Hive Civilization Hipaa Hive API

The hipaa-hive API from Hive Civilization — 11 operation(s) for hipaa-hive.

Business capability
Privacy & Data Protection Management BC-130.50

Operations 11

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /v1/hipaa-hive/health Check HIPAA Hive service health · Health #
Ask an LLM
“Is the HIPAA Hive attestation service up?”
“Can I confirm HIPAA Hive is reachable before recording events?”
Tell an agent
Check HIPAA Hive health.
Tell me whether the HIPAA attestation service is healthy.
GET /v1/hipaa-hive/pricing Get HIPAA Hive pricing · Pricing #
Ask an LLM
“What does HIPAA Hive charge for its attestations?”
“Where can I see pricing for PHI and breach receipts?”
Tell an agent
Show HIPAA Hive pricing.
Get the price list for HIPAA attestation receipts.
POST /v1/hipaa-hive/baa_attest Attest a Business Associate Agreement scope · Baa Attest #
Ask an LLM
“How do I record a signed BAA between a covered entity and a business associate?”
“Can a BAA attestation list the PHI categories and minimum-necessary scope it covers?”
Tell an agent
Attest a BAA between {covered_entity_did} and {business_associate_did} for {purpose_of_use}, scope {minimum_necessary_scope}.
Record BAA {baa_reference_id} between {covered_entity_did} and {business_associate_did}, scope {minimum_necessary_scope}, purpose {purpose_of_use}.
POST /v1/hipaa-hive/phi_access_attest Record a PHI access event · Phi Access Attest #
Ask an LLM
“How do I log that a system accessed a patient's protected health information?”
“Can a PHI access receipt reference a pseudonymous patient DID instead of real identifiers?”
Tell an agent
Record PHI access by {covered_entity_did} for {purpose_of_use} under scope {minimum_necessary_scope}.
Attest that {covered_entity_did} accessed PHI for patient {patient_did_reference}, purpose {purpose_of_use}, scope {minimum_necessary_scope}.
POST /v1/hipaa-hive/phi_disclose_attest Record a PHI disclosure to a recipient · Phi Disclose Attest #
Ask an LLM
“How do I attest that PHI was disclosed to an outside recipient?”
“Can a disclosure receipt name the recipient DID and the BAA it relied on?”
Tell an agent
Record a PHI disclosure from {covered_entity_did} to {recipient_did} for {purpose_of_use}, scope {minimum_necessary_scope}.
Attest {covered_entity_did} disclosed PHI under BAA {baa_reference_id}, purpose {purpose_of_use}, scope {minimum_necessary_scope}.
POST /v1/hipaa-hive/minimum_necessary_check Run a HIPAA minimum-necessary check · Minimum Necessary Check #
Ask an LLM
“Can I check whether a requested set of fields meets the HIPAA minimum-necessary standard?”
“Is the minimum-necessary determination recorded as a receipt?”
Tell an agent
Run a minimum-necessary check for {covered_entity_did}, scope {minimum_necessary_scope}, purpose {purpose_of_use}.
Check if fields {requested_fields} fit scope {minimum_necessary_scope} for {covered_entity_did}, purpose {purpose_of_use}.
POST /v1/hipaa-hive/ai_inference_attest Attest an AI inference that touched PHI · Ai Inference Attest #
Ask an LLM
“How do I record that an AI model ran inference over patient health data?”
“Can an AI inference receipt carry model DID and confidence metadata?”
Tell an agent
Attest an AI inference over PHI by {covered_entity_did}, scope {minimum_necessary_scope}, purpose {purpose_of_use}.
Record an AI inference for {covered_entity_did} with model metadata {ai_inference_metadata}, scope {minimum_necessary_scope}, purpose {purpose_of_use}.
POST /v1/hipaa-hive/patient_access_attest Record a patient-directed access event · Patient Access Attest #
Ask an LLM
“How do I log a 21st Century Cures patient-directed access request?”
“Can I attach a hash of the patient's authorization to a USCDI access receipt?”
Tell an agent
Record patient-directed access for {patient_did_reference} at {covered_entity_did}, scope {minimum_necessary_scope}.
Attest Cures Act access by patient {patient_did_reference} to {covered_entity_did}, scope {minimum_necessary_scope}, authorization {authorization_hash}.
POST /v1/hipaa-hive/breach_assessment_attest Record a four-factor HIPAA breach risk analysis · Breach Assessment Attest #
Ask an LLM
“How do I document the four-factor risk assessment after a possible HIPAA breach?”
“Can the breach analysis record a low-probability-of-compromise determination?”
Tell an agent
Log a breach risk assessment for {covered_entity_did}: PHI involved {factor_nature_and_extent}, received by {factor_unauthorized_person}.
Record for {covered_entity_did} whether PHI was viewed ({factor_acquisition_or_viewing}) and how risk was mitigated ({factor_mitigation}).
POST /v1/hipaa-hive/breach_notice_attest Record a HIPAA breach notification · Breach Notice Attest #
Ask an LLM
“How do I attest that breach notifications went out within the 60-day window?”
“Can a breach notice link back to the earlier breach assessment receipt?”
Tell an agent
Record a breach notice for {covered_entity_did} sent {days_since_discovery} days after discovery.
Attest a {notification_type} breach notice by {covered_entity_did}, {days_since_discovery} days in, for assessment {breach_assessment_receipt_id}.
GET /v1/hipaa-hive/chain_verify Verify the HIPAA receipt chain · Chain Verify Endpoint #
Ask an LLM
“Is the chain of HIPAA receipts for a covered entity intact and validly signed?”
“Can I verify every receipt tied to one pseudonymous patient?”
Tell an agent
Verify the HIPAA receipt chain for covered entity {covered_entity_did}.
Check signature validity of all HIPAA receipts for patient {patient_did_reference}.

