EHDS E2E Journey Report

✅

Step 1 — Data Provider Creates Metadata

Data Holder (clinicuser) 20 passed, 0 failed, 0 skipped

Docs: Step 1 — Data Provider Creates Metadata ↗

EHDS: Art. 45 — Dataset Description ↗

Protocol: HealthDCAT-AP 3.0 ↗

Endpoints: /api/assets /api/catalog

UI Pages: /data/share /catalog

20 tests

✅ J06 — Synthea FHIR R4 Patient Cohort appears in catalog 135ms
✅ J07 — FHIR Encounter History has HealthDCAT-AP metadata 150ms
✅ J08 — FHIR Diagnostic Reports dataset visible in catalog 103ms
✅ J09 — Catalog API contains OMOP CDM dataset entry 46ms
✅ J10 — Dataset shows EHDS Article 53 legal basis 154ms
✅ J11 — FHIR Immunization Records visible in catalog 112ms
✅ J12 — FHIR Care Plan Registry appears in catalog 144ms
✅ J13 — MedDRA v27 Adverse Event Classification in catalog 140ms
✅ J14 — Clinical Trial Phases I–IV metadata in catalog 150ms
✅ J15 — FHIR AllergyIntolerance Registry with FHIR R4 conformance 143ms
✅ J06 — Synthea FHIR R4 Patient Cohort appears in catalog 144ms
✅ J07 — FHIR Encounter History has HealthDCAT-AP metadata 139ms
✅ J08 — FHIR Diagnostic Reports dataset visible in catalog 106ms
✅ J09 — Catalog API contains OMOP CDM dataset entry 52ms
✅ J10 — Dataset shows EHDS Article 53 legal basis 159ms
✅ J11 — FHIR Immunization Records visible in catalog 114ms
✅ J12 — FHIR Care Plan Registry appears in catalog 146ms
✅ J13 — MedDRA v27 Adverse Event Classification in catalog 147ms
✅ J14 — Clinical Trial Phases I–IV metadata in catalog 149ms
✅ J15 — FHIR AllergyIntolerance Registry with FHIR R4 conformance 148ms

✅

Step 2 — Publish with Access & Usage Policies

Data Holder (clinicuser) 14 passed, 0 failed, 0 skipped

Docs: Step 2 — Publish with Access & Usage Policies ↗

EHDS: Art. 46 — Data Permit Conditions ↗

Protocol: ODRL 2.2 ↗

Endpoints: /api/admin/policies /api/catalog

UI Pages: /admin/policies /catalog

14 tests

✅ J16 — Policies exist for multiple participants 77ms
✅ J17 — Policies include ODRL permission and prohibition fields 60ms
✅ J18 — Policy page requires authentication 99ms
✅ J19 — MedReg participant has registered policies 52ms
✅ J20 — Catalog page renders dataset cards publicly 113ms
✅ J21 — Catalog API has at least 15 registered datasets 49ms
✅ J22 — At least one catalog dataset is SyntheticData type 52ms
✅ J16 — Policies exist for multiple participants 82ms
✅ J17 — Policies include ODRL permission and prohibition fields 68ms
✅ J18 — Policy page requires authentication 90ms
✅ J19 — MedReg participant has registered policies 70ms
✅ J20 — Catalog page renders dataset cards publicly 118ms
✅ J21 — Catalog API has at least 15 registered datasets 51ms
✅ J22 — At least one catalog dataset is SyntheticData type 46ms

