Fictional sample
Privacy and Screening Readiness Review
This sample shows the structure and level of detail of a bounded review. The company, product, routes, evidence, and findings are invented. It contains no patient records, assessment answers, scores, diagnoses, personal data, or real client information.
1. Agreed scope
- Fictional organization
- Harbor Lantern Digital Health
- Routes
- Homepage plus four fictional staging routes
- Instrument family
- One unnamed published adult screener; no items reproduced
- States inspected
- Public mobile and desktop entry states only
2. Executive status
RED — not ready for public administration. The fictional release is blocked by a sensitive-route third-party request, missing electronic-use rights evidence, and diagnostic result wording. The public URL may remain useful as an information-only page while those gates are resolved.
3. Prioritized findings
| Priority | Area | Verified fictional evidence | Why it matters | Recommended action |
|---|---|---|---|---|
| P0 | Privacy | A fictional analytics tag loads on a condition-named questionnaire route before consent. | The page URL and request metadata can disclose a sensitive health interest even without custom answer parameters. | Remove optional third-party code from every questionnaire, result, crisis, youth, and condition-specific route; verify with a browser-network test. |
| P1 | Instrument rights | The fictional team has a validation paper but no owner terms for public electronic administration. | Validation does not grant reproduction or commercial-use rights. | Keep the public URL informational-only until authoritative permission is archived. Do not reproduce items while researching rights. |
| P1 | Clinical limits | The fictional result calls a screening threshold a diagnosis. | A screening score cannot replace a comprehensive clinical evaluation. | Use source-aligned, non-diagnostic result language and obtain topic-qualified review before release. |
| P2 | Accessibility | The fictional answer controls are 36 pixels high and expose no selected state to assistive technology. | Touch and keyboard users may be unable to complete the journey accurately. | Use semantic radio controls, 44-pixel targets, visible focus, and announced validation and result states. |
Verified evidence
- Public entry routes respond and render one H1.
- The fictional assessment currently requests an unapproved third-party domain.
- No written electronic-use grant is in the fictional evidence folder.
Unknowns and human decisions
- Whether the instrument owner will grant the intended use.
- Whether a topic-qualified clinician will approve every result branch.
- Applicable law, contract terms, insurance, and formal conformance.
4. Release gate
Do not publish the fictional interactive journey until rights, clinical, privacy, crisis, accessibility, security, and owner approval gates are documented. A later review would verify the repaired entry states and network boundary without using real health data.