Did this record change after it was signed?

The moment this matters — July 2026. Four things are now true at once. TEFCA crossed one billion health records exchanged, with information-blocking referred to the DOJ — the pipes are built and enforced. CMS’s WISeR model made licensed-clinician review of AI decisions a payment requirement. ChatGPT for Clinicians made AI drafting free for every licensed clinician in America. And CMS proposed the first Medicare payment category for clinical AI — status indicator O1, paid per use — while admitting in the same rule that per-click billing “raises concerns regarding program integrity.” Free drafting, mandated review, enforced pipes, per-use payment — and still no proof of what was done, by whom, under whose license.

CMS’s ACCESS Model — Advancing Chronic Care with Effective, Scalable Solutions — began 5 July 2026 and runs ten years. It pays on outcomes rather than activities, and CMS states it will publish participants’ risk-adjusted outcomes in a public directory so patients and referring clinicians can compare. Separately, the mandatory episode models score a named clinician or institution across a period.

Put those together and something changes about what a clinical record is for. Until now the record mostly had to satisfy a payer once. From here it also has to stand behind a number published next to your name, that a patient and a referring clinician will read, and that you may one day need to dispute.

Which raises a question that has an uncomfortable answer for most of the market. A great many capable companies will collect those outcomes for you, reconcile the episode, and write results back into your system. That is real work and worth paying for. But the record it produces lives in their schema, under a contract. That is fine right up until the relationship ends, the vendor is acquired, or the number is challenged.

A record you did not sign is not yours, and an attestation you cannot verify without the vendor is not portable.

That is the entire argument for this layer, and it is a narrow one. A SHA-256 fingerprint does not care who is still in business. It says one thing — this is the document that was signed, at that moment, unchanged — and anyone can check it without asking us, or them, for permission.

Said plainly, because this page does not get to be vague about itself: the argument above is why the surgeon-side and physician-review rails are worth wiring. It is not a claim that they are wired. The audit layer above says exactly what is anchoring records today, and the counter is read live from the registry. Believe that, not this.

The full derivation — the routing layer, the payment models, and the four forces that converge on one artifact — is at solvinghealth.com/model. Sources are CMS and ARPA-H primary pages, read 10 September 2026.

The AI drafts it. Who signs it?