Documentation

Specifications

Other Resources

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/thehiveryiq-com:thehiveryiq-com-hipaa-hive-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

thehiveryiq-com-hipaa-hive-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: HiveMorph v0.1 Hipaa Hive API
  description: 'Polymorphic agent runtime — single shape (Merchant), single supermodel (W2 MERCHANT). Three gates: NEED + YIELD + CLEAN-MONEY.'
  version: 0.1.0
tags:
- name: hipaa-hive
paths:
  /v1/hipaa-hive/health:
    get:
      tags:
      - hipaa-hive
      summary: Health
      operationId: health_v1_hipaa_hive_health_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Health V1 Hipaa Hive Health Get
  /v1/hipaa-hive/pricing:
    get:
      tags:
      - hipaa-hive
      summary: Pricing
      operationId: pricing_v1_hipaa_hive_pricing_get
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Pricing V1 Hipaa Hive Pricing Get
  /v1/hipaa-hive/baa_attest:
    post:
      tags:
      - hipaa-hive
      summary: Baa Attest
      description: Record a Business Associate Agreement scope attestation.
      operationId: baa_attest_v1_hipaa_hive_baa_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BaaAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Baa Attest V1 Hipaa Hive Baa Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/phi_access_attest:
    post:
      tags:
      - hipaa-hive
      summary: Phi Access Attest
      description: Record a PHI access event.
      operationId: phi_access_attest_v1_hipaa_hive_phi_access_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PhiAccessAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Phi Access Attest V1 Hipaa Hive Phi Access Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/phi_disclose_attest:
    post:
      tags:
      - hipaa-hive
      summary: Phi Disclose Attest
      description: Record a PHI disclosure event.
      operationId: phi_disclose_attest_v1_hipaa_hive_phi_disclose_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PhiDiscloseAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Phi Disclose Attest V1 Hipaa Hive Phi Disclose Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/minimum_necessary_check:
    post:
      tags:
      - hipaa-hive
      summary: Minimum Necessary Check
      description: Run and record a minimum-necessary determination.
      operationId: minimum_necessary_check_v1_hipaa_hive_minimum_necessary_check_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MinimumNecessaryCheckRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Minimum Necessary Check V1 Hipaa Hive Minimum Necessary Check Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/ai_inference_attest:
    post:
      tags:
      - hipaa-hive
      summary: Ai Inference Attest
      description: Record an AI agent inference event touching PHI categories.
      operationId: ai_inference_attest_v1_hipaa_hive_ai_inference_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AiInferenceAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Ai Inference Attest V1 Hipaa Hive Ai Inference Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/patient_access_attest:
    post:
      tags:
      - hipaa-hive
      summary: Patient Access Attest
      description: Record a 21st Century Cures / USCDI patient-directed access event.
      operationId: patient_access_attest_v1_hipaa_hive_patient_access_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PatientAccessAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Patient Access Attest V1 Hipaa Hive Patient Access Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/breach_assessment_attest:
    post:
      tags:
      - hipaa-hive
      summary: Breach Assessment Attest
      description: Record a 4-factor HIPAA breach risk analysis.
      operationId: breach_assessment_attest_v1_hipaa_hive_breach_assessment_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BreachAssessmentAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Breach Assessment Attest V1 Hipaa Hive Breach Assessment Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/breach_notice_attest:
    post:
      tags:
      - hipaa-hive
      summary: Breach Notice Attest
      description: Record a 60-day HIPAA breach notification event.
      operationId: breach_notice_attest_v1_hipaa_hive_breach_notice_attest_post
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BreachNoticeAttestRequest'
        required: true
      responses:
        '201':
          description: Successful Response
          content:
            application/json:
              schema:
                additionalProperties: true
                type: object
                title: Response Breach Notice Attest V1 Hipaa Hive Breach Notice Attest Post
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
  /v1/hipaa-hive/chain_verify:
    get:
      tags:
      - hipaa-hive
      summary: Chain Verify Endpoint
      description: Return ordered receipt chain + chain_valid bool + per-receipt sig validity.
      operationId: chain_verify_endpoint_v1_hipaa_hive_chain_verify_get
      parameters:
      - name: covered_entity_did
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          description: Covered entity DID to verify chain for
          title: Covered Entity Did
        description: Covered entity DID to verify chain for
      - name: patient_did_reference
        in: query
        required: false
        schema:
          anyOf:
          - type: string
          - type: 'null'
          description: Pseudonymous patient DID reference to verify chain for
          title: Patient Did Reference
        description: Pseudonymous patient DID reference to verify chain for
      responses:
        '200':
          description: Successful Response
          content:
            application/json:
              schema:
                type: object
                additionalProperties: true
                title: Response Chain Verify Endpoint V1 Hipaa Hive Chain Verify Get
        '422':
          description: Validation Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HTTPValidationError'
