Authenticated Actor
The acting professional is bound.
BestCura · EXECUTION AUTHORITY
EXECUTION AUTHORITYPermission to see is not permission to act.
A user role is not enough in healthcare. BestCura binds relevant execution to person, credential, facility, task, context, jurisdiction, rules and current state.
Technology should carry complexity so people can give their attention to people.
THE HUMAN AT THE CENTER
A click must never carry more authority than the person responsible for it.
Safety in care does not come from a green button. It depends on whether this person, for this action, in this context, against this current state, is authorized to proceed. BestCura separates access from execution and revalidates relevant authorization at the moment of action.
AUTHORITY
Authority is concrete, not universal.
A login tells the system who someone is. Execution Authority asks what this person may perform here and now.
Professional Authority
Profession, credential and scope are resolved.
Facility Privilege
Institutional authority is considered.
Task & Context
Authority belongs to a concrete action in a concrete context.
A care reality example
A credential changes between authorization and execution.
Situation
The action was initially authorized.
Conflict
Authority state changes before execution.
BestCura response
Point-of-action revalidation detects the new authority_state_hash.
Outcome
The old execution basis is not reused.
REVALIDATION
Authorization is not remembered. It is revalidated.
Care reality can change between decision and action. BestCura treats that time gap as an explicit safety boundary.
Clinical State Hash
Binds relevant patient state.
Rule Set Hash
Binds rules actually applied.
Authority State Hash
Binds professional and institutional authority.
Order State Hash
Binds the concrete order.
FAQ
Frequently asked questions
Why is role-based access not enough?
Because access to information does not describe professional, jurisdictional and situational authority for a concrete clinical action.
What happens when a bound dependency changes?
The authorization can become stale and requires re-evaluation before execution.