Tyler 62bb09f183 feat(sp11): tamper-evident hash-chained audit_log ...

- New audit_log table (migration 0009, user_version=9):
  * id, event_type, entity_type, entity_id, actor, payload_json,
    created_at, prev_hash, hash
  * Indexes on (entity_type, entity_id), event_type, created_at
- New cyclone.audit_log module:
  * append_event(session, AuditEvent) — appends one chained row
  * verify_chain(session) — walks the chain, returns first bad id
  * SHA-256 hash over canonical row form (unit-separator delimited)
  * Genesis prev_hash = 64 zeros (Bitcoin-style sentinel)
- New AuditLog ORM model
- New admin API endpoints:
  * GET /api/admin/audit-log (paginated, filterable)
  * GET /api/admin/audit-log/verify (returns ok/first_bad_id/reason)
- Hooked into existing endpoints to append events:
  * /api/parse-999 → 'claim.rejected' per matched claim
  * /api/parse-277ca → 'claim.payer_rejected' per matched claim
  * /api/clearhouse/submit → 'clearhouse.submitted' per claim
- HIPAA §164.316(b)(2) compliance note in docs

Tests: 688 -> 705 (9 audit + 8 audit-API). All 705 backend tests pass.

2026-06-20 23:45:43 -06:00

..

fixtures

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

conftest.py

feat(api): parse endpoints pass EventBus into store writes

2026-06-20 15:51:18 -06:00

test_999_rejected_state.py

feat(sp6): wire 999 ingest → claim rejected state

2026-06-20 18:29:28 -06:00

test_acks.py

feat(sp11): tamper-evident hash-chained audit_log

2026-06-20 23:45:43 -06:00

test_api_277ca.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_api_835.py

test(835): update prodfile test for PCN dedup behavior

2026-06-20 18:12:59 -06:00

test_api_999.py

fix(api): regenerate raw_999_text in /api/acks/{id} detail response (SP3 P3 follow-up)

2026-06-20 08:06:21 -06:00

test_api_audit_log.py

feat(sp11): tamper-evident hash-chained audit_log

2026-06-20 23:45:43 -06:00

test_api_claim_detail.py

feat(sp7): claim detail includes lineReconciliation slim projection

2026-06-20 19:37:38 -06:00

test_api_eligibility.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_api_gets.py

fix(api): include adjustments array in /api/remittances list response (SP3 P2 follow-up)

2026-06-20 07:49:20 -06:00

test_api_line_reconciliation.py

feat(sp7): GET /api/claims/{id}/line-reconciliation endpoint

2026-06-20 19:35:17 -06:00

test_api_parse_persists_ack.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_api_parse_persists.py

feat(ta1): TA1 interchange ACK parser, persistence, and API

2026-06-20 18:58:56 -06:00

test_api_serialize_837.py

feat(sp8): GET /api/claims/{id}/serialize-837 endpoint

2026-06-20 20:34:44 -06:00

test_api_stream_live.py

feat(api): GET /api/{claims,remittances,activity}/stream + unsubscribe

2026-06-20 16:57:30 -06:00

test_api_ta1.py

feat(ta1): TA1 interchange ACK parser, persistence, and API

2026-06-20 18:58:56 -06:00

test_api.py

feat(backend): FastAPI endpoint with NDJSON streaming and CORS for Vite frontend

2026-06-19 16:35:53 -06:00

test_apply_277ca_rejections.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_audit_log.py

feat(sp11): tamper-evident hash-chained audit_log

2026-06-20 23:45:43 -06:00

test_batch_diff.py

feat(batch-diff): side-by-side claim diff between two batches

2026-06-20 17:17:09 -06:00

test_cas_codes.py

feat(parsers+api+ui): expose CARC-labeled CAS adjustments (SP3 P2)

2026-06-20 07:44:41 -06:00

test_clearhouse_api.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_cli_835.py

fix(backend): make 835 summary counts consistent with total_claims

2026-06-19 17:07:54 -06:00

test_cli.py

feat(backend): click CLI for parse-837

2026-06-19 16:00:47 -06:00

test_co_medicaid_835_fixture.py

feat(backend): 835 ERA parser with BPR/CLP/SVC balancing, CO Medicaid config, CLI, and FastAPI route

2026-06-19 17:01:57 -06:00

test_co_medicaid_fixture.py

test(backend): multi-claim CO Medicaid fixture + integration test

2026-06-19 15:54:46 -06:00

test_db_migrate.py

feat(backend): harden db_migrate — rollback test, non-sql filter test, doc convention

