Agree the contract
Define one data class, its research purpose, responsible custodian, recipients, approved locations, retention and review ownership.
- Evidence required
- A versioned data-flow and responsibility model. No identifiable-record path to another clinic or external AI.
- Release is blocked by
- Unowned data flow, ambiguous recipient or missing research authority.