What problem does it solve? Developers building healthcare applications on Ethereum risk violating HIPAA and GDPR by storing patient data on-chain, mishandling insurance claims logic, or missing access control requirements. This Skill enforces the correct on-chain/off-chain data boundary and provides production-grade contract patterns for healthcare use cases. ## Core Features & Use Cases - Regulatory Compliance Guardrails: Enforces HIPAA's 18 PHI identifier rules, GDPR right-to-erasure patterns (hash invalidation, key deletion), and minimum-necessary access scoping in every contract design. - Canonical Contract Patterns: Provides ready Solidity implementations for patient access control, insurance claims lifecycle state machines, prior authorization workflows, drug supply chain provenance, and consent registries. - FHIR-to-Solidity Mapping: Maps HL7 FHIR R4 resources (Patient, Claim, Coverage, Observation, MedicationRequest) to on-chain structs with bytes32 encoding for ICD-10, CPT, NDC, NPI, LOINC, and RxNorm codes. - Use Case: A developer building an on-chain insurance claims system gets a complete state machine (Submitted → UnderReview → Approved → Paid) with regulatory SLAs, denial reason codes, stablecoin settlement, and anti-pattern warnings. ## Quick Start Ask the AI to review or write a Solidity contract for a healthcare use case such as patient record access or insurance claims, and it will apply HIPAA/GDPR constraints and the correct design patterns automatically.