✅

Step 3 — Consumer Discovers Assets

Data User (researcher) 36 passed, 0 failed, 0 skipped

Docs: Step 3 — Consumer Discovers Assets ↗

EHDS: Art. 47 — Data Access Application ↗

Protocol: DSP §5 — Catalog Protocol ↗

Endpoints: /api/catalog /api/graph /api/patient /api/analytics

UI Pages: /catalog /graph /patient /analytics

36 tests

✅ J23 — Catalog page displays FHIR datasets 111ms
✅ J24 — Catalog API includes datasets with various types 48ms
✅ J25 — Clinical trial dataset exists in catalog API 48ms
✅ J26 — Discover Data page requires authentication 91ms
✅ J27 — Graph Explorer shows all 5 graph layers 156ms
✅ J28 — Graph canvas renders and includes FHIR R4 + OMOP CDM 501ms
✅ J29 — Patient Journey page shows patient cohort 110ms
✅ J30 — OMOP Research Analytics page renders 296ms
✅ J82 — Catalog page has a search filter input 112ms
✅ J83 — Typing in search filter narrows the displayed datasets 1133ms
✅ J84 — Expanded dataset card shows publisher information 135ms
✅ J85 — Expanded dataset card shows legal basis 145ms
✅ J86 — Expanded dataset shows HealthDCAT-AP Metadata heading 145ms
✅ J87 — Expanded dataset has Show Data Model action 137ms
✅ J88 — Expanded dataset has Download DCAT-AP action 138ms
✅ J89 — Catalog API datasets include title and publisher 54ms
✅ J90 — Catalog datasets include datasetType classification 46ms
✅ J91 — Catalog page description references HealthDCAT-AP 121ms
✅ J23 — Catalog page displays FHIR datasets 119ms
✅ J24 — Catalog API includes datasets with various types 49ms
✅ J25 — Clinical trial dataset exists in catalog API 48ms
✅ J26 — Discover Data page requires authentication 108ms
✅ J27 — Graph Explorer shows all 5 graph layers 147ms
✅ J28 — Graph canvas renders and includes FHIR R4 + OMOP CDM 547ms
✅ J29 — Patient Journey page shows patient cohort 111ms
✅ J30 — OMOP Research Analytics page renders 116ms
✅ J82 — Catalog page has a search filter input 100ms
✅ J83 — Typing in search filter narrows the displayed datasets 1130ms
✅ J84 — Expanded dataset card shows publisher information 127ms
✅ J85 — Expanded dataset card shows legal basis 142ms
✅ J86 — Expanded dataset shows HealthDCAT-AP Metadata heading 147ms
✅ J87 — Expanded dataset has Show Data Model action 153ms
✅ J88 — Expanded dataset has Download DCAT-AP action 137ms
✅ J89 — Catalog API datasets include title and publisher 47ms
✅ J90 — Catalog datasets include datasetType classification 47ms
✅ J91 — Catalog page description references HealthDCAT-AP 113ms

✅

Step 4 — Request Access to Datasets

Data User (researcher) 28 passed, 0 failed, 0 skipped

Docs: Step 4 — Request Access to Datasets ↗

EHDS: Art. 48 — Data Permit ↗

Protocol: DSP §7.1 — Contract Negotiation ↗

Endpoints: /api/negotiations /api/tasks /api/assets

UI Pages: /negotiate

28 tests

✅ J31 — Negotiate page requires authentication 149ms
✅ J32 — Tasks API includes negotiation entries 60ms
✅ J33 — At least one negotiation is FINALIZED 63ms
✅ J34 — Negotiations exist for multiple participants 65ms
✅ J35 — Participant-scoped negotiations API works 55ms
✅ J36 — Negotiations follow DSP protocol 55ms
✅ J37 — Assets API returns assets for multiple participants 63ms
✅ J38 — Terminated negotiation exists in task list or per-participant 64ms
✅ J39 — Finalized negotiations include contractAgreementId 64ms
✅ J40 — Cross-border negotiation involves different DID domains 55ms
✅ J92 — Negotiations have DSP protocol, state, and counterPartyId 75ms
✅ J95 — Finalized negotiations have corresponding transfer processes 63ms
✅ J96 — Assets API returns entries with name, contenttype, and description 65ms
✅ J99 — Negotiations reference multiple counterparty DIDs 67ms
✅ J31 — Negotiate page requires authentication 92ms
✅ J32 — Tasks API includes negotiation entries 82ms
✅ J33 — At least one negotiation is FINALIZED 60ms
✅ J34 — Negotiations exist for multiple participants 55ms
✅ J35 — Participant-scoped negotiations API works 55ms
✅ J36 — Negotiations follow DSP protocol 55ms
✅ J37 — Assets API returns assets for multiple participants 59ms
✅ J38 — Terminated negotiation exists in task list or per-participant 60ms
✅ J39 — Finalized negotiations include contractAgreementId 63ms
✅ J40 — Cross-border negotiation involves different DID domains 56ms
✅ J92 — Negotiations have DSP protocol, state, and counterPartyId 80ms
✅ J95 — Finalized negotiations have corresponding transfer processes 53ms
✅ J96 — Assets API returns entries with name, contenttype, and description 68ms
✅ J99 — Negotiations reference multiple counterparty DIDs 59ms

