Open-source · chain of custody · human-reviewed
Turn leads into evidence that holds up.
AION-MEDSAFE assembles the public federal and state adverse-action record, ranks cross-corroborated provider-integrity leads for human review, and produces a sealed, independently verifiable case file. It never accuses on its own.
Public data only. No claims, no PHI. Outputs are investigative leads, not findings.
- Subject
- YANG SUNG S. · NPI 1043470370
- Federal lists
- HHS-OIG (LEIE), SAM.gov
- State Medicaid
- listed
- Signal
- active NPI while excluded · 0.85
- Source hash
- 9aee29ee…f72acb6
- Structurepending
- Integritypending
- Hash chainpending
- Signaturespending
The problem
The signals already exist. The evidence doesn't survive scrutiny.
An excluded provider still billing. A clinic reconstituted under new NPIs. A barred owner behind an active facility. The data is real — but it lives in mismatched federal and state files with no shared identifiers. Assembling it by hand is slow, and the result is a spreadsheet that won't survive a defense challenge or an audit.
Tools that “score” providers with opaque models are indefensible in a due-process setting. The missing piece was never more data — it was a way to assemble it defensibly.
How it works
One chain of custody, end to end.
- 01
Ingest public bulk data
Seven government sources, downloaded in bulk — no accounts. Each raw file is hashed before any transformation.
- 02
Seal at the source
Every file is sealed with a BLAKE3 hash + Ed25519 signature. Nothing is acted on until it verifies.
- 03
Resolve & detect
Providers are resolved across sources; eight evidence-ranked signals run under a signed, policy-gated engine.
- 04
Human review
Nothing escalates on its own. A named analyst confirms or rejects — and that decision is itself signed.
- 05
Verifiable case packet
The output is a sealed dossier: identity, signals, evidence with source hashes, and an attestation anyone can re-check.
By the numbers
Running today, on real public data.
7 public bulk sources, no account required — LEIE, NPPES, SAM.gov, CMS PECOS ownership, Hawaii Med-QUEST & DCCA.
9.55M national NPI records resolved, alongside 790,976 Medicare ownership relationships.
8 detection signals — evidence-ranked, policy-gated, and queued for human review.
4 verification guarantees re-checked on every use: structure, integrity, hash-chain, signatures.
The open standard
Sealed Evidence Packet (SEP)
The core contribution is an open, vendor-neutral format for tamper-evident, independently verifiable evidence — so any tool can produce it and any reviewer can check it. Two conformance levels: L1 (sealed) and L2 (every evidence digest and the policy/graph attestation resolve). L2 is the bar for hearing-grade evidence.
What it does not do
Stated plainly, because trust is the point.
- No claims analysis. The dollar-value billing signals need claims/MMIS data, which is PHI and behind a deliberate gate. Today's outputs are provider-integrity leads, not billing findings.
- Some matches are name-only. CMS ownership and state license data carry no NPI; those correlations are labeled “verify manually,” and collision-prone matches are suppressed — never asserted.
- It produces leads, not verdicts. Every escalation requires a human. Precision is reported honestly and improves as reviewers adjudicate.
Get involved
Evaluate it, implement the standard, or run a pilot.
The project is open source and the spec is open to implement. Integrity units rebuilding their tooling can evaluate it on public data, leads-only, with no procurement. Contributions and independent SEP implementations are welcome.