Loading documentation…
Purchasing authority, payment evidence, data handling and operational responsibilities.
CareCart is an inventory and procurement record tool. It does not provide medical advice, recommend treatment or need patient records for stock replenishment.
An administrator selects the items, suppliers and spending limits that may proceed automatically. CareCart evaluates each order against that permission. Other orders are held; hard spending caps and a paused vault cannot be bypassed through ordinary approval.
The payment agent holds no purchasing token balance. It has a restricted key for a specified vault method, while separate services prepare orders, authorize eligible operations and observe results. AI-generated proposals cannot change the recipient, token or spending authority at execution.
| Control | What it does |
|---|---|
| Approved suppliers and fixed order details | Bind a payment to the reviewed supplier, token, amount and order. |
| Automatic, hard and daily limits | Restrict spending; a review cannot override a hard limit. |
| Separate signing roles | Limit what each background signer can request. |
| Independent payment observation | Require evidence before displaying a confirmed outcome. |
| Duplicate protection | Prevent a repeated paid order from sending a second transfer. |
| Separate delivery records | Prevent payment confirmation from creating inventory. |
Administrative authority still matters. The vault's full-access upgrade authority can replace its code, and host operators can alter backend configuration. Those powers need documented ownership and protection before production. Restricted workers do not remove the need to trust and govern administrators.
The working controls and test results are not an independent security certification. The mainnet gates include review of contracts, custody, operations and recovery.
Start with item names, units, stock movements, approved supplier records and staff access roles. Keep patient records and payment credentials out of inventory notes, uploads and support messages.
Before real records are imported, the clinic and CareCart must agree:
These are pilot prerequisites, not claims that every control has already been accepted by a customer. Requirements depend on the clinic, product categories and jurisdiction and must be reviewed with the responsible clinic team and qualified advisers.
The public browser demo uses synthetic records and makes no payment. A separate confirmed test payment transferred 1.5 CCUSD; the duplicate request transferred nothing further. Neither represents a real distributor sale.
The archived vault source was rebuilt and matched the deployed code byte for byte. Rejection of an unknown supplier, an over-limit order and payments during pause was also verified through genuine local Sandbox execution. Local Sandbox evidence is distinct from public-chain evidence.