components:
  schemas:
    PatientAccessAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        patient_did_reference:
          type: string
          title: Patient Did Reference
          description: Pseudonymous patient DID reference
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Minimum-necessary scope
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories accessed
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use
          default: patient_directed
        authorization_hash:
          anyOf:
          - type: string
          - type: 'null'
          title: Authorization Hash
          description: Hash of patient authorization document
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: 'Access metadata: app_did, authorization_hash, access_type, etc.'
      type: object
      required:
      - covered_entity_did
      - patient_did_reference
      - minimum_necessary_scope
      title: PatientAccessAttestRequest
      description: Record a 21st Century Cures / USCDI patient-directed access event.
    PurposeOfUse:
      type: string
      enum:
      - treatment
      - payment
      - healthcare_operations
      - patient_directed
      - research_with_authorization
      - public_health
      - required_by_law
      - health_oversight
      - judicial_administrative
      - law_enforcement
      - avert_threat
      - specialized_government
      - workers_comp
      title: PurposeOfUse
    AiInferenceAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        business_associate_did:
          anyOf:
          - type: string
          - type: 'null'
          title: Business Associate Did
          description: DID of the BA operating the AI
        patient_did_reference:
          anyOf:
          - type: string
          - type: 'null'
          title: Patient Did Reference
          description: Pseudonymous patient DID reference
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Minimum-necessary scope for inference
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories touched by inference
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use per 45 CFR §164.506
        baa_reference_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Baa Reference Id
          description: BAA reference ID
        ai_inference_metadata:
          additionalProperties: true
          type: object
          title: Ai Inference Metadata
          description: 'AI metadata: model_did, confidence, onc_hti1_attestation, inference_hash, etc.'
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: Inference event metadata
      type: object
      required:
      - covered_entity_did
      - minimum_necessary_scope
      - purpose_of_use
      title: AiInferenceAttestRequest
      description: Record an AI agent inference event touching PHI categories.
    MinimumNecessaryCheckRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        patient_did_reference:
          anyOf:
          - type: string
          - type: 'null'
          title: Patient Did Reference
          description: Pseudonymous patient DID reference
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Requested scope
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories requested
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use
        requested_fields:
          items:
            type: string
          type: array
          title: Requested Fields
          description: Policy-attribute names requested (no raw PHI)
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: 'Check metadata: policy_hash, system_did, etc.'
      type: object
      required:
      - covered_entity_did
      - minimum_necessary_scope
      - purpose_of_use
      title: MinimumNecessaryCheckRequest
      description: Run and record a minimum-necessary determination.
    ValidationError:
      properties:
        loc:
          items:
            anyOf:
            - type: string
            - type: integer
          type: array
          title: Location
        msg:
          type: string
          title: Message
        type:
          type: string
          title: Error Type
        input:
          title: Input
        ctx:
          type: object
          title: Context
      type: object
      required:
      - loc
      - msg
      - type
      title: ValidationError
    BreachAssessmentAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        business_associate_did:
          anyOf:
          - type: string
          - type: 'null'
          title: Business Associate Did
          description: DID of BA if breach was at BA
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Scope of breach assessment
          default: breach_assessment
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories potentially breached
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use
          default: health_oversight
        factor_nature_and_extent:
          type: string
          title: Factor Nature And Extent
          description: Nature and extent of PHI involved (no raw PHI)
        factor_unauthorized_person:
          type: string
          title: Factor Unauthorized Person
          description: Who used/received the PHI (role/DID reference)
        factor_acquisition_or_viewing:
          type: boolean
          title: Factor Acquisition Or Viewing
          description: Was PHI actually acquired or viewed?
        factor_mitigation:
          type: string
          title: Factor Mitigation
          description: Extent to which risk has been mitigated
        low_probability_determination:
          type: boolean
          title: Low Probability Determination
          description: Low-probability-of-compromise determination
          default: false
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: Assessment metadata
      type: object
      required:
      - covered_entity_did
      - factor_nature_and_extent
      - factor_unauthorized_person
      - factor_acquisition_or_viewing
      - factor_mitigation
      title: BreachAssessmentAttestRequest