2026-06-19 21:25:15 -06:00

test_db_models.py

feat(sp6): migration 0004 — rejection columns + state-history index

2026-06-20 18:21:29 -06:00

test_db.py

feat(backend): add cyclone.db with engine, SessionLocal, Base, init_db

2026-06-19 21:03:21 -06:00

test_exceptions.py

feat(backend): add CycloneParseError and CycloneValidationError

2026-06-19 15:31:06 -06:00

test_filenames.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_inbox_endpoints_sp7.py

feat(sp7): inbox lanes matched_remittance includes matched/total line counts

2026-06-20 19:43:43 -06:00

test_inbox_endpoints.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_inbox_lanes.py

feat(sp6): compute_lanes — 4 lanes on read with scoring

2026-06-20 18:31:01 -06:00

test_inbox_state.py

feat(sp6): apply_999_rejections state helper

2026-06-20 18:25:25 -06:00

test_line_reconciliation.py

feat(sp7): match_service_lines() pure function + tests

2026-06-20 19:29:21 -06:00

test_models_270.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_models_271.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_models_835.py

feat(backend): 835 ERA parser with BPR/CLP/SVC balancing, CO Medicaid config, CLI, and FastAPI route

2026-06-19 17:01:57 -06:00

test_models_999.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_models.py

feat(backend): Pydantic v2 models for 837P claims

2026-06-19 15:39:08 -06:00

test_parse_270.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_parse_271.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_parse_277ca.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_parse_835.py

fix(835): correct SVC04/SVC05 mapping per X12 005010X221A1

2026-06-20 20:44:28 -06:00

test_parse_837.py

feat(backend): 837P parser orchestrator with HL walker

2026-06-19 15:52:58 -06:00

test_parse_999.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_parse_ta1.py

feat(ta1): TA1 interchange ACK parser, persistence, and API

2026-06-20 18:58:56 -06:00

test_payer_config_277ca.py

feat(sp10): 277CA parser + Payer-Rejected Inbox lane

2026-06-20 23:41:01 -06:00

test_payer_config_loading.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_payer.py

feat(backend): PayerConfig with co_medicaid and generic factories

2026-06-19 15:40:09 -06:00

test_prodfiles_smoke.py

feat(sp8): outbound 837P serializer — full rebuild + round-trip tests

2026-06-20 20:27:48 -06:00

test_providers_seed.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_pubsub.py

feat(api): GET /api/{claims,remittances,activity}/stream + unsubscribe

2026-06-20 16:57:30 -06:00

test_reconcile_line_level.py

feat(sp7): wire match_service_lines into reconcile.run

2026-06-20 19:33:02 -06:00

test_reconcile.py

fix(backend): spec-bug fixes for T10 — Match.claim_id non-unique + reconcile test dates

2026-06-19 22:59:20 -06:00

test_scoring.py

feat(sp6): 4-field weighted scoring module

2026-06-20 18:30:05 -06:00

test_secrets.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_segments.py

feat(backend): X12 segment tokenizer with ISA delimiter detection

2026-06-19 15:36:01 -06:00

test_serialize_270.py

feat(parsers+api): 270/271 eligibility request + response (SP3 P4)

2026-06-20 08:22:31 -06:00

test_serialize_837.py

feat(sp8): outbound 837P serializer — full rebuild + round-trip tests

2026-06-20 20:27:48 -06:00

test_serialize_999.py

feat(parsers+api+ui+db): 999 ACK transaction set end-to-end (SP3 P3)

2026-06-20 08:03:37 -06:00

test_service_line_payments.py

feat(sp7): persist ServiceLinePayment + link CAS rows on 835 ingest

2026-06-20 19:27:24 -06:00

test_sftp_stub.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_store_claim_detail.py

feat(store): get_claim_detail returns full claim context with history + matched remit

2026-06-20 09:21:07 -06:00

test_store_reconcile.py

feat(sp7): wire _reconcile_pair into manual_match (T21)

2026-06-20 20:13:16 -06:00

test_store.py

fix(835): drop over-constraining UNIQUE constraints, add multi-BPR warning

2026-06-20 18:10:07 -06:00

test_validation_r200_r210.py

feat(sp9): multi-payer, multi-NPI, SFTP stub for dzinesco/TOC

2026-06-20 23:07:31 -06:00

test_validator_835.py

feat(backend): 835 ERA parser with BPR/CLP/SVC balancing, CO Medicaid config, CLI, and FastAPI route

2026-06-19 17:01:57 -06:00

test_validator.py

feat(parsers): R034 REF*G1 enforcement + R035 BHT06 transaction type code (SP3 P1)

2026-06-20 07:25:29 -06:00

test_writer.py

feat(backend): per-claim JSON writer + summary.json

2026-06-19 15:56:09 -06:00