§5 · Method and limits
How a fact gets into the system — and what is not yet checked.
How a fact reaches the system, how its confidence is marked, and what has not yet been checked on the ground.
True today
How a fact gets in
A fact reaches the system by being read in an official source, corroborated by a second, checked in person by someone in the country, and — where it is a route — measured from satellite and terrain data.
Source:what Tourist SOS states it can do
True today
Every fact carries its source and its confidence
Every fact carries its source and its confidence, and a record that has not been verified is labelled as such rather than quietly presented as though it had been.
- Field-verified
Checked in person by someone in the country.
- Researched, not yet field-verified
Read in a source and corroborated by a second, and shown as unverified until someone has stood in front of it.
Source:what Tourist SOS states it can do
True today
What is not yet checked
What is on record has been researched and not yet checked on the ground. Closing that gap is designed as part of the pilot.
See §4.5 · What the Vietnamese partner contributes.
Source:what Tourist SOS states it can do
True today
The controls
Access is controlled row by row on every table; an operating team's access is scoped to its own country; every access is logged; the boundary around protected health information is written down; suppliers that handle health data are gated for eligibility; and documents are issued with identifiers that can be verified.
Source:what Tourist SOS states it can do
Designed, not built
What an operator reads, and what it can take
An operator reads what it needs, when it needs it, and every read is recorded. There is no bulk export.
What the operator has produced is the operator's, and it can be taken out: a country-filtered, recorded export of its own operational records.
Source:the rules Tourist SOS follows in every country
Designed, not built
Consent, and the language rule with teeth
If nobody has written and reviewed the consent wording in a language, the recording does not start in that language.
Recording is consented for each encounter, a person can withdraw it, and what is deleted is recorded as deleted. Recordings of a patient go only to suppliers under a signed data-protection agreement, and the system will not send them anywhere else.
Source:the plan for the response platform
Designed, not built
What the authorities would receive
What the authorities are designed to receive is a regular report drawn from the same record the responders work in, and later a read-only feed.
Source:the design rules for responders' screens
Designed, not built
Speech, in Vietnamese
Turning Vietnamese speech into text for an emergency is designed as part of the work rather than something to wait for.
Source:the plan for the response platform
True today
How this site is written
Every sentence on this site traces to a document in the programme's file. A sentence that cannot be traced is deleted rather than softened.
See §A · Sources.
Source:this website