✅

Step 6 — Data Transfer & Access

Data User (researcher) 28 passed, 0 failed, 0 skipped

Docs: Step 6 — Data Transfer & Access ↗

EHDS: Art. 50 — Secure Processing Environment ↗

Protocol: DSP §8 — Transfer Process Protocol ↗

Endpoints: /api/transfers /api/tasks /api/admin/audit

UI Pages: /data/transfer /data/share /graph

28 tests

✅ J41 — Transfer page requires authentication 97ms
✅ J42 — Share Data page requires authentication 88ms
✅ J43 — Tasks API includes transfer entries 70ms
✅ J44 — At least one in-progress transfer exists 63ms
✅ J45 — Transfers span at least 2 different states 64ms
✅ J46 — Audit API includes transfers and negotiations 106ms
✅ J47 — Knowledge graph renders with clickable canvas 2533ms
✅ J48 — Transfers involve multiple participants 85ms
✅ J93 — Transfer API includes REQUESTED, STARTED, COMPLETED, and TERMINATED states 64ms
✅ J94 — Transfer entries have contractId linking to negotiations 61ms
✅ J97 — Share Data page redirects unauthenticated users 89ms
✅ J98 — Transfers use HttpData-PULL transfer type 65ms
✅ J100 — Transfer entries include stateTimestamp 55ms
✅ J101 — Discover Data page requires authentication 108ms
✅ J41 — Transfer page requires authentication 96ms
✅ J42 — Share Data page requires authentication 97ms
✅ J43 — Tasks API includes transfer entries 79ms
✅ J44 — At least one in-progress transfer exists 62ms
✅ J45 — Transfers span at least 2 different states 63ms
✅ J46 — Audit API includes transfers and negotiations 114ms
✅ J47 — Knowledge graph renders with clickable canvas 2545ms
✅ J48 — Transfers involve multiple participants 83ms
✅ J93 — Transfer API includes REQUESTED, STARTED, COMPLETED, and TERMINATED states 63ms
✅ J94 — Transfer entries have contractId linking to negotiations 57ms
✅ J97 — Share Data page redirects unauthenticated users 94ms
✅ J98 — Transfers use HttpData-PULL transfer type 61ms
✅ J100 — Transfer entries include stateTimestamp 59ms
✅ J101 — Discover Data page requires authentication 91ms

