Deploy this creator on a SEPARATE origin from the patient site. Base cards only. The plan is resolved (real resolver) and signed on this device; Links carry no clinical values, names, or condition labels. Run key setup once, register the public key, then generate signed links.
SIGNED PATIENT LINK
Only cards David has approved (status published) will open. Unapproved cards will render nothing on the patient page. Send links through your normal patient channel.