The row that dies at the door

For ten years the fix has looked the same. Scan the papers, build an app, hand the patient a portal. Each project digitized the bag and called it progress, and each produced a database a few thousand people log into and the rest forget. The bag outlived all of them.

The reason is in the shape of what they built. A record, in those systems, is a row. A prescription is a row in a prescriptions table. The row belongs to the institution that wrote it. It lives in that institution's database. It dies at the door, because the next institution cannot reach it and would not trust it if it could.

A row is a claim about a patient that only its author can read. Stack a hundred of them across a hundred institutions and you have a hundred islands, each holding a fragment, none able to speak to the next. The patient is the only thing that travels between them, carrying the paper, because the paper is the one format every island can open. The bag is not a failure of technology. It is the rational response to a hundred databases that do not connect.

A record built right is a credential, not a row. A signed, verifiable claim, bound to a person, issued by whoever had the authority to make it. The difference is where it lives and who can read it. A credential lives in the patient's wallet, not the institution's server. It carries its own proof of who made it. The next provider can verify it without an account on the system that issued it, without permission, without trusting the issuer's database at all. It needs the issuer's public key, and the key is public.

That single change is what turns a pile into a person. The institution stops being the owner of a fragment and becomes one signer among many, each adding a verifiable claim to a record the patient holds for life. Walk the set and the interactions are visible, the duplicate test is visible, the history is visible, in seconds, because the claims share an identity and can finally be read together.

This is also why the identity layer is not another health-IT project, even though it will look like one from the outside. The thing underneath the applications is not a better database. It is the absence of a database as the owner of the record. The patient owns it. The institutions sign it. Nobody has to log into anybody else's system for the record to be read.

The graveyard is full of portals that asked the country to move its records into one more place. This asks for the opposite. Leave the records where they are made, sign them where they are made, and let the signature travel. The bag was the workaround. A wallet that proves itself is the thing the bag was always trying to be.