Changelog

The Claim and Remittance money fields were migrated off floating-point dollars onto conserving integer cents. This removes float drift from the claim-to-remittance path so the reconciliation waterfall can preserve the cent total exactly.

ProviderWallet balances converted from float dollars to drift-safe integer cents. Establishes the integer-cent boundary for wallet reads and writes so no rounding can accumulate across postings.

Added GET /api/op-note/[id] so a saved operative note rehydrates its modal on a fresh session rather than only within the authoring tab. Scoped to your organization; returns a typed refusal rather than a fabricated record when the note is absent.

Wired the authorization flows that govern clinic and provider onboarding — who may enroll an entity and what each role may do once enrolled. Authorization stays scoped; the onboarding path fails closed rather than defaulting a caller into access it was not granted.

Four deterministic boundaries for the agent rail, each proposing but never disposing on the clinical or money path:

• T1 — deterministic triage-ticket generation (the same inputs produce the same ticket).
• T2 — an eligibility-before-billing gate, so billing cannot proceed ahead of an eligibility check.
• T3 — a referral external-disclosure consent boundary, so an outbound referral requires recorded consent before disclosure.
• T4 — act-on-classification claim resubmission, deriving the resubmission action deterministically from the denial classification.

Landed the imaging device-grading engine over DICOM: the grading engine itself, a fail-close posture when an imaging dependency is unconfigured, and authenticated event ingestion so device events cannot be injected unauthenticated. Grades are proposed for human disposition, never auto-applied to a chart.

Encoded the Software-as-a-Medical-Device boundary in code: model outputs are framed as screening and triage signals for a clinician to dispose, explicitly not a diagnosis. The boundary keeps the product on the honest side of its regulatory line rather than implying diagnostic authority.