test_id	test_file	test_name	layer	manual_case_id	hazard_id	hazard	safety_control	what_the_test_proves	what_it_does_not_prove	runs_in	evidence_location	last_passed	cso_sign_off	notes
API-OBS-001	tests/api/fhir.test.js	synthetic-obs-1 is coded as LOINC 8867-4 (heart rate)	api	REG-031	HAZ-012	Observation shown with the wrong meaning	Observations carry the agreed LOINC code	Asserts the coding system is LOINC and the code is 8867-4	Does not check how the screen displays the code	CI on every pull request	CI run report artifact, kept 90 days			Example row
NONE					HAZ-019	Allergy not shown on prescribing screen	Allergy banner always visible							Gap: tested manually each release