| Docs | All 17 docs complete (not stubs) | ✅ (this batch) |
| Docs | EPICS.md + USER_STORIES.md present | ✅ |
| Tests | tenant-isolation.spec.ts passing | ⬜ |
| Tests | outbox.spec.ts + inbox.spec.ts passing | ⬜ |
| Tests | Coverage ≥ targets in DOD | ⬜ |
| Tests | Dispense atomicity test passing | ⬜ |
| Tests | Counter-sign invariant test passing | ⬜ |
| Contracts | Pact consumer tests green vs eprescribing-gateway | ⬜ |
| Contracts | Pact provider tests green for orders-service, billing-service | ⬜ |
| Contracts | Event schema registry conformance green | ⬜ |
| Security | RBAC/ABAC matrix reviewed | ⬜ |
| Security | Secrets in Vault, no .env in repo | ⬜ |
| Security | Controlled-substance step-up MFA verified | ⬜ |
| Observability | SLO dashboards + alerts live in Grafana | ⬜ |
| Observability | Runbooks linked | ⬜ |
| Deployment | Canary strategy verified in staging | ⬜ |
| Deployment | Rollback drill passed | ⬜ |
| Operational | On-call rotation assigned | ⬜ |
| Clinical governance | Drug KB vendor agreement signed | ⬜ |
| Clinical governance | Alert-override review cadence defined | ⬜ |
| Data | Retention policy implemented per DATA_MODEL §4 | ⬜ |
| Data | Backup/restore drill completed | ⬜ |