✅

Step 7 — Analytics & Compliance

Data User (researcher) + HDAB (regulator) 52 passed, 0 failed, 0 skipped

Docs: Step 7 — Analytics & Compliance ↗

EHDS: Art. 52–53 — Fees & Secondary-Use Categories ↗

Protocol: EEHRxF — HL7 Europe FHIR IG ↗

Endpoints: /api/analytics /api/patient /api/compliance /api/eehrxf

UI Pages: /analytics /patient /compliance /eehrxf

52 tests

✅ J56 — Settings page redirects unauthenticated users 95ms
✅ J57 — Catalog page renders dataset cards (mock fallback) 118ms
✅ J58 — Catalog API returns a populated array 48ms
✅ J59 — Policy API returns ODRL-structured policies 69ms
✅ J60 — Credentials API returns EHDS credentials for participants 92ms
✅ J61 — Catalog dataset cards expand to show metadata 121ms
✅ J62 — Analytics page renders all 6 OMOP stat cards 108ms
✅ J63 — Analytics page renders Top Conditions and Top Drug Exposures sections 99ms
✅ J64 — Analytics page renders Gender Distribution section 2116ms
✅ J65 — Analytics stat card values are numeric or loading 117ms
✅ J66 — Patient Journey page shows 6 cohort stat badges 161ms
✅ J67 — Patient Journey page renders patient selector dropdown 89ms
✅ J68 — Patient Journey page describes FHIR R4 clinical events 97ms
✅ J69 — Analytics page has Patient Journey and NL Query nav links 98ms
✅ J70 — Patient Journey page has Catalog and Analytics nav links 103ms
✅ J71 — Analytics page description references OMOP CDM and Synthea 111ms
✅ J72 — EEHRxF page shows Priority Categories and EU Profiles stats 118ms
✅ J73 — EEHRxF page shows Overall Coverage stat 113ms
✅ J74 — EEHRxF page renders EHDS Implementation Timeline 111ms
✅ J75 — EEHRxF categories have Available/Partial/Gap badges 158ms
✅ J76 — EEHRxF page shows References section with regulation links 105ms
✅ J77 — EEHRxF page description mentions HL7 Europe FHIR R4 113ms
✅ J78 — Compliance page requires authentication 94ms
✅ J79 — Compliance validation API is reachable 108ms
✅ J80 — EEHRxF page has NL Query and Compliance nav links 114ms
✅ J81 — EEHRxF page shows Profiles with Data stat 106ms
✅ J56 — Settings page redirects unauthenticated users 100ms
✅ J57 — Catalog page renders dataset cards (mock fallback) 110ms
✅ J58 — Catalog API returns a populated array 48ms
✅ J59 — Policy API returns ODRL-structured policies 56ms
✅ J60 — Credentials API returns EHDS credentials for participants 149ms
✅ J61 — Catalog dataset cards expand to show metadata 158ms
✅ J62 — Analytics page renders all 6 OMOP stat cards 107ms
✅ J63 — Analytics page renders Top Conditions and Top Drug Exposures sections 106ms
✅ J64 — Analytics page renders Gender Distribution section 2115ms
✅ J65 — Analytics stat card values are numeric or loading 119ms
✅ J66 — Patient Journey page shows 6 cohort stat badges 203ms
✅ J67 — Patient Journey page renders patient selector dropdown 97ms
✅ J68 — Patient Journey page describes FHIR R4 clinical events 97ms
✅ J69 — Analytics page has Patient Journey and NL Query nav links 99ms
✅ J70 — Patient Journey page has Catalog and Analytics nav links 94ms
✅ J71 — Analytics page description references OMOP CDM and Synthea 100ms
✅ J72 — EEHRxF page shows Priority Categories and EU Profiles stats 112ms
✅ J73 — EEHRxF page shows Overall Coverage stat 121ms
✅ J74 — EEHRxF page renders EHDS Implementation Timeline 113ms
✅ J75 — EEHRxF categories have Available/Partial/Gap badges 171ms
✅ J76 — EEHRxF page shows References section with regulation links 115ms
✅ J77 — EEHRxF page description mentions HL7 Europe FHIR R4 99ms
✅ J78 — Compliance page requires authentication 106ms
✅ J79 — Compliance validation API is reachable 90ms
✅ J80 — EEHRxF page has NL Query and Compliance nav links 100ms
✅ J81 — EEHRxF page shows Profiles with Data stat 112ms

