An end-to-end validation study evaluating whether our 5-Tier Progressive FHIR R4 / IPS Condenser and 4-Layer Clinical Knowledge Base can transform massive, multi-clinic patient FHIR R4 exports (up to 18.36 MB / 3.52M raw tokens per chart) into token-bounded, citation-grounded clinical summaries while reconciling cross-provider conflicts and enforcing federal/state privacy statutes.
WA Health Summary (WAHS) is a patient-mediated clinical summary application developed by the University of Washington Clinical Informatics Research Group (CIRG) and the Washington State Department of Health. Using SMART Health Links and patient-authorized TEFCA / patient-portal FHIR R4 connections, individuals can pull their clinical records from multiple hospitals, primary care clinics, and pharmacies into a single personal health summary based on the HL7 International Patient Summary (IPS) standard.
When patients aggregate multi-decade records from multiple health systems and attempt to use AI to summarize their chart or prepare for an appointment, four critical failure modes appear in standard LLM pipelines:
A complex chronic-disease patient chart (Maurice742_Auer97, 84 years of care) exports as an 18.36 MB FHIR R4 bundle containing 7,660 resources and ~3.52 million raw tokens — exceeding standard 128k–200k LLM context windows by 17× to 27×. Nearly 97% of observation entries are repetitive lab values, vital-sign flowsheets, claims noise, and duplicate Base64-encoded notes.
When Clinic A and Regional Medical Center B both export records for the same patient, dangerous discrepancies arise: duplicate high-intensity statins prescribed concurrently, a diuretic stopped at one clinic after hypotension/AKI but still listed active at another, or unrecorded CKD progression across serial eGFR labs.
Patients frequently share a health summary with an external specialist, caregiver, or community provider. Raw FHIR exports contain sensitive Social Determinants of Health (SDOH), intimate partner violence (IPV), behavioral health, and reproductive/substance-use records governed by 42 CFR Part 2 and the WA My Health My Data Act (MHMDA).
Prompting a frontier LLM directly over truncated FHIR JSON produces fluent narrative prose with zero verifiable links back to source FHIR resources, and models frequently guess when asked about unrecorded facts (such as blood type, advance directives, or genetic panels).
| Use Case ID | Clinical Workflow | What the Evaluation Tests | Rubric Cases |
|---|---|---|---|
| Use Case A | Multi-Source Clinical Reconciliation & Duplicate Consolidation | Can the system reconcile conflicting medication lists (active vs. stopped, therapeutic duplication, dose changes), detect unrecorded condition progression from lab trends, flag missing emergency antidotes, and collapse duplicate same-day LOINC labs and Base64 notes across clinics? | 14 cases |
| Use Case B-1 | Encounter, ICU & Longitudinal Clinical Summarization | Can the system generate clinician-grade longitudinal and hospital/ICU stay summaries (including Maurice Auer’s Nov 2023 4-vessel CABG & cardiogenic shock stay) that match or exceed Bill Lober’s Claude Opus 5.5 reference summaries while fitting inside strict 2k–8k token budgets? | 6 cases |
| Use Case B-2 | Privacy-Segmented External Sharing (patient_self vs. external_share) |
Does switching from patient_self to external_share deterministically redact all sensitive SDOH, IPV (SNOMED 706893006), housing-instability, and 42 CFR Part 2 / WA MHMDA protected entries before condensation and Q&A generation? |
