- The card carries an identifier, not the medical record itself.
- Records are looked up only through an authenticated, authorized system.
- Identifier formats and matching rules are defined during implementation.
Proposed capability · confirmed per deployment

