One shared encrypted order links the three surfaces below. Start an intake; watch it land on the patient timeline; approve it as a clinician; ship it as ops; the patient sees every change in real time. Open multiple tabs to see cross-surface sync.
What's wired
Shared encrypted state via demo-state.js. AES-GCM-256 storage key shared with the compliance.js audit chain. Cross-tab sync via storage events. Full PHI is plaintext only in memory — bytes on disk are ciphertext.
How to test
Open all three surfaces in separate tabs. Reset the demo state below. Start an intake in tab 1, approve it in tab 3, then advance fulfillment — watch tab 2 update each time. Click the 🔒 HIPAA pill (bottom-right of any page) to see the audit log + chain blocks for what you did.