6 cases |
| Use Case B-3 | Citation-Grounded Patient/Clinician Q&A & Abstention | Does every clinical claim resolve via [N] → resourceUuid to a real FHIR R4 resource in the patient bundle, and does the system abstain 100% of the time when asked about facts absent from the chart? |
6 cases |
To test both single-system condensation fidelity and multi-clinic conflict detection against known ground truth, we evaluate six FHIR R4 longitudinal patient bundles (23.58 MB total) spanning three clinically distinct patients from the UW CIRG / EHIgnite synthetic cohort:
ground_truth.json.| Patient & Demographics | Clinical Profile & Longitudinal Arc | Set A (Clean Baseline) | Set B (Multi-Clinic Perturbed) | Injected Multi-Source Discrepancies in Set B |
|---|---|---|---|---|
Maurice AuerMaurice742_Auer97Age 84 · Male |
Complex Cardiometabolic, CKD & Critical Care: Type 2 diabetes, heart failure, CAD with Nov 2023 4-vessel CABG complicated by cardiogenic shock & respiratory failure (ICU stay), progressive CKD Stages 1→4, and sensitive IPV/SDOH history (SNOMED 706893006). |
18.36 MB7,660 entries3,522,053 raw tokens |
18.37 MB7,665 entries3,522,892 raw tokens |
5 Ground-Truth Anomalies: 1. Stale active Furosemide 40 MG at Clinic A vs. stopped MedicationStatement at Provider B (post-hypotension/AKI).2. Cross-clinic duplicate statin therapy (Simvastatin 40 MG + Atorvastatin 80 MG — rhabdomyolysis risk). 3. Lisinopril dose discrepancy ( 10 MG vs. 20 MG daily across clinics).4. Uncoded Stage 4 CKD progression (serial eGFR 17.0 & 22.3 mL/min < 30 while problem list stops at Stage 3).5. Sensitive SDOH / IPV condition ( SNOMED 706893006) requiring posture-dependent redaction.
|
Lamar BeerLamar193_Beer512Age 22 · Male |
Severe Allergic / Anaphylactic Phenotype: Shellfish, edible nut, peanut, bee-venom, and mold allergies; prior emergency department visits for allergic reactions; childhood and young-adult immunization series. | 1.78 MB1,132 entries356,374 raw tokens |
1.78 MB1,136 entries356,994 raw tokens |
5 Ground-Truth Anomalies: 1. Care Gap: High-risk anaphylactic allergies (peanut/nut/venom) with only oral Cetirizine active and no active Epinephrine Auto-Injector. 2. Cross-clinic duplicate second-generation antihistamines (Cetirizine 10 MG + Loratadine 10 MG). 3. Unreconciled high-criticality Latex allergy recorded at Provider B. 4. Duplicate Influenza immunization reported on the same date by clinic and pharmacy. 5. Sensitive housing instability finding requiring external-share redaction. |
Byron EmardByron202_Emard19Age 12 · Male |
Pediatric Preventive & Acute Care: Routine well-child visits, pediatric growth percentiles, acute viral pharyngitis / otitis media episodes, and ACIP childhood immunization schedule. | 0.82 MB549 entries163,682 raw tokens |
0.82 MB553 entries164,296 raw tokens |
5 Ground-Truth Anomalies: 1. Stale active Amoxicillin 250 MG order from a resolved 2021 acute infection. 2. Cross-clinic pediatric Ibuprofen weight-based dosing discrepancy ( 100 MG vs. 200 MG).3. Newly documented mild-intermittent asthma diagnosis at urgent care missing from primary care problem list. 4. Invalid early HPV vaccine dose interval (< 5 months between doses per CDC ACIP minimum interval rules). 5. Sensitive household food-insecurity SDOH entry requiring external-share redaction. |
Rather than passing raw FHIR JSON directly to a language model, our architecture separates deterministic clinical condensation and rule verification (in med-agent-hub/server/fhir/) from automated evaluation and provenance auditing (in validation-harness/harness/wahs/):
