Race Conditions
Competing transfers must not both commit.
The Cross-Jurisdiction Red Team tests defined safety invariants under injected faults. The result is evidence of tested contract behavior, not proof of a perfect or clinically validated system.
Healthcare is not a lab. Requests arrive twice. Credentials change. A process can crash mid-commit. Two transfers can compete. The Red Team intentionally creates these uncomfortable situations before they surprise a real care workflow.
22 DACH scenarios, 18 North America scenarios, 15 fault-injection classes. Reported runtime: 374 ms.
Competing transfers must not both commit.
Authority change must stop stale execution.
Bound versions must not silently survive.
Partial transfer must not appear COMMITTED.
Two transfers start from the same state.
Both attempt to commit different target contexts.
CAS/concurrency guard allows at most one commit.
The competing path receives conflict instead of creating a second reality.
Being clear about limits is part of trust.
The tests do not prove clinical effectiveness.
PASS is not MDR, AI Act, HIPAA or other certification.
Real database/network concurrency is an additional test layer.
Tested invariants are a scope, not all of reality.
Competing transfers, credential revocation, rule/order changes, crash states, reconciliation, client manipulation and idempotency, among other scenarios.
Because credible technical communication must separate implemented behavior, test scope, clinical validation and regulatory conformity.