What this demo is not

Read this before you treat a health check as a production result.

Data

The demo uses synthetic or public data only, including GIAB references that are not vendored in this repository. There is no real patient data. A person does not access their own record here.

One server

Stage 1 is one Compose project on one server. It is not a cluster and not a multi-tenant service.

No SLA

This demo has no uptime SLA. A customer-hosted stack also has no standing uptime SLA unless an Enterprise statement of work says otherwise.

External model

An external LLM is allowed only for BioResearch Assistant, and only after a provider is named. The assistant is not deployed here, so this demo does not send prompts to a model.

Production

A production run is fully on-premises, in the operator’s infrastructure. This public host is a demonstration.

Not a certification

This site does not certify GA4GH conformance, EHDS compliance, or clinical use. A passing health check is a technical signal.

Embedded visas

verify_embedded_visas is off. The broker still embeds visa JWTs without checking their signatures. The flat groups claim is filled only from AffiliationAndRole visas that did pass that check. One audience, https://localhost/ga4gh, is shared: a token accepted for Ferrum is accepted by any other resource server configured with that same audience, including Solum if it is pointed at this broker.