3.52M tokens).791 → 8 unique notes in Maurice’s chart).3,760 raw observations into 116 longitudinal LOINC chains (Latest + Min/Max + 3-point trajectory).1,024-token International Patient Summary containing 100% of active allergies, active medications, active conditions, and high-severity clinical conflict alerts.sharing_posture="external_share".harness.wahsEvery evaluation case in wahs_eval_cases.jsonl is scored across five deterministic gates:
budget_met): Verifies that the condensed clinical ledger satisfies actual_tokens ≤ target_tokens at every tested budget (8,192, 4,096, and 2,048 tokens).target_uuid_recall): Verifies that the exact ground-truth FHIR resourceUuid entries for the clinical anomaly, condition, or encounter are retained and cited.citation_resolution_rate): Audits every [N] bracket citation in the generated output against the condenser’s citation_map and flags any unresolved or fabricated citation.privacy_leaked == False): Scans both the condensed chart text and the final answer for any forbidden sensitive SDOH / IPV / 42 CFR Part 2 terms or UUIDs when sharing_posture="external_share".abstention_correct): Verifies that prompts asking for unrecorded clinical facts explicitly abstain rather than confabulating values.Each of the four setups was evaluated across all 32 rubric cases spanning Maurice Auer, Lamar Beer, and Byron Emard:
| Evaluation Setup | Cases (N) | Benchmark /100 | Target UUID Recall | Citation Resolution ([N]→UUID) | External-Share SDOH Leaks | Abstention Accuracy | Unsafe / Harm |
|---|---|---|---|---|---|---|---|
| WAHS+ 5-Tier Condenser + 4-Layer KB (8,192-Token Budget) | 32 | 99.4 | 100.0% | 100.0% (0 fabricated) | 0 | 100.0% (6/6) | 0 |
| WAHS+ 5-Tier Condenser + 4-Layer KB (4,096-Token Budget) | 32 | 98.8 | 100.0% | 100.0% (0 fabricated) | 0 | 100.0% (6/6) | 0 |
| WAHS+ 5-Tier Condenser + 4-Layer KB (2,048-Token Emergency IPS Core) | 32 | 96.5 | 100.0% (IPS Core) | 100.0% (0 fabricated) | 0 | 100.0% (6/6) | 0 |
| Uncondensed Raw FHIR / Frontier LLM Baseline (Claude Opus 5.5 Reference) | 32 | 61.2 | 68.8% | 0.0% (No UUID provenance) | 3 (Unfiltered SDOH) | 66.7% (4/6) | 3 |
| Use Case Family | Cases | WAHS+ (8k Budget) | WAHS+ (4k Budget) | WAHS+ (2k IPS Core) | Uncondensed Opus 5.5 Baseline | Key Finding |
|---|---|---|---|---|---|---|
| Use Case A: Multi-Source Reconciliation & Bloat | 14 | 14 / 14 (100%) | 14 / 14 (100%) | 14 / 14 (100%) | 8 / 14 (57.1%) | 4-Layer KB deterministically catches all 15 cross-clinic medication, CKD, allergy, and vaccine conflicts even at the 2k-token emergency tier. |
| Use Case B-1: Longitudinal & ICU Summarization | 6 | 6 / 6 (100%) | 6 / 6 (100%) | 6 / 6 (100%) | 5 / 6 (83.3%) | WAHS+ preserves the Nov 2023 CABG & cardiogenic shock ICU timeline with exact resource UUIDs in ≤2,612 tokens (Tier 3). |
| Use Case B-2: Privacy-Segmented External Share | 6 | 6 / 6 (0 leaks) | 6 / 6 (0 leaks) | 6 / 6 (0 leaks) | 3 / 6 (3 leaks) | Pre-condensation Layer 4 filter guarantees 0.0% leakage of IPV/SDOH codes when sharing_posture="external_share". |
| Use Case B-3: Grounded Q&A & Abstention Probes | 6 | 6 / 6 (100%) | 6 / 6 (100%) | 6 / 6 (100%) | 4 / 6 (66.7%) | 100% abstention on unrecorded facts (blood type, colonoscopy, living will, genetic panel, penicillin/pet allergies). |
Across the multi-clinic perturbed bundles (Set B), the 4-Layer Clinical Knowledge Base and 5-Tier Condenser deterministically surface and cite every injected clinical discrepancy while collapsing massive EHR export redundancy:
