# OZI-RIS P2 DICOM Site Validation

Date: 20 July 2026
Environment: local development gateway and supervised Fuji site-validation workstation

## Validated

- Orthanc Windows service is running automatically.
- Orthanc 1.12.10 REST API responds on `127.0.0.1:8042`.
- Orthanc AE Title `ORTHANC` accepts associations on loopback port `4242`.
- Orthanc Verification C-ECHO completed with status `0x0000`.
- `dicom-web` and `orthanc-worklists` plugins are loaded.
- QIDO-RS `/dicom-web/studies` completed with HTTP 200.
- OZI-RIS PACS node `Local Orthanc Site PACS` is active and its application-layer query completed successfully.
- OZI-RIS gateway Verification C-ECHO completed with status `0x0000`.
- End-to-end MWL C-FIND completed from a modality simulator through the native gateway and Laravel API, returning one pending dataset followed by status `0x0000`.
- Fuji DR-ID 300CL / Console Advance (`CONSOLE2_HWKKS`) completed MWL C-ECHO against `OZIRIS` at `10.195.113.136:11112`.
- Physical Fuji C-FIND requests reached OZI-RIS and returned the explicitly routed examination; after completion, the same worklist query returned no active result.
- A physical Fuji MPPS N-CREATE `IN PROGRESS` event reached OZI-RIS and matched the study.
- Live MPPS N-SET `COMPLETED` acceptance testing returned `0x0000` and moved the matched study to Completed.
- A controlled `FCR-CSL` simulator run from the RIS computer retrieved accession `RIS260720XCHXWY3`, sent MPPS N-CREATE `IN PROGRESS` and N-SET `COMPLETED` with `0x0000`, moved the RIS study to Completed, and reduced a fresh MWL result from one to zero.
- Delayed MPPS `IN PROGRESS` events can no longer reopen a completed procedure step.
- Gateway and workstation values are administrator-entered database configuration; worklist routing is not tied to hardcoded site endpoints.
- Scheduled and arrived/walk-in examinations can be pushed to a selected workstation.
- The optional MWL/MPPS module is default-off and marked **Stable — Alpha 1**; each physical modality/vendor still requires approval before clinical use.
- Requested Procedure ID and Scheduled Procedure Step ID are constrained to the DICOM `SH` maximum of 16 characters; existing development records were normalized.
- Automated regression verification: 177 Laravel tests (814 assertions) passed.

## Production PACS Storage Commitment test

- Target: `ORTHANC2` at `10.195.112.18:4242`.
- Verification C-ECHO returned `0x0000`.
- The PACS accepted the Storage Commitment Push Model presentation context.
- A clearly synthetic Secondary Capture test instance returned C-STORE success.
- The PACS aborted the association after Storage Commitment N-ACTION; no valid N-ACTION response or N-EVENT-REPORT was received.
- The synthetic instance was not returned by a subsequent Query/Retrieve C-FIND from `OZIRIS`, so storage discoverability is not yet proven.
- Result: **failed production acceptance**. PACS/vendor configuration and callback routing must be corrected before retesting.

## Security boundary

- External gateway validation was limited to the approved local site network and supervised Fuji workstation.
- Orthanc remote access is disabled and local HTTP authentication is disabled by the installed configuration.
- The OZI-RIS viewer integration remains disabled for local Orthanc because production viewer launch requires HTTPS.
- The downloaded standalone installer was not executed by Codex because it had no Authenticode signature. The already-installed local Orthanc service supplied by the owner was used instead.

## Still required before production conformance

- Reconcile the saved Fuji workstation address with its reported workstation IP (`10.195.113.139`) and document the final AE/IP/port ownership.
- Perform a new operator-driven Fuji acquisition and capture the workstation-generated N-SET `COMPLETED` response after Finish.
- Confirm the Fuji console removes the completed examination after a fresh MWL query rather than retaining a local cached row.
- Assign and document every remaining modality AE Title, IP address, port, character set, and responsible vendor.
- Validate MWL matching keys and returned attributes on every remaining physical modality/room.
- Validate MPPS completion, discontinuation, duplicate messages, restart, timeout, and retry behavior on each modality/vendor.
- Correct the production PACS N-ACTION abort and validate C-STORE discoverability plus successful and failed-SOP N-EVENT-REPORT scenarios.
- Configure HTTPS/reverse proxy and authenticated DICOMweb/viewer access.
- Restrict external DIMSE traffic using an approved modality IP/AE allowlist and Windows Firewall rules.
- Complete vendor/site acceptance signatures and the final product/gateway DICOM Conformance Statement.
