dsic-clinical-safety.pages.dev/sources/index.md#src-093) | Local UK Digital Health compliance knowledge base | Source-specific scope in register | DCB applicability and equivalent-baseline concepts; legislation rechecked; local provenance manifest | | [SRC-094](https://dsic-clinical-safety.pages.dev/sources/index.md#src-094) | Local DShCR knowledge base | Source-specific scope in register | GP Connect role, safety and onboarding synthesis; local provenance manifest | | [SRC-095](https://dsic-clinical-safety.pages.dev/sources/index.md#src-095) | NHS England: Capabilities, epics and standards | Source-specific scope in register | Current buyer page; six foundation capabilities and BAS; checked 28 October 2026 | ## Change record — version 1.1 The original file remains unchanged. These changes apply to the recreated reference. | Change | Reason | |---|---| | C01 | Live canonical API metadata supersedes stale web extraction. | | C02 | Live canonical API body updated 26 October 2026 establishes current metadata; adopted product baseline remains unknown. | | C03 | Live canonical metadata. | | C04 | Separates resolved source metadata from unresolved product applicability. | | C05 | Live canonical API resolves U02 cache conflict. | | C06 | Removes stale uncertainty and preserves adopted-version boundary. | | C07 | Prior-version IDs are absent from current v7; revised clauses cover NHS routes, assurance and elevation. | | C08 | Avoids implying the optional mechanism GP-IG-13-2B is MUST. | | C09 | Current metadata verified. | | C10 | Current metadata verified. | | C11 | Source register correction. | | C12 | Source register correction. | | C13 | Source register correction. | | C14 | Source register correction. | | C15 | Adds essential hierarchy omitted by seed without treating all example text as normative. | | C16 | Grouped M row includes qualified recommendations and a risk-control exception. | | C17 | Retains mandatory duties while exposing the exception and conditional benefit-analysis trigger. | | C18 | Section 6.3 applies subject to 5.1.2 and responsibilities assigned to other organisations. | | C19 | Explicit broad-row qualification avoids an unconditional downgrade or elevation of its clauses. | | C20 | Audit scope and examples depend on the adopted GP Connect interface and role; source contains legacy references. | | C21 | The 2025 AIS update adds Review as the sixth stage; detailed long-read evidence was official-search-only. | | C22 | Separates local and national phases; absent API is not proof of absent national implementation. | | C23 | Original precise version cannot be presented as reconfirmed; preserve the uncertainty once consistently. | | C24 | Resolved the linked specification identity and deadline while retaining landing-page disagreement. | | C25 | Do not present obsolete downloadable PDF as the current offline retention schedule. | | C26 | Avoid describing the entire DUAA as a future change. | | C27 | The former property list was only a selection; make the breadth and non-normative status clear. | | C28 | Replace unsupported precision with the actual inspection limit. | | C29 | Partly resolves the original uncertainty instead of duplicating stale and current accounts. | | C30 | Demonstrated failure of a process/documentary obligation also qualifies; silence does not. | | C31 | Separates concern domain from proof strength. | | C32 | An unavailable evidence item is not automatically a proven nonclinical breach. | | C33 | Consistent two-dimensional finding rule without weakening genuine process obligations. | | C34 | M is an obligation basis, not a claim that every grouped clause was independently reverified. | | C35 | Remove the embedded prompt's implied universal verification claim. | | C36 | Reflect the user-confirmed configuration and no-memory-fallback rule. | | C37 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C38 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C39 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C40 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C41 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C42 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C43 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C44 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C45 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C46 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C47 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C48 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C49 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C50 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C51 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C52 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C53 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C54 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C55 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C56 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C57 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C58 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C59 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C60 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C61 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C62 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | | C63 | Source register now states actual retrieval depth and boundaries from safety-sources.json. | Additional changes: current DSIC concept explanation; local knowledge-base synthesis; separate source-verification state; confirmed Copilot service/web-disabled context; retrieval checks; batch, challenge and continuation prompts. New control identifiers are additive; original GP and H identifiers remain stable.