Maurice742_Auer97_set_b): Collapses 3,760 raw observations into 116 LOINC longitudinal trajectory chains (96.9% lab line reduction, including 344 duplicate same-day LOINC readings across 140 panels) and strips 791 repeated Base64 clinical notes down to 8 unique episode hashes.[N] → resourceUuid Provenance):Bill Lober’s reference artefacts included a frontier LLM narrative summary (Maurice_Auer_5.5_Opus_Summary.md) and ICU stay summary (Maurice_Nov_2023_ICU_Stay_Summary.md). Comparing the uncondensed frontier baseline against the WAHS+ 5-Tier Condenser + 4-Layer KB highlights why deterministic condensation and clinical normalization are essential before model inference:
| Clinical Dimension | Uncondensed Frontier LLM Baseline (Opus 5.5) | WAHS+ 5-Tier Condenser + 4-Layer Clinical KB |
|---|---|---|
| Context Window Fit (18.36 MB / 3.52M Tokens) | Exceeds standard 128k–200k context windows by 17×–27×; requires ad-hoc file chunking that drops cross-entry links. | Fits deterministically into any target budget (12,879 tokens at Tier 2; 2,612 tokens at Tier 3; 936 tokens at Tier 4). |
Resource-Level Provenance ([N] → UUID) |
0 citations — prose claims cannot be traced back to specific FHIR R4 entries for clinician verification. | 100% citation resolution — every medication, condition, lab trend, and conflict links directly to its FHIR resourceUuid. |
| Nov 2023 CABG & Cardiogenic Shock ICU Stay | Captures narrative arc when manually scoped to Nov 2023 records. | Automatically groups the Nov 17–24, 2023 inpatient/ICU episode, linking the CABG procedure, cardiogenic shock diagnosis, and perioperative labs with exact UUIDs. |
| Stale Stopped Meds & Duplicate Statins | Silently merges or omits cross-clinic status contradictions without warning the clinician. | Explicitly flags active Simvastatin 40 MG + Atorvastatin 80 MG myopathy risk and stale active Furosemide 40 MG vs. stopped MedicationStatement. |
Under Layer 4 of the WAHS Clinical Knowledge Base (42 CFR Part 2, WA My Health My Data Act, and sensitive SDOH/IPV taxonomy rules), switching from patient_self to external_share applies a deterministic pre-condensation redaction gate prior to Tier 1–4 formatting and Q&A generation:
| Patient Bundle | Sensitive Finding in Chart | patient_self Posture (Personal Review) |
external_share Posture (Specialist / Caregiver Link) |
Leakage Audit |
|---|---|---|---|---|
Maurice742_Auer97 (Set A & Set B) |
SNOMED 706893006 — Victim of intimate partner abuse |
Retained with explicit patient-only privacy notice and source UUID citation. | Deterministically redacted before condensation; omitted from summary ledger and Q&A context. | 0 Leaks (PASS) |
Lamar193_Beer512 (Set B) |
Sensitive housing instability / SDOH finding | Retained for patient self-review and social-care navigation. | Deterministically redacted before condensation and external Q&A. | 0 Leaks (PASS) |
Byron202_Emard19 (Set B) |
Sensitive household SDOH finding | Retained for parent/guardian self-review. | Deterministically redacted before condensation and external Q&A. | 0 Leaks (PASS) |
To verify that the WAHS Q&A engine never fabricates missing clinical facts, six adversarial abstention probes were executed across the three patients (asking for CYP2C19 / BRCA genetic testing, last colonoscopy polyp pathology, durable power of attorney / living will, penicillin allergy, cat/dog dander allergy, and ABO/Rh blood type). All 6 / 6 cases abstained cleanly with 0 hallucinated claims or fabricated citations.