Infrastructure & Browser Health

✅

Infrastructure & Browser Health

160 passed, 0 failed, 0 skipped

Scope: All public + protected routes, API routes

160 tests

✅ should successfully login as edcadmin and reach portal 427ms
✅ should successfully login as clinicuser and reach portal 336ms
✅ should successfully login as regulator and reach portal 550ms
✅ Graph Explorer (/graph) 736ms
✅ Dataset Catalog (/catalog) 640ms
✅ DCAT-AP Editor (/catalog/editor) 632ms
✅ Patient Journey (/patient) 601ms
✅ OMOP Analytics (/analytics) 625ms
✅ EEHRxF Alignment (/eehrxf) 619ms
✅ Docs Overview (/docs) 636ms
✅ Docs Architecture (/docs/architecture) 714ms
✅ Docs Developer (/docs/developer) 699ms
✅ Docs User Guide (/docs/user-guide) 684ms
✅ Onboarding (/onboarding) 1418ms
✅ Onboarding Status (/onboarding/status) 1431ms
✅ Credentials (/credentials) 1453ms
✅ Compliance (/compliance) 1405ms
✅ TCK Tests (/compliance/tck) 1438ms
✅ Admin Dashboard (/admin) 1445ms
✅ Audit & Provenance (/admin/audit) 1458ms
✅ Policy Definitions (/admin/policies) 1431ms
✅ Discover Data (/data/discover) 1430ms
✅ Contract Negotiation (/negotiate) 1405ms
✅ Settings (/settings) 1412ms
✅ GET /api/graph 52ms
✅ GET /api/catalog 5ms
✅ GET /api/patient 4ms
✅ GET /api/analytics 7ms
✅ GET /api/admin/policies 24ms
✅ GET /api/admin/audit 17ms
✅ GET /api/participants 7ms
✅ No 404 requests on Graph Explorer load 673ms
✅ No 404 requests on Credentials page load (authenticated) 886ms
✅ Onboarding status: page renders without JS crash 931ms
✅ Onboarding status: 'No participant contexts' only appears when backend is down, not as a code bug 866ms
✅ Audit page: credentials table shows values not all dashes 2436ms
✅ Policy Definitions page: renders without crash 881ms
✅ Policy Definitions page: Create Policy button is present 884ms
✅ Credentials page: request form renders without JS crash 889ms
✅ Developer Guide contains Technology Stack section 211ms
✅ Architecture page contains Mermaid diagram 229ms
✅ Docs overview links to sub-pages 107ms
✅ page has correct title tag 98ms
✅ mobile viewport still renders navigation 87ms
✅ Explore dropdown contains expected links 163ms
✅ Governance dropdown contains expected links 134ms
✅ Exchange dropdown contains expected links 133ms
✅ Manage dropdown contains expected links 136ms
✅ Docs dropdown contains expected links 139ms
✅ Graph Explorer renders layer sidebar 110ms
✅ Dataset Catalog renders heading 102ms
✅ Patient Journey renders heading 98ms
✅ OMOP Analytics renders heading 99ms
✅ EEHRxF Profile Alignment renders heading 102ms
✅ Compliance redirects unauthenticated users 99ms
✅ Credentials redirects unauthenticated users 96ms
✅ Discover Data redirects unauthenticated users 97ms
✅ Contract Negotiation redirects unauthenticated users 91ms
✅ Admin Dashboard redirects unauthenticated users 94ms
✅ Onboarding redirects unauthenticated users 96ms
✅ Settings redirects unauthenticated users 89ms
✅ Docs overview renders heading 102ms
✅ Architecture page renders heading 223ms
✅ Developer Guide renders heading 212ms
✅ User Guide renders heading 229ms
✅ should load and show the brand name 98ms
✅ should load the graph page 148ms
✅ should load the catalog page 112ms
✅ should load the patient page 93ms
✅ should navigate between pages 416ms
✅ should successfully login as edcadmin and reach portal 369ms
✅ should successfully login as clinicuser and reach portal 309ms
✅ should successfully login as regulator and reach portal 297ms
✅ Graph Explorer (/graph) 711ms
✅ Dataset Catalog (/catalog) 614ms
✅ DCAT-AP Editor (/catalog/editor) 619ms
✅ Patient Journey (/patient) 601ms
✅ OMOP Analytics (/analytics) 601ms
✅ EEHRxF Alignment (/eehrxf) 610ms
✅ Docs Overview (/docs) 636ms
✅ Docs Architecture (/docs/architecture) 726ms
✅ Docs Developer (/docs/developer) 671ms
✅ Docs User Guide (/docs/user-guide) 700ms
✅ Onboarding (/onboarding) 1417ms
✅ Onboarding Status (/onboarding/status) 1398ms
✅ Credentials (/credentials) 1501ms
✅ Compliance (/compliance) 1433ms
✅ TCK Tests (/compliance/tck) 1403ms
✅ Admin Dashboard (/admin) 1510ms
✅ Audit & Provenance (/admin/audit) 1455ms
✅ Policy Definitions (/admin/policies) 1399ms
✅ Discover Data (/data/discover) 1440ms
✅ Contract Negotiation (/negotiate) 1427ms
✅ Settings (/settings) 1425ms
✅ GET /api/graph 51ms
✅ GET /api/catalog 6ms
✅ GET /api/patient 4ms
✅ GET /api/analytics 5ms
✅ GET /api/admin/policies 27ms
✅ GET /api/admin/audit 20ms
✅ GET /api/participants 7ms
✅ No 404 requests on Graph Explorer load 668ms
✅ No 404 requests on Credentials page load (authenticated) 872ms
✅ Onboarding status: page renders without JS crash 877ms
✅ Onboarding status: 'No participant contexts' only appears when backend is down, not as a code bug 879ms
✅ Audit page: credentials table shows values not all dashes 2447ms
✅ Policy Definitions page: renders without crash 898ms
✅ Policy Definitions page: Create Policy button is present 903ms
✅ Credentials page: request form renders without JS crash 904ms
✅ Developer Guide contains Technology Stack section 204ms
✅ Architecture page contains Mermaid diagram 224ms
✅ Docs overview links to sub-pages 97ms
✅ page has correct title tag 105ms
✅ mobile viewport still renders navigation 87ms
✅ J102 — Participants API returns 5 real participants from IdentityHub 49ms
✅ J103 — All participants have IdentityHub DID identities 48ms
✅ J104 — Credentials API returns EHDS VCs from Neo4j 94ms
✅ J105 — Graph API returns nodes and relationships from Neo4j 143ms
✅ J106 — Graph Explorer page renders with Neo4j data 165ms
✅ J107 — Catalog API returns datasets from Neo4j 102ms
✅ J108 — Catalog page renders dataset entries 111ms
✅ J109 — Patient API returns at least 1 patient from Neo4j 91ms
✅ J110 — Analytics API returns summary from Neo4j OMOP layer 98ms
✅ J111 — Patient Journey page renders timeline 94ms
✅ J112 — Analytics page renders stat cards 103ms
✅ J113 — EEHRxF API returns 6 priority categories 96ms
✅ J114 — Compliance API returns consumers and datasets 98ms
✅ J115 — Negotiations API returns data for a participant 49ms
✅ J116 — Transfers API returns data for a participant 48ms
✅ J117 — Keycloak OIDC discovery endpoint is reachable 7ms
✅ J118 — Login as edcadmin reaches onboarding page 327ms
✅ J119 — Login as clinicuser reaches data sharing page 285ms
✅ J120 — Login as researcher reaches discovery page 281ms
✅ J121 — Login as regulator reaches compliance page 298ms
✅ Explore dropdown contains expected links 130ms
✅ Governance dropdown contains expected links 134ms
✅ Exchange dropdown contains expected links 133ms
✅ Manage dropdown contains expected links 131ms
✅ Docs dropdown contains expected links 134ms
✅ Graph Explorer renders layer sidebar 97ms
✅ Dataset Catalog renders heading 102ms
✅ Patient Journey renders heading 98ms
✅ OMOP Analytics renders heading 105ms
✅ EEHRxF Profile Alignment renders heading 101ms
✅ Compliance redirects unauthenticated users 92ms
✅ Credentials redirects unauthenticated users 109ms
✅ Discover Data redirects unauthenticated users 85ms
✅ Contract Negotiation redirects unauthenticated users 89ms
✅ Admin Dashboard redirects unauthenticated users 113ms
✅ Onboarding redirects unauthenticated users 88ms
✅ Settings redirects unauthenticated users 90ms
✅ Docs overview renders heading 100ms
✅ Architecture page renders heading 220ms
✅ Developer Guide renders heading 195ms
✅ User Guide renders heading 169ms
✅ should load and show the brand name 114ms
✅ should load the graph page 148ms
✅ should load the catalog page 109ms
✅ should load the patient page 92ms
✅ should navigate between pages 412ms

