Real applications · synthetic data · linked evidence

See the complete governed workflow

Watch a task being demonstrated, replayed as a compiled workflow, independently verified, and safely halted when the business result is refuted.

From demonstration to verified execution

Choose an application, then switch between its source demonstration and compiled replay. openIMIS also includes the exact fail-safe halt footage. Guided view adds the retained runtime status and exact frame-bound target; Raw footage leaves the source video untouched.

ObservingStep 1 of 33
Observing the application
0:00 / 0:00

Guided view synchronized to the exact retained runtime timeline; raw footage remains unchanged.

  1. 1
    DemonstrateCapture the task and its evidence.
  2. 2
    ExecuteReplay the compiled workflow locally.
  3. 3
    Verify or haltProve the effect, or stop for review.
What the labels and overlay mean
Standard profile
The run uses the declared policy, identity checks, postconditions, effect verification, and retained evidence as one contract.
VERIFIED
The authorized workflow completed and every required check proved the intended result.
HALTED
OpenAdapt stopped without claiming success because a required result check was refuted or could not be proven.
Guided overlay
The viewer adds status from the exact retained timeline. A target appears only when it is bound to that exact decoded video frame.

Try the mobile decision experience

Switch among all six pause types. Answer inside the phone, then inspect the distinct result returned by the customer-controlled runner.

Interactive phone experience · synthetic data

Six reasons a workflow can ask for help.

Choose a request type. Then answer it inside the phone to see the customer-controlled runner result.

6 request types
Public simulatorThe phone below uses synthetic tasks. A live phone receives signed tasks from the paired customer runner. This OpenEMR fixture supplies the word “patient”; a qualified live task supplies its reviewed entity class.
  1. 1

    Open securelyScan the QR code, sign in, then enable alerts.

  2. 2

    Answer one requestThe phone shows only permitted actions.

  3. 3

    Verify on the runnerThe runner rechecks and returns a receipt.

See the complete live sequence
  1. Desktop connects the customer runner to its configured control plane.
  2. The runner projects one signed decision task to the authenticated phone view.
  3. The operator opens that view with the QR code and signs in.
  4. The phone shows only the actions Flow permits. It has no execution authority.
  5. The customer runner checks the live application again, then returns a receipt.
OA
OpenAdapt customer runner
Record identityNot sent

OpenAdapt needs your help

Open the intended patient record.

The record identity did not match. OpenAdapt stopped before Save.

ActionNot sentCheckPatient record
Screen when OpenAdapt stoppedOpenEMR · retained evidence
Retained OpenEMR patient screen from the reference run
Captured when OpenAdapt stopped · synthetic patient data · not live

After your answerOpenAdapt will check the patient identity and target again.

The phone records an answer. The runner checks the live application again. Only the runner can return a verified result.

Focused screenshot route: /demo/attention. Production decisions remain authenticated at /dashboard/attention.

openIMIS Standard execution evidence

This lower deep-dive covers one real openIMIS eligibility workflow, two business conditions, and three fresh trials per condition. Success required independent read-only SQL confirmation; a contradictory result had to halt.

6
Fresh Standard runs
3/3
Eligible runs VERIFIED
3/3
Expired-policy runs HALTED
0
Silent incorrect successes observed
0
Over-halts observed
0
Generative-model calls

openIMIS 25.10 · browser · synthetic sample data · mean runtime 19.7 s · observed off-box transmissions: 0

1 · A demonstration became an inspectable program

This graph was emitted from the exact compiled workflow used by the campaign. Expand a step to see how it resolves its target, checks record identity, verifies the screen, and proves the final business effect. Stop rules isolates the fail-safe boundary.

6
Steps
3
Identity gates
1
Effect checks
1
Halt points
no plaintext PHIlinear programcompiler 1.23.0Parameters: insurance_no:string, service_code:string, as_of_date:string
View
Follow the normal execution path and expand any step.
identity gate
identity gate
identity gateeffect check

Halts here: halts if the system-of-record effect is not confirmed

Workflow path complete

How to read this: each step shows how it re-finds its target (resolution ladder), whether it confirms it is acting on the right record (identity gate), what real system-of-record change it checks (effect), and where it will stop rather than guess (halt point). This is the same compiled program used by this campaign. Its reports record zero model calls. Screen checks in this evidence pack come from retained before/after evidence and explicit workflow contracts.

Three consequential actions are identity-gated. The final action has an independently checked effect and an explicit halt path. Recorded pointer positions remain provenance; the compiled browser workflow resolves structural targets rather than replaying a blind coordinate.

2 · The same workflow produced two precise outcomes

The browser sequence is identical. The independent effect verifier determines whether the evidence supports VERIFIED or requires HALTED.

Eligible policy · 3 trials

Business result independently confirmed

VERIFIED 3/3

Read-only SQL confirmed the policy, product, service, and effective-date state. All required authorization, identity, screen, and effect contracts passed.

Contracts passed
16 / 16
Identity gates
3 / 3
Effect check
Tier 1 · SQL
Representative runtime
20.3 s
Inspect all three eligible trials
  1. eligible-01 · 20.3 s · report (a9f950f62bd2…)
  2. eligible-02 · 12.7 s · report (3ff01e4340c4…)
  3. eligible-03 · 17.8 s · report (ee26cafafe57…)
Expired policy · 3 trials

Contradictory result refused

HALTED 3/3

Read-only SQL returned Ineligible where the declared effect required Eligible. OpenAdapt did not accept the browser screen as success and did not retry the consequential action blindly.

Contracts passed
15 / 16
Identity gates
3 / 3
Effect check
Refuted · Tier 1
Representative runtime
25.3 s
Inspect all three expired-policy trials
  1. expired-01 · 25.3 s · report (90bfef6c6481…)
  2. expired-02 · 19.4 s · report (f8eaf365b824…)
  3. expired-03 · 22.6 s · report (f53c658687f8…)

3 · The verifier is stronger than the screen

A workflow declares the weakest evidence it may accept. Lower tier numbers are stronger: Tier 1 checks an independent system interface; Tier 4 only checks the current screen.

Observed evidence strength

Tier 1 · Independent system interface

This campaign queried openIMIS through a separate read-only SQL connection. The browser that performed the task could not certify its own result. The workflow required at least Tier 3 and received the stronger Tier 1 proof.

Exact evidence, not a staged dashboard

Every public artifact is byte-inventoried. Media targets are shown only when the runtime timeline, media hash, decoded frame index, and viewport geometry agree. Raw footage never receives a fabricated overlay.

d163375358f1…
Evidence manifest
f2a4b64fd3e8…
Evidence inventory
a49e787d30b8…
Compiled bundle content

Evidence class: Standard execution evidence. A signed qualification campaign remains a separate artifact class; successful executions are never silently relabeled as certification.

Try the product or bring your own workflow

Run the open-source workflow locally, explore the Cloud workspace, or qualify one repeated workflow against its real application and business result.

Verified execution demo | OpenAdapt Cloud