{
  "evidenceId": "E03",
  "title": "MEDES production profile coverage",
  "originalRelativePath": "MR33_MIGRATION_WORK/mediflex/application-coverage/production-journeys/MEDES_ACCESS_COVERAGE.json",
  "originalSha256": "2a086b3500a3bead9d2e3bf3361d3e01a65b85c03d529d61106da14512f4d451",
  "boundary": "Read-only production catalog inspection; inspected profiles had zero MEDES permissions/menus.",
  "capturedForHandover": "2026-10-20",
  "record": {
    "at": "2026-10-19T22:58:01.498456+00:00",
    "method": "Read-only production IAM catalogue query, corroborated by authenticated navigation responses",
    "tenantId": 8600000000197002,
    "assignedProfilesInspected": [
      {
        "profile": "Platform Demo Maker",
        "roles": [
          "VENGAT_PLATFORM_DEMO_MAKER"
        ],
        "medesPermissions": 0,
        "medesMenus": 0
      },
      {
        "profile": "Platform demonstration",
        "roles": [
          "MR33_DEMO_CORE_TENANT_ADMIN"
        ],
        "medesPermissions": 0,
        "medesMenus": 0
      },
      {
        "profile": "Supervisor BMOD",
        "roles": [
          "RBAC_EXAMPLE_CLAIMS_ADMIN",
          "RBAC_EXAMPLE_PROVIDER_ADMIN"
        ],
        "medesPermissions": 0,
        "medesMenus": 0
      }
    ],
    "profileCodesStartingMEDES": 0,
    "accessChanged": false,
    "conclusion": "MEDES production acceptance requires an approved MEDES profile and user assignment; current roles do not grant MEDES access."
  },
  "readerProjection": "Kernel-scoped projection. Legacy infrastructure identifiers are opaque operator references; original source SHA256 is retained. No runtime identifier was renamed."
}