Care Behind a Case Number

The first patient consents to tell us that her prescription was delayed. She refuses publication of the medication name, diagnosis, pharmacy, age, and department. Her case becomes C-001 in the public count. The city retains the identity key. Wondervale never receives it.

Mira builds a second record beside the legal intake: the design consequence. She asks what happened at the point of care, which message appeared, and what the worker had to do next. She also tests whether a person using a screen reader, interpreter, support person, or limited data plan could complete that action. Her work does not decide claim validity. It documents how an administrative hold becomes a barrier.

"The carrier portal says contact your plan administrator," C-001 tells us. "The administrator number sends me back to the carrier."

Mira maps the loop. Two calls, one portal login, three identity checks, no explanation of the dispute, and no route for urgent medication. The patient approves a de-identified journey map. The lab creates it at 10:18, and the patient receives a copy. Hart's office holds the public-use consent. Vulnerability: it represents one path through the system, not every claim.

At the next table, a worker needs an infusion authorization by afternoon. She wants the claim expedited but fears that public testimony will reveal her illness to supervisors.

"You do not owe the hearing your body to prove a payment system failed," I say.

Hart joins by secure video. She can request sworn declarations for expedited regulatory review, but regulators need enough detail to match each declaration to a carrier transaction.

Mira proposes a split record. The sealed declaration contains identity, claim number, provider, dates, and treatment urgency. Its public counterpart contains a city case number, carrier status, time cost, access barriers, and the harm caused by delay. Each field requires the patient's separate approval.

Hart's counsel creates the two-part declaration template at 10:42. The city clerk holds both versions and the link between them. Regulators receive sealed details under existing health-oversight authority. The lab receives only authorized public fields. Vulnerability: anonymization can fail when circumstances are unique, so each person may remove facts even after drafting and before filing.

The infusion patient signs. Her provider sends a treatment-schedule confirmation directly to the city. The provider created the clinical record during care and remains custodian; Hart receives a limited confirmation, not the chart. It proves the scheduled time and administrative hold. It does not authorize public disclosure of the condition.

By noon, the clinic has thirty-four cases. Six involve medication. Four involve scheduled procedures. The rest are provider invoices or reimbursement claims that could still damage credit, housing budgets, or continued care.

Case C-019 belongs to a park nurse whose child has an out-of-network emergency bill. She authorizes the city to see the bill and claim number but refuses even an anonymized public quotation. Her declaration still enters expedited review. Public usefulness is not the admission price for protection.

Case C-023 chooses the opposite route. A maintenance worker gives his name and describes spending three hours between the carrier, Wondervale, and a clinic while a wound check was postponed. He wants supervisors to understand why he missed a shift. Camille places a retaliation flag on any attendance action, but he declines to hide the absence from his team.

"Anonymity would not protect me if everyone saw the bandage," he says. "I want the record to show the system made the delay."

His provider created a rescheduling note at 11:14 and sends a limited confirmation to Hart. The city holds it. Its vulnerability is causation: the note records an insurance hold and reschedule, while the provider also had limited appointment capacity. His declaration names both factors.

We keep all fifty-seven accounts distinct.

The frozen batch itself came from Harbor Mutual's claims system. Harbor created it after receiving the trustee funds. The city purchasing pool obtained a transaction export at 11:07; Hart's office is custodian. Its vulnerabilities are carrier control and status meaning. The export shows a hold code and timestamp, but Harbor defines the code and can argue it is temporary processing rather than denial.

Patients define the consequence more clearly. A pharmacy that requires payment turns a temporary hold into a denied prescription. A provider may postpone treatment rather than reserve a chair, while a bill arriving before carrier funds becomes the worker's debt.

Mira notices a repeated error in the portal design. Every held claim displays the same generic notice even when the treatment is urgent. She creates an accessibility defect report with screenshots captured by the patients themselves, then refuses to submit screenshots as sole evidence. Each image is paired with the city transaction record and a sworn description of what action followed.

She recruits Eli through the community lab to test the notice flow without viewing real claims. Eli builds five synthetic cases approved by health counsel: prescription, infusion, therapy, mobility equipment, and reimbursement. The lab creates the test environment at 12:18 and preserves the screen-reader transcript, keyboard path, language level, and call transfers. The city is custodian of the test packet.

Its vulnerability is simulation. The synthetic portal reproduces carrier pages and statuses but cannot capture every provider practice or live-account permission. Mira labels each finding as interface evidence, not proof of patient harm. The sworn declarations supply the lived consequence.

The tests show the urgent-care number appears only after three expandable menus and is missing from the screen-reader landmark list. One Spanish-language page sends users to an English-only recording. Mira adds both defects to Hart's remediation order.

One patient uses a screen reader that announces the generic notice but skips the hidden dispute link. Another receives a letter printed in low-contrast gray with a response deadline inside a dense paragraph. Mira's report gives Harbor a four-hour remediation demand: plain-language notice, accessible appeal, urgent-care contact, and preservation of every original status.

I organize the public testimony schedule. Nobody is placed on camera by default. People may submit sealed declarations, audio with altered voice, written statements read by counsel, or named testimony. A worker who chooses a name does not authorize release of diagnosis. Choosing anonymity does not reduce priority.

When a union steward asks to collect every declaration for bargaining, I refuse. The steward may receive aggregate counts and issues authorized by workers, not a parallel health archive. Marisol supports the boundary even though more detail would strengthen labor's case. The city remains custodian because urgency cannot become a reason for institutions we trust to over-collect.

Mira asks whether I want to open the hearing with my identity-misuse case. The false consulting invoice and frozen claims share a vendor system, but using my story could pull attention from treatment.

"I chair the process," I say. "I do not become its required example."

She nods. Sisters combine strengths by refusing hierarchy too. She documents the interface; I protect testimony routes. Neither task is secondary.

At 1:20, Hart convenes an emergency health-oversight session. Carrier counsel objects that anonymized declarations prevent cross-examination. Hart offers sealed verification through a regulator and gives Harbor a chance to challenge transaction details without receiving unnecessary medical information.

"You may test whether a claim exists, whether it was held, and whether urgency is supported," she says. "You may not demand a diagnosis for the public record because publicity would make your error easier to defend."

Harbor accepts the sealed process under protest.

The clinic files fifty-seven declarations by 2:06. Each has a city receipt time, custodian, consent scope, and withdrawal rule. Eleven patients choose public names. Twenty approve anonymized quotations. Twenty-six authorize only regulator use. Their different choices carry equal legal priority.

Mira publishes the aggregate design report at 2:18 with zero medical categories. It lists navigation loops, unavailable language support, inaccessible links, and time to reach a human. Participants retain veto over their individual journey maps. The report forces Harbor to answer system barriers without turning health conditions into marketing for reform.

Hart's health office enters all fifty-seven claims into expedited review. Harbor must provide a claim-specific reason, contractual basis, and release path within four hours. Generic carrier codes no longer satisfy the inquiry.

At 2:31, the first detailed response returns for C-001. Harbor says the claim requires date verification because the service date conflicts with historical eligibility data.

The denial code is FD-17.

Mira sees no meaning in it. I remember Rina's audit presentation: fabricated benefit dates, created before the reform vote, routed through procurement.

FD-17 is the same code attached to Rina's fabricated-date evidence.