Quick Navigation

EHDS Journey Steps

Step 0 — Participant Onboarding

Step 1 — Data Provider Creates Metadata

Step 2 — Publish with Access & Usage Policies

Step 3 — Consumer Discovers Assets

Step 4 — Request Access to Datasets

Step 5 — Contract Negotiation & Approval

Step 6 — Data Transfer & Access

Step 7 — Analytics & Compliance

Infrastructure & Browser Health

Infrastructure & Browser Health

Specification & Regulation References

Step	EHDS Article	Protocol	Tested Endpoints	Status
0. Participant Onboarding	Art. 33 — Health Data Access Body	DCP §4 — Participant Registration	`/api/participants` `/api/credentials`	✅ 10/10
1. Data Provider Creates Metadata	Art. 45 — Dataset Description	HealthDCAT-AP 3.0	`/api/assets` `/api/catalog`	✅ 20/20
2. Publish with Access & Usage Policies	Art. 46 — Data Permit Conditions	ODRL 2.2	`/api/admin/policies` `/api/catalog`	✅ 14/14
3. Consumer Discovers Assets	Art. 47 — Data Access Application	DSP §5 — Catalog Protocol	`/api/catalog` `/api/graph` `/api/patient` `/api/analytics`	✅ 36/36
4. Request Access to Datasets	Art. 48 — Data Permit	DSP §7.1 — Contract Negotiation	`/api/negotiations` `/api/tasks` `/api/assets`	✅ 28/28
5. Contract Negotiation & Approval	Art. 49 — HDAB Decision	DSP §7.1 — Negotiation Lifecycle	`/api/negotiations` `/api/tasks`	✅ 4/4
6. Data Transfer & Access	Art. 50 — Secure Processing Environment	DSP §8 — Transfer Process Protocol	`/api/transfers` `/api/tasks` `/api/admin/audit`	✅ 28/28
7. Analytics & Compliance	Art. 52–53 — Fees & Secondary-Use Categories	EEHRxF — HL7 Europe FHIR IG	`/api/analytics` `/api/patient` `/api/compliance` `/api/eehrxf`	✅ 52/52