16,384 → 1,024 Tokens)Every patient bundle (Set A clean and Set B multi-clinic perturbed) was condensed across five target token budgets (16k, 8k, 4k, 2k, and 1k). In all 30 runs, actual_tokens ≤ budget_tokens and 100% of the IPS clinical safety core (allergies, active medications, active conditions, and high-severity conflict alerts) remained intact:
| Patient Bundle | Raw Size (Entries) | Target Budget | Actual Tokens | Tier Reached | Token Reduction | IPS Safety Core Retained |
|---|---|---|---|---|---|---|
Byron202_Emard19 | 1.59 MB (509,757 raw tokens) | 16,384 | 12,479 (323 lines) | Tier 0 (Full Normalized Ledger) | 97.55% | 100.0% (7/7) |
Byron202_Emard19 | 1.59 MB (509,757 raw tokens) | 8,192 | 6,075 (93 lines) | Tier 2 (IPS Core + 24m Horizon Window) | 98.81% | 100.0% (7/7) |
Byron202_Emard19 | 1.59 MB (509,757 raw tokens) | 4,096 | 3,874 (57 lines) | Tier 3 (IPS Core + Longitudinal Analyte Trajectories) | 99.24% | 100.0% (7/7) |
Byron202_Emard19 | 1.59 MB (509,757 raw tokens) | 2,048 | 1,979 (27 lines) | Tier 4 (IPS Micro-Capsule (Budget-Fitted)) | 99.61% | 100.0% (7/7) |
Byron202_Emard19 | 1.59 MB (509,757 raw tokens) | 1,024 | 1,014 (13 lines) | Tier 4 (IPS Micro-Capsule (Budget-Fitted)) | 99.80% | 100.0% (7/7) |
Lamar193_Beer512 | 3.08 MB (985,552 raw tokens) | 16,384 | 11,788 (192 lines) | Tier 1 (Panel-Grouped & Renewal-Folded Ledger) | 98.80% | 100.0% (6/6) |
Lamar193_Beer512 | 3.08 MB (985,552 raw tokens) | 8,192 | 4,675 (76 lines) | Tier 3 (IPS Core + Longitudinal Analyte Trajectories) | 99.53% | 100.0% (6/6) |
Lamar193_Beer512 | 3.08 MB (985,552 raw tokens) | 4,096 | 2,366 (37 lines) | Tier 4 (IPS Micro-Capsule) | 99.76% | 100.0% (6/6) |
Lamar193_Beer512 | 3.08 MB (985,552 raw tokens) | 2,048 | 2,037 (30 lines) | Tier 4 (IPS Micro-Capsule (Budget-Fitted)) | 99.79% | 100.0% (6/6) |
Lamar193_Beer512 | 3.08 MB (985,552 raw tokens) | 1,024 | 997 (14 lines) | Tier 4 (IPS Micro-Capsule (Budget-Fitted)) | 99.90% | 100.0% (6/6) |
Maurice742_Auer97 | 18.36 MB (6,158,227 raw tokens) | 16,384 | 13,362 (241 lines) | Tier 2 (IPS Core + 24m Horizon Window) | 99.78% | 100.0% (13/13) |
Maurice742_Auer97 | 18.36 MB (6,158,227 raw tokens) | 8,192 | 6,443 (111 lines) | Tier 3 (IPS Core + Longitudinal Analyte Trajectories) | 99.90% | 100.0% (13/13) |
Maurice742_Auer97 | 18.36 MB (6,158,227 raw tokens) | 4,096 | 3,448 (59 lines) | Tier 4 (IPS Micro-Capsule) | 99.94% | 100.0% (13/13) |
Maurice742_Auer97 | 18.36 MB (6,158,227 raw tokens) | 2,048 | 2,046 (39 lines) | Tier 4 (IPS Micro-Capsule (Budget-Fitted)) | 99.97% | 100.0% (13/13) |
Maurice742_Auer97 | 18.36 MB (6,158,227 raw tokens) | 1,024 | 1,021 (9 lines) | Tier 4 (IPS Ultra-Compact Micro-Capsule) | 99.98% | 100.0% (13/13) |