WINDROSE LOGBOOK
Security
The structural barrier
assert_anonymized: text without pseudonymisation tokens cannot reach the network.
The offline-only test
The full local pipeline runs with networking disabled.
Secrets
Secrets live in the macOS Keychain; pseudonym maps are encrypted with AES-GCM.
Clinical specifics
Patient consent capture, audio retention, and an append-only audit log usable for the records of processing.