2 commits

Author	SHA1	Message	Date
Kisa	cf171a3f87	add Phase 1 security hardening, mapping confidence, audit logging, pilot docs ... - lock CORS to Vercel domain via ALLOWED_ORIGINS env var (removes allow_origins=*) - add X-API-Key header auth on /api/upload and /api/export - normalizer: add mapping confidence (high/inferred), new aliases for Acct #, Member ID, External Patient Ref, DME Description, dispensedate; 63/63 CSV files pass - coverage_calculator: add RULE_VERSION = "v0.1", rule_version on every CoverageResult - main.py: audit logging wired on upload + export, rule_version + mapping_summary in response - generate_samples.py: 25 CSV files now use 25 different real-world header formats - add generate_10k.py for 10,000-patient synthetic dataset - add tests/smoke_test.py (passes against local backend) - add docs/pilot-guide-v1.md for Robert Robinson pilot onboarding - add docs/daniel-pilot-readiness-whitepaper.md and .pdf Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-29 05:41:25 -04:00
Kisa	e3afd9038c	feat: FastAPI backend + full deployment stack (Railway + Vercel) ... - FastAPI backend: /health, /api/upload (CSV parse + score), /api/export (work queue CSV) - CSV normalizer: tolerates 10+ header aliases per field, 8 date formats, all 5 devices, all major payers - Python coverage_calculator wired as the authoritative scoring engine - Frontend: backend-first upload with local fallback, export CSV wired, J. Sullivan placeholder removed - Dockerfile + railway.toml for Railway deploy - vercel.json for static frontend deploy - Railway MCP installed for future sessions Backend live: https://signal-api-production-91c2.up.railway.app Frontend live: https://signal-ui-xi.vercel.app Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-18 19:01:35 -04:00