# OZI-RIS Clinical Governance Approval Checklist

Date prepared: 20 July 2026  
Release candidate: Stable — Alpha 1  
Decision status: **Pending external approval**

This checklist records the evidence required for a controlled OZI-RIS pilot. It does not constitute approval until the named facility authorities sign and reference their controlled records.

## Technical evidence

- [x] Core RIS workflow automated regression suite passes: 177 tests, 814 assertions.
- [x] Vite production build passes.
- [x] MWL C-ECHO/C-FIND and explicit workstation routing validated.
- [x] Computer-based MPPS N-CREATE `IN PROGRESS` and N-SET `COMPLETED` return `0x0000` and close the RIS worklist item.
- [ ] Repeat MPPS completion with a new physical Fuji operator-generated examination.
- [ ] Confirm physical Fuji console refresh removes the completed item because RIS returns zero, not because of a query failure or local cache.
- [ ] Correct production PACS Storage Commitment N-ACTION abort.
- [ ] Receive and reconcile successful N-EVENT-REPORT for a stored synthetic instance.
- [ ] Receive and reconcile a controlled failed-SOP N-EVENT-REPORT.
- [ ] Complete final product and gateway DICOM Conformance Statements.

## Clinical workflow approval

- [ ] Radiology approves patient registration, appointment, walk-in and exam-request flows.
- [ ] Radiographers approve Scheduled → Arrived → In Progress → Completed responsibilities and manual fallback rules.
- [ ] Radiologists approve preliminary, final, correction and addendum reporting workflows.
- [ ] Clinical leadership approves critical-result communication and acknowledgement timeframes.
- [ ] Medical Records approves patient identity, duplicate merge, correction, retention and disclosure controls.
- [ ] The facility approves electronic and printed report templates and the PER.SS-RA301-aligned request copy.

## Privacy, security and operations

- [ ] Data Protection/Privacy approves the privacy-impact assessment and communication consent model.
- [ ] Information Security accepts the independent penetration-test results and remediation evidence.
- [ ] Hospital IT approves TLS, firewall, workstation allowlists, backup, monitoring and log-retention controls.
- [ ] A documented backup restoration and disaster-recovery exercise is signed off.
- [ ] Supported workstation, browser, printer and accessibility validation is complete.
- [ ] Downtime registration, reconciliation and recovery procedures are exercised with staff.

## Required sign-off

| Authority | Name / role | Decision | Controlled reference | Date / signature |
|---|---|---|---|---|
| Head of Radiology |  | Pending |  |  |
| Chief Radiographer |  | Pending |  |  |
| Medical Records Officer |  | Pending |  |  |
| Hospital IT / PACS Administrator |  | Pending |  |  |
| Information Security |  | Pending |  |  |
| Data Protection / Privacy |  | Pending |  |  |
| Quality / Clinical Governance |  | Pending |  |  |
| PACS and modality vendor representatives |  | Pending |  |  |

## Release decision

- [ ] Approved for controlled pilot.
- [ ] Approved with documented conditions and expiry/review date.
- [ ] Rejected pending remediation.

Decision reference: ____________________  
Review date: ____________________  
Recorded by: ____________________
