Who can still open records
What this is: This is a read-only review of live shares and registered organizations.
What you can do: You can see each holder, the end date, and the open count. It is designed around HIPAA principles, and it is not a certification.
Fictional data. Testnet only. Revoke cannot erase a copy already downloaded. The clinic that created the chart still holds its own copy, and that copy is not a share on this list.
Send a referral in this session before this review has shares to list. The directory below is everyone registered on the contract. That directory is public, and it does not include chart text.
A revoked or expired share is not in this list. A reply note is not treated as access to the chart.
No shares for this session yet.
These accounts are registered on the contract. A hospital is stored with the clinic role. The display name is what distinguishes it. The short code is the public encryption key, not a secret.
| Name | Role | Account | Status | Public key |
|---|
The directory is empty, or it has not loaded.
These lines are copied from the attack-demo table in this repo (testnet, 2026-11-14, 11 of 11 passed, attack share 14). This page does not run the attacks. A recorded result is not a fresh check.
Clinic create_record was accepted and returned record 8.
On the testnet contract.
Clinic request_referral to the hospital was accepted and returned share 14.
On the testnet contract.
A clinic that is not the recipient called request_open. The contract refused with ERR_UNAUTHORIZED.
On the testnet contract.
Patient approve_share with 1 yoctoNEAR was accepted.
On the testnet contract.
Hospital request_open on the active share was accepted.
On the testnet contract.
The first local open was HTTP 200. The same nonce was HTTP 403 replay.
Inside the script, not a new transaction.
No transaction. This check is local.
The script offered an encryption key that does not match the on-chain directory. The code kept the on-chain key.
Inside the script, not a new transaction.
No transaction. This check is local.
A ciphertext with one flipped byte was rejected.
Inside the script, not a new transaction.
No transaction. This check is local.
Hospital submit_reply was accepted and returned reply 16. The reply text was not stored, only a hash.
On the testnet contract.
Patient revoke_share with 1 yoctoNEAR was accepted. Revoke cannot erase a copy already downloaded.
On the testnet contract.
A later hospital request_open panicked ERR_REVOKED.
On the testnet contract.
Testnet only, with fictional data. This list is not a stamp of approval, and it does not say every possible attack was tried. Revoke cannot erase a copy already downloaded.