OpenFGA — Consent & health-record access

OpenFGA — Patient consent & health access — POC

The stakes. In healthcare, access to a record depends on consent and context: treating doctor, referred specialist, emergency, authorised relative.

What I prototype

• OpenFGA relations: treating_doctor, referred, emergency, guardian on a record.
• Patient consent as a revocable relation.
• Traced emergency access ("break glass") and auditable.

Stack

OpenFGA · NestJS · PostgreSQL

POC — confidentiality modelling, not deployed to production.