      description: Record a 4-factor HIPAA breach risk analysis.
    BreachNoticeAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        business_associate_did:
          anyOf:
          - type: string
          - type: 'null'
          title: Business Associate Did
          description: DID of BA if applicable
        patient_did_reference:
          anyOf:
          - type: string
          - type: 'null'
          title: Patient Did Reference
          description: Pseudonymous patient DID reference
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Scope
          default: breach_notification
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories in breach
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use
          default: health_oversight
        breach_assessment_receipt_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Breach Assessment Receipt Id
          description: Receipt ID of the breach assessment
        notification_type:
          type: string
          title: Notification Type
          description: individual | media | hhs_secretary
          default: individual
        days_since_discovery:
          type: integer
          title: Days Since Discovery
          description: Days since breach discovery (must be <= 60 for timely)
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: 'Notification metadata: notification_hash, media_outlet_did, etc.'
      type: object
      required:
      - covered_entity_did
      - days_since_discovery
      title: BreachNoticeAttestRequest
      description: Record a 60-day HIPAA breach notification event.
    BaaAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        business_associate_did:
          type: string
          title: Business Associate Did
          description: DID of the business associate
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Minimum-necessary scope string
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories per 45 CFR §164.103
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use per 45 CFR §164.506
        baa_reference_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Baa Reference Id
          description: BAA document hash or reference ID
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: 'BAA metadata: effective_date, term_years, scope_hash, etc.'
      type: object
      required:
      - covered_entity_did
      - business_associate_did
      - minimum_necessary_scope
      - purpose_of_use
      title: BaaAttestRequest
      description: Record a Business Associate Agreement scope attestation.
    PhiAccessAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        business_associate_did:
          anyOf:
          - type: string
          - type: 'null'
          title: Business Associate Did
          description: DID of the business associate
        patient_did_reference:
          anyOf:
          - type: string
          - type: 'null'
          title: Patient Did Reference
          description: Pseudonymous patient DID reference
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Minimum-necessary scope string
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories per 45 CFR §164.103
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use per 45 CFR §164.506
        baa_reference_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Baa Reference Id
          description: BAA reference ID
        ai_inference_metadata:
          anyOf:
          - additionalProperties: true
            type: object
          - type: 'null'
          title: Ai Inference Metadata
          description: AI inference metadata
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: 'Access metadata: access_hash, system_did, access_type, etc.'
      type: object
      required:
      - covered_entity_did
      - minimum_necessary_scope
      - purpose_of_use
      title: PhiAccessAttestRequest
      description: Record a PHI access event.
    HTTPValidationError:
      properties:
        detail:
          items:
            $ref: '#/components/schemas/ValidationError'
          type: array
          title: Detail
      type: object
      title: HTTPValidationError
    PhiDiscloseAttestRequest:
      properties:
        covered_entity_did:
          type: string
          title: Covered Entity Did
          description: DID of the covered entity
        business_associate_did:
          anyOf:
          - type: string
          - type: 'null'
          title: Business Associate Did
          description: DID of the recipient BA
        patient_did_reference:
          anyOf:
          - type: string
          - type: 'null'
          title: Patient Did Reference
          description: Pseudonymous patient DID reference
        minimum_necessary_scope:
          type: string
          title: Minimum Necessary Scope
          description: Minimum-necessary scope string
        phi_categories:
          items:
            type: string
          type: array
          title: Phi Categories
          description: IIHI categories per 45 CFR §164.103
        purpose_of_use:
          $ref: '#/components/schemas/PurposeOfUse'
          description: Purpose of use per 45 CFR §164.506
        baa_reference_id:
          anyOf:
          - type: string
          - type: 'null'
          title: Baa Reference Id
          description: BAA reference ID
        recipient_did:
          anyOf:
          - type: string
          - type: 'null'
          title: Recipient Did
          description: DID of the disclosure recipient
        event_payload:
          additionalProperties: true
          type: object
          title: Event Payload
          description: 'Disclosure metadata: disclosure_hash, recipient_did, authorization_hash, etc.'
      type: object
      required:
      - covered_entity_did
      - minimum_necessary_scope
      - purpose_of_use
      title: PhiDiscloseAttestRequest
      description: Record a PHI disclosure event.
x-provenance:
  method: harvested
  publisher: Hive Civilization
  source: https://receipts.thehiveryiq.com/openapi.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)